Page 2 of 2 FirstFirst 12
Results 11 to 20 of 20

Thread: Infected with something I can't remove

  1. 2009-03-13, 04:28 #11
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 7

    + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
    + 2004-08-09 21:00:00 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2004-08-10 04:00:00 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys
    + 2004-08-10 04:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2004-08-10 04:00:00 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2004-08-10 04:00:00 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2004-08-10 04:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 02:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
    + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 02:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\ServicePackFiles\i386\obrb0401.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\ServicePackFiles\i386\obrb0404.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\ServicePackFiles\i386\obrb0405.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\ServicePackFiles\i386\obrb0406.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\ServicePackFiles\i386\obrb0407.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\ServicePackFiles\i386\obrb0408.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\ServicePackFiles\i386\obrb040b.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\ServicePackFiles\i386\obrb040c.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\ServicePackFiles\i386\obrb040d.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\ServicePackFiles\i386\obrb040e.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\ServicePackFiles\i386\obrb0410.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\ServicePackFiles\i386\obrb0411.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\ServicePackFiles\i386\obrb0412.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\ServicePackFiles\i386\obrb0413.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\ServicePackFiles\i386\obrb0414.dll
    + 2008-04-13 18:40:47 391,680 ------w c:\windows\ServicePackFiles\i386\obrb0415.dll
    + 2008-04-13 18:40:10 409,600 ------w c:\windows\ServicePackFiles\i386\obrb0416.dll
    + 2008-04-13 18:40:50 427,008 ------w c:\windows\ServicePackFiles\i386\obrb0419.dll
    + 2008-04-13 18:40:52 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll
    + 2008-04-13 18:40:56 363,008 ------w c:\windows\ServicePackFiles\i386\obrb041d.dll
    + 2008-04-13 18:41:00 390,144 ------w c:\windows\ServicePackFiles\i386\obrb041f.dll
    + 2008-04-13 18:40:56 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll
    + 2008-04-13 18:40:24 270,336 ------w c:\windows\ServicePackFiles\i386\obrb0804.dll
    + 2008-04-13 18:40:48 435,200 ------w c:\windows\ServicePackFiles\i386\obrb0816.dll
    + 2008-04-13 18:40:30 446,464 ------w c:\windows\ServicePackFiles\i386\obrb0c0a.dll
    + 2008-04-14 00:12:02 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2008-04-14 00:12:02 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2004-08-10 04:00:00 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2008-04-14 00:12:02 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
    + 2008-04-14 00:12:02 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-04-14 00:12:30 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-04-14 00:12:02 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-04-14 00:12:02 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
    + 2008-04-14 00:12:30 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-04-14 00:12:02 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-04-13 17:26:05 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-04-14 00:10:31 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-04-14 00:12:02 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-04-14 00:12:02 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-04-14 00:12:02 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
    + 2008-04-14 00:12:30 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-04-14 00:12:02 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
    + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-04-14 00:12:02 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll
    + 2008-04-14 00:12:02 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2008-04-14 00:12:02 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
    + 2008-04-14 00:12:02 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
    + 2008-04-14 00:12:02 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll
    + 2008-04-14 00:12:31 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-04-14 00:12:02 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
    + 2008-04-14 00:12:31 67,584 ------w c:\windows\ServicePackFiles\i386\opnfiles.exe
    + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
    + 2008-04-14 00:12:31 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe
    + 2008-04-13 18:31:43 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-04-14 00:12:02 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    + 2008-04-14 00:12:02 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    + 2008-04-14 00:12:02 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    + 2008-04-14 00:12:02 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
    + 2008-04-13 18:31:31 42,752 ------w c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-04-14 00:12:31 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-04-13 18:40:10 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2004-08-04 02:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2008-04-14 00:12:02 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
    + 2008-04-14 00:12:02 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-04-13 18:36:44 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
    + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
    + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
    + 2008-04-13 18:36:43 120,192 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
    + 2004-08-04 02:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys
    + 2008-04-14 00:12:02 284,160 ------w c:\windows\ServicePackFiles\i386\pdh.dll
    + 2004-08-04 04:12:20 20,480 ------w c:\windows\ServicePackFiles\i386\perfcounter.dll
    + 2008-04-14 00:12:02 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-04-14 00:12:02 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-04-14 00:12:31 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2008-04-14 00:12:02 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-04-14 00:12:02 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-04-14 00:10:34 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
    + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-04-14 00:10:34 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
    + 2008-04-14 00:12:02 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-04-14 00:11:09 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-04-14 00:12:31 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe
    + 2008-04-14 00:12:31 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-04-14 00:12:02 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
    + 2008-04-14 00:12:02 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-04-14 00:12:02 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-04-14 00:12:02 92,672 ------w c:\windows\ServicePackFiles\i386\policman.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll
    + 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys
    + 2008-04-14 00:12:31 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys
    + 2008-04-14 00:12:03 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2008-04-14 00:12:03 560,640 ------w c:\windows\ServicePackFiles\i386\printui.dll
    + 2008-04-13 18:31:30 35,840 ------w c:\windows\ServicePackFiles\i386\processr.sys
    + 2008-04-14 00:12:03 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll
    + 2008-04-14 00:12:31 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\proquota.exe
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll
    + 2008-04-14 00:12:32 9,216 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe
    + 2008-04-14 00:12:03 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll
    + 2008-04-14 00:12:03 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll
    + 2008-04-14 00:12:03 96,768 ------w c:\windows\ServicePackFiles\i386\psbase.dll
    + 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys
    + 2008-04-14 00:12:03 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll
    + 2008-04-14 00:12:03 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2008-04-14 00:12:03 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2008-04-14 00:12:03 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\pwsdata.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll
    + 2008-04-14 00:12:03 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll
    + 2008-04-14 00:12:03 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll
    + 2008-04-14 00:12:03 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll
    + 2008-04-14 00:12:03 386,048 ------w c:\windows\ServicePackFiles\i386\qdvd.dll
    + 2008-04-14 00:12:03 562,176 ------w c:\windows\ServicePackFiles\i386\qedit.dll
    + 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll
    + 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll
    + 2008-04-14 00:12:03 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2008-04-14 00:12:32 19,968 ------w c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2008-04-14 00:12:03 1,288,192 ------w c:\windows\ServicePackFiles\i386\quartz.dll
    + 2008-04-14 00:12:03 1,435,648 ------w c:\windows\ServicePackFiles\i386\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll
    + 2008-04-14 00:12:03 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2008-04-14 00:12:03 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll
    + 2008-04-14 00:12:03 658,432 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll
    + 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2008-04-14 00:12:03 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll
    + 2008-04-14 00:12:03 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll
    + 2008-04-14 00:12:32 56,832 ------w c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2008-04-14 00:12:03 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll
    + 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll
    + 2008-04-14 00:12:03 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2008-04-14 00:12:03 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2008-04-14 00:12:03 150,016 ------w c:\windows\ServicePackFiles\i386\rastls.dll
    + 2008-04-14 00:12:03 102,400 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
    + 2008-04-14 00:12:32 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2008-04-14 00:12:32 21,504 ------w c:\windows\ServicePackFiles\i386\rcp.exe
    + 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys
    + 2008-04-14 00:12:03 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll
    + 2008-04-14 00:12:32 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2008-04-14 00:13:22 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys
    + 2008-04-14 00:12:04 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2008-04-14 00:13:22 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys
    + 2008-04-14 00:13:22 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2008-04-14 00:12:32 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2008-04-14 00:12:32 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2004-08-04 02:41:40 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys
    + 2008-04-13 18:40:27 57,600 ------w c:\windows\ServicePackFiles\i386\redbook.sys
    + 2004-08-10 04:00:00 3,338 ------w c:\windows\ServicePackFiles\i386\redir.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\reg.exe
    + 2008-04-14 00:12:04 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll
    + 2004-07-20 00:54:16 28,672 ------w c:\windows\ServicePackFiles\i386\regasm.exe
    + 2004-07-20 00:54:16 32,768 ------w c:\windows\ServicePackFiles\i386\regcode.dll
    + 2008-04-14 00:12:32 146,432 ------w c:\windows\ServicePackFiles\i386\regedit.exe
    + 2008-04-14 00:12:04 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2004-07-20 00:54:16 11,264 ------w c:\windows\ServicePackFiles\i386\regsvcs.exe
    + 2008-04-14 00:12:32 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2008-04-14 00:12:04 397,824 ------w c:\windows\ServicePackFiles\i386\regwizc.dll
    + 2008-04-14 00:12:04 60,416 ------w c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2008-04-14 00:12:04 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll
    + 2008-04-14 00:12:04 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll
    + 2008-04-14 00:12:33 13,824 ------w c:\windows\ServicePackFiles\i386\rexec.exe
    + 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll
    + 2008-04-14 00:12:04 123,392 ------w c:\windows\ServicePackFiles\i386\riafres.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2008-04-14 00:12:04 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll
    + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys
    + 2008-04-13 18:40:14 79,104 ------w c:\windows\ServicePackFiles\i386\rocket.sys
    + 2008-04-14 00:12:04 4,096 ------w c:\windows\ServicePackFiles\i386\rpcref.dll
    + 2008-04-14 00:12:04 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll
    + 2008-04-14 00:12:04 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll
    + 2008-04-14 00:12:04 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll
    + 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll
    + 2008-04-14 00:12:33 14,848 ------w c:\windows\ServicePackFiles\i386\rsh.exe
    + 2008-04-14 00:12:04 39,936 ------w c:\windows\ServicePackFiles\i386\rshx32.dll
    + 2008-04-14 00:12:04 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll
    + 2008-04-14 00:12:33 107,520 ------w c:\windows\ServicePackFiles\i386\rsnotify.exe
    + 2008-04-14 00:12:33 380,416 ------w c:\windows\ServicePackFiles\i386\rstrui.exe
    + 2008-04-14 00:12:04 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll
    + 2008-04-14 00:12:33 77,312 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe
    + 2008-04-14 00:12:04 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll
    + 2004-08-03 21:31:34 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys
    + 2008-04-14 00:12:04 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll
    + 2008-04-14 00:12:33 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe
    + 2008-04-14 00:12:33 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll
    + 2008-04-14 00:12:04 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll
    + 2008-04-14 00:12:04 9,728 ------w c:\windows\ServicePackFiles\i386\rwnh.dll
    + 2008-04-14 00:12:04 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll
    + 2004-08-04 02:29:52 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys
    + 2008-04-14 00:12:04 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll
    + 2008-04-14 00:12:04 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll
    + 2008-04-14 00:12:04 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll
    + 2008-04-14 00:12:04 415,744 ------w c:\windows\ServicePackFiles\i386\samsrv.dll
    + 2008-04-14 00:12:04 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll
    + 2008-04-14 00:12:33 13,312 ------w c:\windows\ServicePackFiles\i386\savedump.exe
    + 2008-04-14 00:12:04 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll
    + 2008-04-14 00:12:04 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll
    + 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys
    + 2008-04-14 00:12:04 69,632 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll
    + 2008-04-14 00:12:33 95,744 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe
    + 2004-08-10 04:00:00 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll
    + 2008-04-14 00:12:05 171,008 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll
    + 2008-04-14 00:12:05 181,248 ------w c:\windows\ServicePackFiles\i386\scecli.dll
    + 2008-04-14 00:12:05 314,880 ------w c:\windows\ServicePackFiles\i386\scesrv.dll
    + 2008-04-14 00:12:05 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll
    + 2008-04-14 00:12:05 192,512 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll
    + 2008-04-14 00:12:05 20,480 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll
    + 2008-04-14 00:12:34 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe
    + 2008-04-14 00:12:05 215,552 ------w c:\windows\ServicePackFiles\i386\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\ServicePackFiles\i386\scripta.dll
    + 2008-04-14 00:12:43 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr
    + 2008-04-14 00:12:05 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll
    + 2008-04-14 00:12:05 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll
    + 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys
    + 2008-04-14 00:12:34 121,856 ------w c:\windows\ServicePackFiles\i386\sctasks.exe
    + 2008-04-14 00:12:34 77,312 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe
    + 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll
    + 2007-11-13 10:25:53 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys
    + 2008-04-14 00:12:34 18,944 ------w c:\windows\ServicePackFiles\i386\secedit.exe
    + 2008-04-14 00:12:05 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll
    + 2006-12-31 11:57:08 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll
    + 2008-04-14 00:12:05 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll
    + 2008-04-14 00:12:05 54,784 ------w c:\windows\ServicePackFiles\i386\sendmail.dll
    + 2008-04-14 00:12:05 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll
    + 2008-04-14 00:12:05 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll
    + 2008-04-14 00:12:05 221,696 ------w c:\windows\ServicePackFiles\i386\seo.dll
    + 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys
    + 2008-04-13 19:15:45 64,512 ------w c:\windows\ServicePackFiles\i386\serial.sys
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll
    + 2008-04-14 00:12:34 108,544 ------w c:\windows\ServicePackFiles\i386\services.exe
    + 2008-04-14 00:12:34 141,312 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe
    + 2008-04-14 00:12:34 31,232 ------w c:\windows\ServicePackFiles\i386\sethc.exe
    + 2007-12-17 11:59:54 66,592 ------w c:\windows\ServicePackFiles\i386\setregni.exe
    + 2008-04-14 00:12:34 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe
    + 2008-04-14 00:12:34 73,216 ------w c:\windows\ServicePackFiles\i386\setup50.exe
    + 2008-04-14 09:42:06 985,088 ------w c:\windows\ServicePackFiles\i386\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe
    + 2008-04-14 00:12:05 101,376 ------w c:\windows\ServicePackFiles\i386\setupqry.dll
    + 2008-04-14 00:12:05 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll
    + 2008-04-14 00:12:05 140,288 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll
    + 2008-04-14 00:12:05 1,614,848 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll
    + 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
    + 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys
    + 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys
    + 2008-04-13 17:03:19 549,376 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll
    + 2008-04-14 00:12:05 1,499,136 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll
    + 2008-04-14 00:12:05 8,461,312 ------w c:\windows\ServicePackFiles\i386\shell32.dll
    + 2008-04-14 00:12:05 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll
    + 2008-04-14 00:12:05 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll
    + 2008-04-14 00:12:05 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll
    + 2008-04-14 00:12:05 438,272 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll
    + 2008-04-14 00:12:05 474,112 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll
    + 2008-04-14 00:12:35 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe
    + 2008-04-14 00:12:35 77,824 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe
    + 2008-04-14 00:12:05 27,648 ------w c:\windows\ServicePackFiles\i386\shscrap.dll
    + 2008-04-14 00:12:05 135,168 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll
    + 2008-04-14 00:12:05 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll
    + 2008-04-14 00:12:35 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe
    + 2008-04-14 00:12:35 19,456 ------w c:\windows\ServicePackFiles\i386\shutdown.exe
    + 2008-04-14 00:12:05 13,312 ------w c:\windows\ServicePackFiles\i386\sigtab.dll
    + 2008-04-14 00:12:35 70,144 ------w c:\windows\ServicePackFiles\i386\sigverif.exe
    + 2008-04-14 00:12:05 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll
    + 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys
    + 2004-08-04 02:31:36 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys
    + 2008-04-14 00:12:35 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe
    + 2004-08-04 02:31:42 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys
    + 2008-04-14 00:12:06 25,088 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll
    + 2004-08-10 04:00:00 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll
    + 2008-04-14 00:12:06 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll
    + 2008-04-14 00:12:06 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll
    + 2008-04-14 00:12:06 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll
    + 2008-04-14 00:12:06 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll
    + 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys
    + 2004-08-04 02:41:42 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys
    + 2004-08-04 02:41:44 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys
    + 2004-08-04 02:41:46 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe
    + 2008-04-14 00:12:35 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe
    + 2004-08-04 02:41:46 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys
    + 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys
    + 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys
    + 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys
    + 2008-04-14 00:12:35 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe
    + 2008-04-14 00:12:35 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe
    + 2008-04-14 00:12:06 362,496 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll
    + 2008-04-14 00:12:35 89,600 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe
    + 2008-04-14 00:12:36 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe
    + 2008-04-14 00:12:06 189,440 ------w c:\windows\ServicePackFiles\i386\smtpadm.dll
    + 2008-04-14 00:12:06 10,752 ------w c:\windows\ServicePackFiles\i386\smtpapi.dll
    + 2008-04-14 00:12:06 2,134,528 ------w c:\windows\ServicePackFiles\i386\smtpsnap.dll
    + 2008-04-14 00:12:06 456,192 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll
    + 2008-04-14 00:12:36 131,584 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe
    + 2008-04-14 00:12:06 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll
    + 2008-04-14 00:12:36 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe
    + 2008-04-14 00:12:06 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll
    + 2008-04-14 00:12:06 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll
    + 2008-04-14 00:12:06 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll
    + 2008-04-14 00:12:06 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll
    + 2008-04-14 00:12:06 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll
    + 2008-04-14 00:12:06 182,272 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll
    + 2008-04-14 00:12:06 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll
    + 2008-04-14 00:12:36 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe
    + 2008-04-14 00:12:06 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll
    + 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys
    + 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2008-04-14 00:12:36 24,576 ------w c:\windows\ServicePackFiles\i386\sort.exe
    + 2008-04-14 00:12:36 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
    + 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll
    + 2008-04-14 00:12:36 538,624 ------w c:\windows\ServicePackFiles\i386\spider.exe
    + 2008-04-13 18:43:31 12,800 ------w c:\windows\ServicePackFiles\i386\spiisupd.exe
    + 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys
    + 2008-04-14 09:42:38 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe
    + 2008-04-14 00:12:06 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll
    + 2008-04-14 00:12:36 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe
    + 2008-04-13 18:35:06 186,880 ------w c:\windows\ServicePackFiles\i386\spra0401.dll
    + 2008-04-13 18:35:08 189,440 ------w c:\windows\ServicePackFiles\i386\spra0402.dll
    + 2008-04-13 18:35:09 161,280 ------w c:\windows\ServicePackFiles\i386\spra0404.dll
    + 2008-04-13 18:35:09 188,928 ------w c:\windows\ServicePackFiles\i386\spra0405.dll
    + 2008-04-13 18:35:09 192,000 ------w c:\windows\ServicePackFiles\i386\spra0406.dll
    + 2008-04-13 18:35:21 199,680 ------w c:\windows\ServicePackFiles\i386\spra0407.dll
    + 2008-04-13 18:35:11 197,632 ------w c:\windows\ServicePackFiles\i386\spra0408.dll
    + 2008-04-13 18:35:11 186,368 ------w c:\windows\ServicePackFiles\i386\spra040b.dll
    + 2008-04-13 18:35:20 197,632 ------w c:\windows\ServicePackFiles\i386\spra040c.dll
    + 2008-04-13 18:35:21 181,760 ------w c:\windows\ServicePackFiles\i386\spra040d.dll
    + 2008-04-13 18:35:23 195,584 ------w c:\windows\ServicePackFiles\i386\spra040e.dll
    + 2008-04-13 18:35:23 195,072 ------w c:\windows\ServicePackFiles\i386\spra0410.dll
    + 2008-04-13 18:35:23 171,008 ------w c:\windows\ServicePackFiles\i386\spra0411.dll
    + 2008-04-13 18:35:23 167,936 ------w c:\windows\ServicePackFiles\i386\spra0412.dll
    + 2008-04-13 18:35:25 196,096 ------w c:\windows\ServicePackFiles\i386\spra0413.dll
    + 2008-04-13 18:35:25 189,440 ------w c:\windows\ServicePackFiles\i386\spra0414.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0415.dll
    + 2008-04-13 18:35:08 192,512 ------w c:\windows\ServicePackFiles\i386\spra0416.dll
    + 2008-04-13 18:35:27 190,464 ------w c:\windows\ServicePackFiles\i386\spra0418.dll
    + 2008-04-13 18:35:27 192,512 ------w c:\windows\ServicePackFiles\i386\spra0419.dll
    + 2008-04-13 18:35:21 188,928 ------w c:\windows\ServicePackFiles\i386\spra041a.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra041b.dll
    + 2008-04-13 18:35:28 188,928 ------w c:\windows\ServicePackFiles\i386\spra041d.dll
    + 2008-04-13 18:35:29 188,416 ------w c:\windows\ServicePackFiles\i386\spra041e.dll
    + 2008-04-13 18:35:30 188,928 ------w c:\windows\ServicePackFiles\i386\spra041f.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra0424.dll
    + 2008-04-13 18:35:11 186,880 ------w c:\windows\ServicePackFiles\i386\spra0425.dll
    + 2008-04-13 18:35:24 188,928 ------w c:\windows\ServicePackFiles\i386\spra0426.dll
    + 2008-04-13 18:35:24 189,952 ------w c:\windows\ServicePackFiles\i386\spra0427.dll
    + 2008-04-13 18:35:06 161,280 ------w c:\windows\ServicePackFiles\i386\spra0804.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0816.dll
    + 2008-04-13 18:35:11 196,096 ------w c:\windows\ServicePackFiles\i386\spra0c0a.dll
    + 2008-04-13 18:35:49 2,869,248 ------w c:\windows\ServicePackFiles\i386\sprb0401.dll
    + 2008-04-13 18:36:10 477,696 ------w c:\windows\ServicePackFiles\i386\sprb0404.dll
    + 2008-04-13 18:36:10 734,720 ------w c:\windows\ServicePackFiles\i386\sprb0405.dll
    + 2008-04-13 18:36:10 742,912 ------w c:\windows\ServicePackFiles\i386\sprb0406.dll
    + 2008-04-13 18:37:03 788,480 ------w c:\windows\ServicePackFiles\i386\sprb0407.dll
    + 2008-04-13 18:36:35 801,280 ------w c:\windows\ServicePackFiles\i386\sprb0408.dll
    + 2008-04-13 18:36:39 729,088 ------w c:\windows\ServicePackFiles\i386\sprb040b.dll
    + 2008-04-13 18:36:55 793,088 ------w c:\windows\ServicePackFiles\i386\sprb040c.dll
    + 2008-04-13 18:37:07 2,842,112 ------w c:\windows\ServicePackFiles\i386\sprb040d.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb040e.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb0410.dll
    + 2008-04-13 18:37:34 562,688 ------w c:\windows\ServicePackFiles\i386\sprb0411.dll
    + 2008-04-13 18:37:37 543,744 ------w c:\windows\ServicePackFiles\i386\sprb0412.dll
    + 2008-04-13 18:38:00 769,024 ------w c:\windows\ServicePackFiles\i386\sprb0413.dll
    + 2008-04-13 18:38:02 716,288 ------w c:\windows\ServicePackFiles\i386\sprb0414.dll
    + 2008-04-13 18:38:05 759,808 ------w c:\windows\ServicePackFiles\i386\sprb0415.dll
    + 2008-04-13 18:35:43 752,128 ------w c:\windows\ServicePackFiles\i386\sprb0416.dll
    + 2008-04-13 18:38:28 736,768 ------w c:\windows\ServicePackFiles\i386\sprb0419.dll
    + 2008-04-13 18:38:37 757,248 ------w c:\windows\ServicePackFiles\i386\sprb041b.dll
    + 2008-04-13 18:38:47 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041d.dll
    + 2008-04-13 18:38:51 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041f.dll
    + 2008-04-13 18:38:36 732,160 ------w c:\windows\ServicePackFiles\i386\sprb0424.dll
    + 2008-04-13 18:35:54 470,016 ------w c:\windows\ServicePackFiles\i386\sprb0804.dll
    + 2008-04-13 18:38:06 751,616 ------w c:\windows\ServicePackFiles\i386\sprb0816.dll
    + 2008-04-13 18:36:38 773,632 ------w c:\windows\ServicePackFiles\i386\sprb0c0a.dll
    + 2008-04-13 18:39:02 656,896 ------w c:\windows\ServicePackFiles\i386\sprc0401.dll
    + 2008-04-13 18:39:13 327,680 ------w c:\windows\ServicePackFiles\i386\sprc0404.dll
    + 2008-04-13 18:39:02 601,088 ------w c:\windows\ServicePackFiles\i386\sprc0405.dll
    + 2008-04-13 18:39:12 605,696 ------w c:\windows\ServicePackFiles\i386\sprc0406.dll
    + 2008-04-13 18:39:19 663,552 ------w c:\windows\ServicePackFiles\i386\sprc0407.dll
    + 2008-04-13 18:39:12 679,936 ------w c:\windows\ServicePackFiles\i386\sprc0408.dll
    + 2008-04-13 18:39:17 604,672 ------w c:\windows\ServicePackFiles\i386\sprc040b.dll
    + 2008-04-13 18:39:20 663,040 ------w c:\windows\ServicePackFiles\i386\sprc040c.dll
    + 2008-04-13 18:39:28 620,544 ------w c:\windows\ServicePackFiles\i386\sprc040d.dll
    + 2008-04-13 18:39:28 645,120 ------w c:\windows\ServicePackFiles\i386\sprc040e.dll
    + 2008-04-13 18:39:28 658,432 ------w c:\windows\ServicePackFiles\i386\sprc0410.dll
    + 2008-04-13 18:39:49 412,672 ------w c:\windows\ServicePackFiles\i386\sprc0411.dll
    + 2008-04-13 18:39:49 392,704 ------w c:\windows\ServicePackFiles\i386\sprc0412.dll
    + 2008-04-13 18:39:47 645,120 ------w c:\windows\ServicePackFiles\i386\sprc0413.dll
    + 2008-04-13 18:39:48 591,872 ------w c:\windows\ServicePackFiles\i386\sprc0414.dll
    + 2008-04-13 18:39:52 641,024 ------w c:\windows\ServicePackFiles\i386\sprc0415.dll
    + 2008-04-13 18:38:56 620,032 ------w c:\windows\ServicePackFiles\i386\sprc0416.dll
    + 2008-04-13 18:39:56 627,200 ------w c:\windows\ServicePackFiles\i386\sprc0419.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\ServicePackFiles\i386\sprc041b.dll
    + 2008-04-13 18:40:05 590,848 ------w c:\windows\ServicePackFiles\i386\sprc041d.dll
    + 2008-04-13 18:40:09 592,896 ------w c:\windows\ServicePackFiles\i386\sprc041f.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\ServicePackFiles\i386\sprc0424.dll
    + 2008-04-13 18:39:03 322,560 ------w c:\windows\ServicePackFiles\i386\sprc0804.dll
    + 2008-04-13 18:39:53 639,488 ------w c:\windows\ServicePackFiles\i386\sprc0816.dll
    + 2008-04-13 18:39:13 648,704 ------w c:\windows\ServicePackFiles\i386\sprc0c0a.dll
    + 2008-04-14 00:12:06 250,368 ------w c:\windows\ServicePackFiles\i386\sptip.dll
    + 2008-04-14 00:12:36 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe
    + 2008-04-14 00:12:06 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll
    + 2008-04-14 00:12:06 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll
    + 2008-04-14 00:12:06 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll
    + 2008-04-14 00:12:06 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll
    + 2008-04-14 00:12:06 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
    + 2008-04-14 00:12:06 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll
    + 2008-04-14 00:12:06 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
    + 2008-04-13 18:36:52 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys
    + 2008-04-14 00:12:06 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll
    + 2008-04-14 00:12:07 726,078 ------w c:\windows\ServicePackFiles\i386\srchui.dll
    + 2008-04-14 00:12:07 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll
    + 2008-04-14 00:12:07 239,104 ------w c:\windows\ServicePackFiles\i386\srrstr.dll
    + 2008-04-14 00:12:07 171,008 ------w c:\windows\ServicePackFiles\i386\srsvc.dll
    + 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys
    + 2008-04-14 00:12:07 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll
    + 2008-04-14 00:12:43 704,512 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr
    + 2008-04-14 00:12:43 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr
    + 2008-04-14 00:12:07 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll
    + 2008-04-14 00:12:07 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    + 2008-04-14 00:12:43 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr
    + 2008-04-14 00:12:07 45,056 ------w c:\windows\ServicePackFiles\i386\ssinc51.dll
    + 2008-04-14 00:12:44 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr
    + 2008-04-14 00:12:44 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr
    + 2008-04-14 00:12:44 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\sspifilt.dll
    + 2008-04-14 00:12:44 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr
    + 2008-04-14 00:12:44 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr
    + 2008-04-14 00:12:44 679,936 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr
    + 2008-04-14 00:12:07 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll
    + 2008-04-14 00:12:07 8,192 ------w c:\windows\ServicePackFiles\i386\staxmem.dll
    + 2008-04-14 00:12:07 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll
    + 2008-04-14 00:12:07 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll
    + 2008-04-14 00:12:07 68,096 ------w c:\windows\ServicePackFiles\i386\sti.dll
    + 2008-04-14 00:12:07 136,704 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll
    + 2008-04-14 00:12:36 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe
    + 2008-04-14 00:12:07 121,856 ------w c:\windows\ServicePackFiles\i386\stobject.dll
    + 2008-04-14 00:12:07 74,752 ------w c:\windows\ServicePackFiles\i386\storprop.dll
    + 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys
    + 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys
    + 2008-04-14 00:12:07 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll
    + 2008-04-14 00:12:36 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2008-04-14 00:12:36 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\svcext51.dll
    + 2008-04-14 00:12:36 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe
    + 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys
    + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys
    + 2008-04-14 00:12:07 713,216 ------w c:\windows\ServicePackFiles\i386\sxs.dll
    + 2007-12-17 11:59:56 1,179,648 ------w c:\windows\ServicePackFiles\i386\sy52106.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll
    + 2008-04-14 00:12:07 191,488 ------w c:\windows\ServicePackFiles\i386\syncui.dll
    + 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys
    + 2008-04-14 00:12:36 71,680 ------w c:\windows\ServicePackFiles\i386\sysinfo.exe
    + 2008-04-14 00:12:07 193,024 ------w c:\windows\ServicePackFiles\i386\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll
    + 2008-04-14 00:12:37 106,496 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe
    + 2008-04-14 00:12:07 990,208 ------w c:\windows\ServicePackFiles\i386\syssetup.dll
    + 2004-07-20 00:54:18 77,824 ------w c:\windows\ServicePackFiles\i386\system.configuration.install.dll
    + 2004-07-20 00:54:18 1,179,648 ------w c:\windows\ServicePackFiles\i386\system.data.dll
    + 2004-07-20 00:54:18 1,695,744 ------w c:\windows\ServicePackFiles\i386\system.design.dll
    + 2004-07-20 00:54:18 86,016 ------w c:\windows\ServicePackFiles\i386\system.directoryservices.dll
    + 2004-07-20 00:54:18 65,536 ------w c:\windows\ServicePackFiles\i386\system.drawing.design.dll
    + 2004-07-20 00:54:18 462,848 ------w c:\windows\ServicePackFiles\i386\system.drawing.dll
    + 2004-07-20 00:54:18 212,992 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
    + 2004-08-04 04:12:34 48,640 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
    + 2004-07-20 00:54:18 352,256 ------w c:\windows\ServicePackFiles\i386\system.management.dll
    + 2004-07-20 00:54:18 241,664 ------w c:\windows\ServicePackFiles\i386\system.messaging.dll
    + 2004-07-20 00:54:20 311,296 ------w c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
    + 2004-07-20 00:54:20 131,072 ------w c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
    + 2004-07-20 00:54:20 77,824 ------w c:\windows\ServicePackFiles\i386\system.security.dll
    + 2004-07-20 00:54:20 126,976 ------w c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
    + 2007-01-02 20:40:24 1,200,128 ------w c:\windows\ServicePackFiles\i386\system.web.dll
    + 2004-07-20 00:54:20 61,440 ------w c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
    + 2004-07-20 00:54:20 507,904 ------w c:\windows\ServicePackFiles\i386\system.web.services.dll
    + 2004-07-20 00:54:22 2,002,944 ------w c:\windows\ServicePackFiles\i386\system.windows.forms.dll
    + 2004-07-20 00:54:22 1,302,528 ------w c:\windows\ServicePackFiles\i386\system.xml.dll
    + 2008-04-14 00:12:07 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tabletoc.dll
    + 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys
    + 2008-04-14 00:12:07 858,624 ------w c:\windows\ServicePackFiles\i386\tapi3.dll
    + 2008-04-14 00:12:07 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll
    + 2008-04-14 00:12:07 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll
    + 2008-04-14 00:12:37 76,288 ------w c:\windows\ServicePackFiles\i386\taskkill.exe
    + 2008-04-14 00:12:37 77,824 ------w c:\windows\ServicePackFiles\i386\tasklist.exe
    + 2008-04-14 00:12:37 135,680 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe
    + 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys
    + 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys
    + 2008-04-14 00:12:07 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll
    + 2008-04-14 00:12:37 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe
    + 2007-04-02 16:36:07 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll
    + 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys
    + 2008-04-14 00:13:20 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys
    + 2008-04-14 00:13:21 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys
    + 2008-04-14 00:12:37 75,776 ------w c:\windows\ServicePackFiles\i386\telnet.exe
    + 2008-04-14 00:13:20 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys
    + 2008-04-14 00:12:07 358,400 ------w c:\windows\ServicePackFiles\i386\termmgr.dll
    + 2008-04-14 00:12:07 295,424 ------w c:\windows\ServicePackFiles\i386\termsrv.dll
    + 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys
    + 2008-04-14 00:12:07 385,536 ------w c:\windows\ServicePackFiles\i386\themeui.dll
    + 2008-04-14 00:12:37 61,440 ------w c:\windows\ServicePackFiles\i386\tlntadmn.exe
    + 2008-04-14 00:12:37 78,336 ------w c:\windows\ServicePackFiles\i386\tlntsess.exe
    + 2008-04-14 00:12:38 73,216 ------w c:\windows\ServicePackFiles\i386\tlntsvr.exe
    + 2008-04-14 00:12:07 7,168 ------w c:\windows\ServicePackFiles\i386\tlntsvrp.dll
    + 2007-12-17 12:00:05 66,592 ------w c:\windows\ServicePackFiles\i386\togac.exe
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tools.dll
    + 2008-04-14 00:12:38 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe
    + 2008-04-14 00:12:38 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe
    + 2008-04-14 00:12:38 259,584 ------w c:\windows\ServicePackFiles\i386\tracerpt.exe
    + 2008-04-14 00:12:38 12,288 ------w c:\windows\ServicePackFiles\i386\tracert.exe
    + 2008-04-14 00:12:42 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com
    + 2008-04-14 00:12:07 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll
    + 2008-04-14 00:12:07 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat
    + 2008-04-14 00:12:07 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll
    + 2008-04-14 00:13:21 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll
    + 2008-04-14 00:12:07 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll
    + 2008-04-14 00:12:07 130,048 ------w c:\windows\ServicePackFiles\i386\tsoc.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll
    + 2008-04-14 00:12:07 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll
    + 2007-04-02 15:31:00 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll
    + 2008-04-14 00:12:07 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll
    + 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll
    + 2008-04-14 00:12:07 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll
    + 2008-04-14 00:12:38 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe
    + 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys
    + 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys
    + 2008-04-14 00:12:07 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll
    + 2008-04-14 00:12:07 103,424 ------w c:\windows\ServicePackFiles\i386\uihelper.dll
    + 2008-04-14 00:12:07 275,456 ------w c:\windows\ServicePackFiles\i386\ulib.dll
    + 2008-04-14 00:12:07 35,840 ------w c:\windows\ServicePackFiles\i386\umandlg.dll
    + 2008-04-14 00:12:07 123,392 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
    + 2008-04-14 00:12:07 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll
    + 2008-04-14 00:12:07 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll
    + 2008-04-14 00:12:07 74,240 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll
    + 2008-04-14 00:12:07 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll
    + 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll
    + 2008-04-14 00:12:07 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll
    + 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys
    + 2008-04-14 00:12:38 150,528 ------w c:\windows\ServicePackFiles\i386\uploadm.exe
    + 2008-04-14 00:12:08 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll
    + 2008-04-14 00:12:38 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe
    + 2008-04-14 00:12:08 185,856 ------w c:\windows\ServicePackFiles\i386\upnphost.dll
    + 2008-04-14 00:12:08 239,616 ------w c:\windows\ServicePackFiles\i386\upnpui.dll
    + 2008-04-14 00:12:38 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe
    + 2008-04-14 00:12:08 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll
    + 2008-04-14 00:12:08 619,520 ------w c:\windows\ServicePackFiles\i386\urlmon.dll
    + 2004-08-04 02:31:26 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys
    + 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys
    + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys
    + 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2008-04-14 00:12:08 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys
    + 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys
    + 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys
    + 2008-04-14 00:12:08 74,240 ------w c:\windows\ServicePackFiles\i386\usbui.dll
    + 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys
    + 2008-04-14 00:12:08 578,560 ------w c:\windows\ServicePackFiles\i386\user32.dll
    + 2008-04-14 00:12:08 727,040 ------w c:\windows\ServicePackFiles\i386\userenv.dll
    + 2008-04-14 00:12:38 26,112 ------w c:\windows\ServicePackFiles\i386\userinit.exe
    + 2008-04-14 00:12:08 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll
    + 2008-04-14 00:12:38 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe
    + 2008-04-14 00:12:08 218,624 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll
    + 2008-04-14 00:12:08 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2004-07-20 00:54:22 716,800 ------w c:\windows\ServicePackFiles\i386\vbc.exe
    + 2004-08-04 04:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
    + 2004-08-04 04:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
    + 2004-08-04 04:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.dll
    + 2004-08-04 04:12:48 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
    + 2004-08-04 04:12:48 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
    + 2004-08-04 04:12:48 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
    + 2004-08-04 04:12:50 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
    + 2004-08-04 04:12:50 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
    + 2004-08-04 04:12:50 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
    + 2008-04-14 00:12:08 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll
    + 2008-04-14 00:12:08 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2008-04-14 00:12:08 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2008-04-14 00:12:08 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 00:12:38 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2008-04-14 00:12:08 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll
    + 2008-04-14 00:12:08 53,760 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys
    + 2008-04-14 00:12:08 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll
    + 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys
    + 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2008-04-14 00:12:08 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll
    + 2008-04-13 18:41:01 52,352 ------w c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2004-08-04 04:12:50 999,424 ------w c:\windows\ServicePackFiles\i386\vsavb7rt.dll
    + 2008-04-14 00:12:08 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll
    + 2008-04-14 00:12:38 289,792 ------w c:\windows\ServicePackFiles\i386\vssvc.exe
    + 2008-04-14 00:12:08 175,104 ------w c:\windows\ServicePackFiles\i386\w32time.dll
    + 2008-04-14 00:12:08 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2008-04-14 00:12:08 364,032 ------w c:\windows\ServicePackFiles\i386\w3svc.dll
    + 2008-04-14 00:12:08 483,840 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll
    + 2008-04-14 00:12:38 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe
    + 2008-04-14 00:12:08 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll
    + 2008-04-13 16:21:48 249,856 ------w c:\windows\ServicePackFiles\i386\wab32res.dll
    + 2008-04-14 00:12:08 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2008-04-14 00:12:08 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2008-04-14 00:12:39 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2004-08-04 02:29:38 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys
    + 2004-08-04 02:29:38 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys
    + 2004-08-04 02:29:38 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys
    + 2004-08-04 02:29:40 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys
    + 2004-08-04 02:29:40 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys
    + 2004-08-04 02:29:42 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys
    + 2004-08-04 02:29:42 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys
    + 2008-04-14 00:12:08 76,800 ------w c:\windows\ServicePackFiles\i386\wam51.dll
    + 2008-04-14 00:12:08 53,248 ------w c:\windows\ServicePackFiles\i386\wamreg51.dll
    + 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2004-08-04 02:29:42 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys
    + 2004-08-04 02:29:44 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys
    + 2004-08-04 02:29:44 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys
    + 2004-08-04 02:29:46 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys
    + 2004-08-04 02:29:46 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys
    + 2008-04-14 00:12:08 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll
    + 2008-04-14 00:12:08 196,608 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll
    + 2008-04-14 00:12:08 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll
    + 2008-04-14 00:12:08 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2008-04-14 00:12:08 531,456 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll
    + 2008-04-14 00:12:08 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll
    + 2008-04-14 00:12:08 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll
    + 2008-04-14 00:12:08 43,008 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2008-04-14 00:12:08 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2008-04-14 00:12:39 116,224 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe
    + 2008-04-14 00:12:08 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll
    + 2008-04-13 18:45:38 31,744 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2004-08-04 02:29:46 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys
    + 2008-04-14 00:12:08 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-04-14 00:12:45 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv
    + 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2008-04-14 00:12:08 276,480 ------w c:\windows\ServicePackFiles\i386\webcheck.dll
    + 2008-04-14 00:12:08 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2008-04-14 00:12:08 135,680 ------w c:\windows\ServicePackFiles\i386\webvw.dll
    + 2008-04-14 00:12:39 65,024 ------w c:\windows\ServicePackFiles\i386\wextract.exe
    + 2008-04-14 00:12:39 433,664 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
    + 2008-04-14 00:12:08 463,360 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll
    + 2008-04-14 00:12:08 124,416 ------w c:\windows\ServicePackFiles\i386\wiadss.dll
    + 2008-04-14 00:12:08 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2008-04-14 00:12:08 333,824 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll
  2. 2009-03-13, 04:30 #12
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 8

    + 2008-04-14 00:12:08 589,312 ------w c:\windows\ServicePackFiles\i386\wiashext.dll
    + 2008-04-14 00:12:08 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll
    + 2008-04-13 19:30:10 1,845,632 ------w c:\windows\ServicePackFiles\i386\win32k.sys
    + 2008-04-14 00:12:08 102,400 ------w c:\windows\ServicePackFiles\i386\win32spl.dll
    + 2008-04-13 16:48:53 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll
    + 2008-04-14 00:12:39 283,648 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe
    + 2008-04-14 00:12:08 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll
    + 2008-04-14 00:12:08 666,112 ------w c:\windows\ServicePackFiles\i386\wininet.dll
    + 2008-04-14 00:12:09 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2008-04-14 00:12:39 507,904 ------w c:\windows\ServicePackFiles\i386\winlogon.exe
    + 2008-04-14 00:12:09 176,128 ------w c:\windows\ServicePackFiles\i386\winmm.dll
    + 2004-08-10 04:00:00 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll
    + 2008-04-14 00:11:11 756,224 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll
    + 2008-04-14 00:12:09 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2008-04-14 00:12:09 99,328 ------w c:\windows\ServicePackFiles\i386\winscard.dll
    + 2008-04-14 00:12:09 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 00:12:45 146,432 ------w c:\windows\ServicePackFiles\i386\winspool.drv
    + 2008-04-14 00:12:09 293,376 ------w c:\windows\ServicePackFiles\i386\winsrv.dll
    + 2008-04-14 00:12:09 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll
    + 2008-04-14 00:12:09 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll
    + 2008-04-14 00:12:40 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll
    + 2008-04-14 00:12:09 172,032 ------w c:\windows\ServicePackFiles\i386\wldap32.dll
    + 2004-08-04 02:31:28 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys
    + 2008-04-14 00:12:09 92,672 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2008-04-14 00:11:15 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll
    + 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys
    + 2008-04-14 00:12:40 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe
    + 2008-04-13 17:10:20 6,656 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll
    + 2008-04-14 00:12:09 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2008-04-14 00:12:40 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
    + 2008-04-14 00:12:40 358,912 ------w c:\windows\ServicePackFiles\i386\wmic.exe
    + 2008-04-14 00:12:09 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2008-04-14 00:12:09 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll
    + 2008-04-14 00:12:09 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll
    + 2008-04-14 00:12:09 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2008-04-14 00:12:09 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll
    + 2008-04-14 00:12:09 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
    + 2008-04-14 00:12:40 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe
    + 2008-04-14 00:12:09 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll
    + 2008-04-14 00:12:09 95,232 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2008-04-14 00:12:09 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll
    + 2008-04-14 00:12:09 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll
    + 2008-04-14 00:12:09 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll
    + 2008-04-14 00:12:09 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll
    + 2008-04-14 00:12:09 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
    + 2008-04-14 00:12:09 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
    + 2008-04-14 00:12:09 4,256,768 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll
    + 2008-04-14 00:12:09 5,632 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll
    + 2008-04-14 00:12:09 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll
    + 2008-04-14 00:12:40 214,528 ------w c:\windows\ServicePackFiles\i386\wordpad.exe
    + 2008-04-14 00:12:10 264,192 ------w c:\windows\ServicePackFiles\i386\wow32.dll
    + 2008-04-14 00:12:40 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2008-04-14 00:12:41 11,264 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2008-04-14 00:12:10 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2008-04-14 00:12:10 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2008-04-14 00:12:41 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2008-04-14 00:12:41 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe
    + 2008-04-14 00:12:10 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2008-04-14 00:12:10 604,160 ------w c:\windows\ServicePackFiles\i386\wsecedit.dll
    + 2008-04-14 00:12:10 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll
    + 2008-04-14 00:12:10 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2008-04-14 00:12:10 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll
    + 2008-04-14 00:12:10 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll
    + 2008-04-14 00:12:10 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll
    + 2008-04-14 00:12:10 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2008-04-14 00:12:10 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2004-08-04 02:29:48 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys
    + 2008-04-14 00:12:10 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2008-04-14 00:12:10 22,528 ------w c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2008-04-14 00:12:10 50,688 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2008-04-14 00:12:10 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2008-04-14 00:12:10 430,592 ------w c:\windows\ServicePackFiles\i386\wuapi.dll
    + 2008-04-14 00:12:41 111,104 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe
    + 2008-04-14 00:12:41 165,888 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe
    + 2008-04-14 00:12:11 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll
    + 2008-04-14 00:12:11 183,296 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll
    + 2008-04-14 00:12:11 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll
    + 2008-04-14 00:12:11 112,640 ------w c:\windows\ServicePackFiles\i386\wucltui.dll
    + 2008-04-14 00:12:11 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll
    + 2008-04-14 00:12:11 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll
    + 2004-08-04 02:29:50 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys
    + 2008-04-14 00:12:11 383,488 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll
    + 2008-04-14 00:12:11 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2008-04-14 00:12:11 483,840 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll
    + 2008-04-14 00:12:11 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2008-04-14 00:12:41 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2004-08-10 04:00:00 174,200 ------w c:\windows\ServicePackFiles\i386\xenroll.dll
    + 2008-04-14 00:12:11 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll
    + 2008-04-14 00:12:11 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll
    + 2008-04-14 00:12:11 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2008-04-14 00:12:11 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe
    + 2008-04-13 17:39:29 438,784 ------w c:\windows\ServicePackFiles\i386\xpob2res.dll
    + 2008-04-13 17:39:22 187,392 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll
    + 2008-04-13 17:39:24 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll
    + 2008-04-13 17:39:26 689,152 ------w c:\windows\ServicePackFiles\i386\xpsp3res.dll
    + 2008-04-14 00:12:11 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll
    + 2008-04-14 00:12:11 116,224 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
    + 2008-04-14 00:12:11 338,432 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\slrundll.exe
    - 2006-02-21 00:00:18 86,016 ----a-w c:\windows\SOUNDMAN.EXE
    + 2006-07-21 13:14:36 86,016 ----a-w c:\windows\SOUNDMAN.EXE
    - 2004-08-10 04:00:00 3,166,208 ------w c:\windows\srchasst\msgr3en.dll
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\srchasst\msgr3en.dll
    - 2004-08-10 04:00:00 58,434 ------w c:\windows\srchasst\srchctls.dll
    + 2008-04-14 00:12:06 58,434 ------w c:\windows\srchasst\srchctls.dll
    - 2004-08-10 04:00:00 725,566 ------w c:\windows\srchasst\srchui.dll
    + 2008-04-14 00:12:07 726,078 ------w c:\windows\srchasst\srchui.dll
    - 2004-08-10 04:00:00 146,432 ------w c:\windows\system\WINSPOOL.DRV
    + 2008-04-14 00:12:45 146,432 ------w c:\windows\system\winspool.drv
    - 2006-08-16 11:58:05 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\system32\aaclient.dll
    - 2004-08-10 04:00:00 183,808 ------w c:\windows\system32\accwiz.exe
    + 2008-04-14 00:12:11 184,320 ------w c:\windows\system32\accwiz.exe
    - 2004-08-10 04:00:00 114,688 ------w c:\windows\system32\aclui.dll
    + 2008-04-14 00:11:48 115,712 ------w c:\windows\system32\aclui.dll
    - 2004-08-10 04:00:00 194,048 ------w c:\windows\system32\activeds.dll
    + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\system32\activeds.dll
    - 2004-08-10 04:00:00 4,096 ------w c:\windows\system32\actmovie.exe
    + 2008-04-14 00:12:12 4,096 ------w c:\windows\system32\actmovie.exe
    - 2004-08-10 04:00:00 101,888 ------w c:\windows\system32\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\system32\actxprxy.dll
    - 2004-08-10 04:00:00 175,616 ------w c:\windows\system32\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ------w c:\windows\system32\adsldp.dll
    - 2004-08-10 04:00:00 143,360 ------w c:\windows\system32\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\system32\adsldpc.dll
    - 2004-08-10 04:00:00 68,096 ------w c:\windows\system32\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ------w c:\windows\system32\adsmsext.dll
    - 2004-08-10 04:00:00 263,680 ------w c:\windows\system32\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ------w c:\windows\system32\adsnt.dll
    - 2004-08-10 04:00:00 109,568 ------w c:\windows\system32\adsnw.dll
    + 2008-04-14 00:11:48 123,392 ------w c:\windows\system32\adsnw.dll
    - 2004-08-10 04:00:00 616,960 ------w c:\windows\system32\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ------w c:\windows\system32\advapi32.dll
    - 2008-04-23 04:16:28 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2008-12-20 23:15:11 124,928 ----a-w c:\windows\system32\advpack.dll
    - 2004-08-10 04:00:00 98,304 ------w c:\windows\system32\ahui.exe
    + 2008-04-14 00:12:12 98,304 ------w c:\windows\system32\ahui.exe
    - 2004-08-10 04:00:00 44,544 ------w c:\windows\system32\alg.exe
    + 2008-04-14 00:12:12 44,544 ----a-w c:\windows\system32\alg.exe
    - 2004-08-10 04:00:00 17,408 ------w c:\windows\system32\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ------w c:\windows\system32\alrsvc.dll
    - 2004-08-10 04:00:00 70,656 ------w c:\windows\system32\amstream.dll
    + 2008-04-14 00:11:49 70,656 ------w c:\windows\system32\amstream.dll
    - 2004-08-10 04:00:00 126,976 ------w c:\windows\system32\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\system32\apphelp.dll
    - 2004-08-10 04:00:00 167,936 ------w c:\windows\system32\appmgmts.dll
    + 2008-04-14 00:11:49 167,936 ------w c:\windows\system32\appmgmts.dll
    - 2004-08-10 04:00:00 295,936 ------w c:\windows\system32\appmgr.dll
    + 2008-04-14 00:11:49 295,936 ------w c:\windows\system32\appmgr.dll
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\asr_fmt.exe
    + 2008-04-14 00:12:12 30,208 ------w c:\windows\system32\asr_fmt.exe
    - 2004-08-10 04:00:00 32,768 ------w c:\windows\system32\asr_pfu.exe
    + 2008-04-14 00:12:12 32,768 ------w c:\windows\system32\asr_pfu.exe
    - 2004-08-10 04:00:00 65,024 ------w c:\windows\system32\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ------w c:\windows\system32\asycfilt.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\at.exe
    + 2008-04-14 00:12:12 25,088 ------w c:\windows\system32\at.exe
    + 2008-04-14 00:11:49 229,376 ------w c:\windows\system32\ati2cqag.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\system32\ati2dvaa.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\windows\system32\ati2dvag.dll
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\system32\ati3d1ag.dll
    + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\system32\ati3duag.dll
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\system32\ativtmxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\windows\system32\ativvaxx.dll
    - 2004-08-10 04:00:00 58,880 ------w c:\windows\system32\atl.dll
    + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\system32\atl.dll
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\atmadm.exe
    + 2008-04-14 00:12:12 11,264 ------w c:\windows\system32\atmadm.exe
    - 2004-08-10 04:00:00 285,696 ------w c:\windows\system32\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ------w c:\windows\system32\atmfd.dll
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\system32\atmlib.dll
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\attrib.exe
    + 2008-04-14 00:12:12 12,288 ------w c:\windows\system32\attrib.exe
    - 2004-08-10 04:00:00 42,496 ------w c:\windows\system32\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\system32\audiosrv.dll
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\auditusr.exe
    + 2008-04-14 00:12:12 14,336 ------w c:\windows\system32\auditusr.exe
    - 2005-03-02 18:09:29 56,832 ----a-w c:\windows\system32\authz.dll
    + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\system32\authz.dll
    - 2004-08-10 11:00:00 588,800 ------w c:\windows\system32\autochk.exe
    + 2008-04-14 00:12:12 588,800 ------w c:\windows\system32\autochk.exe
    - 2004-08-10 04:00:00 602,624 ------w c:\windows\system32\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ------w c:\windows\system32\autoconv.exe
    - 2004-08-10 11:00:00 580,608 ------w c:\windows\system32\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ------w c:\windows\system32\autofmt.exe
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ------w c:\windows\system32\autolfn.exe
    - 2004-08-10 04:00:00 84,992 ------w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ------w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\system32\azroles.dll
    - 2004-08-10 04:00:00 52,736 ------w c:\windows\system32\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\system32\basesrv.dll
    - 2004-08-10 04:00:00 28,672 ------w c:\windows\system32\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\system32\batmeter.dll
    - 2004-08-10 04:00:00 8,704 ------w c:\windows\system32\batt.dll
    + 2008-04-14 00:11:50 8,704 ------w c:\windows\system32\batt.dll
    - 2004-08-10 04:00:00 17,408 ------w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ------w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\system32\bits\qmgr.dll
    - 2004-08-10 04:00:00 8,192 ------w c:\windows\system32\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ------w c:\windows\system32\bitsprx2.dll
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\system32\bitsprx4.dll
    - 2004-08-10 04:00:00 71,680 ------w c:\windows\system32\blastcln.exe
    + 2008-04-14 00:12:13 71,680 ------w c:\windows\system32\blastcln.exe
    - 2004-08-10 04:00:00 136,704 ------w c:\windows\system32\bootcfg.exe
    + 2008-04-14 00:12:13 142,848 ------w c:\windows\system32\bootcfg.exe
    - 2004-08-10 04:00:00 63,488 ------w c:\windows\system32\browselc.dll
    + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\system32\browselc.dll
    - 2004-08-10 04:00:00 77,312 ------w c:\windows\system32\browser.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\browser.dll
    - 2006-09-14 08:31:26 1,022,976 ----a-w c:\windows\system32\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\system32\browseui.dll
    - 2004-08-10 04:00:00 78,336 ------w c:\windows\system32\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ------w c:\windows\system32\browsewm.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\bthci.dll
    + 2008-04-14 00:11:50 20,992 ------w c:\windows\system32\bthci.dll
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\system32\bthserv.dll
    - 2004-08-10 04:00:00 50,688 ------w c:\windows\system32\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\system32\btpanui.dll
    - 2004-08-10 11:00:00 59,904 ------w c:\windows\system32\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\system32\cabinet.dll
    - 2004-08-10 04:00:00 84,480 ------w c:\windows\system32\cabview.dll
    + 2008-04-14 00:11:50 84,480 ------w c:\windows\system32\cabview.dll
    - 2004-08-10 04:00:00 18,432 ------w c:\windows\system32\cacls.exe
    + 2008-04-14 00:12:13 19,968 ------w c:\windows\system32\cacls.exe
    - 2004-08-10 04:00:00 50,688 ------w c:\windows\system32\camocx.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\system32\camocx.dll
    - 2004-08-10 04:00:00 142,848 ------w c:\windows\system32\capesnpn.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\windows\system32\capesnpn.dll
    - 2005-07-26 11:39:42 225,792 ----a-w c:\windows\system32\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\system32\catsrv.dll
    - 2004-08-10 04:00:00 85,504 ------w c:\windows\system32\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ------w c:\windows\system32\catsrvps.dll
    - 2005-07-26 11:39:43 625,152 ----a-w c:\windows\system32\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\system32\catsrvut.dll
    - 2006-09-14 08:31:26 151,040 ------w c:\windows\system32\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ------w c:\windows\system32\cdfview.dll
    - 2007-07-30 23:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
    + 2008-10-16 19:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
    - 2005-09-10 01:53:41 2,067,968 ------w c:\windows\system32\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ------w c:\windows\system32\cdosys.dll
    - 2004-08-10 04:00:00 194,560 ------w c:\windows\system32\certcli.dll
    + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\system32\certcli.dll
    - 2004-08-10 04:00:00 457,728 ------w c:\windows\system32\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ------w c:\windows\system32\certmgr.dll
    - 2004-08-10 04:00:00 38,912 ------w c:\windows\system32\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ------w c:\windows\system32\cfgbkend.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    - 2004-08-10 04:00:00 109,568 ------w c:\windows\system32\cic.dll
    + 2008-04-14 00:11:50 148,480 ------w c:\windows\system32\cic.dll
    - 2006-06-22 05:06:29 69,120 ------w c:\windows\system32\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\system32\ciodm.dll
    - 2004-08-10 04:00:00 56,320 ------w c:\windows\system32\cipher.exe
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\system32\cipher.exe
    - 2004-08-10 04:00:00 5,632 ------w c:\windows\system32\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\system32\cisvc.exe
    - 2005-07-26 11:39:43 110,080 ------w c:\windows\system32\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\system32\clbcatex.dll
    - 2005-07-26 11:39:43 498,688 ----a-w c:\windows\system32\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\system32\clbcatq.dll
    - 2004-08-10 04:00:00 64,000 ------w c:\windows\system32\cleanmgr.exe
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\system32\cleanmgr.exe
    - 2004-08-10 04:00:00 77,824 ------w c:\windows\system32\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\system32\cliconfg.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\system32\cliconfg.exe
    - 2004-08-10 04:00:00 102,912 ------w c:\windows\system32\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\system32\clipbrd.exe
    - 2004-08-10 04:00:00 33,280 ------w c:\windows\system32\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\system32\clipsrv.exe
    - 2004-08-10 04:00:00 57,856 ------w c:\windows\system32\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\system32\clusapi.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\system32\cmcfg32.dll
    - 2004-08-10 04:00:00 388,608 ----a-w c:\windows\system32\cmd.exe
    + 2008-04-14 00:12:14 389,120 ----a-w c:\windows\system32\cmd.exe
    - 2004-08-10 04:00:00 343,040 ------w c:\windows\system32\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\system32\cmdial32.dll
    - 2004-08-10 04:00:00 47,104 ------w c:\windows\system32\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\system32\cmdl32.exe
    + 2008-10-16 23:50:14 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
    - 2004-08-10 04:00:00 39,936 ------w c:\windows\system32\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\system32\cmmon32.exe
    - 2004-08-10 04:00:00 185,344 ------w c:\windows\system32\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\system32\cmprops.dll
    - 2004-08-10 04:00:00 13,824 ------w c:\windows\system32\cmsetACL.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\system32\cmsetacl.dll
    - 2004-08-10 04:00:00 63,488 ------w c:\windows\system32\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\system32\cmstp.exe
    - 2004-08-10 04:00:00 39,936 ------w c:\windows\system32\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\system32\cmutil.dll
    - 2004-08-10 11:00:00 47,104 ------w c:\windows\system32\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    - 2005-07-26 11:39:43 60,416 ----a-w c:\windows\system32\colbact.dll
    + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\system32\colbact.dll
    - 2005-07-26 11:39:44 195,072 ------w c:\windows\system32\Com\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ------w c:\windows\system32\Com\comadmin.dll
    - 2004-08-10 04:00:00 9,728 ------w c:\windows\system32\Com\comrepl.exe
    + 2008-04-14 00:12:15 9,728 ------w c:\windows\system32\Com\comrepl.exe
    - 2004-08-10 04:00:00 5,120 ------w c:\windows\system32\Com\comrereg.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\system32\Com\comrereg.exe
    - 2004-08-10 04:00:00 25,600 ------w c:\windows\system32\comaddin.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\windows\system32\comaddin.dll
    - 2006-08-25 15:45:58 617,472 ------w c:\windows\system32\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ------w c:\windows\system32\comctl32.dll
    - 2004-08-10 04:00:00 276,992 ------w c:\windows\system32\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ------w c:\windows\system32\comdlg32.dll
    - 2004-08-10 04:00:00 252,928 ------w c:\windows\system32\compatUI.dll
    + 2008-04-14 00:11:51 252,928 ------w c:\windows\system32\compatui.dll
    - 2004-08-10 04:00:00 229,376 ------w c:\windows\system32\compstui.dll
    + 2008-04-14 00:11:51 229,376 ------w c:\windows\system32\compstui.dll
    - 2005-07-26 11:39:44 97,792 ------w c:\windows\system32\comrepl.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\windows\system32\comrepl.dll
    - 2004-08-10 04:00:00 792,064 ------w c:\windows\system32\comres.dll
    + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\system32\comres.dll
    + 2008-04-13 18:43:32 9,728 ------w c:\windows\system32\comsdupd.exe
    - 2004-08-10 04:00:00 147,456 ------w c:\windows\system32\comsnap.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\windows\system32\comsnap.dll
    - 2005-07-26 11:39:44 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    - 2005-07-26 11:39:45 540,160 ------w c:\windows\system32\comuid.dll
    + 2008-04-14 00:11:51 539,648 ------w c:\windows\system32\comuid.dll
    - 2006-08-19 04:29:07 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-03-10 01:50:53 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2006-08-19 04:29:07 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-03-10 01:50:53 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2006-08-19 04:29:07 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-03-10 01:50:53 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2004-08-10 04:00:00 345,600 ------w c:\windows\system32\confmsp.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\windows\system32\confmsp.dll
    - 2004-08-10 04:00:00 27,648 ------w c:\windows\system32\conime.exe
    + 2008-04-14 00:12:15 27,648 ----a-w c:\windows\system32\conime.exe
    - 2007-01-09 00:01:14 17,408 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 35,328 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\system32\credssp.dll
    - 2004-08-10 04:00:00 163,840 ------w c:\windows\system32\credui.dll
    + 2008-04-14 00:11:51 163,840 ----a-w c:\windows\system32\credui.dll
    - 2004-08-10 04:00:00 597,504 ------w c:\windows\system32\crypt32.dll
    + 2008-04-14 00:11:51 599,040 ----a-w c:\windows\system32\crypt32.dll
    - 2004-08-10 04:00:00 74,752 ------w c:\windows\system32\cryptdlg.dll
    + 2008-04-14 00:11:51 74,752 ------w c:\windows\system32\cryptdlg.dll
    - 2004-08-10 04:00:00 33,280 ------w c:\windows\system32\cryptdll.dll
    + 2008-04-14 00:11:51 33,280 ----a-w c:\windows\system32\cryptdll.dll
    - 2004-08-10 04:00:00 53,760 ------w c:\windows\system32\cryptext.dll
    + 2008-04-14 00:11:51 53,760 ------w c:\windows\system32\cryptext.dll
    - 2004-08-10 04:00:00 63,488 ------w c:\windows\system32\cryptnet.dll
    + 2008-04-14 00:11:51 64,512 ------w c:\windows\system32\cryptnet.dll
    - 2004-08-10 04:00:00 60,416 ------w c:\windows\system32\cryptsvc.dll
    + 2008-04-14 00:11:51 62,464 ----a-w c:\windows\system32\cryptsvc.dll
    - 2004-08-10 04:00:00 512,512 ------w c:\windows\system32\cryptui.dll
    + 2008-04-14 00:11:51 512,512 ----a-w c:\windows\system32\cryptui.dll
    - 2004-08-10 04:00:00 101,888 ------w c:\windows\system32\cscdll.dll
    + 2008-04-14 00:11:51 101,888 ----a-w c:\windows\system32\cscdll.dll
    - 2004-08-10 04:00:00 98,304 ------w c:\windows\system32\cscript.exe
    + 2008-05-07 09:07:23 135,168 ------w c:\windows\system32\cscript.exe
    - 2004-08-10 04:00:00 326,656 ------w c:\windows\system32\cscui.dll
    + 2008-04-14 00:11:51 326,656 ----a-w c:\windows\system32\cscui.dll
    - 2004-08-10 04:00:00 32,768 ------w c:\windows\system32\csrsrv.dll
    + 2008-04-14 00:11:51 32,256 ------w c:\windows\system32\csrsrv.dll
    - 2004-08-10 04:00:00 6,144 ------w c:\windows\system32\csrss.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\system32\csrss.exe
    - 2004-08-10 04:00:00 15,360 ------w c:\windows\system32\ctfmon.exe
    + 2008-04-14 00:12:16 15,360 ----a-w c:\windows\system32\ctfmon.exe
    - 2004-08-10 04:00:00 1,179,648 ------w c:\windows\system32\d3d8.dll
    + 2008-04-14 00:11:51 1,179,648 ------w c:\windows\system32\d3d8.dll
    - 2004-08-10 04:00:00 8,192 ------w c:\windows\system32\d3d8thk.dll
    + 2008-04-14 00:11:51 8,192 ------w c:\windows\system32\d3d8thk.dll
    - 2004-08-10 04:00:00 1,689,088 ------w c:\windows\system32\d3d9.dll
    + 2008-04-14 00:11:51 1,689,088 ------w c:\windows\system32\d3d9.dll
    - 2004-08-10 04:00:00 825,344 ------w c:\windows\system32\d3dim700.dll
    + 2008-04-14 00:11:51 824,320 ------w c:\windows\system32\d3dim700.dll
    + 2005-02-05 23:45:26 2,222,800 ----a-w c:\windows\system32\d3dx9_24.dll
    + 2005-03-18 21:19:58 2,337,488 ----a-w c:\windows\system32\d3dx9_25.dll
    + 2005-07-22 23:59:04 2,319,568 ----a-w c:\windows\system32\d3dx9_27.dll
    + 2005-12-05 22:09:18 2,323,664 ----a-w c:\windows\system32\d3dx9_28.dll
    + 2006-02-03 12:43:16 2,332,368 ----a-w c:\windows\system32\d3dx9_29.dll
    + 2006-03-31 16:40:58 2,388,176 ----a-w c:\windows\system32\d3dx9_30.dll
    - 2006-09-14 08:31:26 1,054,208 ------w c:\windows\system32\danim.dll
    + 2008-04-14 00:11:51 1,054,208 ------w c:\windows\system32\danim.dll
    - 2004-08-10 04:00:00 54,272 ------w c:\windows\system32\dataclen.dll
    + 2008-04-14 00:11:51 54,272 ------w c:\windows\system32\dataclen.dll
    - 2004-08-10 04:00:00 152,064 ------w c:\windows\system32\datime.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\windows\system32\datime.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\davclnt.dll
    + 2008-04-14 00:11:51 25,088 ----a-w c:\windows\system32\davclnt.dll
    - 2004-08-10 11:00:00 640,000 ------w c:\windows\system32\dbghelp.dll
    + 2008-04-14 00:11:51 640,000 ----a-w c:\windows\system32\dbghelp.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\dbmsrpcn.dll
    + 2008-04-14 00:11:51 24,576 ------w c:\windows\system32\dbmsrpcn.dll
    - 2004-08-10 04:00:00 110,592 ------w c:\windows\system32\dbnetlib.dll
    + 2008-04-14 00:11:51 110,592 ------w c:\windows\system32\dbnetlib.dll
    - 2004-08-10 04:00:00 28,672 ------w c:\windows\system32\dbnmpntw.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\system32\dbnmpntw.dll
    - 2004-08-10 04:00:00 1,788 ------w c:\windows\system32\Dcache.bin
    + 2008-04-14 00:25:26 1,804 ------w c:\windows\system32\dcache.bin
    - 2004-08-10 04:00:00 8,704 ------w c:\windows\system32\dciman32.dll
    + 2008-04-14 00:11:51 8,704 ------w c:\windows\system32\dciman32.dll
    - 2004-08-10 04:00:00 5,120 ------w c:\windows\system32\dcomcnfg.exe
    + 2008-04-14 00:12:16 6,144 ------w c:\windows\system32\dcomcnfg.exe
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\ddeshare.exe
    + 2008-04-14 00:12:16 30,208 ------w c:\windows\system32\ddeshare.exe
    - 2004-08-10 04:00:00 266,240 ------w c:\windows\system32\ddraw.dll
    + 2008-04-14 00:11:51 279,552 ------w c:\windows\system32\ddraw.dll
    - 2004-08-10 04:00:00 27,136 ------w c:\windows\system32\ddrawex.dll
    + 2008-04-14 00:11:51 27,136 ------w c:\windows\system32\ddrawex.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\defrag.exe
    + 2008-04-14 00:12:16 25,088 ------w c:\windows\system32\defrag.exe
    + 2002-03-05 10:10:26 32,768 ----a-r c:\windows\system32\delentry.exe
    + 2003-04-16 13:38:30 36,864 ----a-r c:\windows\system32\deluidrv.exe
    + 2009-02-26 03:35:25 410,984 ----a-w c:\windows\system32\deploytk.dll
    - 2004-08-10 04:00:00 59,904 ------w c:\windows\system32\devenum.dll
    + 2008-04-14 00:11:51 59,904 ----a-w c:\windows\system32\devenum.dll
    - 2004-08-10 04:00:00 282,624 ------w c:\windows\system32\devmgr.dll
    + 2008-04-14 00:11:51 282,624 ------w c:\windows\system32\devmgr.dll
    - 2004-08-10 04:00:00 82,432 ------w c:\windows\system32\dfrgfat.exe
    + 2008-04-14 00:12:16 82,944 ------w c:\windows\system32\dfrgfat.exe
    - 2004-08-10 04:00:00 104,960 ------w c:\windows\system32\dfrgntfs.exe
    + 2008-04-14 00:12:16 105,472 ------w c:\windows\system32\dfrgntfs.exe
    - 2004-08-10 04:00:00 38,912 ------w c:\windows\system32\dfrgsnap.dll
    + 2008-04-14 00:11:51 39,424 ------w c:\windows\system32\dfrgsnap.dll
    - 2004-08-10 04:00:00 123,904 ------w c:\windows\system32\dfrgui.dll
    + 2008-04-14 00:11:51 124,416 ------w c:\windows\system32\dfrgui.dll
    + 2008-07-25 16:16:46 96,760 ----a-w c:\windows\system32\dfshim.dll
    - 2004-08-10 04:00:00 28,672 ------w c:\windows\system32\dfsshlex.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\system32\dfsshlex.dll
    - 2004-08-10 04:00:00 111,104 ------w c:\windows\system32\dgnet.dll
    + 2008-04-14 00:11:51 111,104 ------w c:\windows\system32\dgnet.dll
    - 2006-05-19 12:59:41 111,616 ------w c:\windows\system32\dhcpcsvc.dll
    + 2008-04-14 00:11:51 126,976 ------w c:\windows\system32\dhcpcsvc.dll
    - 2004-08-10 04:00:00 370,176 ------w c:\windows\system32\dhcpmon.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\windows\system32\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\system32\dhcpqec.dll
    - 2004-08-10 04:00:00 85,504 ------w c:\windows\system32\diantz.exe
    + 2008-04-14 00:12:17 87,040 ------w c:\windows\system32\diantz.exe
    - 2004-08-10 04:00:00 68,608 ------w c:\windows\system32\digest.dll
    + 2008-04-14 00:11:52 68,608 ------w c:\windows\system32\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\system32\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\system32\dimsroam.dll
    - 2004-08-10 04:00:00 159,232 ------w c:\windows\system32\dinput.dll
    + 2008-04-14 00:11:52 158,720 ------w c:\windows\system32\dinput.dll
    - 2004-08-10 04:00:00 181,760 ------w c:\windows\system32\dinput8.dll
    + 2008-04-14 00:11:52 181,760 ------w c:\windows\system32\dinput8.dll
    - 2004-08-10 04:00:00 1,501,696 ------w c:\windows\system32\diskcopy.dll
    + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\system32\diskcopy.dll
    - 2004-08-10 04:00:00 163,840 ------w c:\windows\system32\diskpart.exe
    + 2008-04-14 00:12:17 163,840 ------w c:\windows\system32\diskpart.exe
    - 2004-08-10 04:00:00 45,083 ------w c:\windows\system32\dispex.dll
    + 2008-04-14 00:11:52 32,768 ------w c:\windows\system32\dispex.dll
    - 2008-04-23 04:16:28 124,928 ----a-w c:\windows\system32\dllcache\advpack.dll
    + 2008-12-20 23:15:11 124,928 ----a-w c:\windows\system32\dllcache\advpack.dll
    - 2008-06-20 10:44:38 138,368 ----a-w c:\windows\system32\dllcache\afd.sys
    + 2008-08-14 10:04:36 138,496 ------w c:\windows\system32\dllcache\afd.sys
    - 2008-06-13 13:10:50 272,128 ------w c:\windows\system32\dllcache\bthport.sys
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\system32\dllcache\bthport.sys
    - 2007-07-30 23:19:20 92,504 ----a-w c:\windows\system32\dllcache\cdm.dll
    + 2008-10-16 19:09:44 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    - 2004-08-10 04:00:00 98,304 ------w c:\windows\system32\dllcache\cscript.exe
    + 2008-05-07 09:07:23 135,168 ------w c:\windows\system32\dllcache\cscript.exe
    - 2008-06-20 17:41:10 148,992 ----a-w c:\windows\system32\dllcache\dnsapi.dll
    + 2008-06-20 17:46:57 147,968 ------w c:\windows\system32\dllcache\dnsapi.dll
    - 2004-08-04 13:08:00 60,288 ----a-w c:\windows\system32\dllcache\drmk.sys
    + 2008-04-13 19:45:14 60,160 ----a-w c:\windows\system32\dllcache\drmk.sys
    - 2006-08-22 09:05:26 498,742 ------w c:\windows\system32\dllcache\dxmasf.dll
    + 2008-04-14 00:11:52 498,742 ------w c:\windows\system32\dllcache\dxmasf.dll
    - 2008-04-23 04:16:28 347,136 ----a-w c:\windows\system32\dllcache\dxtmsft.dll
    + 2008-12-20 23:15:12 347,136 ----a-w c:\windows\system32\dllcache\dxtmsft.dll
    - 2008-04-23 04:16:28 214,528 ----a-w c:\windows\system32\dllcache\dxtrans.dll
    + 2008-12-20 23:15:13 214,528 ----a-w c:\windows\system32\dllcache\dxtrans.dll
    - 2005-06-13 19:58:04 162,816 ----a-w c:\windows\system32\dllcache\e100b325.sys
    + 2007-11-16 23:55:00 165,496 ----a-w c:\windows\system32\dllcache\e100b325.sys
    - 2005-07-26 11:39:45 243,200 ------w c:\windows\system32\dllcache\es.dll
    + 2008-07-07 20:26:58 253,952 ------w c:\windows\system32\dllcache\es.dll
    - 2008-04-23 04:16:28 133,120 ----a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-12-20 23:15:13 133,120 ----a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-07-06 12:06:10 89,088 ------w c:\windows\system32\dllcache\filterpipelineprintproc.dll
    - 2008-02-20 06:51:05 282,624 ------w c:\windows\system32\dllcache\gdi32.dll
    + 2008-10-23 12:36:14 286,720 ------w c:\windows\system32\dllcache\gdi32.dll
    - 2008-04-23 04:16:28 63,488 ------w c:\windows\system32\dllcache\icardie.dll
    + 2008-12-20 23:15:13 63,488 ------w c:\windows\system32\dllcache\icardie.dll
    - 2008-04-22 07:39:58 70,656 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    + 2008-12-19 09:10:15 70,656 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    - 2008-04-23 04:16:28 153,088 ----a-w c:\windows\system32\dllcache\ieakeng.dll
    + 2008-12-20 23:15:14 153,088 ----a-w c:\windows\system32\dllcache\ieakeng.dll
    - 2008-04-23 04:16:28 230,400 ----a-w c:\windows\system32\dllcache\ieaksie.dll
    + 2008-12-20 23:15:14 230,400 ----a-w c:\windows\system32\dllcache\ieaksie.dll
    - 2008-04-20 05:07:51 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    + 2008-12-19 05:23:56 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    - 2008-04-23 04:16:28 383,488 ------w c:\windows\system32\dllcache\ieapfltr.dll
    + 2008-12-20 23:15:15 383,488 ------w c:\windows\system32\dllcache\ieapfltr.dll
    - 2008-04-23 04:16:28 384,512 ----a-w c:\windows\system32\dllcache\iedkcs32.dll
    + 2008-12-20 23:15:16 384,512 ----a-w c:\windows\system32\dllcache\iedkcs32.dll
    - 2008-04-23 04:16:28 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
    + 2008-12-20 23:15:21 6,066,688 ------w c:\windows\system32\dllcache\ieframe.dll
    - 2008-04-23 04:16:28 44,544 ----a-w c:\windows\system32\dllcache\iernonce.dll
    + 2008-12-20 23:15:21 44,544 ----a-w c:\windows\system32\dllcache\iernonce.dll
    - 2008-04-23 04:16:28 267,776 ------w c:\windows\system32\dllcache\iertutil.dll
    + 2008-12-20 23:15:22 267,776 ------w c:\windows\system32\dllcache\iertutil.dll
    - 2008-04-22 07:39:58 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
    + 2008-12-19 09:10:15 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
    - 2008-04-22 07:40:18 625,664 ----a-w c:\windows\system32\dllcache\iexplore.exe
    + 2008-12-19 05:25:25 634,024 ----a-w c:\windows\system32\dllcache\iexplore.exe
    - 2007-08-21 06:15:44 683,520 ------w c:\windows\system32\dllcache\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ------w c:\windows\system32\dllcache\inetcomm.dll
    - 2006-10-17 17:00:00 491,520 ----a-w c:\windows\system32\dllcache\jscript.dll
    + 2008-05-09 10:53:39 512,000 ------w c:\windows\system32\dllcache\jscript.dll
    - 2008-04-23 04:16:28 27,648 ----a-w c:\windows\system32\dllcache\jsproxy.dll
    + 2008-12-20 23:15:23 27,648 ----a-w c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-04 13:15:22 140,928 ----a-w c:\windows\system32\dllcache\ks.sys
    + 2008-04-13 20:16:36 141,056 ----a-w c:\windows\system32\dllcache\ks.sys
    - 2004-08-04 14:56:44 4,096 ----a-w c:\windows\system32\dllcache\ksuser.dll
    + 2008-04-14 01:11:56 4,096 ----a-w c:\windows\system32\dllcache\ksuser.dll
    - 2006-10-19 01:03:58 100,864 ----a-w c:\windows\system32\dllcache\logagent.exe
    + 2008-06-18 06:09:22 100,864 ----a-w c:\windows\system32\dllcache\logagent.exe
    - 2004-08-10 04:00:00 123,392 ------w c:\windows\system32\dllcache\mplay32.exe
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\system32\dllcache\mplay32.exe
    - 2004-08-10 04:00:00 4,639 ------w c:\windows\system32\dllcache\mplayer2.exe
    + 2008-04-14 00:12:27 4,639 ------w c:\windows\system32\dllcache\mplayer2.exe
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\system32\dllcache\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys
    - 2004-08-10 04:00:00 331,776 ------w c:\windows\system32\dllcache\msadce.dll
    + 2008-05-01 14:33:02 331,776 ------w c:\windows\system32\dllcache\msadce.dll
    - 2005-06-29 08:46:00 74,240 ------w c:\windows\system32\dllcache\mscms.dll
    + 2008-06-24 16:43:16 74,240 ------w c:\windows\system32\dllcache\mscms.dll
    - 2004-08-10 04:00:00 4,126 ------w c:\windows\system32\dllcache\msdxmlc.dll
    + 2008-04-14 00:10:08 4,126 ------w c:\windows\system32\dllcache\msdxmlc.dll
    - 2008-04-23 04:16:28 459,264 ------w c:\windows\system32\dllcache\msfeeds.dll
    + 2008-12-20 23:15:23 459,264 ------w c:\windows\system32\dllcache\msfeeds.dll
    - 2008-04-23 04:16:28 52,224 ------w c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-12-20 23:15:24 52,224 ------w c:\windows\system32\dllcache\msfeedsbs.dll
    - 2008-04-24 02:16:30 3,591,680 ----a-w c:\windows\system32\dllcache\mshtml.dll
    + 2009-01-17 02:35:14 3,594,752 ----a-w c:\windows\system32\dllcache\mshtml.dll
    - 2008-04-23 04:16:28 478,208 ----a-w c:\windows\system32\dllcache\mshtmled.dll
    + 2008-12-20 23:15:30 477,696 ----a-w c:\windows\system32\dllcache\mshtmled.dll
    - 2008-04-23 04:16:28 193,024 ----a-w c:\windows\system32\dllcache\msrating.dll
    + 2008-12-20 23:15:31 193,024 ----a-w c:\windows\system32\dllcache\msrating.dll
    - 2008-04-23 04:16:28 671,232 ----a-w c:\windows\system32\dllcache\mstime.dll
    + 2008-12-20 23:15:32 671,232 ----a-w c:\windows\system32\dllcache\mstime.dll
    - 2008-06-20 17:41:10 245,248 ----a-w c:\windows\system32\dllcache\mswsock.dll
    + 2008-06-20 17:46:57 245,248 ------w c:\windows\system32\dllcache\mswsock.dll
    - 2007-06-26 06:08:16 1,104,896 ------w c:\windows\system32\dllcache\msxml3.dll
    + 2008-09-04 17:15:04 1,106,944 ------w c:\windows\system32\dllcache\msxml3.dll
    + 2008-09-10 01:14:56 1,307,648 ------w c:\windows\system32\dllcache\msxml6.dll
    + 2008-04-13 17:27:18 79,872 ------w c:\windows\system32\dllcache\msxml6r.dll
    - 2006-08-17 12:28:27 332,288 ------w c:\windows\system32\dllcache\netapi32.dll
    + 2008-10-15 16:34:24 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
    - 2004-08-10 04:00:00 226,816 ------w c:\windows\system32\dllcache\npdrmv2.dll
    + 2008-04-14 00:12:56 226,816 ------w c:\windows\system32\dllcache\npdrmv2.dll
    - 2004-08-10 04:00:00 364,544 ------w c:\windows\system32\dllcache\npdsplay.dll
    + 2008-04-14 00:12:02 364,544 ------w c:\windows\system32\dllcache\npdsplay.dll
    - 2004-08-10 04:00:00 10,240 ------w c:\windows\system32\dllcache\npwmsdrm.dll
    + 2008-04-14 00:12:02 10,240 ------w c:\windows\system32\dllcache\npwmsdrm.dll
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\system32\dllcache\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\system32\dllcache\ntoskrnl.exe
    - 2008-04-23 04:16:28 102,912 ----a-w c:\windows\system32\dllcache\occache.dll
    + 2008-12-20 23:15:38 102,912 ----a-w c:\windows\system32\dllcache\occache.dll
    - 2008-04-23 04:16:28 44,544 ----a-w c:\windows\system32\dllcache\pngfilt.dll
    + 2008-12-20 23:15:38 44,544 ----a-w c:\windows\system32\dllcache\pngfilt.dll
    - 2004-03-17 00:58:20 136,960 ----a-w c:\windows\system32\dllcache\portcls.sys
    + 2008-04-13 20:19:42 146,048 ----a-w c:\windows\system32\dllcache\portcls.sys
    + 2008-07-06 10:50:03 597,504 ------w c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    - 2008-05-07 04:55:40 1,288,192 ------w c:\windows\system32\dllcache\quartz.dll
    + 2008-05-07 05:12:40 1,288,192 ------w c:\windows\system32\dllcache\quartz.dll
    - 2008-05-08 12:28:49 202,752 ------w c:\windows\system32\dllcache\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ------w c:\windows\system32\dllcache\rmcast.sys
    - 2004-08-10 04:00:00 159,744 ------w c:\windows\system32\dllcache\scrobj.dll
    + 2008-05-09 10:53:39 180,224 ------w c:\windows\system32\dllcache\scrobj.dll
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\system32\dllcache\scrrun.dll
    + 2008-05-09 10:53:40 172,032 ------w c:\windows\system32\dllcache\scrrun.dll
    - 2007-10-26 03:34:01 8,460,288 ----a-w c:\windows\system32\dllcache\shell32.dll
    + 2008-06-17 19:02:19 8,461,312 ------w c:\windows\system32\dllcache\shell32.dll
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\system32\dllcache\shmedia.dll
    + 2008-04-14 00:12:05 152,064 ------w c:\windows\system32\dllcache\shmedia.dll
    - 2006-08-14 10:34:41 332,928 ------w c:\windows\system32\dllcache\srv.sys
    + 2008-12-11 10:57:09 333,952 ------w c:\windows\system32\dllcache\srv.sys
    - 2004-08-04 13:08:04 48,640 ----a-w c:\windows\system32\dllcache\stream.sys
    + 2008-04-13 19:45:16 49,408 ----a-w c:\windows\system32\dllcache\stream.sys
    - 2006-08-21 14:52:08 246,814 ------w c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-03 10:02:42 247,326 ------w c:\windows\system32\dllcache\strmdll.dll
    - 2008-06-20 10:45:13 360,320 ----a-w c:\windows\system32\dllcache\tcpip.sys
    + 2008-06-20 11:51:12 361,600 ------w c:\windows\system32\dllcache\tcpip.sys
    - 2008-06-20 09:52:06 225,920 ----a-w c:\windows\system32\dllcache\tcpip6.sys
    + 2008-06-20 11:08:27 225,856 ------w c:\windows\system32\dllcache\tcpip6.sys
    - 2008-04-23 04:16:28 105,984 ----a-w c:\windows\system32\dllcache\url.dll
    + 2008-12-20 23:15:39 105,984 ----a-w c:\windows\system32\dllcache\url.dll
    - 2008-04-23 04:16:29 1,159,680 ----a-w c:\windows\system32\dllcache\urlmon.dll
    + 2008-12-20 23:15:40 1,160,192 ----a-w c:\windows\system32\dllcache\urlmon.dll
    - 2006-11-08 02:03:36 413,696 ----a-w c:\windows\system32\dllcache\vbscript.dll
    + 2008-05-09 10:53:40 430,080 ------w c:\windows\system32\dllcache\vbscript.dll
    - 2008-04-23 04:16:29 233,472 ----a-w c:\windows\system32\dllcache\webcheck.dll
    + 2008-12-20 23:15:40 233,472 ----a-w c:\windows\system32\dllcache\webcheck.dll
    - 2008-03-19 09:47:00 1,845,248 ------w c:\windows\system32\dllcache\win32k.sys
    + 2008-09-15 12:12:56 1,846,400 ------w c:\windows\system32\dllcache\win32k.sys
    - 2008-04-23 04:16:29 826,368 ----a-w c:\windows\system32\dllcache\wininet.dll
    + 2008-12-20 23:15:41 826,368 ----a-w c:\windows\system32\dllcache\wininet.dll
    - 2006-10-19 02:47:20 937,984 ----a-w c:\windows\system32\dllcache\WMNetMgr.dll
    + 2008-06-18 10:03:08 938,496 ----a-w c:\windows\system32\dllcache\WMNetmgr.dll
    - 2007-06-12 04:51:12 10,834,944 ------w c:\windows\system32\dllcache\wmp.dll
    + 2008-11-11 23:34:42 10,838,016 ------w c:\windows\system32\dllcache\wmp.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\dllcache\wmpcd.dll
    + 2008-04-14 00:12:09 20,480 ------w c:\windows\system32\dllcache\wmpcd.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\dllcache\wmpcore.dll
    + 2008-04-14 00:12:09 20,480 ------w c:\windows\system32\dllcache\wmpcore.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\dllcache\wmpui.dll
    + 2008-04-14 00:12:09 20,480 ------w c:\windows\system32\dllcache\wmpui.dll
    - 2004-08-10 04:00:00 115,200 ------w c:\windows\system32\dllcache\wmsdmoe.dll
    + 2008-04-14 00:12:09 115,200 ------w c:\windows\system32\dllcache\wmsdmoe.dll
    - 2004-08-10 04:00:00 303,616 ------w c:\windows\system32\dllcache\wmstream.dll
    + 2008-04-14 00:12:10 303,616 ------w c:\windows\system32\dllcache\wmstream.dll
    - 2006-10-19 02:47:22 2,450,944 ----a-w c:\windows\system32\dllcache\wmvcore.dll
    + 2008-06-18 10:03:14 2,458,112 ----a-w c:\windows\system32\dllcache\WMVCore.dll
    - 2004-08-10 04:00:00 114,688 ------w c:\windows\system32\dllcache\wscript.exe
    + 2008-05-08 11:24:44 155,648 ------w c:\windows\system32\dllcache\wscript.exe
    - 2004-08-10 04:00:00 65,536 ------w c:\windows\system32\dllcache\wshext.dll
    + 2008-05-09 10:53:40 90,112 ------w c:\windows\system32\dllcache\wshext.dll
    - 2007-07-30 23:19:36 549,720 ----a-w c:\windows\system32\dllcache\wuapi.dll
    + 2008-10-16 19:12:20 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    - 2007-07-30 23:19:16 53,080 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    + 2008-10-16 19:09:44 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    - 2007-07-30 23:19:42 1,712,984 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    + 2008-10-16 19:13:40 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    - 2007-07-30 23:19:32 325,976 ----a-w c:\windows\system32\dllcache\wucltui.dll
    + 2008-10-16 19:12:22 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    - 2007-07-30 23:18:40 33,624 ----a-w c:\windows\system32\dllcache\wups.dll
    + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    - 2007-07-30 23:19:28 203,096 ----a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-10-16 19:13:40 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-07-06 12:06:10 575,488 ------w c:\windows\system32\dllcache\xpsshhdr.dll
    + 2008-07-06 12:06:10 1,676,288 ------w c:\windows\system32\dllcache\xpssvcs.dll
    - 2004-08-10 04:00:00 5,120 ------w c:\windows\system32\dllhost.exe
    + 2008-04-14 00:12:17 5,120 ----a-w c:\windows\system32\dllhost.exe
    - 2004-08-10 04:00:00 224,768 ------w c:\windows\system32\dmadmin.exe
    + 2008-04-14 00:12:17 224,768 ------w c:\windows\system32\dmadmin.exe
    - 2004-08-10 04:00:00 28,672 ------w c:\windows\system32\dmband.dll
    + 2008-04-14 00:11:52 28,672 ------w c:\windows\system32\dmband.dll
    - 2004-08-10 04:00:00 61,440 ------w c:\windows\system32\dmcompos.dll
    + 2008-04-14 00:11:52 61,440 ------w c:\windows\system32\dmcompos.dll
    - 2004-08-10 04:00:00 273,920 ------w c:\windows\system32\dmdlgs.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\windows\system32\dmdlgs.dll
    - 2004-08-10 04:00:00 200,704 ------w c:\windows\system32\dmdskmgr.dll
    + 2008-04-14 00:11:52 200,704 ------w c:\windows\system32\dmdskmgr.dll
    - 2004-08-10 04:00:00 181,248 ------w c:\windows\system32\dmime.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\system32\dmime.dll
    - 2004-08-10 04:00:00 35,840 ------w c:\windows\system32\dmloader.dll
    + 2008-04-14 00:11:52 35,840 ------w c:\windows\system32\dmloader.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\dmremote.exe
    + 2008-04-14 00:12:17 15,872 ------w c:\windows\system32\dmremote.exe
    - 2004-08-10 04:00:00 82,432 ------w c:\windows\system32\dmscript.dll
    + 2008-04-14 00:11:52 82,432 ------w c:\windows\system32\dmscript.dll
    - 2004-08-10 04:00:00 23,552 ------w c:\windows\system32\dmserver.dll
    + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\system32\dmserver.dll
    - 2004-08-10 04:00:00 105,984 ------w c:\windows\system32\dmstyle.dll
    + 2008-04-14 00:11:52 105,984 ------w c:\windows\system32\dmstyle.dll
    - 2004-08-10 04:00:00 103,424 ------w c:\windows\system32\dmsynth.dll
    + 2008-04-14 00:11:52 103,424 ------w c:\windows\system32\dmsynth.dll
    - 2004-08-10 04:00:00 104,448 ------w c:\windows\system32\dmusic.dll
    + 2008-04-14 00:11:52 104,448 ------w c:\windows\system32\dmusic.dll
    - 2004-08-10 11:00:00 52,224 ------w c:\windows\system32\dmutil.dll
    + 2008-04-14 00:11:52 52,224 ------w c:\windows\system32\dmutil.dll
    - 2008-06-20 17:41:10 148,992 ----a-w c:\windows\system32\dnsapi.dll
    + 2008-06-20 17:46:57 147,968 ----a-w c:\windows\system32\dnsapi.dll
    - 2008-02-20 05:32:43 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
    + 2008-04-14 00:11:52 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
    - 2004-08-10 04:00:00 48,128 ------w c:\windows\system32\docprop2.dll
    + 2008-04-14 00:11:52 48,128 ------w c:\windows\system32\docprop2.dll
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\system32\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\system32\dot3cfg.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\system32\dot3dlg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\system32\dot3gpclnt.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\system32\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\system32\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\system32\dot3ui.dll
    - 2004-08-10 04:00:00 96,768 ------w c:\windows\system32\dpcdll.dll
    + 2008-04-14 00:11:52 102,912 ------w c:\windows\system32\dpcdll.dll
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\dplaysvr.exe
    + 2008-04-14 00:12:17 29,696 ------w c:\windows\system32\dplaysvr.exe
    - 2004-08-10 04:00:00 229,888 ------w c:\windows\system32\dplayx.dll
    + 2008-04-14 00:11:52 229,888 ------w c:\windows\system32\dplayx.dll
    - 2004-08-10 04:00:00 23,552 ------w c:\windows\system32\dpmodemx.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\system32\dpmodemx.dll
    - 2004-08-10 04:00:00 3,584 ------w c:\windows\system32\dpnaddr.dll
    + 2008-04-14 00:09:19 3,072 ------w c:\windows\system32\dpnaddr.dll
    - 2004-08-10 04:00:00 375,296 ------w c:\windows\system32\dpnet.dll
    + 2008-04-14 00:11:52 375,296 ------w c:\windows\system32\dpnet.dll
    - 2004-08-10 04:00:00 35,328 ------w c:\windows\system32\dpnhpast.dll
    + 2008-04-14 00:11:52 35,328 ------w c:\windows\system32\dpnhpast.dll
    - 2004-08-10 04:00:00 60,928 ------w c:\windows\system32\dpnhupnp.dll
    + 2008-04-14 00:11:52 60,928 ------w c:\windows\system32\dpnhupnp.dll
    - 2004-08-10 04:00:00 3,584 ------w c:\windows\system32\dpnlobby.dll
    + 2008-04-14 00:09:20 3,072 ------w c:\windows\system32\dpnlobby.dll
    - 2004-08-10 04:00:00 18,432 ------w c:\windows\system32\dpnsvr.exe
    + 2008-04-14 00:12:17 17,920 ------w c:\windows\system32\dpnsvr.exe
    - 2004-08-10 04:00:00 21,504 ------w c:\windows\system32\dpvacm.dll
    + 2008-04-14 00:11:52 21,504 ------w c:\windows\system32\dpvacm.dll
    - 2004-08-10 04:00:00 212,480 ------w c:\windows\system32\dpvoice.dll
    + 2008-04-14 00:11:52 212,480 ------w c:\windows\system32\dpvoice.dll
    - 2004-08-10 04:00:00 83,456 ------w c:\windows\system32\dpvsetup.exe
    + 2008-04-14 00:12:18 83,456 ------w c:\windows\system32\dpvsetup.exe
    - 2004-08-10 04:00:00 116,736 ------w c:\windows\system32\dpvvox.dll
    + 2008-04-14 00:11:52 116,736 ------w c:\windows\system32\dpvvox.dll
    - 2004-08-10 04:00:00 57,344 ------w c:\windows\system32\dpwsockx.dll
    + 2008-04-14 00:11:52 57,344 ------w c:\windows\system32\dpwsockx.dll
    - 2004-08-10 11:00:00 58,368 ------w c:\windows\system32\driverquery.exe
    + 2008-04-14 00:12:18 62,976 ------w c:\windows\system32\driverquery.exe
    - 2004-08-10 04:00:00 53,248 ------w c:\windows\system32\drivers\1394bus.sys
    + 2008-04-13 18:46:18 53,376 ------w c:\windows\system32\drivers\1394bus.sys
    - 2004-08-10 04:00:00 187,776 ------w c:\windows\system32\drivers\acpi.sys
    + 2008-04-13 18:36:35 187,776 ------w c:\windows\system32\drivers\acpi.sys
    + 2008-04-14 00:11:48 4,255 ------w c:\windows\system32\drivers\adv01nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\windows\system32\drivers\adv02nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\windows\system32\drivers\adv05nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\windows\system32\drivers\adv07nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\windows\system32\drivers\adv08nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\windows\system32\drivers\adv09nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\windows\system32\drivers\adv11nt5.dll
    - 2006-02-15 00:22:26 142,464 ----a-w c:\windows\system32\drivers\aec.sys
    + 2008-04-13 16:39:23 142,592 ----a-w c:\windows\system32\drivers\aec.sys
    - 2008-06-20 10:44:38 138,368 ------w c:\windows\system32\drivers\afd.sys
    + 2008-08-14 10:04:36 138,496 ------w c:\windows\system32\drivers\afd.sys
    + 2008-04-13 18:36:38 42,368 ------w c:\windows\system32\drivers\agp440.sys
    + 2008-04-13 18:36:39 44,928 ------w c:\windows\system32\drivers\agpcpq.sys
    + 2008-04-13 18:36:38 42,752 ------w c:\windows\system32\drivers\alim1541.sys
    + 2008-04-13 18:36:39 43,008 ------w c:\windows\system32\drivers\amdagp.sys
    - 2004-08-10 11:00:00 36,992 ------w c:\windows\system32\drivers\amdk6.sys
    + 2008-04-13 18:31:32 37,376 ------w c:\windows\system32\drivers\amdk6.sys
    - 2004-08-10 11:00:00 37,376 ------w c:\windows\system32\drivers\amdk7.sys
    + 2008-04-13 18:31:33 37,760 ------w c:\windows\system32\drivers\amdk7.sys
    - 2004-08-10 11:00:00 60,800 ------w c:\windows\system32\drivers\arp1394.sys
    + 2008-04-13 18:51:25 60,800 ------w c:\windows\system32\drivers\arp1394.sys
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\drivers\asyncmac.sys
    + 2008-04-13 18:57:27 14,336 ------w c:\windows\system32\drivers\asyncmac.sys
    - 2004-08-04 12:59:44 95,360 ----a-w c:\windows\system32\drivers\atapi.sys
    + 2008-04-13 18:40:30 96,512 ----a-w c:\windows\system32\drivers\atapi.sys
    + 2004-08-04 02:29:30 56,623 ------w c:\windows\system32\drivers\ati1btxx.sys
    + 2004-08-04 02:29:30 11,615 ------w c:\windows\system32\drivers\ati1mdxx.sys
    + 2004-08-04 02:29:30 12,047 ------w c:\windows\system32\drivers\ati1pdxx.sys
    + 2004-08-04 02:29:32 30,671 ------w c:\windows\system32\drivers\ati1raxx.sys
    + 2004-08-04 02:29:32 63,663 ------w c:\windows\system32\drivers\ati1rvxx.sys
    + 2004-08-04 02:29:32 26,367 ------w c:\windows\system32\drivers\ati1snxx.sys
    + 2004-08-04 02:29:32 21,343 ------w c:\windows\system32\drivers\ati1ttxx.sys
    + 2004-08-04 02:29:32 36,463 ------w c:\windows\system32\drivers\ati1tuxx.sys
    + 2004-08-04 02:29:32 29,455 ------w c:\windows\system32\drivers\ati1xbxx.sys
    + 2004-08-04 02:29:32 34,735 ------w c:\windows\system32\drivers\ati1xsxx.sys
    + 2004-08-04 02:29:28 327,040 ------w c:\windows\system32\drivers\ati2mtaa.sys
    + 2004-08-04 02:29:28 701,440 ------w c:\windows\system32\drivers\ati2mtag.sys
    + 2004-08-04 02:29:28 57,856 ------w c:\windows\system32\drivers\atinbtxx.sys
    + 2004-08-04 02:29:30 13,824 ------w c:\windows\system32\drivers\atinmdxx.sys
    + 2004-08-04 02:29:30 14,336 ------w c:\windows\system32\drivers\atinpdxx.sys
    + 2004-08-04 02:29:30 52,224 ------w c:\windows\system32\drivers\atinraxx.sys
    + 2004-08-04 02:29:32 104,960 ------w c:\windows\system32\drivers\atinrvxx.sys
    + 2004-08-04 02:29:32 28,672 ------w c:\windows\system32\drivers\atinsnxx.sys
    + 2004-08-04 02:29:32 13,824 ------w c:\windows\system32\drivers\atinttxx.sys
    + 2004-08-04 02:29:32 73,216 ------w c:\windows\system32\drivers\atintuxx.sys
    + 2004-08-04 02:29:32 31,744 ------w c:\windows\system32\drivers\atinxbxx.sys
    + 2004-08-04 02:29:32 63,488 ------w c:\windows\system32\drivers\atinxsxx.sys
    - 2004-08-10 04:00:00 59,904 ------w c:\windows\system32\drivers\atmarpc.sys
    + 2008-04-13 18:51:25 59,904 ------w c:\windows\system32\drivers\atmarpc.sys
    - 2004-08-10 04:00:00 55,936 ------w c:\windows\system32\drivers\atmlane.sys
    + 2008-04-13 18:51:30 55,808 ------w c:\windows\system32\drivers\atmlane.sys
    + 2008-04-14 00:11:50 21,183 ------w c:\windows\system32\drivers\atv01nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\windows\system32\drivers\atv02nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\windows\system32\drivers\atv04nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\windows\system32\drivers\atv06nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\windows\system32\drivers\atv10nt5.dll
    - 2004-08-10 04:00:00 71,552 ------w c:\windows\system32\drivers\bridge.sys
    + 2008-04-13 18:53:23 71,552 ------w c:\windows\system32\drivers\bridge.sys
    + 2008-04-13 18:46:33 17,024 ------w c:\windows\system32\drivers\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\windows\system32\drivers\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\windows\system32\drivers\bthpan.sys
    - 2008-06-13 13:10:50 272,128 ------w c:\windows\system32\drivers\bthport.sys
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\system32\drivers\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\windows\system32\drivers\bthprint.sys
    + 2008-04-13 18:46:29 18,944 ------w c:\windows\system32\drivers\bthusb.sys
    - 2004-08-10 04:00:00 63,744 ------w c:\windows\system32\drivers\cdfs.sys
    + 2008-04-13 19:14:21 63,744 ------w c:\windows\system32\drivers\cdfs.sys
    - 2004-08-10 04:00:00 49,536 ------w c:\windows\system32\drivers\cdrom.sys
    + 2008-04-13 18:40:46 62,976 ------w c:\windows\system32\drivers\cdrom.sys
    + 2008-04-14 00:11:50 15,423 ------w c:\windows\system32\drivers\ch7xxnt5.dll
    - 2004-08-10 04:00:00 49,664 ------w c:\windows\system32\drivers\classpnp.sys
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\system32\drivers\classpnp.sys
    - 2004-08-10 11:00:00 36,480 ------w c:\windows\system32\drivers\crusoe.sys
    + 2008-04-13 18:31:32 36,736 ------w c:\windows\system32\drivers\crusoe.sys
    - 2004-08-10 04:00:00 36,352 ------w c:\windows\system32\drivers\disk.sys
    + 2008-04-13 18:40:47 36,352 ------w c:\windows\system32\drivers\disk.sys
    - 2004-08-10 04:00:00 14,208 ------w c:\windows\system32\drivers\diskdump.sys
    + 2008-04-13 18:40:44 14,208 ------w c:\windows\system32\drivers\diskdump.sys
    - 2004-08-10 04:00:00 799,744 ------w c:\windows\system32\drivers\dmboot.sys
    + 2008-04-13 18:44:48 799,744 ------w c:\windows\system32\drivers\dmboot.sys
    - 2004-08-10 04:00:00 153,344 ------w c:\windows\system32\drivers\dmio.sys
    + 2008-04-13 18:44:46 153,344 ------w c:\windows\system32\drivers\dmio.sys
    - 2004-08-04 13:07:40 52,864 ----a-w c:\windows\system32\drivers\DMusic.sys
    + 2008-04-13 18:45:01 52,864 ----a-w c:\windows\system32\drivers\dmusic.sys
    - 2004-08-04 13:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
    + 2008-04-13 19:45:14 60,160 ----a-w c:\windows\system32\drivers\drmk.sys
    - 2004-08-04 13:07:58 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
    + 2008-04-13 18:45:13 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
    - 2004-08-10 04:00:00 71,040 ------w c:\windows\system32\drivers\dxg.sys
    + 2008-04-13 18:38:29 71,168 ------w c:\windows\system32\drivers\dxg.sys
    - 2005-06-13 19:58:04 162,816 ----a-w c:\windows\system32\drivers\e100b325.sys
    + 2007-11-16 23:55:00 165,496 ----a-w c:\windows\system32\drivers\e100b325.sys
    - 2004-08-10 04:00:00 143,360 ------w c:\windows\system32\drivers\fastfat.sys
    + 2008-04-13 19:14:29 143,744 ------w c:\windows\system32\drivers\fastfat.sys
    - 2004-08-10 04:00:00 27,392 ------w c:\windows\system32\drivers\fdc.sys
    + 2008-04-13 18:40:25 27,392 ------w c:\windows\system32\drivers\fdc.sys
    - 2004-08-10 04:00:00 34,944 ------w c:\windows\system32\drivers\fips.sys
    + 2008-04-13 18:33:28 44,544 ------w c:\windows\system32\drivers\fips.sys
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\drivers\flpydisk.sys
    + 2008-04-13 18:40:25 20,480 ------w c:\windows\system32\drivers\flpydisk.sys
    - 2006-08-21 09:14:58 128,896 ------w c:\windows\system32\drivers\fltmgr.sys
    + 2008-04-13 18:32:59 129,792 ------w c:\windows\system32\drivers\fltmgr.sys
    + 2008-04-13 18:36:40 46,464 ------w c:\windows\system32\drivers\gagp30kx.sys
    + 2003-04-16 10:57:00 22,580 ----a-r c:\windows\system32\drivers\geneuide.sys
    - 2005-01-08 07:07:18 138,752 ------w c:\windows\system32\drivers\Hdaudbus.sys
  3. 2009-03-13, 04:32 #13
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 9

    + 2008-04-13 16:36:05 144,384 ------w c:\windows\system32\drivers\hdaudbus.sys
    + 2008-04-13 18:46:30 25,600 ------w c:\windows\system32\drivers\hidbth.sys
    - 2004-08-10 04:00:00 36,224 ------w c:\windows\system32\drivers\hidclass.sys
    + 2008-04-13 18:45:26 36,864 ------w c:\windows\system32\drivers\hidclass.sys
    - 2006-01-11 07:48:53 19,200 ------w c:\windows\system32\drivers\hidir.sys
    + 2008-04-13 18:45:26 19,200 ------w c:\windows\system32\drivers\hidir.sys
    - 2004-08-10 04:00:00 24,960 ------w c:\windows\system32\drivers\hidparse.sys
    + 2008-04-13 18:45:22 24,960 ------w c:\windows\system32\drivers\hidparse.sys
    + 2004-08-04 02:41:48 220,032 ------w c:\windows\system32\drivers\hsfbs2s2.sys
    + 2004-08-04 02:41:50 685,056 ------w c:\windows\system32\drivers\hsfcxts2.sys
    + 2004-08-04 02:41:56 1,041,536 ------w c:\windows\system32\drivers\hsfdpsp2.sys
    - 2006-03-17 00:33:10 262,784 ------w c:\windows\system32\drivers\http.sys
    + 2008-04-13 18:53:53 264,832 ------w c:\windows\system32\drivers\http.sys
    - 2004-08-04 03:14:38 52,736 ----a-w c:\windows\system32\drivers\i8042prt.sys
    + 2008-04-13 19:18:00 52,480 ----a-w c:\windows\system32\drivers\i8042prt.sys
    - 2004-08-10 04:00:00 41,856 ------w c:\windows\system32\drivers\imapi.sys
    + 2008-04-13 18:40:58 42,112 ------w c:\windows\system32\drivers\imapi.sys
    - 2004-08-04 12:59:42 5,504 ----a-w c:\windows\system32\drivers\intelide.sys
    + 2008-04-13 18:40:29 5,504 ----a-w c:\windows\system32\drivers\intelide.sys
    - 2004-08-04 12:59:20 36,096 ----a-w c:\windows\system32\drivers\intelppm.sys
    + 2008-04-13 18:31:32 36,352 ----a-w c:\windows\system32\drivers\intelppm.sys
    - 2004-08-10 04:00:00 29,056 ------w c:\windows\system32\drivers\ip6fw.sys
    + 2008-04-13 18:53:34 36,608 ------w c:\windows\system32\drivers\ip6fw.sys
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\drivers\ipinip.sys
    + 2008-04-13 18:57:07 20,864 ------w c:\windows\system32\drivers\ipinip.sys
    - 2004-09-29 22:28:37 134,912 ------w c:\windows\system32\drivers\ipnat.sys
    + 2008-04-13 18:57:15 152,832 ------w c:\windows\system32\drivers\ipnat.sys
    - 2004-08-10 04:00:00 74,752 ------w c:\windows\system32\drivers\ipsec.sys
    + 2008-04-13 19:19:42 75,264 ------w c:\windows\system32\drivers\ipsec.sys
    - 2006-01-11 07:48:58 46,592 ------w c:\windows\system32\drivers\irbus.sys
    + 2008-04-13 18:45:34 46,592 ------w c:\windows\system32\drivers\irbus.sys
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\drivers\irenum.sys
    + 2008-04-13 18:54:28 11,264 ------w c:\windows\system32\drivers\irenum.sys
    - 2001-08-18 03:58:02 35,840 ----a-w c:\windows\system32\drivers\isapnp.sys
    + 2008-04-13 18:36:41 37,248 ----a-w c:\windows\system32\drivers\isapnp.sys
    - 2004-08-04 02:58:34 24,576 ----a-w c:\windows\system32\drivers\kbdclass.sys
    + 2008-04-13 18:39:47 24,576 ----a-w c:\windows\system32\drivers\kbdclass.sys
    - 2006-06-14 08:47:45 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys
    + 2008-04-13 18:45:09 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys
    - 2004-08-04 13:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys
    + 2008-04-13 20:16:36 141,056 ----a-w c:\windows\system32\drivers\ks.sys
    - 2004-08-10 11:00:00 92,032 ------w c:\windows\system32\drivers\ksecdd.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\system32\drivers\ksecdd.sys
    - 2004-08-10 11:00:00 63,744 ------w c:\windows\system32\drivers\mf.sys
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\system32\drivers\mf.sys
    - 2004-08-10 11:00:00 30,080 ------w c:\windows\system32\drivers\modem.sys
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\system32\drivers\modem.sys
    - 2004-08-10 11:00:00 23,040 ------w c:\windows\system32\drivers\mouclass.sys
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\system32\drivers\mouclass.sys
    - 2004-08-10 04:00:00 42,240 ------w c:\windows\system32\drivers\mountmgr.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\system32\drivers\mountmgr.sys
    - 2007-07-06 10:05:47 72,960 ------w c:\windows\system32\drivers\mqac.sys
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\system32\drivers\mqac.sys
    - 2007-12-18 09:51:35 179,584 ------w c:\windows\system32\drivers\mrxdav.sys
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\system32\drivers\mrxdav.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\system32\drivers\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\system32\drivers\mrxsmb.sys
    - 2004-08-10 04:00:00 19,072 ------w c:\windows\system32\drivers\msfs.sys
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\system32\drivers\msfs.sys
    - 2004-08-10 04:00:00 35,072 ------w c:\windows\system32\drivers\msgpc.sys
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\system32\drivers\msgpc.sys
    - 2004-08-04 12:58:42 7,552 ----a-w c:\windows\system32\drivers\MSKSSRV.sys
    + 2008-04-13 18:39:52 7,552 ----a-w c:\windows\system32\drivers\mskssrv.sys
    - 2004-08-04 12:58:40 5,376 ----a-w c:\windows\system32\drivers\MSPCLOCK.sys
    + 2008-04-13 18:39:50 5,376 ----a-w c:\windows\system32\drivers\mspclock.sys
    - 2004-08-04 12:58:42 4,992 ----a-w c:\windows\system32\drivers\MSPQM.sys
    + 2008-04-13 18:39:51 4,992 ----a-w c:\windows\system32\drivers\mspqm.sys
    - 2004-08-10 11:00:00 15,488 ------w c:\windows\system32\drivers\mssmbios.sys
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\system32\drivers\mssmbios.sys
    + 2004-08-04 02:41:40 126,686 ------w c:\windows\system32\drivers\mtlmnt5.sys
    + 2004-08-04 02:41:38 1,309,184 ------w c:\windows\system32\drivers\mtlstrm.sys
    + 2004-08-04 02:29:38 452,736 ------w c:\windows\system32\drivers\mtxparhm.sys
    - 2004-08-10 04:00:00 107,904 ------w c:\windows\system32\drivers\mup.sys
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\system32\drivers\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\system32\drivers\mutohpen.sys
    - 2004-08-10 04:00:00 182,912 ------w c:\windows\system32\drivers\ndis.sys
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\system32\drivers\ndis.sys
    - 2004-08-10 04:00:00 9,600 ------w c:\windows\system32\drivers\ndistapi.sys
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\system32\drivers\ndistapi.sys
    - 2005-06-21 08:52:55 14,592 ------w c:\windows\system32\drivers\ndisuio.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\system32\drivers\ndisuio.sys
    - 2004-08-10 04:00:00 91,776 ------w c:\windows\system32\drivers\ndiswan.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\system32\drivers\ndiswan.sys
    - 2004-08-10 04:00:00 38,016 ------w c:\windows\system32\drivers\ndproxy.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\system32\drivers\ndproxy.sys
    - 2004-08-10 04:00:00 34,560 ------w c:\windows\system32\drivers\netbios.sys
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\system32\drivers\netbios.sys
    - 2004-08-10 04:00:00 162,816 ------w c:\windows\system32\drivers\netbt.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\system32\drivers\netbt.sys
    - 2004-08-10 11:00:00 61,824 ------w c:\windows\system32\drivers\nic1394.sys
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\system32\drivers\nic1394.sys
    - 2004-08-10 04:00:00 40,320 ------w c:\windows\system32\drivers\nmnt.sys
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\system32\drivers\nmnt.sys
    - 2004-08-10 04:00:00 30,848 ------w c:\windows\system32\drivers\npfs.sys
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\system32\drivers\npfs.sys
    - 2007-02-09 11:10:35 574,464 ------w c:\windows\system32\drivers\ntfs.sys
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\system32\drivers\ntfs.sys
    + 2004-08-04 02:41:40 180,360 ------w c:\windows\system32\drivers\ntmtlfax.sys
    + 2004-08-04 02:29:56 1,897,408 ------w c:\windows\system32\drivers\nv4_mini.sys
    - 2004-08-10 04:00:00 88,448 ------w c:\windows\system32\drivers\nwlnkipx.sys
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\system32\drivers\nwlnkipx.sys
    - 2006-10-13 10:23:15 163,584 ------w c:\windows\system32\drivers\nwrdr.sys
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\system32\drivers\nwrdr.sys
    - 2004-08-10 04:00:00 61,056 ------w c:\windows\system32\drivers\ohci1394.sys
    + 2008-04-13 18:46:18 61,696 ------w c:\windows\system32\drivers\ohci1394.sys
    - 2004-08-10 11:00:00 42,496 ------w c:\windows\system32\drivers\p3.sys
    + 2008-04-13 18:31:31 42,752 ------w c:\windows\system32\drivers\p3.sys
    - 2004-08-10 11:00:00 80,128 ------w c:\windows\system32\drivers\parport.sys
    + 2008-04-13 18:40:10 80,128 ------w c:\windows\system32\drivers\parport.sys
    - 2004-08-10 04:00:00 18,688 ------w c:\windows\system32\drivers\partmgr.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\system32\drivers\partmgr.sys
    - 2004-08-10 04:00:00 68,224 ------w c:\windows\system32\drivers\pci.sys
    + 2008-04-13 18:36:44 68,224 ------w c:\windows\system32\drivers\pci.sys
    - 2004-08-04 12:59:42 25,088 ----a-w c:\windows\system32\drivers\pciidex.sys
    + 2008-04-13 18:40:29 24,960 ----a-w c:\windows\system32\drivers\pciidex.sys
    - 2004-08-10 04:00:00 119,936 ------w c:\windows\system32\drivers\pcmcia.sys
    + 2008-04-13 18:36:43 120,192 ------w c:\windows\system32\drivers\pcmcia.sys
    - 2004-03-17 00:58:20 136,960 ----a-w c:\windows\system32\drivers\portcls.sys
    + 2008-04-13 20:19:42 146,048 ----a-w c:\windows\system32\drivers\portcls.sys
    - 2004-08-10 11:00:00 35,328 ------w c:\windows\system32\drivers\processr.sys
    + 2008-04-13 18:31:30 35,840 ------w c:\windows\system32\drivers\processr.sys
    - 2004-08-10 04:00:00 69,120 ------w c:\windows\system32\drivers\psched.sys
    + 2008-04-13 18:56:38 69,120 ------w c:\windows\system32\drivers\psched.sys
    - 2004-08-10 04:00:00 51,328 ------w c:\windows\system32\drivers\rasl2tp.sys
    + 2008-04-13 19:19:43 51,328 ------w c:\windows\system32\drivers\rasl2tp.sys
    - 2004-08-10 04:00:00 41,472 ------w c:\windows\system32\drivers\raspppoe.sys
    + 2008-04-13 18:57:32 41,472 ------w c:\windows\system32\drivers\raspppoe.sys
    - 2004-08-10 04:00:00 48,384 ------w c:\windows\system32\drivers\raspptp.sys
    + 2008-04-13 19:19:48 48,384 ------w c:\windows\system32\drivers\raspptp.sys
    - 2006-05-05 09:47:57 174,592 ------w c:\windows\system32\drivers\rdbss.sys
    + 2008-04-13 19:28:39 175,744 ------w c:\windows\system32\drivers\rdbss.sys
    - 2004-08-04 05:01:16 196,864 ------w c:\windows\system32\drivers\rdpdr.sys
    + 2008-04-13 18:32:51 196,224 ------w c:\windows\system32\drivers\rdpdr.sys
    - 2005-06-10 04:09:46 139,528 ------w c:\windows\system32\drivers\rdpwd.sys
    + 2008-04-14 00:13:22 139,656 ------w c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-04 02:41:40 13,776 ------w c:\windows\system32\drivers\recagent.sys
    - 2004-08-03 21:59:38 57,472 ------w c:\windows\system32\drivers\redbook.sys
    + 2008-04-13 18:40:27 57,600 ------w c:\windows\system32\drivers\redbook.sys
    + 2008-04-13 18:46:32 59,136 ------w c:\windows\system32\drivers\rfcomm.sys
    - 2008-05-08 12:28:49 202,752 ------w c:\windows\system32\drivers\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ------w c:\windows\system32\drivers\rmcast.sys
    - 2004-08-10 04:00:00 30,080 ------w c:\windows\system32\drivers\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\system32\drivers\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\system32\drivers\rndismpx.sys
    - 2006-03-08 20:27:12 4,246,016 ----a-w c:\windows\system32\drivers\RtkHDAud.sys
    + 2007-10-25 11:29:00 4,623,872 ----a-w c:\windows\system32\drivers\RtkHDAud.sys
    + 2004-08-04 02:29:52 166,912 ------w c:\windows\system32\drivers\s3gnbm.sys
    - 2004-08-10 04:00:00 96,256 ------w c:\windows\system32\drivers\scsiport.sys
    + 2008-04-13 18:40:30 96,384 ------w c:\windows\system32\drivers\scsiport.sys
    - 2004-08-10 04:00:00 67,584 ------w c:\windows\system32\drivers\sdbus.sys
    + 2008-04-13 18:36:44 79,232 ------w c:\windows\system32\drivers\sdbus.sys
    - 2004-08-10 04:00:00 15,488 ------w c:\windows\system32\drivers\serenum.sys
    + 2008-04-13 18:40:12 15,744 ------w c:\windows\system32\drivers\serenum.sys
    - 2004-08-10 04:00:00 64,896 ------w c:\windows\system32\drivers\serial.sys
    + 2008-04-13 19:15:45 64,512 ------w c:\windows\system32\drivers\serial.sys
    - 2004-08-10 04:00:00 11,136 ------w c:\windows\system32\drivers\sffdisk.sys
    + 2008-04-13 18:40:47 11,904 ------w c:\windows\system32\drivers\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\system32\drivers\sffp_mmc.sys
    - 2004-08-10 04:00:00 10,240 ------w c:\windows\system32\drivers\sffp_sd.sys
    + 2008-04-13 18:40:47 11,008 ------w c:\windows\system32\drivers\sffp_sd.sys
    - 2004-08-10 04:00:00 11,392 ------w c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-13 18:40:48 11,392 ------w c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-14 00:12:05 3,901 ------w c:\windows\system32\drivers\siint5.dll
    + 2008-04-13 18:36:39 40,960 ------w c:\windows\system32\drivers\sisagp.sys
    + 2004-08-04 02:41:42 129,535 ------w c:\windows\system32\drivers\slnt7554.sys
    + 2004-08-04 02:41:44 404,990 ------w c:\windows\system32\drivers\slntamr.sys
    + 2004-08-04 02:41:46 95,424 ------w c:\windows\system32\drivers\slnthal.sys
    + 2004-08-04 02:41:46 13,240 ------w c:\windows\system32\drivers\slwdmsup.sys
    + 2008-04-13 18:36:34 5,888 ------w c:\windows\system32\drivers\smbali.sys
    - 2004-08-10 11:00:00 25,472 ------w c:\windows\system32\drivers\sonydcam.sys
    + 2008-04-13 18:46:07 25,344 ------w c:\windows\system32\drivers\sonydcam.sys
    - 2006-06-14 08:47:46 6,400 ----a-w c:\windows\system32\drivers\splitter.sys
    + 2008-04-13 18:45:07 6,272 ----a-w c:\windows\system32\drivers\splitter.sys
    - 2004-08-10 04:00:00 73,472 ------w c:\windows\system32\drivers\sr.sys
    + 2008-04-13 18:36:52 73,472 ------w c:\windows\system32\drivers\sr.sys
    - 2006-08-14 10:34:41 332,928 ------w c:\windows\system32\drivers\srv.sys
    + 2008-12-11 10:57:09 333,952 ------w c:\windows\system32\drivers\srv.sys
    - 2004-08-04 13:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
    + 2008-04-13 19:45:16 49,408 ----a-w c:\windows\system32\drivers\stream.sys
    - 2004-08-10 11:00:00 4,352 ------w c:\windows\system32\drivers\swenum.sys
    + 2008-04-13 18:39:53 4,352 ------w c:\windows\system32\drivers\swenum.sys
    - 2001-08-18 04:00:52 54,272 ----a-w c:\windows\system32\drivers\swmidi.sys
    + 2008-04-13 18:45:09 56,576 ----a-w c:\windows\system32\drivers\swmidi.sys
    - 2004-08-04 13:15:56 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-13 19:15:55 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
    - 2004-08-10 04:00:00 14,976 ------w c:\windows\system32\drivers\tape.sys
    + 2008-04-13 18:40:50 14,976 ------w c:\windows\system32\drivers\tape.sys
    - 2008-06-20 10:45:13 360,320 ------w c:\windows\system32\drivers\tcpip.sys
    + 2008-06-20 11:51:12 361,600 ------w c:\windows\system32\drivers\tcpip.sys
    - 2008-06-20 09:52:06 225,920 ------w c:\windows\system32\drivers\tcpip6.sys
    + 2008-06-20 11:08:27 225,856 ------w c:\windows\system32\drivers\tcpip6.sys
    - 2004-08-10 04:00:00 18,560 ------w c:\windows\system32\drivers\tdi.sys
    + 2008-04-13 19:00:05 19,072 ------w c:\windows\system32\drivers\tdi.sys
    - 2004-08-10 04:00:00 12,040 ------w c:\windows\system32\drivers\tdpipe.sys
    + 2008-04-14 00:13:20 12,040 ------w c:\windows\system32\drivers\tdpipe.sys
    - 2004-08-10 04:00:00 21,896 ------w c:\windows\system32\drivers\tdtcp.sys
    + 2008-04-14 00:13:21 21,896 ------w c:\windows\system32\drivers\tdtcp.sys
    - 2004-08-04 07:01:08 40,840 ------w c:\windows\system32\drivers\termdd.sys
    + 2008-04-14 00:13:20 40,840 ------w c:\windows\system32\drivers\termdd.sys
    - 2004-08-10 11:00:00 12,416 ------w c:\windows\system32\drivers\tunmp.sys
    + 2008-04-13 18:56:01 12,288 ------w c:\windows\system32\drivers\tunmp.sys
    + 2008-04-13 18:36:40 44,672 ------w c:\windows\system32\drivers\uagp35.sys
    - 2004-08-10 04:00:00 66,176 ------w c:\windows\system32\drivers\udfs.sys
    + 2008-04-13 18:32:36 66,048 ------w c:\windows\system32\drivers\udfs.sys
    - 2007-04-23 10:32:54 364,160 ------w c:\windows\system32\drivers\update.sys
    + 2008-04-13 18:39:46 384,768 ------w c:\windows\system32\drivers\update.sys
    - 2004-08-10 04:00:00 12,672 ------w c:\windows\system32\drivers\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\system32\drivers\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\system32\drivers\usb8023x.sys
    - 2004-08-10 11:00:00 23,808 ------w c:\windows\system32\drivers\usbcamd.sys
    + 2008-04-13 18:45:40 25,600 ------w c:\windows\system32\drivers\usbcamd.sys
    - 2004-08-10 11:00:00 23,936 ------w c:\windows\system32\drivers\usbcamd2.sys
    + 2008-04-13 18:45:41 25,728 ------w c:\windows\system32\drivers\usbcamd2.sys
    - 2004-08-04 03:08:48 31,616 ----a-w c:\windows\system32\drivers\usbccgp.sys
    + 2008-04-13 18:45:39 32,128 ----a-w c:\windows\system32\drivers\usbccgp.sys
    - 2005-03-31 08:13:52 27,008 ----a-w c:\windows\system32\drivers\usbehci.sys
    + 2008-04-13 18:45:35 30,208 ----a-w c:\windows\system32\drivers\usbehci.sys
    - 2004-08-04 13:08:44 57,600 ----a-w c:\windows\system32\drivers\usbhub.sys
    + 2008-04-13 18:45:37 59,520 ----a-w c:\windows\system32\drivers\usbhub.sys
    - 2004-08-10 11:00:00 16,000 ------w c:\windows\system32\drivers\usbintel.sys
    + 2008-04-13 18:45:43 15,872 ------w c:\windows\system32\drivers\usbintel.sys
    - 2004-08-04 13:08:44 142,976 ----a-w c:\windows\system32\drivers\usbport.sys
    + 2008-04-13 18:45:36 143,872 ----a-w c:\windows\system32\drivers\usbport.sys
    - 2004-08-04 03:01:26 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
    + 2008-04-13 18:47:37 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
    - 2004-08-04 02:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
    + 2008-04-13 18:45:34 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
    - 2004-08-10 04:00:00 26,496 ------w c:\windows\system32\drivers\usbstor.sys
    + 2008-04-13 18:45:38 26,368 ------w c:\windows\system32\drivers\usbstor.sys
    - 2004-08-04 13:08:38 20,480 ----a-w c:\windows\system32\drivers\usbuhci.sys
    + 2008-04-13 18:45:35 20,608 ----a-w c:\windows\system32\drivers\usbuhci.sys
    + 2008-04-13 18:46:20 121,984 ------w c:\windows\system32\drivers\usbvideo.sys
    + 2008-04-14 00:12:08 11,325 ------w c:\windows\system32\drivers\vchnt5.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\drivers\vga.sys
    + 2008-04-13 18:44:40 20,992 ------w c:\windows\system32\drivers\vga.sys
    + 2008-04-13 18:36:40 42,240 ------w c:\windows\system32\drivers\viaagp.sys
    - 2004-08-04 12:59:44 5,376 ----a-w c:\windows\system32\drivers\viaide.sys
    + 2008-04-13 18:40:31 5,376 ----a-w c:\windows\system32\drivers\viaide.sys
    - 2004-08-10 04:00:00 79,744 ------w c:\windows\system32\drivers\videoprt.sys
    + 2008-04-13 18:44:40 81,664 ------w c:\windows\system32\drivers\videoprt.sys
    - 2004-08-10 04:00:00 52,352 ------w c:\windows\system32\drivers\volsnap.sys
    + 2008-04-13 18:41:01 52,352 ------w c:\windows\system32\drivers\volsnap.sys
    + 2008-04-13 18:43:55 14,208 ------w c:\windows\system32\drivers\wacompen.sys
    + 2004-08-04 02:29:40 11,807 ------w c:\windows\system32\drivers\wadv07nt.sys
    + 2004-08-04 02:29:40 11,295 ------w c:\windows\system32\drivers\wadv08nt.sys
    + 2004-08-04 02:29:42 11,871 ------w c:\windows\system32\drivers\wadv09nt.sys
    + 2004-08-04 02:29:42 11,935 ------w c:\windows\system32\drivers\wadv11nt.sys
    - 2004-08-10 04:00:00 34,560 ------w c:\windows\system32\drivers\wanarp.sys
    + 2008-04-13 18:57:21 34,560 ------w c:\windows\system32\drivers\wanarp.sys
    + 2004-08-04 02:29:46 22,271 ------w c:\windows\system32\drivers\watv06nt.sys
    + 2004-08-04 02:29:46 25,471 ------w c:\windows\system32\drivers\watv10nt.sys
    - 2006-06-14 09:00:45 82,944 ----a-w c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-13 19:17:18 83,072 ----a-w c:\windows\system32\drivers\wdmaud.sys
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\drprov.dll
    + 2008-04-14 00:11:52 14,336 ----a-w c:\windows\system32\drprov.dll
    + 2009-03-05 02:49:57 102,400 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\hccutils.dll
    + 2009-03-05 02:50:02 166,424 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\hkcmd.exe
    + 2009-03-05 02:49:57 1,589,248 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\ig4dev32.dll
    + 2009-03-05 02:49:57 2,412,544 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\ig4icd32.dll
    + 2009-03-05 02:50:02 530,968 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxcfg.exe
    + 2009-03-05 02:49:57 208,896 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxdev.dll
    + 2009-03-05 02:49:57 135,168 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxdo.dll
    + 2009-03-05 02:49:57 24,576 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxexps.dll
    + 2009-03-05 02:50:02 170,520 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxext.exe
    + 2009-03-05 02:50:02 137,752 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxpers.exe
    + 2009-03-05 02:49:57 204,800 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxpph.dll
    + 2009-03-05 02:49:57 3,293,184 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxress.dll
    + 2009-03-05 02:49:58 48,128 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxsrvc.dll
    + 2009-03-05 02:50:02 256,536 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxsrvc.exe
    + 2009-03-05 02:50:02 141,848 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxtray.exe
    + 2009-03-05 02:50:03 170,520 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igfxzoom.exe
    + 2009-03-05 02:49:58 1,843,784 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igklg400.dll
    + 2009-03-05 02:49:58 1,399,880 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igklg450.dll
    + 2009-03-05 02:49:58 294,912 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igldev32.dll
    + 2009-03-05 02:49:58 2,334,720 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\iglicd32.dll
    + 2009-03-05 02:49:58 104,636 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igmedcompkrn.dll
    + 2009-03-05 02:49:58 147,456 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxpco32.dll
    + 2009-03-05 02:49:58 1,670,144 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxpdv32.dll
    + 2009-03-05 02:49:58 2,643,968 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxpdx32.dll
    + 2009-03-05 02:49:58 151,040 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxpgd32.dll
    + 2009-03-05 02:49:58 5,854,752 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxpmp32.sys
    + 2009-03-05 02:49:58 57,344 -c--a-w c:\windows\system32\DRVSTORE\igxp32_28D4AE6A4B66DD890D24C65EE34E5B62AB7E0BB9\igxprd32.dll
    + 2009-03-10 01:47:24 64,160 -c--a-w c:\windows\system32\DRVSTORE\lbd_1D149FE61E2CD0936E43877117FE3EF0674B9944\Lbd.sys
    - 2004-08-10 04:00:00 16,384 ------w c:\windows\system32\ds32gt.dll
    + 2008-04-14 00:11:52 16,384 ------w c:\windows\system32\ds32gt.dll
    - 2004-08-10 04:00:00 181,760 ------w c:\windows\system32\dsdmo.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\system32\dsdmo.dll
    - 2004-08-10 04:00:00 71,680 ------w c:\windows\system32\dsdmoprp.dll
    + 2008-04-14 00:11:52 71,680 ------w c:\windows\system32\dsdmoprp.dll
    - 2004-08-10 04:00:00 92,672 ------w c:\windows\system32\dskquota.dll
    + 2008-04-14 00:11:52 92,672 ------w c:\windows\system32\dskquota.dll
    - 2004-08-10 04:00:00 144,384 ------w c:\windows\system32\dskquoui.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\windows\system32\dskquoui.dll
    - 2004-08-10 04:00:00 367,616 ------w c:\windows\system32\dsound.dll
    + 2008-04-14 00:11:52 367,616 ------w c:\windows\system32\dsound.dll
    - 2004-08-10 04:00:00 1,294,336 ------w c:\windows\system32\dsound3d.dll
    + 2008-04-14 00:11:52 1,293,824 ------w c:\windows\system32\dsound3d.dll
    - 2004-08-10 04:00:00 142,336 ------w c:\windows\system32\dsprop.dll
    + 2008-04-14 00:11:52 142,848 ------w c:\windows\system32\dsprop.dll
    - 2004-08-10 04:00:00 4,096 ------w c:\windows\system32\dsprpres.dll
    + 2008-04-13 17:09:30 4,096 ------w c:\windows\system32\dsprpres.dll
    - 2004-08-10 04:00:00 239,104 ------w c:\windows\system32\dsquery.dll
    + 2008-04-14 00:11:52 239,104 ------w c:\windows\system32\dsquery.dll
    - 2004-08-10 04:00:00 51,200 ------w c:\windows\system32\dssec.dll
    + 2008-04-14 00:11:52 51,200 ------w c:\windows\system32\dssec.dll
    - 2004-08-10 04:00:00 137,216 ------w c:\windows\system32\dssenh.dll
    + 2008-04-13 17:37:57 138,752 ----a-w c:\windows\system32\dssenh.dll
    - 2004-08-10 04:00:00 113,152 ------w c:\windows\system32\dsuiext.dll
    + 2008-04-14 00:11:52 113,152 ------w c:\windows\system32\dsuiext.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\system32\dswave.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\system32\dswave.dll
    - 2004-08-10 04:00:00 10,752 ------w c:\windows\system32\dumprep.exe
    + 2008-04-14 00:12:18 10,752 ------w c:\windows\system32\dumprep.exe
    - 2004-08-10 04:00:00 304,128 ------w c:\windows\system32\duser.dll
    + 2008-04-14 00:11:52 304,128 ----a-w c:\windows\system32\duser.dll
    - 2004-08-10 04:00:00 17,920 ------w c:\windows\system32\dvdupgrd.exe
    + 2008-04-14 00:12:18 17,920 ------w c:\windows\system32\dvdupgrd.exe
    - 2004-08-10 04:00:00 180,224 ------w c:\windows\system32\dwwin.exe
    + 2008-04-14 00:12:18 180,224 ------w c:\windows\system32\dwwin.exe
    - 2004-08-10 04:00:00 619,008 ------w c:\windows\system32\dx7vb.dll
    + 2008-04-14 00:11:52 619,008 ------w c:\windows\system32\dx7vb.dll
    - 2004-08-10 04:00:00 1,227,264 ------w c:\windows\system32\dx8vb.dll
    + 2008-04-14 00:11:52 1,227,264 ------w c:\windows\system32\dx8vb.dll
    - 2004-08-10 04:00:00 1,298,432 ------w c:\windows\system32\dxdiag.exe
    + 2008-04-14 00:12:18 1,298,432 ------w c:\windows\system32\dxdiag.exe
    - 2004-08-10 04:00:00 2,113,536 ------w c:\windows\system32\dxdiagn.dll
    + 2008-04-14 00:11:52 2,113,536 ------w c:\windows\system32\dxdiagn.dll
    - 2006-08-22 09:05:26 498,742 ------w c:\windows\system32\dxmasf.dll
    + 2008-04-14 00:11:52 498,742 ------w c:\windows\system32\dxmasf.dll
    - 2008-04-23 04:16:28 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    + 2008-12-20 23:15:12 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    - 2008-04-23 04:16:28 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-12-20 23:15:13 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-07-30 02:10:04 73,720 ----a-w c:\windows\system32\dxva2.dll
    - 2005-06-16 14:48:24 36,864 ----a-w c:\windows\system32\e100bmsg.dll
    + 2007-12-15 01:05:14 35,424 ----a-w c:\windows\system32\e100bmsg.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\system32\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\system32\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\system32\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\system32\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\system32\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\system32\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\system32\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\system32\eapsvc.dll
    - 2004-08-10 04:00:00 26,624 ------w c:\windows\system32\efsadu.dll
    + 2008-04-14 00:11:52 26,624 ------w c:\windows\system32\efsadu.dll
    - 2004-08-10 04:00:00 183,296 ------w c:\windows\system32\els.dll
    + 2008-04-14 00:11:53 183,296 ------w c:\windows\system32\els.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\system32\en\microsoft.managementconsole.resources.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\system32\en\mmcex.resources.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\system32\en\mmcfxcommon.resources.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\encapi.dll
    + 2008-04-14 00:11:53 20,480 ------w c:\windows\system32\encapi.dll
    - 2004-08-10 04:00:00 23,040 ------w c:\windows\system32\ersvc.dll
    + 2008-04-14 00:11:53 23,040 ----a-w c:\windows\system32\ersvc.dll
    - 2005-07-26 11:39:45 243,200 ----a-w c:\windows\system32\es.dll
    + 2008-07-07 20:26:58 253,952 ----a-w c:\windows\system32\es.dll
    - 2005-10-20 22:20:03 1,082,368 ----a-w c:\windows\system32\esent.dll
    + 2008-04-14 00:11:53 1,082,368 ----a-w c:\windows\system32\esent.dll
    - 2004-08-10 04:00:00 193,024 ------w c:\windows\system32\eudcedit.exe
    + 2008-04-14 00:12:19 193,024 ------w c:\windows\system32\eudcedit.exe
    - 2004-08-10 11:00:00 50,176 ------w c:\windows\system32\eventcreate.exe
    + 2008-04-14 00:12:19 50,688 ------w c:\windows\system32\eventcreate.exe
    - 2004-08-10 04:00:00 55,808 ------w c:\windows\system32\eventlog.dll
    + 2008-04-14 00:11:53 56,320 ----a-w c:\windows\system32\eventlog.dll
    - 2004-08-10 11:00:00 77,824 ------w c:\windows\system32\eventtriggers.exe
    + 2008-04-14 00:12:19 82,944 ------w c:\windows\system32\eventtriggers.exe
    + 2008-07-30 02:10:04 493,048 ----a-w c:\windows\system32\evr.dll
    - 2004-08-10 04:00:00 380,957 ------w c:\windows\system32\expsrv.dll
    + 2008-04-14 00:11:53 380,445 ------w c:\windows\system32\expsrv.dll
    - 2008-04-23 04:16:28 133,120 ----a-w c:\windows\system32\extmgr.dll
    + 2008-12-20 23:15:13 133,120 ----a-w c:\windows\system32\extmgr.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\extrac32.exe
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\system32\extrac32.exe
    - 2004-08-10 11:00:00 121,856 ------w c:\windows\system32\exts.dll
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\system32\exts.dll
    - 2004-08-10 04:00:00 80,384 ------w c:\windows\system32\faultrep.dll
    + 2008-04-14 00:11:53 80,384 ----a-w c:\windows\system32\faultrep.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\system32\faxpatch.exe
    - 2004-08-10 04:00:00 117,760 ------w c:\windows\system32\fde.dll
    + 2008-04-14 00:11:53 124,928 ------w c:\windows\system32\fde.dll
    - 2004-08-10 04:00:00 73,728 ------w c:\windows\system32\fdeploy.dll
    + 2008-04-14 00:11:53 73,728 ------w c:\windows\system32\fdeploy.dll
    - 2004-08-10 04:00:00 21,504 ------w c:\windows\system32\feclient.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\system32\feclient.dll
    - 2004-08-10 04:00:00 337,920 ------w c:\windows\system32\filemgmt.dll
    + 2008-04-14 00:11:53 337,920 ------w c:\windows\system32\filemgmt.dll
    - 2004-08-10 04:00:00 27,136 ------w c:\windows\system32\findstr.exe
    + 2008-04-14 00:12:20 27,136 ------w c:\windows\system32\findstr.exe
    - 2004-08-10 04:00:00 87,552 ------w c:\windows\system32\fldrclnr.dll
    + 2008-04-14 00:11:53 87,552 ------w c:\windows\system32\fldrclnr.dll
    - 2006-08-21 12:21:06 16,896 ----a-w c:\windows\system32\fltlib.dll
    + 2008-04-14 00:11:53 16,896 ----a-w c:\windows\system32\fltlib.dll
    - 2006-08-21 09:14:58 23,040 ----a-w c:\windows\system32\fltmc.exe
    + 2008-04-14 00:12:20 23,040 ----a-w c:\windows\system32\fltmc.exe
    - 2008-04-10 01:48:00 197,752 ----a-w c:\windows\system32\FNTCACHE.DAT
    + 2009-01-30 04:05:41 201,736 ----a-w c:\windows\system32\FNTCACHE.DAT
    - 2004-08-10 04:00:00 382,976 ------w c:\windows\system32\fontext.dll
    + 2008-04-14 00:11:53 382,976 ------w c:\windows\system32\fontext.dll
    - 2005-10-18 04:14:45 80,896 ------w c:\windows\system32\fontsub.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\windows\system32\fontsub.dll
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\fontview.exe
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\system32\fontview.exe
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\forcedos.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\windows\system32\forcedos.exe
    - 2004-08-10 04:00:00 25,600 ------w c:\windows\system32\format.com
    + 2008-04-14 00:12:42 29,696 ------w c:\windows\system32\format.com
    - 2004-08-10 04:00:00 9,344 ------w c:\windows\system32\framebuf.dll
    + 2008-04-14 00:09:33 9,344 ------w c:\windows\system32\framebuf.dll
    - 2004-08-10 04:00:00 193,024 ------w c:\windows\system32\fsquirt.exe
    + 2008-04-14 00:12:20 193,024 ------w c:\windows\system32\fsquirt.exe
    - 2004-08-10 04:00:00 42,496 ------w c:\windows\system32\ftp.exe
    + 2008-04-14 00:12:20 42,496 ------w c:\windows\system32\ftp.exe
    - 2004-08-10 04:00:00 60,416 ------w c:\windows\system32\fwcfg.dll
    + 2008-04-14 00:11:53 60,416 ------w c:\windows\system32\fwcfg.dll
    - 2004-08-10 04:00:00 452,096 ----a-w c:\windows\system32\fxsapi.dll
    + 2008-04-14 00:11:53 451,584 ----a-w c:\windows\system32\fxsapi.dll
    - 2004-08-10 04:00:00 143,360 ----a-w c:\windows\system32\fxsclnt.exe
    + 2008-04-14 00:12:21 142,848 ----a-w c:\windows\system32\fxsclnt.exe
    - 2004-08-10 04:00:00 72,192 ----a-w c:\windows\system32\fxscom.dll
    + 2008-04-14 00:11:54 72,192 ----a-w c:\windows\system32\fxscom.dll
    - 2004-08-10 04:00:00 285,184 ----a-w c:\windows\system32\fxscomex.dll
    + 2008-04-14 00:11:54 285,184 ----a-w c:\windows\system32\fxscomex.dll
    - 2004-08-10 04:00:00 229,376 ----a-w c:\windows\system32\fxscover.exe
    + 2008-04-14 00:12:21 229,376 ----a-w c:\windows\system32\fxscover.exe
    - 2004-08-10 04:00:00 27,136 ----a-w c:\windows\system32\fxsdrv.dll
    + 2008-04-14 00:11:54 26,624 ----a-w c:\windows\system32\fxsdrv.dll
    - 2004-08-10 04:00:00 55,296 ----a-w c:\windows\system32\fxsevent.dll
    + 2008-04-14 00:11:54 55,296 ----a-w c:\windows\system32\fxsevent.dll
    - 2004-08-10 04:00:00 23,552 ----a-w c:\windows\system32\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ----a-w c:\windows\system32\fxsext32.dll
    - 2004-08-10 04:00:00 23,552 ----a-w c:\windows\system32\fxsmon.dll
    + 2008-04-14 00:11:54 23,552 ----a-w c:\windows\system32\fxsmon.dll
    - 2004-08-10 04:00:00 8,704 ----a-w c:\windows\system32\fxsperf.dll
    + 2008-04-14 00:11:54 8,704 ----a-w c:\windows\system32\fxsperf.dll
    - 2004-08-10 04:00:00 6,656 ----a-w c:\windows\system32\fxsres.dll
    + 2008-04-14 00:09:33 6,656 ----a-w c:\windows\system32\fxsres.dll
    - 2004-08-10 04:00:00 562,176 ----a-w c:\windows\system32\fxsst.dll
    + 2008-04-14 00:11:54 562,176 ----a-w c:\windows\system32\fxsst.dll
    - 2004-08-10 04:00:00 267,776 ----a-w c:\windows\system32\fxssvc.exe
    + 2008-04-14 00:12:21 267,776 ----a-w c:\windows\system32\fxssvc.exe
    - 2004-08-10 04:00:00 246,272 ----a-w c:\windows\system32\fxst30.dll
    + 2008-04-14 00:11:54 246,272 ----a-w c:\windows\system32\fxst30.dll
    - 2004-08-10 04:00:00 397,312 ----a-w c:\windows\system32\fxstiff.dll
    + 2008-04-14 00:11:54 397,312 ----a-w c:\windows\system32\fxstiff.dll
    - 2004-08-10 04:00:00 154,112 ----a-w c:\windows\system32\fxsui.dll
    + 2008-04-14 00:11:54 154,112 ----a-w c:\windows\system32\fxsui.dll
    - 2004-08-10 04:00:00 192,512 ----a-w c:\windows\system32\fxswzrd.dll
    + 2008-04-14 00:11:54 192,512 ----a-w c:\windows\system32\fxswzrd.dll
    - 2004-08-10 04:00:00 400,384 ----a-w c:\windows\system32\fxsxp32.dll
    + 2008-04-14 00:11:54 400,384 ----a-w c:\windows\system32\fxsxp32.dll
    - 2008-02-20 06:51:05 282,624 ----a-w c:\windows\system32\gdi32.dll
    + 2008-10-23 12:36:14 286,720 ----a-w c:\windows\system32\gdi32.dll
    + 2003-04-18 18:35:42 106,496 ----a-r c:\windows\system32\geneicon.dll
    - 2004-08-10 04:00:00 55,296 ------w c:\windows\system32\getmac.exe
    + 2008-04-14 00:12:21 59,904 ------w c:\windows\system32\getmac.exe
    - 2004-08-10 04:00:00 122,880 ------w c:\windows\system32\glu32.dll
    + 2008-04-14 00:11:54 122,880 ------w c:\windows\system32\glu32.dll
    - 2004-08-10 04:00:00 566,784 ------w c:\windows\system32\gpedit.dll
    + 2008-04-14 00:09:35 566,784 ------w c:\windows\system32\gpedit.dll
    - 2004-08-10 04:00:00 9,728 ------w c:\windows\system32\gpkrsrc.dll
    + 2006-12-31 01:26:44 9,728 ------w c:\windows\system32\gpkrsrc.dll
    - 2004-08-10 11:00:00 119,808 ------w c:\windows\system32\gpresult.exe
    + 2008-04-14 00:12:21 120,832 ------w c:\windows\system32\gpresult.exe
    - 2004-08-10 04:00:00 198,656 ------w c:\windows\system32\gptext.dll
    + 2008-04-14 00:11:54 199,680 ------w c:\windows\system32\gptext.dll
    - 2004-08-10 04:00:00 39,424 ------w c:\windows\system32\grpconv.exe
    + 2008-04-14 00:12:21 39,424 ------w c:\windows\system32\grpconv.exe
    - 2004-08-10 04:00:00 614,912 ------w c:\windows\system32\h323msp.dll
    + 2008-04-14 00:11:54 614,912 ------w c:\windows\system32\h323msp.dll
    - 2004-08-10 11:00:00 134,400 ------w c:\windows\system32\hal.dll
    + 2008-04-13 18:31:28 134,400 ------w c:\windows\system32\HAL.DLL
    - 2004-08-10 04:00:00 7,168 ----a-w c:\windows\system32\hccoin.dll
    + 2008-04-14 00:11:54 7,168 ----a-w c:\windows\system32\hccoin.dll
    - 2006-02-07 15:34:56 73,728 ----a-w c:\windows\system32\hccutils.dll
    + 2009-03-05 02:49:57 102,400 ----a-w c:\windows\system32\hccutils.dll
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\help.exe
    + 2008-04-14 00:12:21 15,872 ------w c:\windows\system32\help.exe
    - 2005-05-27 09:04:27 41,472 ------w c:\windows\system32\hhsetup.dll
    + 2008-04-14 00:11:54 41,472 ------w c:\windows\system32\hhsetup.dll
    - 2004-08-10 11:00:00 20,992 ------w c:\windows\system32\hid.dll
    + 2008-04-14 00:11:54 20,992 ----a-w c:\windows\system32\hid.dll
    - 2006-02-07 15:36:06 77,824 ----a-w c:\windows\system32\hkcmd.exe
    + 2009-03-05 02:50:02 166,424 ----a-w c:\windows\system32\hkcmd.exe
    - 2006-07-21 08:24:43 72,704 ------w c:\windows\system32\hlink.dll
    + 2008-04-14 00:11:54 72,704 ------w c:\windows\system32\hlink.dll
    - 2004-08-10 04:00:00 344,064 ------w c:\windows\system32\hnetcfg.dll
    + 2008-04-14 00:11:54 344,064 ----a-w c:\windows\system32\hnetcfg.dll
    - 2004-08-10 04:00:00 330,752 ------w c:\windows\system32\hnetwiz.dll
    + 2008-04-14 00:11:54 330,752 ------w c:\windows\system32\hnetwiz.dll
    - 2004-08-10 04:00:00 144,896 ------w c:\windows\system32\hotplug.dll
    + 2008-04-14 00:11:54 144,896 ------w c:\windows\system32\hotplug.dll
    + 2008-04-14 00:11:54 32,285 ------w c:\windows\system32\hsfcisp2.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\httpapi.dll
    + 2008-04-14 00:11:54 24,576 ------w c:\windows\system32\httpapi.dll
    - 2004-08-10 04:00:00 41,984 ------w c:\windows\system32\htui.dll
    + 2008-04-14 00:11:54 41,984 ------w c:\windows\system32\htui.dll
    - 2004-11-18 00:41:24 347,136 ------w c:\windows\system32\hypertrm.dll
    + 2008-04-14 00:11:54 347,136 ------w c:\windows\system32\hypertrm.dll
    - 2004-08-10 04:00:00 119,808 ------w c:\windows\system32\iasrad.dll
    + 2008-04-14 00:11:54 119,808 ------w c:\windows\system32\iasrad.dll
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\icaapi.dll
    + 2008-04-14 00:11:54 11,264 ----a-w c:\windows\system32\icaapi.dll
    + 2008-07-30 00:24:50 622,080 ----a-w c:\windows\system32\icardagt.exe
    - 2008-04-23 04:16:28 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2008-12-20 23:15:13 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2008-07-30 00:24:50 11,264 ----a-w c:\windows\system32\icardres.dll
    - 2004-08-10 04:00:00 80,384 ------w c:\windows\system32\iccvid.dll
    + 2008-04-14 00:11:54 80,384 ------w c:\windows\system32\iccvid.dll
    - 2005-06-29 08:46:00 254,976 ------w c:\windows\system32\icm32.dll
    + 2008-04-14 00:11:54 254,976 ------w c:\windows\system32\icm32.dll
    - 2004-08-10 04:00:00 3,584 ------w c:\windows\system32\icmp.dll
    + 2008-04-14 00:09:40 3,584 ------w c:\windows\system32\icmp.dll
    - 2004-08-10 04:00:00 73,728 ------w c:\windows\system32\icwdial.dll
    + 2008-04-14 00:11:54 73,728 ------w c:\windows\system32\icwdial.dll
    - 2004-08-10 04:00:00 65,536 ------w c:\windows\system32\icwphbk.dll
    + 2008-04-14 00:11:54 65,536 ------w c:\windows\system32\icwphbk.dll
    - 2004-08-10 04:00:00 120,832 ------w c:\windows\system32\idq.dll
    + 2008-04-14 00:11:54 120,832 ------w c:\windows\system32\idq.dll
    - 2008-04-22 07:39:58 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    + 2008-12-19 09:10:15 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    - 2008-04-23 04:16:28 153,088 ----a-w c:\windows\system32\ieakeng.dll
    + 2008-12-20 23:15:14 153,088 ----a-w c:\windows\system32\ieakeng.dll
    - 2008-04-23 04:16:28 230,400 ----a-w c:\windows\system32\ieaksie.dll
    + 2008-12-20 23:15:14 230,400 ----a-w c:\windows\system32\ieaksie.dll
    - 2008-04-20 05:07:51 161,792 ----a-w c:\windows\system32\ieakui.dll
    + 2008-12-19 05:23:56 161,792 ----a-w c:\windows\system32\ieakui.dll
    - 2008-04-23 04:16:28 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    + 2008-12-20 23:15:15 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    - 2008-04-23 04:16:28 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    + 2008-12-20 23:15:16 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    - 2006-10-17 17:06:00 78,336 ----a-w c:\windows\system32\ieencode.dll
    + 2008-04-14 00:11:54 81,920 ----a-w c:\windows\system32\ieencode.dll
    - 2008-04-23 04:16:28 6,066,176 ----a-w c:\windows\system32\ieframe.dll
    + 2008-12-20 23:15:21 6,066,688 ----a-w c:\windows\system32\ieframe.dll
    - 2008-04-23 04:16:28 44,544 ----a-w c:\windows\system32\iernonce.dll
    + 2008-12-20 23:15:21 44,544 ----a-w c:\windows\system32\iernonce.dll
    - 2008-04-23 04:16:28 267,776 ----a-w c:\windows\system32\iertutil.dll
    + 2008-12-20 23:15:22 267,776 ----a-w c:\windows\system32\iertutil.dll
    - 2008-04-22 07:39:58 13,824 ----a-w c:\windows\system32\ieudinit.exe
    + 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
    - 2004-08-10 04:00:00 114,688 ------w c:\windows\system32\iexpress.exe
    + 2008-04-14 00:12:22 114,688 ------w c:\windows\system32\iexpress.exe
    - 2004-08-10 04:00:00 135,680 ------w c:\windows\system32\ifmon.dll
    + 2008-04-14 00:11:54 135,680 ------w c:\windows\system32\ifmon.dll
    - 2006-02-07 15:38:44 450,560 ----a-w c:\windows\system32\igfxcfg.exe
    + 2009-03-05 02:50:02 530,968 ----a-w c:\windows\system32\igfxcfg.exe
    + 2009-03-05 02:49:58 147,456 ----a-w c:\windows\system32\igfxCoIn_v4926.dll
    - 2006-02-07 15:35:12 139,264 ----a-w c:\windows\system32\igfxdev.dll
    + 2009-03-05 02:49:57 208,896 ----a-w c:\windows\system32\igfxdev.dll
    - 2006-02-07 15:36:12 86,016 ----a-w c:\windows\system32\igfxdo.dll
    + 2009-03-05 02:49:57 135,168 ----a-w c:\windows\system32\igfxdo.dll
    - 2006-02-07 15:39:54 40,960 ----a-w c:\windows\system32\igfxexps.dll
    + 2009-03-05 02:49:57 24,576 ----a-w c:\windows\system32\igfxexps.dll
    - 2006-02-07 15:39:54 94,208 ----a-w c:\windows\system32\igfxext.exe
    + 2009-03-05 02:50:02 170,520 ----a-w c:\windows\system32\igfxext.exe
    - 2006-02-07 15:40:02 118,784 ----a-w c:\windows\system32\igfxpers.exe
    + 2009-03-05 02:50:02 137,752 ----a-w c:\windows\system32\igfxpers.exe
    - 2006-02-07 15:39:06 143,360 ----a-w c:\windows\system32\igfxpph.dll
    + 2009-03-05 02:49:57 204,800 ----a-w c:\windows\system32\igfxpph.dll
    - 2006-02-07 15:39:10 1,503,232 ----a-w c:\windows\system32\igfxress.dll
    + 2009-03-05 02:49:57 3,293,184 ----a-w c:\windows\system32\igfxress.dll
    - 2006-02-07 15:35:58 61,440 ----a-w c:\windows\system32\igfxsrvc.dll
    + 2009-03-05 02:49:58 48,128 ----a-w c:\windows\system32\igfxsrvc.dll
    - 2006-02-07 15:35:58 163,840 ----a-w c:\windows\system32\igfxsrvc.exe
    + 2009-03-05 02:50:02 256,536 ----a-w c:\windows\system32\igfxsrvc.exe
    - 2006-02-07 15:39:20 94,208 ----a-w c:\windows\system32\igfxtray.exe
    + 2009-03-05 02:50:02 141,848 ----a-w c:\windows\system32\igfxtray.exe
    - 2006-02-07 15:39:48 114,688 ----a-w c:\windows\system32\igfxzoom.exe
    + 2009-03-05 02:50:03 170,520 ----a-w c:\windows\system32\igfxzoom.exe
    - 2006-02-07 15:48:30 524,288 ----a-w c:\windows\system32\igldev32.dll
    + 2009-03-05 02:49:58 294,912 ----a-w c:\windows\system32\igldev32.dll
    - 2006-02-07 15:46:40 2,310,144 ----a-w c:\windows\system32\iglicd32.dll
    + 2009-03-05 02:49:58 2,334,720 ----a-w c:\windows\system32\iglicd32.dll
    - 2004-08-10 04:00:00 8,192 ------w c:\windows\system32\igmpagnt.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\system32\igmpagnt.dll
    + 2009-03-05 02:49:58 1,670,144 ----a-w c:\windows\system32\igxpdv32.dll
    + 2009-03-05 02:49:58 2,643,968 ----a-w c:\windows\system32\igxpdx32.dll
    + 2009-03-05 02:49:58 151,040 ----a-w c:\windows\system32\igxpgd32.dll
    + 2009-03-05 02:49:58 57,344 ----a-w c:\windows\system32\igxprd32.dll
    - 2004-08-10 04:00:00 81,920 ------w c:\windows\system32\ils.dll
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\system32\ils.dll
    - 2004-08-10 11:00:00 144,384 ------w c:\windows\system32\imagehlp.dll
    + 2008-04-14 00:11:54 144,384 ------w c:\windows\system32\imagehlp.dll
    - 2004-08-10 04:00:00 150,016 ------w c:\windows\system32\imapi.exe
    + 2008-04-14 00:12:22 150,528 ------w c:\windows\system32\imapi.exe
    - 2004-08-10 04:00:00 36,921 ------w c:\windows\system32\imeshare.dll
    + 2008-04-14 00:11:54 36,921 ------w c:\windows\system32\imeshare.dll
    - 2004-08-10 04:00:00 110,080 ------w c:\windows\system32\imm32.dll
    + 2008-04-14 00:11:54 110,080 ----a-w c:\windows\system32\imm32.dll
    - 2004-08-10 04:00:00 274,432 ------w c:\windows\system32\inetcfg.dll
    + 2008-04-14 00:11:54 274,432 ------w c:\windows\system32\inetcfg.dll
    - 2007-08-21 06:15:44 683,520 ----a-w c:\windows\system32\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ----a-w c:\windows\system32\inetcomm.dll
    - 2004-08-10 04:00:00 33,280 ------w c:\windows\system32\inetmib1.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\system32\inetmib1.dll
    - 2004-08-10 04:00:00 75,264 ------w c:\windows\system32\inetpp.dll
    + 2008-04-14 00:11:55 75,264 ----a-w c:\windows\system32\inetpp.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\inetppui.dll
    + 2008-04-14 00:11:55 15,872 ------w c:\windows\system32\inetppui.dll
    - 2004-08-10 04:00:00 48,128 ------w c:\windows\system32\inetres.dll
    + 2008-04-13 16:22:12 48,128 ------w c:\windows\system32\inetres.dll
    + 2008-04-14 00:12:06 2,134,528 ------w c:\windows\system32\inetsrv\smtpsnap.dll
    + 2008-07-30 00:24:50 97,800 ----a-w c:\windows\system32\infocardapi.dll
    - 2004-08-10 04:00:00 147,456 ------w c:\windows\system32\initpki.dll
    + 2008-04-14 00:11:55 147,456 ------w c:\windows\system32\initpki.dll
    - 2004-08-10 04:00:00 123,392 ------w c:\windows\system32\input.dll
    + 2008-04-14 00:11:55 123,392 ------w c:\windows\system32\input.dll
    - 2004-08-10 04:00:00 55,808 ------w c:\windows\system32\ipconfig.exe
    + 2008-04-14 00:12:22 55,808 ------w c:\windows\system32\ipconfig.exe
    - 2006-05-19 12:59:41 94,720 ----a-w c:\windows\system32\iphlpapi.dll
    + 2008-04-14 00:11:55 94,720 ----a-w c:\windows\system32\iphlpapi.dll
    - 2004-08-10 04:00:00 154,112 ------w c:\windows\system32\ipmontr.dll
    + 2008-04-14 00:11:55 161,280 ------w c:\windows\system32\ipmontr.dll
    - 2004-08-10 04:00:00 331,264 ------w c:\windows\system32\ipnathlp.dll
    + 2008-04-14 00:11:55 331,264 ----a-w c:\windows\system32\ipnathlp.dll
    - 2004-08-10 04:00:00 330,752 ------w c:\windows\system32\ippromon.dll
    + 2008-04-14 00:11:55 330,752 ------w c:\windows\system32\ippromon.dll
    - 2004-08-10 04:00:00 169,984 ------w c:\windows\system32\iprtrmgr.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\windows\system32\iprtrmgr.dll
    - 2004-08-10 04:00:00 349,696 ------w c:\windows\system32\ipsecsnp.dll
    + 2008-04-14 00:11:55 349,696 ------w c:\windows\system32\ipsecsnp.dll
    - 2004-08-10 04:00:00 182,784 ------w c:\windows\system32\ipsecsvc.dll
    + 2008-04-14 00:11:55 183,808 ----a-w c:\windows\system32\ipsecsvc.dll
    - 2004-08-10 04:00:00 384,000 ------w c:\windows\system32\ipsmsnap.dll
    + 2008-04-14 00:11:55 384,000 ------w c:\windows\system32\ipsmsnap.dll
    - 2004-08-10 04:00:00 53,248 ------w c:\windows\system32\ipv6.exe
    + 2008-04-14 00:12:23 53,248 ------w c:\windows\system32\ipv6.exe
    - 2004-08-10 04:00:00 59,904 ------w c:\windows\system32\ipv6mon.dll
    + 2008-04-14 00:11:55 59,904 ------w c:\windows\system32\ipv6mon.dll
    - 2004-08-10 04:00:00 23,552 ------w c:\windows\system32\ipxroute.exe
    + 2008-04-14 00:12:23 23,552 ------w c:\windows\system32\ipxroute.exe
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\ipxwan.dll
    + 2008-04-14 00:11:55 22,016 ------w c:\windows\system32\ipxwan.dll
    - 2004-08-10 04:00:00 120,320 ------w c:\windows\system32\ir41_qc.dll
    + 2008-04-14 00:11:55 120,320 ------w c:\windows\system32\ir41_qc.dll
    - 2004-08-10 04:00:00 338,432 ------w c:\windows\system32\ir41_qcx.dll
    + 2008-04-14 00:11:55 338,432 ------w c:\windows\system32\ir41_qcx.dll
    - 2004-08-10 04:00:00 755,200 ------w c:\windows\system32\ir50_32.dll
    + 2008-04-14 00:11:55 755,200 ------w c:\windows\system32\ir50_32.dll
    - 2004-08-10 04:00:00 200,192 ------w c:\windows\system32\ir50_qc.dll
    + 2008-04-14 00:11:55 200,192 ------w c:\windows\system32\ir50_qc.dll
    - 2004-08-10 04:00:00 183,808 ------w c:\windows\system32\ir50_qcx.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\system32\ir50_qcx.dll
    - 2004-08-10 04:00:00 81,920 ------w c:\windows\system32\isign32.dll
    + 2008-04-14 00:11:55 81,920 ------w c:\windows\system32\isign32.dll
    - 2004-08-10 04:00:00 32,768 ------w c:\windows\system32\isrdbg32.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\system32\isrdbg32.dll
    - 2005-05-27 09:04:27 155,136 ------w c:\windows\system32\itircl.dll
    + 2008-04-14 00:11:55 155,136 ------w c:\windows\system32\itircl.dll
    - 2005-05-27 09:04:27 137,216 ------w c:\windows\system32\itss.dll
    + 2008-04-14 00:11:55 138,240 ------w c:\windows\system32\itss.dll
    - 2004-08-10 04:00:00 54,272 ------w c:\windows\system32\ixsso.dll
    + 2008-04-14 00:11:55 54,272 ------w c:\windows\system32\ixsso.dll
    - 2004-08-10 11:00:00 47,616 ------w c:\windows\system32\iyuv_32.dll
    + 2008-04-14 00:11:55 47,616 ------w c:\windows\system32\iyuv_32.dll
    - 2008-02-22 06:23:35 135,168 ----a-w c:\windows\system32\java.exe
    + 2009-02-26 03:35:25 144,792 ----a-w c:\windows\system32\java.exe
    - 2008-02-22 06:23:39 135,168 ----a-w c:\windows\system32\javaw.exe
    + 2009-02-26 03:35:25 144,792 ----a-w c:\windows\system32\javaw.exe
    - 2008-02-22 07:33:32 139,264 ----a-w c:\windows\system32\javaws.exe
    + 2009-02-26 03:35:25 148,888 ----a-w c:\windows\system32\javaws.exe
    - 2006-06-01 18:47:07 163,840 ------w c:\windows\system32\jgdw400.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\windows\system32\jgdw400.dll
    - 2006-06-01 18:47:07 27,648 ------w c:\windows\system32\jgpl400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\windows\system32\jgpl400.dll
    - 2006-10-17 17:00:00 491,520 ----a-w c:\windows\system32\jscript.dll
    + 2008-05-09 10:53:39 512,000 ----a-w c:\windows\system32\jscript.dll
    - 2008-04-23 04:16:28 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-12-20 23:15:23 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdbhc.dll
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\kbdfi1.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\system32\kbdfi1.dll
    - 2004-08-10 04:00:00 6,144 ------w c:\windows\system32\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdinbe1.dll
    - 2004-08-10 04:00:00 6,656 ------w c:\windows\system32\kbdinben.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdinben.dll
    - 2004-08-10 04:00:00 6,656 ------w c:\windows\system32\kbdinmal.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\system32\kbdinmal.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdiultn.dll
    - 2004-08-10 04:00:00 5,632 ------w c:\windows\system32\kbdmaori.dll
    + 2008-04-14 00:09:55 5,632 ------w c:\windows\system32\kbdmaori.dll
    - 2004-08-10 04:00:00 6,144 ------w c:\windows\system32\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdmlt47.dll
    - 2004-08-10 04:00:00 6,144 ------w c:\windows\system32\kbdmlt48.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdmlt48.dll
    - 2004-08-10 11:00:00 7,168 ------w c:\windows\system32\kbdnec.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\system32\kbdnec.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdnepr.dll
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\kbdno1.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\system32\kbdno1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\system32\kbdpash.dll
    - 2004-08-10 04:00:00 7,680 ------w c:\windows\system32\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\system32\kbdsmsfi.dll
    - 2004-08-10 04:00:00 7,680 ------w c:\windows\system32\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\system32\kbdsmsno.dll
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\kbdukx.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\system32\kbdukx.dll
    - 2004-08-10 04:00:00 7,424 ------w c:\windows\system32\kd1394.dll
    + 2008-04-13 18:31:35 7,424 ------w c:\windows\system32\kd1394.dll
    - 2005-06-15 17:49:30 295,936 ----a-w c:\windows\system32\kerberos.dll
    + 2008-04-14 00:11:56 299,520 ----a-w c:\windows\system32\kerberos.dll
    - 2007-04-16 15:52:53 984,576 ------w c:\windows\system32\kernel32.dll
    + 2008-04-14 00:11:56 989,696 ------w c:\windows\system32\kernel32.dll
    - 2004-08-10 04:00:00 150,528 ------w c:\windows\system32\keymgr.dll
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\system32\keymgr.dll
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\system32\kmsvc.dll
    - 2004-08-04 14:56:44 4,096 ----a-w c:\windows\system32\ksuser.dll
    + 2008-04-14 01:11:56 4,096 ----a-w c:\windows\system32\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\system32\l2gpstore.dll
    + 2009-03-05 02:49:59 69,632 ----a-w c:\windows\system32\Lang\HDMI\ara\HDMIara.dll
    + 2009-03-05 02:49:59 61,440 ----a-w c:\windows\system32\Lang\HDMI\chs\HDMIchs.dll
    + 2009-03-05 02:49:59 61,440 ----a-w c:\windows\system32\Lang\HDMI\cht\HDMIcht.dll
    + 2009-03-05 02:49:59 73,728 ----a-w c:\windows\system32\Lang\HDMI\csy\HDMIcsy.dll
    + 2009-03-05 02:49:59 77,824 ----a-w c:\windows\system32\Lang\HDMI\dan\HDMIdan.dll
    + 2009-03-05 02:49:59 77,824 ----a-w c:\windows\system32\Lang\HDMI\deu\HDMIdeu.dll
    + 2009-03-05 02:49:59 81,920 ----a-w c:\windows\system32\Lang\HDMI\ell\HDMIell.dll
    + 2009-03-05 02:49:59 61,440 ----a-w c:\windows\system32\Lang\HDMI\ENU\HDMIenu.dll
    + 2009-03-05 02:49:59 77,824 ----a-w c:\windows\system32\Lang\HDMI\esp\HDMIesp.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\fin\HDMIfin.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\fra\HDMIfra.dll
    + 2009-03-05 02:50:00 69,632 ----a-w c:\windows\system32\Lang\HDMI\heb\HDMIheb.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\hun\HDMIhun.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\ita\HDMIita.dll
    + 2009-03-05 02:50:00 69,632 ----a-w c:\windows\system32\Lang\HDMI\jpn\HDMIjpn.dll
    + 2009-03-05 02:50:00 69,632 ----a-w c:\windows\system32\Lang\HDMI\kor\HDMIkor.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\nld\HDMInld.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\nor\HDMInor.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\plk\HDMIplk.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\ptb\HDMIptb.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\ptg\HDMIptg.dll
    + 2009-03-05 02:50:00 77,824 ----a-w c:\windows\system32\Lang\HDMI\rus\HDMIrus.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\SKY\HDMISKY.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\SLV\HDMISLV.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\sve\HDMIsve.dll
    + 2009-03-05 02:50:00 73,728 ----a-w c:\windows\system32\Lang\HDMI\tha\HDMItha.dll
    + 2009-03-05 02:50:01 77,824 ----a-w c:\windows\system32\Lang\HDMI\trk\HDMItrk.dll
    - 2007-10-11 18:12:48 1,468,968 ----a-w c:\windows\system32\LegitCheckControl.DLL
    + 2008-03-20 23:06:36 1,480,232 ----a-w c:\windows\system32\LegitCheckControl.dll
    - 2004-08-10 04:00:00 423,936 ------w c:\windows\system32\licdll.dll
    + 2008-04-14 09:41:58 423,936 ----a-w c:\windows\system32\licdll.dll
    - 2004-08-10 04:00:00 58,880 ------w c:\windows\system32\licwmi.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\system32\licwmi.dll
    - 2005-09-01 01:41:53 19,968 ----a-w c:\windows\system32\linkinfo.dll
    + 2008-04-14 00:11:56 19,968 ----a-w c:\windows\system32\linkinfo.dll
    - 2004-08-10 04:00:00 13,824 ------w c:\windows\system32\lmhsvc.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\system32\lmhsvc.dll
    - 2004-08-10 04:00:00 399,872 ------w c:\windows\system32\lmrt.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\system32\lmrt.dll
    - 2004-08-10 04:00:00 97,280 ------w c:\windows\system32\loadperf.dll
    + 2008-04-14 00:11:56 97,280 ----a-w c:\windows\system32\loadperf.dll
    - 2004-08-10 04:00:00 221,696 ------w c:\windows\system32\localsec.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\system32\localsec.dll
    - 2004-08-10 04:00:00 341,504 ------w c:\windows\system32\localspl.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\system32\localspl.dll
    - 2004-08-10 04:00:00 11,776 ------w c:\windows\system32\localui.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\system32\localui.dll
    - 2004-08-10 04:00:00 75,264 ------w c:\windows\system32\locator.exe
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\system32\locator.exe
    - 2006-10-19 01:03:58 100,864 ----a-w c:\windows\system32\logagent.exe
    + 2008-06-18 06:09:22 100,864 ----a-w c:\windows\system32\logagent.exe
    - 2004-08-10 04:00:00 59,392 ------w c:\windows\system32\logman.exe
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\system32\logman.exe
    - 2004-08-10 04:00:00 220,672 ------w c:\windows\system32\logon.scr
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\system32\logon.scr
    - 2004-08-10 04:00:00 514,560 ------w c:\windows\system32\logonui.exe
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\system32\logonui.exe
    - 2004-08-10 04:00:00 22,016 ------w c:\windows\system32\lpk.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\system32\lpk.dll
    - 2004-08-10 04:00:00 10,240 ------w c:\windows\system32\lprhelp.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\system32\lprhelp.dll
    - 2007-11-07 09:26:56 721,920 ------w c:\windows\system32\lsasrv.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\system32\lsasrv.dll
    - 2004-08-10 04:00:00 13,312 ------w c:\windows\system32\lsass.exe
    + 2008-04-14 00:12:24 13,312 ----a-w c:\windows\system32\lsass.exe
    + 2008-10-05 03:16:26 235,936 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe
    + 2009-02-03 02:15:28 3,771,296 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2009-02-03 02:15:30 240,544 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    - 2008-07-17 12:49:38 74,137 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    + 2008-10-16 17:12:33 88,590 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    + 2009-02-26 03:16:23 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
    - 2004-08-10 04:00:00 72,704 ------w c:\windows\system32\magnify.exe
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\system32\magnify.exe
    - 2004-08-10 04:00:00 85,504 ------w c:\windows\system32\makecab.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\system32\makecab.exe
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\mcastmib.dll
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\system32\mcastmib.dll
    + 2008-10-28 16:42:08 82,272 ----a-w c:\windows\system32\MCBroker.exe
    - 2004-08-10 04:00:00 84,480 ------w c:\windows\system32\mciavi32.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\system32\mciavi32.dll
    - 2004-08-10 04:00:00 35,328 ------w c:\windows\system32\mciqtz32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\system32\mciqtz32.dll
    - 2004-08-10 04:00:00 23,040 ------w c:\windows\system32\mciseq.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\system32\mciseq.dll
    - 2004-08-10 04:00:00 23,552 ------w c:\windows\system32\mciwave.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\system32\mciwave.dll
    + 2008-10-28 16:42:04 317,776 ----a-w c:\windows\system32\MCMaxiPT.dll
    + 2008-10-28 16:42:02 804,176 ----a-w c:\windows\system32\MCPrintX.dll
    + 2007-10-25 21:59:26 27,472 ----a-w c:\windows\system32\MCPXHost.exe
    + 2007-10-25 21:59:26 27,472 ----a-w c:\windows\system32\MCPXUser.exe
    + 2008-10-28 16:42:02 249,168 ----a-w c:\windows\system32\MCScripX.dll
    + 2008-10-28 16:42:00 264,552 ----a-w c:\windows\system32\MCSecMgr.dll
    + 2008-10-28 16:42:06 82,256 ----a-w c:\windows\system32\MCSXHost.exe
    + 2008-10-28 16:42:06 82,256 ----a-w c:\windows\system32\MCSXUser.exe
    - 2004-08-10 04:00:00 118,272 ------w c:\windows\system32\mdminst.dll
    + 2008-04-14 00:11:56 118,272 ----a-w c:\windows\system32\mdminst.dll
    - 2007-03-08 15:36:28 40,960 ------w c:\windows\system32\mf3216.dll
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\system32\mf3216.dll
    - 2006-11-01 19:17:45 927,504 ------w c:\windows\system32\mfc40u.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\system32\mfc40u.dll
    - 2004-08-10 04:00:00 1,028,096 ------w c:\windows\system32\mfc42.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\system32\mfc42.dll
    - 2004-08-10 04:00:00 22,528 ------w c:\windows\system32\mfcsubs.dll
    + 2008-04-14 00:11:56 22,528 ----a-w c:\windows\system32\mfcsubs.dll
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\mgmtapi.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\system32\mgmtapi.dll
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\system32\microsoft.managementconsole.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\midimap.dll
    + 2008-04-14 00:11:57 18,944 ----a-w c:\windows\system32\midimap.dll
    - 2004-08-10 04:00:00 60,928 ------w c:\windows\system32\miglibnt.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\system32\miglibnt.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\mimefilt.dll
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\system32\mimefilt.dll
    - 2004-08-10 04:00:00 586,240 ------w c:\windows\system32\mlang.dll
    + 2008-04-14 00:11:57 586,240 ----a-w c:\windows\system32\mlang.dll
    - 2004-08-10 04:00:00 815,104 ------w c:\windows\system32\mmc.exe
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\system32\mmc.exe
    - 2004-08-10 04:00:00 70,656 ------w c:\windows\system32\mmcbase.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\system32\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\system32\mmcex.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\system32\mmcfxcommon.dll
    - 2004-08-10 04:00:00 1,192,960 ------w c:\windows\system32\mmcndmgr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\system32\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\system32\mmcperf.exe
    - 2004-08-10 04:00:00 50,688 ------w c:\windows\system32\mmcshext.dll
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\system32\mmcshext.dll
    - 2004-08-10 04:00:00 17,408 ------w c:\windows\system32\mmfutil.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\system32\mmfutil.dll
    - 2004-08-10 04:00:00 34,560 ------w c:\windows\system32\mnmdd.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\system32\mnmdd.dll
    - 2004-08-10 04:00:00 32,768 ------w c:\windows\system32\mnmsrvc.exe
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\system32\mnmsrvc.exe
  4. 2009-03-13, 04:33 #14
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 10

    - 2004-08-10 04:00:00 207,360 ------w c:\windows\system32\mobsync.dll
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\system32\mobsync.dll
    - 2004-08-10 04:00:00 143,360 ------w c:\windows\system32\mobsync.exe
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\system32\mobsync.exe
    - 2004-08-10 04:00:00 153,600 ------w c:\windows\system32\modemui.dll
    + 2008-04-14 00:11:57 153,600 ----a-w c:\windows\system32\modemui.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\more.com
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\system32\more.com
    - 2004-08-10 04:00:00 216,064 ------w c:\windows\system32\moricons.dll
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\system32\moricons.dll
    - 2004-08-10 04:00:00 123,392 ------w c:\windows\system32\mplay32.exe
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\system32\mplay32.exe
    - 2004-08-10 04:00:00 59,904 ------w c:\windows\system32\mpr.dll
    + 2008-04-14 00:11:57 59,904 ----a-w c:\windows\system32\mpr.dll
    - 2004-08-10 04:00:00 87,040 ------w c:\windows\system32\mprapi.dll
    + 2008-04-14 00:11:57 87,040 ----a-w c:\windows\system32\mprapi.dll
    - 2004-08-10 04:00:00 49,152 ------w c:\windows\system32\mprdim.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\system32\mprdim.dll
    - 2007-07-06 12:46:59 138,240 ------w c:\windows\system32\mqad.dll
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\system32\mqad.dll
    - 2004-08-10 04:00:00 19,968 ------w c:\windows\system32\mqbkup.exe
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\system32\mqbkup.exe
    - 2007-07-06 12:46:59 47,104 ------w c:\windows\system32\mqdscli.dll
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\system32\mqdscli.dll
    - 2007-07-06 12:46:59 16,896 ------w c:\windows\system32\mqise.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\system32\mqise.dll
    - 2004-08-10 04:00:00 89,088 ------w c:\windows\system32\mqlogmgr.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\system32\mqlogmgr.dll
    - 2004-08-10 04:00:00 225,280 ------w c:\windows\system32\mqoa.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\system32\mqoa.dll
    - 2007-07-06 12:46:59 660,992 ------w c:\windows\system32\mqqm.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\system32\mqqm.dll
    - 2007-07-06 12:46:59 177,152 ------w c:\windows\system32\mqrt.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\system32\mqrt.dll
    - 2004-08-10 04:00:00 123,392 ------w c:\windows\system32\mqrtdep.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\system32\mqrtdep.dll
    - 2007-07-06 12:46:59 95,744 ------w c:\windows\system32\mqsec.dll
    + 2008-04-14 00:11:57 95,744 ----a-w c:\windows\system32\mqsec.dll
    - 2004-08-10 04:00:00 517,632 ------w c:\windows\system32\mqsnap.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\system32\mqsnap.dll
    - 2004-08-10 04:00:00 4,608 ------w c:\windows\system32\mqsvc.exe
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\system32\mqsvc.exe
    - 2004-08-10 04:00:00 117,248 ------w c:\windows\system32\mqtgsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\system32\mqtgsvc.exe
    - 2004-08-10 04:00:00 186,880 ------w c:\windows\system32\mqtrig.dll
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\system32\mqtrig.dll
    - 2007-07-06 12:46:59 48,640 ------w c:\windows\system32\mqupgrd.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\system32\mqupgrd.dll
    - 2007-07-06 12:46:59 471,552 ------w c:\windows\system32\mqutil.dll
    + 2008-04-14 00:11:58 471,552 ----a-w c:\windows\system32\mqutil.dll
    - 2004-08-10 04:00:00 71,680 ------w c:\windows\system32\msacm32.dll
    + 2008-04-14 00:11:58 71,680 ----a-w c:\windows\system32\msacm32.dll
    - 2004-08-10 04:00:00 3,584 ------w c:\windows\system32\msafd.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\system32\msafd.dll
    - 2004-08-10 04:00:00 86,016 ------w c:\windows\system32\msapsspc.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\system32\msapsspc.dll
    - 2004-08-10 04:00:00 57,344 ------w c:\windows\system32\msasn1.dll
    + 2008-04-14 00:11:58 57,344 ----a-w c:\windows\system32\msasn1.dll
    - 2005-06-29 08:46:00 74,240 ------w c:\windows\system32\mscms.dll
    + 2008-06-24 16:43:16 74,240 ----a-w c:\windows\system32\mscms.dll
    - 2004-08-10 04:00:00 69,632 ------w c:\windows\system32\msconf.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\system32\msconf.dll
    - 2006-12-22 16:28:14 271,360 ----a-w c:\windows\system32\mscoree.dll
    + 2008-07-25 16:16:58 282,112 ----a-w c:\windows\system32\mscoree.dll
    - 2004-07-15 13:34:06 16,896 ----a-w c:\windows\system32\mscorier.dll
    + 2008-07-25 16:16:58 158,720 ----a-w c:\windows\system32\mscorier.dll
    - 2003-02-21 09:09:14 106,496 ----a-w c:\windows\system32\mscories.dll
    + 2008-07-25 16:16:58 83,968 ----a-w c:\windows\system32\mscories.dll
    - 2004-08-10 04:00:00 12,288 ------w c:\windows\system32\mscpx32r.dLL
    + 2008-04-13 17:26:07 12,288 ----a-w c:\windows\system32\mscpx32r.dll
    - 2004-08-10 04:00:00 36,864 ------w c:\windows\system32\mscpxl32.dLL
    + 2008-04-14 00:11:58 36,864 ----a-w c:\windows\system32\mscpxl32.dll
    - 2008-02-26 11:59:50 294,912 ------w c:\windows\system32\msctf.dll
    + 2008-04-14 00:11:58 297,984 ----a-w c:\windows\system32\msctf.dll
    - 2004-08-10 04:00:00 69,120 ------w c:\windows\system32\MSCTFP.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\system32\msctfp.dll
    - 2004-08-10 04:00:00 118,784 ------w c:\windows\system32\msdadiag.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\system32\msdadiag.dll
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\system32\msdart.dll
    + 2008-04-14 00:11:59 151,552 ----a-w c:\windows\system32\msdart.dll
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\msdmo.dll
    + 2008-04-14 00:11:59 14,336 ----a-w c:\windows\system32\msdmo.dll
    - 2004-08-10 04:00:00 6,144 ------w c:\windows\system32\msdtc.exe
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\system32\msdtc.exe
    - 2004-08-10 04:00:00 58,880 ------w c:\windows\system32\msdtclog.dll
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\system32\msdtclog.dll
    - 2006-03-01 19:42:42 426,496 ------w c:\windows\system32\msdtcprx.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\system32\msdtcprx.dll
    - 2006-03-01 19:42:42 956,416 ------w c:\windows\system32\msdtctm.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\system32\msdtctm.dll
    - 2006-03-01 19:42:42 161,280 ------w c:\windows\system32\msdtcuiu.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\system32\msdtcuiu.dll
    - 2004-08-10 04:00:00 4,126 ------w c:\windows\system32\msdxmlc.dll
    + 2008-04-14 00:10:08 4,126 ------w c:\windows\system32\msdxmlc.dll
    - 2008-04-23 04:16:28 459,264 ----a-w c:\windows\system32\msfeeds.dll
    + 2008-12-20 23:15:23 459,264 ----a-w c:\windows\system32\msfeeds.dll
    - 2008-04-23 04:16:28 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    + 2008-12-20 23:15:24 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    - 2006-11-27 14:54:06 539,136 ------w c:\windows\system32\msftedit.dll
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\system32\msftedit.dll
    - 2004-08-10 04:00:00 994,304 ------w c:\windows\system32\msgina.dll
    + 2008-04-14 00:11:59 997,376 ----a-w c:\windows\system32\msgina.dll
    - 2004-08-10 04:00:00 33,792 ------w c:\windows\system32\msgsvc.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\system32\msgsvc.dll
    - 2004-08-10 04:00:00 188,416 ------w c:\windows\system32\msh261.drv
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\system32\msh261.drv
    - 2004-08-10 11:00:00 294,912 ------w c:\windows\system32\msh263.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\system32\msh263.drv
    - 2008-04-24 02:16:30 3,591,680 ----a-w c:\windows\system32\mshtml.dll
    + 2009-01-17 02:35:14 3,594,752 ----a-w c:\windows\system32\mshtml.dll
    - 2008-04-23 04:16:28 478,208 ----a-w c:\windows\system32\mshtmled.dll
    + 2008-12-20 23:15:30 477,696 ----a-w c:\windows\system32\mshtmled.dll
    - 2007-04-18 16:12:23 2,854,400 ----a-w c:\windows\system32\msi.dll
    + 2008-04-14 00:11:59 2,843,136 ----a-w c:\windows\system32\msi.dll
    - 2004-08-10 04:00:00 51,712 ------w c:\windows\system32\msident.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\system32\msident.dll
    - 2004-08-10 04:00:00 6,656 ------w c:\windows\system32\msidle.dll
    + 2008-04-14 00:11:59 6,656 ----a-w c:\windows\system32\msidle.dll
    - 2004-08-10 04:00:00 248,832 ------w c:\windows\system32\msieftp.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\system32\msieftp.dll
    - 2005-05-04 02:58:36 78,848 ------w c:\windows\system32\msiexec.exe
    + 2008-04-14 00:12:28 78,848 ----a-w c:\windows\system32\msiexec.exe
    - 2005-05-04 02:58:36 271,360 ------w c:\windows\system32\msihnd.dll
    + 2008-04-14 00:11:59 271,360 ----a-w c:\windows\system32\msihnd.dll
    - 2004-08-10 04:00:00 4,608 ------w c:\windows\system32\msimg32.dll
    + 2008-04-14 00:11:59 4,608 ----a-w c:\windows\system32\msimg32.dll
    - 2005-05-04 02:58:36 884,736 ------w c:\windows\system32\msimsg.dll
    + 2008-04-13 15:39:43 884,736 ----a-w c:\windows\system32\msimsg.dll
    - 2004-08-10 04:00:00 159,232 ------w c:\windows\system32\MSIMTF.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\system32\msimtf.dll
    - 2005-05-04 02:58:36 15,360 ------w c:\windows\system32\msisip.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\system32\msisip.dll
    - 2008-03-27 08:12:54 151,583 ------w c:\windows\system32\msjint40.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\system32\msjint40.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\mslbui.dll
    + 2008-04-14 00:12:00 25,088 ----a-w c:\windows\system32\mslbui.dll
    - 2004-08-10 04:00:00 290,816 ------w c:\windows\system32\msnsspc.dll
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\system32\msnsspc.dll
    - 2004-08-10 04:00:00 252,928 ------w c:\windows\system32\msoeacct.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\system32\msoeacct.dll
    - 2004-08-10 04:00:00 105,984 ------w c:\windows\system32\msoert2.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\system32\msoert2.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\msorc32r.dll
    + 2008-04-13 17:24:14 20,480 ----a-w c:\windows\system32\msorc32r.dll
    - 2004-08-10 04:00:00 143,360 ------w c:\windows\system32\msorcl32.dll
    + 2008-04-14 00:12:00 143,360 ----a-w c:\windows\system32\msorcl32.dll
    - 2004-08-10 04:00:00 343,040 ------w c:\windows\system32\mspaint.exe
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\system32\mspaint.exe
    - 2004-08-10 04:00:00 30,208 ------w c:\windows\system32\mspatcha.dll
    + 2008-04-14 00:12:00 29,696 ----a-w c:\windows\system32\mspatcha.dll
    - 2004-08-10 04:00:00 48,128 ------w c:\windows\system32\msprivs.dll
    + 2008-04-13 16:23:31 48,128 ----a-w c:\windows\system32\msprivs.dll
    - 2008-04-23 04:16:28 193,024 ----a-w c:\windows\system32\msrating.dll
    + 2008-12-20 23:15:31 193,024 ----a-w c:\windows\system32\msrating.dll
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\msrle32.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\system32\msrle32.dll
    - 2004-08-10 04:00:00 134,656 ------w c:\windows\system32\mssap.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\system32\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\system32\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\system32\msshavmsg.dll
    - 2004-08-10 04:00:00 274,944 ------w c:\windows\system32\mstask.dll
    + 2008-04-14 00:12:00 274,944 ----a-w c:\windows\system32\mstask.dll
    - 2008-04-23 04:16:28 671,232 ----a-w c:\windows\system32\mstime.dll
    + 2008-12-20 23:15:32 671,232 ----a-w c:\windows\system32\mstime.dll
    - 2004-08-10 04:00:00 12,288 ------w c:\windows\system32\mstinit.exe
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\system32\mstinit.exe
    - 2004-08-10 04:00:00 115,712 ------w c:\windows\system32\mstlsapi.dll
    + 2008-04-14 00:12:00 116,224 ----a-w c:\windows\system32\mstlsapi.dll
    - 2004-08-10 04:00:00 407,552 ------w c:\windows\system32\mstsc.exe
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\system32\mstsc.exe
    - 2004-08-10 04:00:00 655,360 ------w c:\windows\system32\mstscax.dll
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\system32\mstscax.dll
    - 2004-08-10 04:00:00 195,072 ------w c:\windows\system32\msutb.dll
    + 2008-04-14 00:12:00 195,072 ----a-w c:\windows\system32\msutb.dll
    - 2004-08-10 04:00:00 129,536 ------w c:\windows\system32\msv1_0.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\system32\msv1_0.dll
    - 2004-02-24 03:42:40 1,386,496 ----a-w c:\windows\system32\msvbvm60.dll
    + 2008-04-14 00:12:00 1,384,479 ----a-w c:\windows\system32\msvbvm60.dll
    - 2004-08-10 04:00:00 54,784 ------w c:\windows\system32\msvcirt.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\system32\msvcirt.dll
    - 2004-08-10 04:00:00 413,696 ------w c:\windows\system32\msvcp60.dll
    + 2008-04-14 00:12:01 413,696 ----a-w c:\windows\system32\msvcp60.dll
    - 2004-08-10 04:00:00 343,040 ------w c:\windows\system32\msvcrt.dll
    + 2008-04-14 00:12:01 343,040 ----a-w c:\windows\system32\msvcrt.dll
    - 2004-08-10 04:00:00 61,440 ------w c:\windows\system32\msvcrt40.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\system32\msvcrt40.dll
    - 2004-08-10 04:00:00 120,832 ------w c:\windows\system32\msvfw32.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\system32\msvfw32.dll
    - 2004-08-10 04:00:00 72,704 ------w c:\windows\system32\msw3prt.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\system32\msw3prt.dll
    - 2004-08-10 04:00:00 204,288 ------w c:\windows\system32\mswebdvd.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\system32\mswebdvd.dll
    - 2008-06-20 17:41:10 245,248 ----a-w c:\windows\system32\mswsock.dll
    + 2008-06-20 17:46:57 245,248 ----a-w c:\windows\system32\mswsock.dll
    - 2004-08-10 04:00:00 506,368 ------w c:\windows\system32\msxml.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\system32\msxml.dll
    - 2004-08-10 04:00:00 701,440 ------w c:\windows\system32\msxml2.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\system32\msxml2.dll
    - 2007-06-26 06:08:16 1,104,896 ----a-w c:\windows\system32\msxml3.dll
    + 2008-09-04 17:15:04 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    - 2007-05-08 19:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll
    + 2008-09-30 21:43:34 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    + 2008-09-10 01:14:56 1,307,648 ----a-w c:\windows\system32\msxml6.dll
    + 2008-04-13 17:27:18 79,872 ------w c:\windows\system32\msxml6r.dll
    - 2004-08-10 11:00:00 17,408 ------w c:\windows\system32\msyuv.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\system32\msyuv.dll
    - 2006-03-01 19:42:42 66,560 ----a-w c:\windows\system32\mtxclu.dll
    + 2008-04-14 00:12:01 66,560 ----a-w c:\windows\system32\mtxclu.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\mtxdm.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\system32\mtxdm.dll
    - 2004-08-10 04:00:00 4,096 ------w c:\windows\system32\mtxex.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\system32\mtxex.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\mtxlegih.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\system32\mtxlegih.dll
    - 2006-03-01 19:42:42 91,136 ------w c:\windows\system32\mtxoci.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\system32\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\system32\mtxparhd.dll
    - 2004-08-10 11:00:00 393,728 ------w c:\windows\system32\mui\0401\xpob2res.dll
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\system32\mui\0401\xpob2res.dll
    - 2004-08-10 11:00:00 186,880 ------w c:\windows\system32\mui\0401\xpsp1res.dll
    + 2008-04-13 18:35:06 186,880 ------w c:\windows\system32\mui\0401\xpsp1res.dll
    - 2004-08-10 11:00:00 2,869,248 ------w c:\windows\system32\mui\0401\xpsp2res.dll
    + 2008-04-13 18:35:49 2,869,248 ------w c:\windows\system32\mui\0401\xpsp2res.dll
    + 2008-04-13 18:39:02 656,896 ------w c:\windows\system32\mui\0401\xpsp3res.dll
    - 2004-08-10 11:00:00 189,440 ------w c:\windows\system32\mui\0402\xpsp1res.dll
    + 2008-04-13 18:35:08 189,440 ------w c:\windows\system32\mui\0402\xpsp1res.dll
    - 2004-08-10 11:00:00 212,480 ------w c:\windows\system32\mui\0404\xpob2res.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\system32\mui\0404\xpob2res.dll
    - 2004-08-10 11:00:00 161,280 ------w c:\windows\system32\mui\0404\xpsp1res.dll
    + 2008-04-13 18:35:09 161,280 ------w c:\windows\system32\mui\0404\xpsp1res.dll
    - 2004-08-10 11:00:00 477,696 ------w c:\windows\system32\mui\0404\xpsp2res.dll
    + 2008-04-13 18:36:10 477,696 ------w c:\windows\system32\mui\0404\xpsp2res.dll
    + 2008-04-13 18:39:13 327,680 ------w c:\windows\system32\mui\0404\xpsp3res.dll
    - 2004-08-10 11:00:00 428,032 ------w c:\windows\system32\mui\0405\xpob2res.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\system32\mui\0405\xpob2res.dll
    - 2004-08-10 11:00:00 188,928 ------w c:\windows\system32\mui\0405\xpsp1res.dll
    + 2008-04-13 18:35:09 188,928 ------w c:\windows\system32\mui\0405\xpsp1res.dll
    - 2004-08-10 11:00:00 734,720 ------w c:\windows\system32\mui\0405\xpsp2res.dll
    + 2008-04-13 18:36:10 734,720 ------w c:\windows\system32\mui\0405\xpsp2res.dll
    + 2008-04-13 18:39:02 601,088 ------w c:\windows\system32\mui\0405\xpsp3res.dll
    - 2004-08-10 11:00:00 418,816 ------w c:\windows\system32\mui\0406\xpob2res.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\system32\mui\0406\xpob2res.dll
    - 2004-08-10 11:00:00 192,512 ------w c:\windows\system32\mui\0406\xpsp1res.dll
    + 2008-04-13 18:35:09 192,000 ------w c:\windows\system32\mui\0406\xpsp1res.dll
    - 2004-08-10 11:00:00 742,912 ------w c:\windows\system32\mui\0406\xpsp2res.dll
    + 2008-04-13 18:36:10 742,912 ------w c:\windows\system32\mui\0406\xpsp2res.dll
    + 2008-04-13 18:39:12 605,696 ------w c:\windows\system32\mui\0406\xpsp3res.dll
    - 2004-08-10 11:00:00 403,456 ------w c:\windows\system32\mui\0407\xpob2res.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\system32\mui\0407\xpob2res.dll
    - 2004-08-10 11:00:00 199,680 ------w c:\windows\system32\mui\0407\xpsp1res.dll
    + 2008-04-13 18:35:21 199,680 ------w c:\windows\system32\mui\0407\xpsp1res.dll
    - 2004-08-10 11:00:00 788,992 ------w c:\windows\system32\mui\0407\xpsp2res.dll
    + 2008-04-13 18:37:03 788,480 ------w c:\windows\system32\mui\0407\xpsp2res.dll
    + 2008-04-13 18:39:19 663,552 ------w c:\windows\system32\mui\0407\xpsp3res.dll
    - 2004-08-10 11:00:00 419,328 ------w c:\windows\system32\mui\0408\xpob2res.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\system32\mui\0408\xpob2res.dll
    - 2004-08-10 11:00:00 197,632 ------w c:\windows\system32\mui\0408\xpsp1res.dll
    + 2008-04-13 18:35:11 197,632 ------w c:\windows\system32\mui\0408\xpsp1res.dll
    - 2004-08-10 11:00:00 801,280 ------w c:\windows\system32\mui\0408\xpsp2res.dll
    + 2008-04-13 18:36:35 801,280 ------w c:\windows\system32\mui\0408\xpsp2res.dll
    + 2008-04-13 18:39:12 679,936 ------w c:\windows\system32\mui\0408\xpsp3res.dll
    - 2006-12-22 17:02:36 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll
    + 2008-07-25 16:17:04 15,360 ----a-w c:\windows\system32\mui\0409\mscorees.dll
    - 2004-08-10 11:00:00 405,504 ------w c:\windows\system32\mui\040b\xpob2res.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\system32\mui\040b\xpob2res.dll
    - 2004-08-10 11:00:00 186,368 ------w c:\windows\system32\mui\040b\xpsp1res.dll
    + 2008-04-13 18:35:11 186,368 ------w c:\windows\system32\mui\040b\xpsp1res.dll
    - 2004-08-10 11:00:00 729,088 ------w c:\windows\system32\mui\040b\xpsp2res.dll
    + 2008-04-13 18:36:39 729,088 ------w c:\windows\system32\mui\040b\xpsp2res.dll
    + 2008-04-13 18:39:17 604,672 ------w c:\windows\system32\mui\040b\xpsp3res.dll
    - 2004-08-10 11:00:00 410,624 ------w c:\windows\system32\mui\040C\xpob2res.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\system32\mui\040C\xpob2res.dll
    - 2004-08-10 11:00:00 197,632 ------w c:\windows\system32\mui\040C\xpsp1res.dll
    + 2008-04-13 18:35:20 197,632 ------w c:\windows\system32\mui\040C\xpsp1res.dll
    - 2004-08-10 11:00:00 793,600 ------w c:\windows\system32\mui\040C\xpsp2res.dll
    + 2008-04-13 18:36:55 793,088 ------w c:\windows\system32\mui\040C\xpsp2res.dll
    + 2008-04-13 18:39:20 663,040 ------w c:\windows\system32\mui\040C\xpsp3res.dll
    - 2004-08-10 11:00:00 384,000 ------w c:\windows\system32\mui\040D\xpob2res.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\system32\mui\040D\xpob2res.dll
    - 2004-08-10 11:00:00 181,760 ------w c:\windows\system32\mui\040D\xpsp1res.dll
    + 2008-04-13 18:35:21 181,760 ------w c:\windows\system32\mui\040D\xpsp1res.dll
    - 2004-08-10 11:00:00 2,842,112 ------w c:\windows\system32\mui\040D\xpsp2res.dll
    + 2008-04-13 18:37:07 2,842,112 ------w c:\windows\system32\mui\040D\xpsp2res.dll
    + 2008-04-13 18:39:28 620,544 ------w c:\windows\system32\mui\040D\xpsp3res.dll
    - 2004-08-10 11:00:00 434,176 ------w c:\windows\system32\mui\040e\xpob2res.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\system32\mui\040e\xpob2res.dll
    - 2004-08-10 11:00:00 195,584 ------w c:\windows\system32\mui\040e\xpsp1res.dll
    + 2008-04-13 18:35:23 195,584 ------w c:\windows\system32\mui\040e\xpsp1res.dll
    - 2004-08-10 11:00:00 769,536 ------w c:\windows\system32\mui\040e\xpsp2res.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\system32\mui\040e\xpsp2res.dll
    + 2008-04-13 18:39:28 645,120 ------w c:\windows\system32\mui\040e\xpsp3res.dll
    - 2004-08-10 11:00:00 413,696 ------w c:\windows\system32\mui\0410\xpob2res.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\system32\mui\0410\xpob2res.dll
    - 2004-08-10 11:00:00 195,072 ------w c:\windows\system32\mui\0410\xpsp1res.dll
    + 2008-04-13 18:35:23 195,072 ------w c:\windows\system32\mui\0410\xpsp1res.dll
    - 2004-08-10 11:00:00 769,536 ------w c:\windows\system32\mui\0410\xpsp2res.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\system32\mui\0410\xpsp2res.dll
    + 2008-04-13 18:39:28 658,432 ------w c:\windows\system32\mui\0410\xpsp3res.dll
    - 2004-08-10 11:00:00 275,456 ------w c:\windows\system32\mui\0411\xpob2res.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\system32\mui\0411\xpob2res.dll
    - 2004-08-10 11:00:00 171,008 ------w c:\windows\system32\mui\0411\xpsp1res.dll
    + 2008-04-13 18:35:23 171,008 ------w c:\windows\system32\mui\0411\xpsp1res.dll
    - 2004-08-10 11:00:00 562,688 ------w c:\windows\system32\mui\0411\xpsp2res.dll
    + 2008-04-13 18:37:34 562,688 ------w c:\windows\system32\mui\0411\xpsp2res.dll
    + 2008-04-13 18:39:49 412,672 ------w c:\windows\system32\mui\0411\xpsp3res.dll
    - 2004-08-10 11:00:00 306,688 ------w c:\windows\system32\mui\0412\xpob2res.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\system32\mui\0412\xpob2res.dll
    - 2004-08-10 11:00:00 167,936 ------w c:\windows\system32\mui\0412\xpsp1res.dll
    + 2008-04-13 18:35:23 167,936 ------w c:\windows\system32\mui\0412\xpsp1res.dll
    - 2004-08-10 11:00:00 543,744 ------w c:\windows\system32\mui\0412\xpsp2res.dll
    + 2008-04-13 18:37:37 543,744 ------w c:\windows\system32\mui\0412\xpsp2res.dll
    + 2008-04-13 18:39:49 392,704 ------w c:\windows\system32\mui\0412\xpsp3res.dll
    - 2004-08-10 11:00:00 401,920 ------w c:\windows\system32\mui\0413\xpob2res.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\system32\mui\0413\xpob2res.dll
    - 2004-08-10 11:00:00 196,096 ------w c:\windows\system32\mui\0413\xpsp1res.dll
    + 2008-04-13 18:35:25 196,096 ------w c:\windows\system32\mui\0413\xpsp1res.dll
    - 2004-08-10 11:00:00 769,024 ------w c:\windows\system32\mui\0413\xpsp2res.dll
    + 2008-04-13 18:38:00 769,024 ------w c:\windows\system32\mui\0413\xpsp2res.dll
    + 2008-04-13 18:39:47 645,120 ------w c:\windows\system32\mui\0413\xpsp3res.dll
    - 2004-08-10 11:00:00 353,792 ------w c:\windows\system32\mui\0414\xpob2res.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\system32\mui\0414\xpob2res.dll
    - 2004-08-10 11:00:00 189,440 ------w c:\windows\system32\mui\0414\xpsp1res.dll
    + 2008-04-13 18:35:25 189,440 ------w c:\windows\system32\mui\0414\xpsp1res.dll
    - 2004-08-10 11:00:00 716,288 ------w c:\windows\system32\mui\0414\xpsp2res.dll
    + 2008-04-13 18:38:02 716,288 ------w c:\windows\system32\mui\0414\xpsp2res.dll
    + 2008-04-13 18:39:48 591,872 ------w c:\windows\system32\mui\0414\xpsp3res.dll
    - 2004-08-10 11:00:00 391,680 ------w c:\windows\system32\mui\0415\xpob2res.dll
    + 2008-04-13 18:40:47 391,680 ------w c:\windows\system32\mui\0415\xpob2res.dll
    - 2004-08-10 11:00:00 194,560 ------w c:\windows\system32\mui\0415\xpsp1res.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\system32\mui\0415\xpsp1res.dll
    - 2004-08-10 11:00:00 759,808 ------w c:\windows\system32\mui\0415\xpsp2res.dll
    + 2008-04-13 18:38:05 759,808 ------w c:\windows\system32\mui\0415\xpsp2res.dll
    + 2008-04-13 18:39:52 641,024 ------w c:\windows\system32\mui\0415\xpsp3res.dll
    - 2004-08-10 11:00:00 409,600 ------w c:\windows\system32\mui\0416\xpob2res.dll
    + 2008-04-13 18:40:10 409,600 ------w c:\windows\system32\mui\0416\xpob2res.dll
    - 2004-08-10 11:00:00 192,512 ------w c:\windows\system32\mui\0416\xpsp1res.dll
    + 2008-04-13 18:35:08 192,512 ------w c:\windows\system32\mui\0416\xpsp1res.dll
    - 2004-08-10 11:00:00 752,128 ------w c:\windows\system32\mui\0416\xpsp2res.dll
    + 2008-04-13 18:35:43 752,128 ------w c:\windows\system32\mui\0416\xpsp2res.dll
    + 2008-04-13 18:38:56 620,032 ------w c:\windows\system32\mui\0416\xpsp3res.dll
    - 2004-08-10 11:00:00 190,464 ------w c:\windows\system32\mui\0418\xpsp1res.dll
    + 2008-04-13 18:35:27 190,464 ------w c:\windows\system32\mui\0418\xpsp1res.dll
    - 2004-08-10 11:00:00 427,008 ------w c:\windows\system32\mui\0419\xpob2res.dll
    + 2008-04-13 18:40:50 427,008 ------w c:\windows\system32\mui\0419\xpob2res.dll
    - 2004-08-10 11:00:00 192,512 ------w c:\windows\system32\mui\0419\xpsp1res.dll
    + 2008-04-13 18:35:27 192,512 ------w c:\windows\system32\mui\0419\xpsp1res.dll
    - 2004-08-10 11:00:00 736,768 ------w c:\windows\system32\mui\0419\xpsp2res.dll
    + 2008-04-13 18:38:28 736,768 ------w c:\windows\system32\mui\0419\xpsp2res.dll
    + 2008-04-13 18:39:56 627,200 ------w c:\windows\system32\mui\0419\xpsp3res.dll
    - 2004-08-10 11:00:00 188,928 ------w c:\windows\system32\mui\041a\xpsp1res.dll
    + 2008-04-13 18:35:21 188,928 ------w c:\windows\system32\mui\041a\xpsp1res.dll
    - 2004-08-10 11:00:00 405,504 ------w c:\windows\system32\mui\041b\xpob2res.dll
    + 2008-04-13 18:40:52 405,504 ------w c:\windows\system32\mui\041b\xpob2res.dll
    - 2004-08-10 11:00:00 193,024 ------w c:\windows\system32\mui\041b\xpsp1res.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\system32\mui\041b\xpsp1res.dll
    - 2004-08-10 11:00:00 757,248 ------w c:\windows\system32\mui\041b\xpsp2res.dll
    + 2008-04-13 18:38:37 757,248 ------w c:\windows\system32\mui\041b\xpsp2res.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\system32\mui\041b\xpsp3res.dll
    - 2004-08-10 11:00:00 363,520 ------w c:\windows\system32\mui\041D\xpob2res.dll
    + 2008-04-13 18:40:56 363,008 ------w c:\windows\system32\mui\041D\xpob2res.dll
    - 2004-08-10 11:00:00 188,928 ------w c:\windows\system32\mui\041D\xpsp1res.dll
    + 2008-04-13 18:35:28 188,928 ------w c:\windows\system32\mui\041D\xpsp1res.dll
    - 2004-08-10 11:00:00 724,992 ------w c:\windows\system32\mui\041D\xpsp2res.dll
    + 2008-04-13 18:38:47 724,480 ------w c:\windows\system32\mui\041D\xpsp2res.dll
    + 2008-04-13 18:40:05 590,848 ------w c:\windows\system32\mui\041D\xpsp3res.dll
    - 2004-08-10 11:00:00 188,416 ------w c:\windows\system32\mui\041e\xpsp1res.dll
    + 2008-04-13 18:35:29 188,416 ------w c:\windows\system32\mui\041e\xpsp1res.dll
    - 2004-08-10 11:00:00 390,144 ------w c:\windows\system32\mui\041f\xpob2res.dll
    + 2008-04-13 18:41:00 390,144 ------w c:\windows\system32\mui\041f\xpob2res.dll
    - 2004-08-10 11:00:00 188,928 ------w c:\windows\system32\mui\041f\xpsp1res.dll
    + 2008-04-13 18:35:30 188,928 ------w c:\windows\system32\mui\041f\xpsp1res.dll
    - 2004-08-10 11:00:00 724,480 ------w c:\windows\system32\mui\041f\xpsp2res.dll
    + 2008-04-13 18:38:51 724,480 ------w c:\windows\system32\mui\041f\xpsp2res.dll
    + 2008-04-13 18:40:09 592,896 ------w c:\windows\system32\mui\041f\xpsp3res.dll
    - 2004-08-10 11:00:00 408,576 ------w c:\windows\system32\mui\0424\xpob2res.dll
    + 2008-04-13 18:40:56 408,576 ------w c:\windows\system32\mui\0424\xpob2res.dll
    - 2004-08-10 11:00:00 192,512 ------w c:\windows\system32\mui\0424\xpsp1res.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\system32\mui\0424\xpsp1res.dll
    - 2004-08-10 11:00:00 732,160 ------w c:\windows\system32\mui\0424\xpsp2res.dll
    + 2008-04-13 18:38:36 732,160 ------w c:\windows\system32\mui\0424\xpsp2res.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\system32\mui\0424\xpsp3res.dll
    - 2004-08-10 11:00:00 187,392 ------w c:\windows\system32\mui\0425\xpsp1res.dll
    + 2008-04-13 18:35:11 186,880 ------w c:\windows\system32\mui\0425\xpsp1res.dll
    - 2004-08-10 11:00:00 188,928 ------w c:\windows\system32\mui\0426\xpsp1res.dll
    + 2008-04-13 18:35:24 188,928 ------w c:\windows\system32\mui\0426\xpsp1res.dll
    - 2004-08-10 11:00:00 189,952 ------w c:\windows\system32\mui\0427\xpsp1res.dll
    + 2008-04-13 18:35:24 189,952 ------w c:\windows\system32\mui\0427\xpsp1res.dll
    - 2004-08-10 11:00:00 270,336 ------w c:\windows\system32\mui\0804\xpob2res.dll
    + 2008-04-13 18:40:24 270,336 ------w c:\windows\system32\mui\0804\xpob2res.dll
    - 2004-08-10 11:00:00 161,280 ------w c:\windows\system32\mui\0804\xpsp1res.dll
    + 2008-04-13 18:35:06 161,280 ------w c:\windows\system32\mui\0804\xpsp1res.dll
    - 2004-08-10 11:00:00 470,016 ------w c:\windows\system32\mui\0804\xpsp2res.dll
    + 2008-04-13 18:35:54 470,016 ------w c:\windows\system32\mui\0804\xpsp2res.dll
    + 2008-04-13 18:39:03 322,560 ------w c:\windows\system32\mui\0804\xpsp3res.dll
    - 2004-08-10 11:00:00 435,200 ------w c:\windows\system32\mui\0816\xpob2res.dll
    + 2008-04-13 18:40:48 435,200 ------w c:\windows\system32\mui\0816\xpob2res.dll
    - 2004-08-10 11:00:00 194,560 ------w c:\windows\system32\mui\0816\xpsp1res.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\system32\mui\0816\xpsp1res.dll
    - 2004-08-10 11:00:00 751,616 ------w c:\windows\system32\mui\0816\xpsp2res.dll
    + 2008-04-13 18:38:06 751,616 ------w c:\windows\system32\mui\0816\xpsp2res.dll
    + 2008-04-13 18:39:53 639,488 ------w c:\windows\system32\mui\0816\xpsp3res.dll
    - 2004-08-10 11:00:00 446,464 ------w c:\windows\system32\mui\0C0A\xpob2res.dll
    + 2008-04-13 18:40:30 446,464 ------w c:\windows\system32\mui\0C0A\xpob2res.dll
    - 2004-08-10 11:00:00 196,096 ------w c:\windows\system32\mui\0C0A\xpsp1res.dll
    + 2008-04-13 18:35:11 196,096 ------w c:\windows\system32\mui\0C0A\xpsp1res.dll
    - 2004-08-10 11:00:00 773,632 ------w c:\windows\system32\mui\0C0A\xpsp2res.dll
    + 2008-04-13 18:36:38 773,632 ------w c:\windows\system32\mui\0C0A\xpsp2res.dll
    + 2008-04-13 18:39:13 648,704 ------w c:\windows\system32\mui\0C0A\xpsp3res.dll
    - 2004-08-10 04:00:00 90,624 ------w c:\windows\system32\mydocs.dll
    + 2008-04-14 00:12:01 90,624 ----a-w c:\windows\system32\mydocs.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\system32\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\system32\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\system32\napstat.exe
    - 2004-08-10 04:00:00 53,760 ------w c:\windows\system32\narrator.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\system32\narrator.exe
    - 2004-08-10 04:00:00 36,352 ------w c:\windows\system32\ncobjapi.dll
    + 2008-04-14 00:12:01 36,352 ----a-w c:\windows\system32\ncobjapi.dll
    - 2004-08-10 04:00:00 17,920 ------w c:\windows\system32\nddeapi.dll
    + 2008-04-14 00:12:01 17,920 ----a-w c:\windows\system32\nddeapi.dll
    - 2004-08-10 04:00:00 4,096 ------w c:\windows\system32\nddeapir.exe
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\system32\nddeapir.exe
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\nddenb32.dll
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\system32\nddenb32.dll
    - 2004-08-10 04:00:00 42,496 ------w c:\windows\system32\net.exe
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\system32\net.exe
    - 2004-08-10 04:00:00 124,928 ------w c:\windows\system32\net1.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\system32\net1.exe
    - 2006-08-17 12:28:27 332,288 ----a-w c:\windows\system32\netapi32.dll
    + 2008-10-15 16:34:24 337,408 ----a-w c:\windows\system32\netapi32.dll
    - 2004-08-10 04:00:00 622,080 ------w c:\windows\system32\netcfgx.dll
    + 2008-04-14 00:12:01 622,592 ----a-w c:\windows\system32\netcfgx.dll
    - 2004-08-10 04:00:00 111,104 ------w c:\windows\system32\netdde.exe
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\system32\netdde.exe
    - 2004-08-10 04:00:00 139,264 ------w c:\windows\system32\netid.dll
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\system32\netid.dll
    - 2004-08-10 04:00:00 407,040 ------w c:\windows\system32\netlogon.dll
    + 2008-04-14 00:12:01 407,040 ----a-w c:\windows\system32\netlogon.dll
    - 2005-08-22 18:29:46 197,632 ----a-w c:\windows\system32\netman.dll
    + 2008-04-14 00:12:01 198,144 ----a-w c:\windows\system32\netman.dll
    - 2004-08-10 04:00:00 875,008 ------w c:\windows\system32\netplwiz.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\system32\netplwiz.dll
    - 2004-08-10 04:00:00 12,288 ------w c:\windows\system32\netrap.dll
    + 2008-04-14 00:12:01 11,776 ----a-w c:\windows\system32\netrap.dll
    - 2004-08-10 11:00:00 329,728 ------w c:\windows\system32\netsetup.exe
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\system32\netsetup.exe
    - 2004-08-10 04:00:00 86,016 ------w c:\windows\system32\netsh.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\system32\netsh.exe
    - 2005-06-22 05:00:18 1,705,472 ----a-w c:\windows\system32\netshell.dll
    + 2008-04-14 00:12:02 1,703,936 ----a-w c:\windows\system32\netshell.dll
    - 2004-08-10 04:00:00 36,864 ------w c:\windows\system32\netstat.exe
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\system32\netstat.exe
    - 2004-08-10 04:00:00 80,896 ------w c:\windows\system32\netui0.dll
    + 2008-04-14 00:12:02 80,896 ----a-w c:\windows\system32\netui0.dll
    - 2004-08-10 04:00:00 245,760 ------w c:\windows\system32\netui1.dll
    + 2008-04-14 00:12:02 245,760 ----a-w c:\windows\system32\netui1.dll
    - 2004-08-13 00:50:01 247,808 ----a-w c:\windows\system32\newdev.dll
    + 2008-04-14 00:12:02 247,808 ----a-w c:\windows\system32\newdev.dll
    + 2007-08-07 12:28:34 28,272 ----a-w c:\windows\system32\NicCo2.dll
    + 2007-11-29 11:38:46 40,056 ----a-w c:\windows\system32\NicInst.dll
    - 2004-08-10 04:00:00 103,936 ------w c:\windows\system32\nlhtml.dll
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\system32\nlhtml.dll
    - 2004-08-10 04:00:00 28,672 ------w c:\windows\system32\nmmkcert.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\system32\nmmkcert.dll
    - 2004-08-10 04:00:00 69,120 ------w c:\windows\system32\notepad.exe
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\system32\notepad.exe
    - 2004-08-10 04:00:00 57,344 ------w c:\windows\system32\npp\ndisnpp.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\system32\npp\ndisnpp.dll
    - 2004-08-10 04:00:00 15,360 ------w c:\windows\system32\npp\nppagent.exe
    + 2008-04-14 00:12:29 15,360 ------w c:\windows\system32\npp\nppagent.exe
    - 2004-08-10 04:00:00 54,784 ------w c:\windows\system32\npptools.dll
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\system32\npptools.dll
    - 2004-08-10 04:00:00 76,800 ------w c:\windows\system32\nslookup.exe
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\system32\nslookup.exe
    - 2004-08-10 04:00:00 1,200,128 ------w c:\windows\system32\ntbackup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\system32\ntbackup.exe
    - 2004-08-10 11:00:00 708,096 ------w c:\windows\system32\ntdll.dll
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\system32\ntdll.dll
    - 2004-08-10 04:00:00 67,072 ------w c:\windows\system32\ntdsapi.dll
    + 2008-04-14 00:12:02 67,072 ----a-w c:\windows\system32\ntdsapi.dll
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\system32\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\system32\ntkrnlpa.exe
    - 2004-08-10 04:00:00 43,520 ------w c:\windows\system32\ntlanman.dll
    + 2008-04-14 00:12:02 44,032 ----a-w c:\windows\system32\ntlanman.dll
    - 2004-08-10 04:00:00 8,192 ------w c:\windows\system32\ntlsapi.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\system32\ntlsapi.dll
    - 2004-08-10 04:00:00 118,784 ------w c:\windows\system32\ntmarta.dll
    + 2008-04-14 00:12:02 118,784 ----a-w c:\windows\system32\ntmarta.dll
    - 2004-08-10 04:00:00 40,960 ------w c:\windows\system32\ntmsapi.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\system32\ntmsapi.dll
    - 2004-08-10 04:00:00 179,712 ------w c:\windows\system32\ntmsdba.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\system32\ntmsdba.dll
    - 2004-08-10 04:00:00 488,448 ------w c:\windows\system32\ntmsmgr.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\system32\ntmsmgr.dll
    - 2004-08-10 04:00:00 435,200 ------w c:\windows\system32\ntmssvc.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\system32\ntmssvc.dll
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\system32\ntoskrnl.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\system32\ntoskrnl.exe
    - 2004-08-10 04:00:00 91,136 ------w c:\windows\system32\ntprint.dll
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\system32\ntprint.dll
    - 2004-08-10 04:00:00 143,872 ------w c:\windows\system32\ntshrui.dll
    + 2008-04-14 00:12:02 143,360 ----a-w c:\windows\system32\ntshrui.dll
    - 2004-08-10 04:00:00 419,840 ------w c:\windows\system32\ntvdm.exe
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\system32\ntvdm.exe
    - 2004-08-10 04:00:00 13,312 ------w c:\windows\system32\ntvdmd.dll
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\system32\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\system32\nv4_disp.dll
    - 2006-10-13 12:35:12 64,000 ------w c:\windows\system32\nwapi32.dll
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\system32\nwapi32.dll
    - 2006-10-13 12:35:12 142,336 ------w c:\windows\system32\nwprovau.dll
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\system32\nwprovau.dll
    - 2006-10-13 12:35:12 65,536 ------w c:\windows\system32\nwwks.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\system32\nwwks.dll
    - 2004-08-10 04:00:00 266,752 ------w c:\windows\system32\oakley.dll
    + 2008-04-14 00:12:02 270,336 ----a-w c:\windows\system32\oakley.dll
    - 2004-08-10 04:00:00 285,696 ------w c:\windows\system32\objsel.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\system32\objsel.dll
    - 2008-04-23 04:16:28 102,912 ----a-w c:\windows\system32\occache.dll
    + 2008-12-20 23:15:38 102,912 ----a-w c:\windows\system32\occache.dll
    - 2004-08-10 04:00:00 60,928 ------w c:\windows\system32\ocmanage.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\ocmanage.dll
    - 2004-08-10 04:00:00 249,856 ------w c:\windows\system32\odbc32.dll
    + 2008-04-14 00:12:02 249,856 ----a-w c:\windows\system32\odbc32.dll
    - 2004-08-10 04:00:00 16,384 ------w c:\windows\system32\odbc32gt.dll
    + 2008-04-14 00:12:02 16,384 ----a-w c:\windows\system32\odbc32gt.dll
    - 2004-08-10 04:00:00 32,768 ------w c:\windows\system32\odbcad32.exe
    + 2008-04-14 00:12:30 32,768 ------w c:\windows\system32\odbcad32.exe
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\odbcbcp.dll
    + 2008-04-14 00:12:02 24,576 ----a-w c:\windows\system32\odbcbcp.dll
    - 2004-08-10 04:00:00 135,168 ------w c:\windows\system32\odbcconf.dll
    + 2008-04-14 00:12:02 135,168 ----a-w c:\windows\system32\odbcconf.dll
    - 2004-08-10 04:00:00 69,632 ------w c:\windows\system32\odbcconf.exe
    + 2008-04-14 00:12:30 69,632 ----a-w c:\windows\system32\odbcconf.exe
    - 2004-08-10 04:00:00 106,496 ------w c:\windows\system32\odbccp32.dll
    + 2008-04-14 00:12:02 106,496 ----a-w c:\windows\system32\odbccp32.dll
    - 2004-08-10 04:00:00 65,536 ------w c:\windows\system32\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccr32.dll
    - 2004-08-10 04:00:00 65,536 ------w c:\windows\system32\odbccu32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccu32.dll
    - 2004-08-10 04:00:00 94,208 ------w c:\windows\system32\odbcint.dll
    + 2008-04-13 17:26:05 94,208 ----a-w c:\windows\system32\odbcint.dll
    - 2004-08-10 04:00:00 53,279 ------w c:\windows\system32\odbcji32.dll
    + 2008-04-14 00:10:31 53,279 ------w c:\windows\system32\odbcji32.dll
    - 2004-08-10 04:00:00 278,559 ------w c:\windows\system32\odbcjt32.dll
    + 2008-04-14 00:12:02 278,559 ------w c:\windows\system32\odbcjt32.dll
    - 2004-08-10 04:00:00 12,288 ------w c:\windows\system32\odbcp32r.dll
    + 2008-04-13 17:26:05 12,288 ----a-w c:\windows\system32\odbcp32r.dll
    - 2004-08-10 04:00:00 147,456 ------w c:\windows\system32\odbctrac.dll
    + 2008-04-14 00:12:02 147,456 ----a-w c:\windows\system32\odbctrac.dll
    - 2004-08-10 04:00:00 20,511 ------w c:\windows\system32\oddbse32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\system32\oddbse32.dll
    - 2004-08-10 04:00:00 20,510 ------w c:\windows\system32\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\system32\odexl32.dll
    - 2004-08-10 04:00:00 20,510 ------w c:\windows\system32\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\system32\odfox32.dll
    - 2004-08-10 04:00:00 20,510 ------w c:\windows\system32\odpdx32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\system32\odpdx32.dll
    - 2004-08-10 04:00:00 20,511 ------w c:\windows\system32\odtext32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\system32\odtext32.dll
    - 2004-08-10 04:00:00 120,832 ------w c:\windows\system32\offfilt.dll
    + 2008-04-14 00:12:02 192,000 ------w c:\windows\system32\offfilt.dll
    - 2005-07-26 11:39:48 1,285,120 ----a-w c:\windows\system32\ole32.dll
    + 2008-04-14 00:12:02 1,287,168 ----a-w c:\windows\system32\ole32.dll
    - 2007-12-04 18:38:13 550,912 ------w c:\windows\system32\oleaut32.dll
    + 2008-04-14 00:12:02 551,936 ------w c:\windows\system32\oleaut32.dll
    - 2005-07-26 11:39:48 74,752 ----a-w c:\windows\system32\olecli32.dll
    + 2008-04-14 00:12:02 74,752 ----a-w c:\windows\system32\olecli32.dll
    - 2005-07-26 11:39:49 37,888 ------w c:\windows\system32\olecnv32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\system32\olecnv32.dll
    - 2006-10-16 16:15:00 122,880 ------w c:\windows\system32\oledlg.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\system32\oledlg.dll
    - 2004-08-10 04:00:00 107,008 ------w c:\windows\system32\oleprn.dll
    + 2008-04-14 00:12:02 107,008 ------w c:\windows\system32\oleprn.dll
    - 2004-08-10 04:00:00 83,456 ------w c:\windows\system32\olepro32.dll
    + 2008-04-14 00:12:02 84,992 ----a-w c:\windows\system32\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\system32\onex.dll
    - 2004-08-10 04:00:00 122,368 ------w c:\windows\system32\oobe\msobcomm.dll
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\system32\oobe\msobcomm.dll
    - 2004-08-10 04:00:00 16,384 ------w c:\windows\system32\oobe\msobdl.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\system32\oobe\msobdl.dll
    - 2004-08-10 04:00:00 561,664 ------w c:\windows\system32\oobe\msobmain.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\system32\oobe\msobmain.dll
    - 2004-08-10 04:00:00 30,720 ------w c:\windows\system32\oobe\msobshel.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\system32\oobe\msobshel.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\oobe\msobweb.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\system32\oobe\msobweb.dll
    - 2004-08-10 04:00:00 28,160 ------w c:\windows\system32\oobe\msoobe.exe
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\system32\oobe\msoobe.exe
    - 2004-08-10 04:00:00 51,200 ------w c:\windows\system32\oobe\oobebaln.exe
    + 2008-04-14 00:12:31 51,200 ------w c:\windows\system32\oobe\oobebaln.exe
    - 2004-08-10 11:00:00 67,584 ------w c:\windows\system32\openfiles.exe
    + 2008-04-14 00:12:31 67,584 ------w c:\windows\system32\openfiles.exe
    - 2004-08-10 04:00:00 713,728 ------w c:\windows\system32\opengl32.dll
    + 2008-04-14 00:12:02 713,728 ------w c:\windows\system32\opengl32.dll
    - 2004-08-10 04:00:00 215,552 ------w c:\windows\system32\osk.exe
    + 2008-04-14 00:12:31 215,552 ------w c:\windows\system32\osk.exe
    - 2004-08-10 04:00:00 67,584 ------w c:\windows\system32\osuninst.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\system32\osuninst.dll
    - 2004-08-10 04:00:00 116,224 ------w c:\windows\system32\p2p.dll
    + 2008-04-14 00:12:02 153,600 ------w c:\windows\system32\p2p.dll
    - 2004-08-10 04:00:00 86,016 ------w c:\windows\system32\p2pgasvc.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\system32\p2pgasvc.dll
    - 2004-08-10 04:00:00 312,320 ------w c:\windows\system32\p2pgraph.dll
    + 2008-04-14 00:12:02 313,856 ------w c:\windows\system32\p2pgraph.dll
    - 2004-08-10 04:00:00 88,064 ------w c:\windows\system32\p2pnetsh.dll
    + 2008-04-14 00:12:02 115,712 ------w c:\windows\system32\p2pnetsh.dll
    - 2004-08-10 04:00:00 526,848 ------w c:\windows\system32\p2psvc.dll
    + 2008-04-14 00:12:02 554,496 ------w c:\windows\system32\p2psvc.dll
    - 2004-08-10 04:00:00 58,368 ------w c:\windows\system32\packager.exe
    + 2008-04-14 00:12:31 58,368 ------w c:\windows\system32\packager.exe
    - 2004-08-10 04:00:00 62,976 ------w c:\windows\system32\pautoenr.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\system32\pautoenr.dll
    - 2004-08-10 04:00:00 283,648 ------w c:\windows\system32\pdh.dll
    + 2008-04-14 00:12:02 284,160 ------w c:\windows\system32\pdh.dll
    - 2008-06-15 13:58:01 53,436 ----a-w c:\windows\system32\perfc009.dat
    + 2009-03-08 16:22:53 71,732 ----a-w c:\windows\system32\perfc009.dat
    - 2004-08-10 04:00:00 39,936 ------w c:\windows\system32\perfctrs.dll
    + 2008-04-14 00:12:02 39,936 ------w c:\windows\system32\perfctrs.dll
    - 2004-08-10 04:00:00 26,624 ------w c:\windows\system32\perfdisk.dll
    + 2008-04-14 00:12:02 26,624 ------w c:\windows\system32\perfdisk.dll
    - 2008-06-15 13:58:01 381,692 ----a-w c:\windows\system32\perfh009.dat
    + 2009-03-08 16:22:53 442,466 ----a-w c:\windows\system32\perfh009.dat
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\perfmon.exe
    + 2008-04-14 00:12:31 15,872 ------w c:\windows\system32\perfmon.exe
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\perfnet.dll
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\system32\perfnet.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\perfos.dll
    + 2008-04-14 00:12:02 25,088 ------w c:\windows\system32\perfos.dll
    - 2004-08-10 04:00:00 34,816 ------w c:\windows\system32\perfproc.dll
    + 2008-04-14 00:12:02 34,816 ------w c:\windows\system32\perfproc.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\system32\photometadatahandler.dll
    - 2004-08-10 04:00:00 176,128 ------w c:\windows\system32\photowiz.dll
    + 2008-04-14 00:12:02 176,128 ------w c:\windows\system32\photowiz.dll
    - 2004-08-10 11:00:00 35,328 ------w c:\windows\system32\pid.dll
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\system32\pid.dll
    - 2004-08-10 11:00:00 24,064 ------w c:\windows\system32\pidgen.dll
    + 2008-04-14 00:11:09 24,064 ------w c:\windows\system32\pidgen.dll
    - 2004-08-10 04:00:00 17,920 ------w c:\windows\system32\ping.exe
    + 2008-04-14 00:12:31 17,920 ------w c:\windows\system32\ping.exe
    - 2004-08-10 11:00:00 15,360 ------w c:\windows\system32\pjlmon.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\pjlmon.dll
    - 2008-04-23 04:16:28 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-12-20 23:15:38 44,544 ----a-w c:\windows\system32\pngfilt.dll
    - 2004-08-10 04:00:00 48,640 ------w c:\windows\system32\pnrpnsp.dll
    + 2008-04-14 00:12:02 58,880 ------w c:\windows\system32\pnrpnsp.dll
    - 2004-08-10 04:00:00 105,472 ------w c:\windows\system32\polstore.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\system32\polstore.dll
    - 2004-08-10 04:00:00 49,152 ----a-w c:\windows\system32\powercfg.exe
    + 2008-04-14 00:12:31 49,152 ----a-w c:\windows\system32\powercfg.exe
    - 2004-08-10 04:00:00 17,408 ------w c:\windows\system32\powrprof.dll
    + 2008-04-14 00:12:03 17,408 ----a-w c:\windows\system32\powrprof.dll
    + 2008-07-30 00:59:58 105,016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
    + 2008-07-30 01:35:46 326,160 ----a-w c:\windows\system32\PresentationHost.exe
    + 2008-07-30 00:59:58 43,544 ----a-w c:\windows\system32\PresentationHostProxy.dll
    + 2008-07-30 00:59:58 781,344 ----a-w c:\windows\system32\PresentationNative_v0300.dll
    - 2004-08-10 04:00:00 560,640 ------w c:\windows\system32\printui.dll
    + 2008-04-14 00:12:03 560,640 ------w c:\windows\system32\printui.dll
    + 2008-07-06 12:06:10 117,760 ------w c:\windows\system32\prntvpt.dll
    - 2004-08-10 04:00:00 27,648 ------w c:\windows\system32\profmap.dll
    + 2008-04-14 00:12:03 27,648 ----a-w c:\windows\system32\profmap.dll
    - 2004-08-10 04:00:00 109,568 ------w c:\windows\system32\progman.exe
    + 2008-04-14 00:12:31 109,568 ------w c:\windows\system32\progman.exe
    - 2004-08-10 04:00:00 50,176 ------w c:\windows\system32\proquota.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\system32\proquota.exe
    - 2005-06-15 20:27:42 126,976 ----a-w c:\windows\system32\Prounstl.exe
    + 2007-12-20 14:43:48 248,448 ----a-w c:\windows\system32\Prounstl.exe
    - 2004-08-10 04:00:00 9,216 ------w c:\windows\system32\proxycfg.exe
    + 2008-04-14 00:12:32 9,216 ------w c:\windows\system32\proxycfg.exe
    - 2004-08-10 04:00:00 23,040 ------w c:\windows\system32\psapi.dll
    + 2008-04-14 00:12:03 23,040 ----a-w c:\windows\system32\psapi.dll
    - 2004-08-10 04:00:00 96,768 ------w c:\windows\system32\psbase.dll
    + 2008-04-14 00:12:03 96,768 ----a-w c:\windows\system32\psbase.dll
    - 2004-08-10 04:00:00 43,520 ------w c:\windows\system32\pstorec.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\system32\pstorec.dll
    - 2004-08-10 04:00:00 34,304 ------w c:\windows\system32\pstorsvc.dll
    + 2008-04-14 00:12:03 34,304 ----a-w c:\windows\system32\pstorsvc.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\system32\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\system32\qagentrt.dll
    - 2004-08-10 04:00:00 192,512 ------w c:\windows\system32\qcap.dll
    + 2008-04-14 00:12:03 192,512 ------w c:\windows\system32\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\system32\qcliprov.dll
    - 2004-08-10 04:00:00 279,040 ------w c:\windows\system32\qdv.dll
    + 2008-04-14 00:12:03 279,040 ------w c:\windows\system32\qdv.dll
    - 2005-06-29 08:55:07 385,024 ------w c:\windows\system32\qdvd.dll
    + 2008-04-14 00:12:03 386,048 ------w c:\windows\system32\qdvd.dll
    - 2004-08-10 04:00:00 562,176 ------w c:\windows\system32\qedit.dll
    + 2008-04-14 00:12:03 562,176 ------w c:\windows\system32\qedit.dll
    - 2004-08-10 04:00:00 733,696 ------w c:\windows\system32\qedwipes.dll
    + 2008-04-13 17:21:32 733,696 ------w c:\windows\system32\qedwipes.dll
    - 2004-08-10 04:00:00 382,464 ------w c:\windows\system32\qmgr.dll
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\system32\qmgr.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\qmgrprxy.dll
    + 2008-04-14 00:12:03 18,944 ------w c:\windows\system32\qmgrprxy.dll
    - 2004-08-10 04:00:00 20,480 ------w c:\windows\system32\qprocess.exe
    + 2008-04-14 00:12:32 19,968 ------w c:\windows\system32\qprocess.exe
    - 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\system32\quartz.dll
    + 2008-05-07 05:12:40 1,288,192 ------w c:\windows\system32\quartz.dll
    - 2006-06-22 05:06:30 1,435,648 ------w c:\windows\system32\query.dll
    + 2008-04-14 00:12:03 1,435,648 ------w c:\windows\system32\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\system32\qutil.dll
    - 2004-08-10 04:00:00 43,520 ------w c:\windows\system32\racpldlg.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\system32\racpldlg.dll
    - 2006-06-26 17:37:10 8,192 ----a-w c:\windows\system32\rasadhlp.dll
    + 2008-04-14 00:12:03 7,680 ----a-w c:\windows\system32\rasadhlp.dll
    - 2004-08-10 04:00:00 236,544 ------w c:\windows\system32\rasapi32.dll
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\system32\rasapi32.dll
    - 2004-08-10 04:00:00 89,088 ------w c:\windows\system32\rasauto.dll
    + 2008-04-14 00:12:03 88,576 ------w c:\windows\system32\rasauto.dll
    - 2004-08-10 04:00:00 69,632 ------w c:\windows\system32\raschap.dll
    + 2008-04-14 00:12:03 79,872 ----a-w c:\windows\system32\raschap.dll
    - 2004-08-10 04:00:00 657,920 ------w c:\windows\system32\rasdlg.dll
    + 2008-04-14 00:12:03 658,432 ------w c:\windows\system32\rasdlg.dll
    - 2004-08-10 04:00:00 61,440 ------w c:\windows\system32\rasman.dll
    + 2008-04-14 00:12:03 61,440 ------w c:\windows\system32\rasman.dll
    - 2006-06-22 10:47:18 181,248 ----a-w c:\windows\system32\rasmans.dll
    + 2008-04-14 00:12:03 186,368 ----a-w c:\windows\system32\rasmans.dll
    - 2004-08-10 04:00:00 56,832 ------w c:\windows\system32\rasphone.exe
    + 2008-04-14 00:12:32 56,832 ------w c:\windows\system32\rasphone.exe
    - 2004-08-10 04:00:00 206,336 ------w c:\windows\system32\rasppp.dll
    + 2008-04-14 00:12:03 210,944 ----a-w c:\windows\system32\rasppp.dll
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\system32\rasqec.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\rassapi.dll
    + 2008-04-14 00:12:03 16,384 ------w c:\windows\system32\rassapi.dll
    - 2004-08-10 04:00:00 58,880 ------w c:\windows\system32\rastapi.dll
    + 2008-04-14 00:12:03 58,368 ------w c:\windows\system32\rastapi.dll
    - 2004-08-10 04:00:00 112,128 ------w c:\windows\system32\rastls.dll
    + 2008-04-14 00:12:03 150,016 ----a-w c:\windows\system32\rastls.dll
    - 2004-08-10 04:00:00 102,400 ------w c:\windows\system32\rcbdyctl.dll
    + 2008-04-14 00:12:03 102,400 ------w c:\windows\system32\rcbdyctl.dll
    - 2004-08-10 04:00:00 35,840 ------w c:\windows\system32\rcimlby.exe
    + 2008-04-14 00:12:32 35,840 ------w c:\windows\system32\rcimlby.exe
    - 2004-08-10 04:00:00 21,504 ------w c:\windows\system32\rcp.exe
    + 2008-04-14 00:12:32 21,504 ------w c:\windows\system32\rcp.exe
    - 2004-08-10 04:00:00 147,968 ------w c:\windows\system32\rdchost.dll
    + 2008-04-14 00:12:03 147,968 ------w c:\windows\system32\rdchost.dll
    - 2004-08-10 04:00:00 62,464 ------w c:\windows\system32\rdpclip.exe
    + 2008-04-14 00:12:32 62,976 ------w c:\windows\system32\rdpclip.exe
    - 2004-08-10 04:00:00 92,168 ------w c:\windows\system32\rdpdd.dll
    + 2008-04-14 00:13:22 92,424 ------w c:\windows\system32\rdpdd.dll
    - 2004-08-10 04:00:00 19,968 ------w c:\windows\system32\rdpsnd.dll
    + 2008-04-14 00:12:04 19,968 ------w c:\windows\system32\rdpsnd.dll
    - 2004-08-10 04:00:00 87,176 ------w c:\windows\system32\rdpwsx.dll
    + 2008-04-14 00:13:22 87,176 ------w c:\windows\system32\rdpwsx.dll
    - 2004-08-10 04:00:00 13,824 ------w c:\windows\system32\rdsaddin.exe
    + 2008-04-14 00:12:32 13,824 ------w c:\windows\system32\rdsaddin.exe
    - 2004-08-10 04:00:00 67,072 ------w c:\windows\system32\rdshost.exe
    + 2008-04-14 00:12:32 67,072 ------w c:\windows\system32\rdshost.exe
    - 2004-08-10 04:00:00 50,176 ------w c:\windows\system32\reg.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\system32\reg.exe
    - 2004-08-10 04:00:00 49,664 ------w c:\windows\system32\regapi.dll
    + 2008-04-14 00:12:04 49,664 ----a-w c:\windows\system32\regapi.dll
    - 2004-08-10 04:00:00 59,904 ------w c:\windows\system32\regsvc.dll
    + 2008-04-14 00:12:04 59,904 ----a-w c:\windows\system32\regsvc.dll
    - 2004-08-10 04:00:00 11,776 ------w c:\windows\system32\regsvr32.exe
    + 2008-04-14 00:12:32 11,776 ------w c:\windows\system32\regsvr32.exe
    - 2004-08-10 04:00:00 397,824 ------w c:\windows\system32\regwizc.dll
    + 2008-04-14 00:12:04 397,824 ------w c:\windows\system32\regwizc.dll
    + 2004-08-04 12:59:20 36,096 ----a-w c:\windows\system32\ReinstallBackups\0008\DriverFiles\i386\intelppm.sys
    + 2004-08-04 12:59:20 36,096 ----a-w c:\windows\system32\ReinstallBackups\0011\DriverFiles\i386\intelppm.sys
    + 2005-01-08 07:07:18 138,752 ----a-w c:\windows\system32\ReinstallBackups\0012\DriverFiles\hdaudbus.sys
    + 2005-05-04 01:43:28 69,632 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\ALCMTR.EXE
    + 2006-02-21 00:01:58 2,809,856 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\ALCWZRD.EXE
    + 2008-04-13 18:45:14 60,160 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\drmk.sys
    + 2008-04-13 19:16:36 141,056 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\ks.sys
    + 2008-04-14 00:11:56 4,096 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\ksuser.dll
    + 2008-04-13 19:19:41 146,048 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\portcls.sys
    + 2008-04-13 18:45:15 49,408 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\stream.sys
    + 2008-04-14 00:12:45 23,552 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\wdmaud.drv
    + 2006-01-09 21:32:34 2,158,592 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\MicCal.exe
    + 2006-02-24 23:32:58 266,240 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RTCOMDLL.dll
    + 2006-03-08 11:54:04 16,010,240 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RTHDCPL.EXE
    + 2006-03-08 20:27:12 4,246,016 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RtkHDAud.sys
    + 2005-11-01 01:17:38 135,168 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RTLCPAPI.dll
    + 2006-02-21 00:05:50 9,712,640 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RTLCPL.EXE
    + 2006-03-03 03:13:10 360,448 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\RtlUpd.exe
    + 2006-02-21 00:00:18 86,016 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\SOUNDMAN.EXE
    + 2005-06-13 19:58:04 162,816 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\e100b325.sys
    + 2005-06-16 14:48:24 36,864 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\e100bmsg.dll
    + 2005-06-15 05:08:42 20,480 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\NicCo32.dll
    + 2005-05-19 14:28:12 21,504 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\NicIn32.dll
    + 2005-06-15 20:27:42 126,976 ----a-w c:\windows\system32\ReinstallBackups\0014\DriverFiles\Prounstl.exe
    + 2006-02-07 15:34:56 73,728 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\hccutils.dll
    + 2006-02-07 15:36:06 77,824 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\hkcmd.exe
    + 2006-02-07 15:56:10 61,440 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\iAlmCoIn.dll
    + 2006-02-07 16:03:32 956,029 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmdd5.dll
    + 2006-02-07 15:55:58 232,733 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmdev5.dll
    + 2006-02-07 15:56:08 121,470 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmdnt5.dll
    + 2006-02-07 16:04:34 1,399,615 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmnt5.sys
    + 2006-02-07 15:56:12 49,152 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmrem.dll
    + 2006-02-07 15:56:16 45,697 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmrnt5.dll
    + 2006-02-07 15:40:38 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuARA.dll
    + 2006-02-07 15:40:38 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuARB.dll
    + 2006-02-07 15:40:38 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuCHS.dll
    + 2006-02-07 15:40:38 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuCHT.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuCSY.dll
    + 2006-02-07 15:40:38 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuDAN.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuDEU.dll
    + 2006-02-07 15:40:38 114,688 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmudlg.exe
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuELL.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuENG.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuESP.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuFIN.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuFRA.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuFRC.dll
    + 2006-02-07 15:40:40 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuHEB.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuHUN.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuITA.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuJPN.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuKOR.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuNLD.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuNOR.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuPLK.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuPTB.dll
    + 2006-02-07 15:40:42 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuPTG.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuRUS.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuSVE.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuTHA.dll
    + 2006-02-07 15:40:44 40,960 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\ialmuTRK.dll
    + 2006-02-07 15:38:44 450,560 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxcfg.exe
    + 2006-02-07 15:35:12 139,264 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxdev.dll
    + 2006-02-07 15:36:12 86,016 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxdo.dll
    + 2006-02-07 15:39:54 40,960 ----a-w
  5. 2009-03-13, 04:35 #15
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Section 11

    c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxexps.dll
    + 2006-02-07 15:39:54 94,208 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxext.exe
    + 2006-02-07 15:40:02 118,784 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxpers.exe
    + 2006-02-07 15:39:06 143,360 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxpph.dll
    + 2006-02-07 15:39:10 1,503,232 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxress.dll
    + 2006-02-07 15:35:58 61,440 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxsrvc.dll
    + 2006-02-07 15:35:58 163,840 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxsrvc.exe
    + 2006-02-07 15:39:20 94,208 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxtray.exe
    + 2006-02-07 15:39:48 114,688 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igfxzoom.exe
    + 2006-02-07 15:48:30 524,288 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\igldev32.dll
    + 2006-02-07 15:46:40 2,310,144 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\iglicd32.dll
    - 2004-08-10 04:00:00 60,416 ------w c:\windows\system32\remotepg.dll
    + 2008-04-14 00:12:04 60,416 ------w c:\windows\system32\remotepg.dll
    - 2004-08-10 04:00:00 380,416 ------w c:\windows\system32\Restore\rstrui.exe
    + 2008-04-14 00:12:33 380,416 ------w c:\windows\system32\Restore\rstrui.exe
    - 2004-08-10 04:00:00 58,880 ------w c:\windows\system32\resutils.dll
    + 2008-04-14 00:12:04 58,880 ----a-w c:\windows\system32\resutils.dll
    - 2004-08-10 04:00:00 13,824 ------w c:\windows\system32\rexec.exe
    + 2008-04-14 00:12:33 13,824 ------w c:\windows\system32\rexec.exe
    + 2006-08-24 21:15:06 150,808 ----a-w c:\windows\system32\rgb9rast_2.dll
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\system32\rhttpaa.dll
    - 2006-11-27 14:54:06 433,152 ------w c:\windows\system32\riched20.dll
    + 2008-04-14 00:12:04 433,664 ----a-w c:\windows\system32\riched20.dll
    - 2007-07-09 13:16:16 582,656 ----a-w c:\windows\system32\rpcrt4.dll
    + 2008-04-14 00:12:04 584,704 ----a-w c:\windows\system32\rpcrt4.dll
    - 2005-07-26 11:39:49 397,824 ----a-w c:\windows\system32\rpcss.dll
    + 2008-04-14 00:12:04 399,360 ----a-w c:\windows\system32\rpcss.dll
    - 2004-08-10 04:00:00 152,576 ------w c:\windows\system32\rsaenh.dll
    + 2008-04-13 17:37:57 208,384 ----a-w c:\windows\system32\rsaenh.dll
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\rsh.exe
    + 2008-04-14 00:12:33 14,848 ------w c:\windows\system32\rsh.exe
    - 2004-08-10 04:00:00 39,936 ------w c:\windows\system32\rshx32.dll
    + 2008-04-14 00:12:04 39,936 ------w c:\windows\system32\rshx32.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\rsmps.dll
    + 2008-04-14 00:12:04 18,944 ------w c:\windows\system32\rsmps.dll
    - 2004-08-10 04:00:00 107,520 ------w c:\windows\system32\rsnotify.exe
    + 2008-04-14 00:12:33 107,520 ------w c:\windows\system32\rsnotify.exe
    - 2004-08-10 04:00:00 90,112 ------w c:\windows\system32\rsvpsp.dll
    + 2008-04-14 00:12:04 92,672 ------w c:\windows\system32\rsvpsp.dll
    - 2006-02-24 23:32:58 266,240 ----a-w c:\windows\system32\RTCOM\RTCOMDLL.dll
    + 2007-10-03 14:20:42 262,144 ----a-w c:\windows\system32\RTCOM\RTCOMDLL.dll
    - 2005-11-01 01:17:38 135,168 ----a-w c:\windows\system32\RTCOM\RTLCPAPI.dll
    + 2007-03-07 11:59:30 131,072 ----a-w c:\windows\system32\RTCOM\RTLCPAPI.dll
    - 2004-08-10 04:00:00 77,312 ------w c:\windows\system32\rtcshare.exe
    + 2008-04-14 00:12:33 77,312 ------w c:\windows\system32\rtcshare.exe
    - 2004-08-10 04:00:00 31,744 ------w c:\windows\system32\rtipxmib.dll
    + 2008-04-14 00:12:04 31,744 ------w c:\windows\system32\rtipxmib.dll
    - 2004-08-10 04:00:00 44,032 ------w c:\windows\system32\rtutils.dll
    + 2008-04-14 00:12:04 44,032 ----a-w c:\windows\system32\rtutils.dll
    - 2004-08-10 04:00:00 33,280 ------w c:\windows\system32\rundll32.exe
    + 2008-04-14 00:12:33 33,280 ------w c:\windows\system32\rundll32.exe
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\runonce.exe
    + 2008-04-14 00:12:33 14,336 ------w c:\windows\system32\runonce.exe
    + 2008-04-14 00:12:04 397,056 ------w c:\windows\system32\s3gnb.dll
    - 2004-08-10 04:00:00 43,520 ------w c:\windows\system32\safrcdlg.dll
    + 2008-04-14 00:12:04 43,520 ------w c:\windows\system32\safrcdlg.dll
    - 2004-08-10 04:00:00 29,696 ------w c:\windows\system32\safrdm.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\system32\safrdm.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\safrslv.dll
    + 2008-04-14 00:12:04 45,568 ------w c:\windows\system32\safrslv.dll
    - 2004-08-10 04:00:00 64,000 ------w c:\windows\system32\samlib.dll
    + 2008-04-14 00:12:04 64,000 ------w c:\windows\system32\samlib.dll
    - 2004-08-10 04:00:00 415,744 ------w c:\windows\system32\samsrv.dll
    + 2008-04-14 00:12:04 415,744 ------w c:\windows\system32\samsrv.dll
    - 2004-08-10 04:00:00 13,312 ------w c:\windows\system32\savedump.exe
    + 2008-04-14 00:12:33 13,312 ------w c:\windows\system32\savedump.exe
    - 2004-08-10 04:00:00 159,232 ------w c:\windows\system32\sbeio.dll
    + 2008-04-14 00:12:04 159,232 ------w c:\windows\system32\sbeio.dll
    - 2004-08-10 04:00:00 69,632 ------w c:\windows\system32\scarddlg.dll
    + 2008-04-14 00:12:04 69,632 ------w c:\windows\system32\scarddlg.dll
    - 2004-08-10 04:00:00 95,744 ------w c:\windows\system32\scardsvr.exe
    + 2008-04-14 00:12:33 95,744 ------w c:\windows\system32\scardsvr.exe
    - 2004-08-10 04:00:00 171,008 ------w c:\windows\system32\sccsccp.dll
    + 2008-04-14 00:12:05 171,008 ------w c:\windows\system32\sccsccp.dll
    - 2004-08-10 04:00:00 180,224 ------w c:\windows\system32\scecli.dll
    + 2008-04-14 00:12:05 181,248 ----a-w c:\windows\system32\scecli.dll
    - 2004-08-10 04:00:00 313,856 ------w c:\windows\system32\scesrv.dll
    + 2008-04-14 00:12:05 314,880 ----a-w c:\windows\system32\scesrv.dll
    - 2007-04-25 14:21:15 144,896 ------w c:\windows\system32\schannel.dll
    + 2008-04-14 00:12:05 144,384 ------w c:\windows\system32\schannel.dll
    - 2004-08-10 04:00:00 190,976 ------w c:\windows\system32\schedsvc.dll
    + 2008-04-14 00:12:05 192,512 ----a-w c:\windows\system32\schedsvc.dll
    - 2004-08-10 11:00:00 121,856 ------w c:\windows\system32\schtasks.exe
    + 2008-04-14 00:12:34 121,856 ------w c:\windows\system32\schtasks.exe
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\sclgntfy.dll
    + 2008-04-14 00:12:05 20,480 ------w c:\windows\system32\sclgntfy.dll
    - 2004-08-10 04:00:00 9,216 ------w c:\windows\system32\scrnsave.scr
    + 2008-04-14 00:12:43 9,216 ------w c:\windows\system32\scrnsave.scr
    - 2004-08-10 04:00:00 159,744 ------w c:\windows\system32\scrobj.dll
    + 2008-05-09 10:53:39 180,224 ------w c:\windows\system32\scrobj.dll
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\system32\scrrun.dll
    + 2008-05-09 10:53:40 172,032 ------w c:\windows\system32\scrrun.dll
    - 2004-08-10 04:00:00 77,312 ------w c:\windows\system32\sdbinst.exe
    + 2008-04-14 00:12:34 77,312 ------w c:\windows\system32\sdbinst.exe
    - 2004-08-10 04:00:00 29,184 ------w c:\windows\system32\sdhcinst.dll
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\system32\sdhcinst.dll
    - 2004-08-10 04:00:00 18,432 ------w c:\windows\system32\secedit.exe
    + 2008-04-14 00:12:34 18,944 ------w c:\windows\system32\secedit.exe
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\seclogon.dll
    + 2008-04-14 00:12:05 18,944 ----a-w c:\windows\system32\seclogon.dll
    - 2004-08-10 04:00:00 55,808 ------w c:\windows\system32\secur32.dll
    + 2008-04-14 00:12:05 56,320 ----a-w c:\windows\system32\secur32.dll
    - 2004-08-10 04:00:00 5,632 ------w c:\windows\system32\security.dll
    + 2008-04-14 00:12:05 5,632 ----a-w c:\windows\system32\security.dll
    - 2004-08-10 04:00:00 29,184 ------w c:\windows\system32\sendcmsg.dll
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\system32\sendcmsg.dll
    - 2004-08-10 04:00:00 55,296 ------w c:\windows\system32\sendmail.dll
    + 2008-04-14 00:12:05 54,784 ------w c:\windows\system32\sendmail.dll
    - 2004-08-10 04:00:00 38,912 ------w c:\windows\system32\sens.dll
    + 2008-04-14 00:12:05 39,424 ----a-w c:\windows\system32\sens.dll
    - 2004-08-10 04:00:00 6,656 ------w c:\windows\system32\sensapi.dll
    + 2008-04-14 00:12:05 7,168 ----a-w c:\windows\system32\sensapi.dll
    - 2004-08-10 04:00:00 56,320 ------w c:\windows\system32\servdeps.dll
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\system32\servdeps.dll
    - 2004-08-10 04:00:00 108,032 ------w c:\windows\system32\services.exe
    + 2008-04-14 00:12:34 108,544 ------w c:\windows\system32\services.exe
    - 2004-08-10 04:00:00 140,800 ------w c:\windows\system32\sessmgr.exe
    + 2008-04-14 00:12:34 141,312 ------w c:\windows\system32\sessmgr.exe
    - 2004-08-10 04:00:00 31,232 ------w c:\windows\system32\sethc.exe
    + 2008-04-14 00:12:34 31,232 ------w c:\windows\system32\sethc.exe
    - 2004-08-10 04:00:00 23,040 ----a-w c:\windows\system32\setup.exe
    + 2008-04-14 00:12:34 23,040 ----a-w c:\windows\system32\setup.exe
    - 2004-08-10 04:00:00 259,584 ------w c:\windows\system32\Setup\comsetup.dll
    + 2008-04-14 00:11:51 274,944 ----a-w c:\windows\system32\Setup\comsetup.dll
    - 2004-08-10 04:00:00 32,828 ------w c:\windows\system32\Setup\fp40ext.dll
    + 2008-04-14 00:11:53 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
    - 2004-08-10 04:00:00 132,608 ------w c:\windows\system32\Setup\fxsocm.dll
    + 2008-04-14 00:11:54 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
    - 2004-08-10 04:00:00 505,344 ------w c:\windows\system32\Setup\iis.dll
    + 2008-04-14 00:11:54 505,344 ----a-w c:\windows\system32\Setup\iis.dll
    - 2004-08-10 04:00:00 115,712 ------w c:\windows\system32\Setup\imsinsnt.dll
    + 2008-04-14 00:11:54 123,392 ----a-w c:\windows\system32\Setup\imsinsnt.dll
    + 2008-04-14 00:11:56 8,192 ----a-w c:\windows\system32\Setup\koc.dll
    - 2004-08-10 04:00:00 82,432 ------w c:\windows\system32\Setup\msdtcstp.dll
    + 2008-04-14 00:11:59 90,112 ----a-w c:\windows\system32\Setup\msdtcstp.dll
    - 2004-08-10 04:00:00 15,360 ------w c:\windows\system32\Setup\msgrocm.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
    - 2004-08-10 04:00:00 169,984 ------w c:\windows\system32\Setup\msmqocm.dll
    + 2008-04-14 00:12:00 170,496 ----a-w c:\windows\system32\Setup\msmqocm.dll
    - 2004-08-10 04:00:00 77,312 ------w c:\windows\system32\Setup\netoc.dll
    + 2008-04-14 00:12:01 77,312 ----a-w c:\windows\system32\Setup\netoc.dll
    - 2004-08-10 04:00:00 62,976 ------w c:\windows\system32\Setup\ntoc.dll
    + 2008-04-14 00:12:02 62,976 ----a-w c:\windows\system32\Setup\ntoc.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\Setup\ocgen.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\Setup\ocgen.dll
    - 2004-08-10 04:00:00 17,408 ------w c:\windows\system32\Setup\ocmsn.dll
    + 2008-04-14 00:12:02 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
    - 2004-08-10 04:00:00 101,376 ------w c:\windows\system32\Setup\setupqry.dll
    + 2008-04-14 00:12:05 101,376 ----a-w c:\windows\system32\Setup\setupqry.dll
    - 2004-08-10 04:00:00 33,792 ------w c:\windows\system32\Setup\tabletoc.dll
    + 2008-04-14 00:12:07 33,792 ----a-w c:\windows\system32\Setup\tabletoc.dll
    - 2004-08-10 04:00:00 121,856 ------w c:\windows\system32\Setup\tsoc.dll
    + 2008-04-14 00:12:07 130,048 ----a-w c:\windows\system32\Setup\tsoc.dll
    - 2004-08-10 04:00:00 983,552 ------w c:\windows\system32\setupapi.dll
    + 2008-04-14 09:42:06 985,088 ------w c:\windows\system32\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\system32\setupn.exe
    - 2004-08-10 04:00:00 5,120 ------w c:\windows\system32\sfc.dll
    + 2008-04-14 00:12:05 5,120 ----a-w c:\windows\system32\sfc.dll
    - 2004-08-10 04:00:00 140,288 ------w c:\windows\system32\sfc_os.dll
    + 2008-04-14 00:12:05 140,288 ----a-w c:\windows\system32\sfc_os.dll
    - 2004-08-10 04:00:00 1,580,544 ------w c:\windows\system32\sfcfiles.dll
    + 2008-04-14 00:12:05 1,614,848 ------w c:\windows\system32\sfcfiles.dll
    - 2004-08-10 04:00:00 549,376 ------w c:\windows\system32\shdoclc.dll
    + 2008-04-13 17:03:19 549,376 ----a-w c:\windows\system32\shdoclc.dll
    - 2006-09-04 06:12:56 1,497,088 ----a-w c:\windows\system32\shdocvw.dll
    + 2008-04-14 00:12:05 1,499,136 ----a-w c:\windows\system32\shdocvw.dll
    - 2007-10-26 03:34:01 8,460,288 ----a-w c:\windows\system32\shell32.dll
    + 2008-06-17 19:02:19 8,461,312 ----a-w c:\windows\system32\shell32.dll
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\shfolder.dll
    + 2008-04-14 00:12:05 25,088 ----a-w c:\windows\system32\shfolder.dll
    - 2004-08-10 04:00:00 68,096 ------w c:\windows\system32\shgina.dll
    + 2008-04-14 00:12:05 68,096 ------w c:\windows\system32\shgina.dll
    - 2004-08-10 04:00:00 65,536 ------w c:\windows\system32\shimeng.dll
    + 2008-04-14 00:12:05 65,024 ----a-w c:\windows\system32\shimeng.dll
    - 2004-08-10 04:00:00 438,272 ------w c:\windows\system32\shimgvw.dll
    + 2008-04-14 00:12:05 438,272 ------w c:\windows\system32\shimgvw.dll
    - 2006-09-14 08:31:29 474,112 ----a-w c:\windows\system32\shlwapi.dll
    + 2008-04-14 00:12:05 474,112 ----a-w c:\windows\system32\shlwapi.dll
    - 2004-08-10 04:00:00 151,552 ------w c:\windows\system32\shmedia.dll
    + 2008-04-14 00:12:05 152,064 ------w c:\windows\system32\shmedia.dll
    - 2004-08-10 04:00:00 42,496 ------w c:\windows\system32\shmgrate.exe
    + 2008-04-14 00:12:35 45,056 ------w c:\windows\system32\shmgrate.exe
    - 2004-08-10 04:00:00 77,824 ------w c:\windows\system32\shrpubw.exe
    + 2008-04-14 00:12:35 77,824 ------w c:\windows\system32\shrpubw.exe
    - 2004-08-10 04:00:00 27,648 ------w c:\windows\system32\shscrap.dll
    + 2008-04-14 00:12:05 27,648 ------w c:\windows\system32\shscrap.dll
    - 2006-12-19 21:52:18 134,656 ----a-w c:\windows\system32\shsvcs.dll
    + 2008-04-14 00:12:05 135,168 ----a-w c:\windows\system32\shsvcs.dll
    - 2004-08-10 04:00:00 19,456 ------w c:\windows\system32\shutdown.exe
    + 2008-04-14 00:12:35 19,456 ------w c:\windows\system32\shutdown.exe
    - 2004-08-10 04:00:00 13,312 ------w c:\windows\system32\sigtab.dll
    + 2008-04-14 00:12:05 13,312 ------w c:\windows\system32\sigtab.dll
    - 2004-08-10 04:00:00 70,144 ------w c:\windows\system32\sigverif.exe
    + 2008-04-14 00:12:35 70,144 ------w c:\windows\system32\sigverif.exe
    - 2004-08-10 04:00:00 26,112 ------w c:\windows\system32\skeys.exe
    + 2008-04-14 00:12:35 26,112 ------w c:\windows\system32\skeys.exe
    - 2004-08-10 04:00:00 25,088 ------w c:\windows\system32\slayerxp.dll
    + 2008-04-14 00:12:06 25,088 ------w c:\windows\system32\slayerxp.dll
    - 2004-08-10 04:00:00 98,304 ------w c:\windows\system32\slbiop.dll
    + 2008-04-14 00:12:06 98,304 ------w c:\windows\system32\slbiop.dll
    + 2008-04-14 00:12:06 73,832 ------w c:\windows\system32\slcoinst.dll
    + 2008-04-14 00:12:06 286,792 ------w c:\windows\system32\slextspk.dll
    + 2008-04-14 00:12:06 188,508 ------w c:\windows\system32\slgen.dll
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\system32\slrundll.exe
    + 2008-04-14 00:12:35 73,796 ------w c:\windows\system32\slserv.exe
    - 2004-08-10 04:00:00 8,192 ------w c:\windows\system32\smbinst.exe
    + 2008-04-14 00:12:35 8,192 ------w c:\windows\system32\smbinst.exe
    - 2004-08-10 04:00:00 363,008 ------w c:\windows\system32\smlogcfg.dll
    + 2008-04-14 00:12:06 362,496 ------w c:\windows\system32\smlogcfg.dll
    - 2004-08-10 04:00:00 89,600 ------w c:\windows\system32\smlogsvc.exe
    + 2008-04-14 00:12:35 89,600 ------w c:\windows\system32\smlogsvc.exe
    - 2004-08-10 04:00:00 50,688 ------w c:\windows\system32\smss.exe
    + 2008-04-14 00:12:36 50,688 ------w c:\windows\system32\smss.exe
    - 2004-08-10 04:00:00 131,584 ------w c:\windows\system32\sndrec32.exe
    + 2008-04-14 00:12:36 131,584 ------w c:\windows\system32\sndrec32.exe
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\snmpapi.dll
    + 2008-04-14 00:12:06 18,944 ----a-w c:\windows\system32\snmpapi.dll
    - 2004-08-10 04:00:00 182,272 ------w c:\windows\system32\snmpsnap.dll
    + 2008-04-14 00:12:06 182,272 ------w c:\windows\system32\snmpsnap.dll
    + 2008-07-19 02:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
    + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll
    + 2008-07-19 02:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
    + 2008-10-16 19:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll
    - 2004-08-10 04:00:00 23,552 ------w c:\windows\system32\sort.exe
    + 2008-04-14 00:12:36 24,576 ------w c:\windows\system32\sort.exe
    + 2008-04-14 00:12:36 7,680 ----a-w c:\windows\system32\spdwnwxp.exe
    - 2004-08-10 04:00:00 538,624 ------w c:\windows\system32\spider.exe
    + 2008-04-14 00:12:36 538,624 ------w c:\windows\system32\spider.exe
    - 2004-08-10 04:00:00 12,800 ------w c:\windows\system32\spiisupd.exe
    + 2008-04-13 18:43:31 12,800 ------w c:\windows\system32\spiisupd.exe
    - 2007-11-30 12:39:22 17,272 ------w c:\windows\system32\spmsg.dll
    + 2007-07-27 14:41:40 16,760 ------w c:\windows\system32\spmsg.dll
    - 2004-08-10 11:00:00 11,776 ------w c:\windows\system32\spnpinst.exe
    + 2008-04-14 09:42:38 11,264 ------w c:\windows\system32\spnpinst.exe
    - 2004-08-10 04:00:00 452,096 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSAPI.DLL
    + 2008-04-14 00:11:53 451,584 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxsapi.dll
    - 2004-08-10 04:00:00 27,136 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSDRV.DLL
    + 2008-04-14 00:11:54 26,624 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
    - 2004-08-10 04:00:00 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSRES.DLL
    + 2008-04-14 00:09:33 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxsres.dll
    - 2004-08-10 04:00:00 397,312 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSTIFF.DLL
    + 2008-04-14 00:11:54 397,312 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxstiff.dll
    - 2004-08-10 04:00:00 154,112 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSUI.DLL
    + 2008-04-14 00:11:54 154,112 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxsui.dll
    - 2004-08-10 04:00:00 192,512 ----a-w c:\windows\system32\spool\drivers\w32x86\3\FXSWZRD.DLL
    + 2008-04-14 00:11:54 192,512 ----a-w c:\windows\system32\spool\drivers\w32x86\3\fxswzrd.dll
    + 2008-07-06 12:06:10 765,440 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll
    + 2008-07-06 12:06:10 198,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll
    - 2001-08-18 02:35:22 248,320 ----a-w c:\windows\system32\spool\drivers\w32x86\3\PCL4RES.DLL
    + 2007-05-15 08:08:11 288,768 ----a-w c:\windows\system32\spool\drivers\w32x86\3\pcl4res.dll
    - 2004-08-04 16:26:48 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
    + 2008-07-06 12:06:10 373,248 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    - 2004-08-04 16:26:48 197,120 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
    + 2008-07-06 12:06:10 744,960 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    - 2004-08-04 16:26:36 619,520 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
    + 2008-03-13 04:52:36 761,344 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2008-07-06 12:06:10 1,676,288 ----a-w c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
    + 2008-07-06 12:06:10 89,088 ----a-w c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
    + 2008-07-06 10:50:03 597,504 ------w c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
    + 2008-07-06 12:06:10 147,456 ----a-w c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
    + 2008-07-06 12:06:10 748,032 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
    + 2008-07-06 22:36:12 2,936,832 ----a-w c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
    + 2008-07-06 12:06:10 748,032 ----a-w c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll
    + 2008-07-06 22:36:12 2,936,832 ----a-w c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
    + 2008-07-06 12:06:10 765,440 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
    + 2008-07-06 12:06:10 1,676,288 ----a-w c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
    + 2008-07-06 12:06:10 765,440 ----a-w c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll
    + 2008-07-06 12:06:10 1,676,288 ----a-w c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
    - 2004-08-10 04:00:00 74,752 ------w c:\windows\system32\spoolss.dll
    + 2008-04-14 00:12:06 75,264 ----a-w c:\windows\system32\spoolss.dll
    - 2005-06-10 23:53:32 57,856 ----a-w c:\windows\system32\spoolsv.exe
    + 2008-04-14 00:12:36 57,856 ----a-w c:\windows\system32\spoolsv.exe
    - 2006-09-25 22:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe
    + 2007-07-27 14:41:38 26,488 ----a-w c:\windows\system32\spupdsvc.exe
    + 2008-04-14 00:12:36 20,992 ------w c:\windows\system32\spupdwxp.exe
    - 2004-08-10 04:00:00 442,368 ------w c:\windows\system32\sqlsrv32.dll
    + 2008-04-14 00:12:06 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
    - 2004-08-10 04:00:00 180,800 ------w c:\windows\system32\sqlunirl.dll
    + 2008-04-14 00:12:06 180,800 ----a-w c:\windows\system32\sqlunirl.dll
    - 2004-08-10 04:00:00 67,584 ------w c:\windows\system32\srclient.dll
    + 2008-04-14 00:12:07 67,584 ----a-w c:\windows\system32\srclient.dll
    - 2004-08-10 04:00:00 239,104 ------w c:\windows\system32\srrstr.dll
    + 2008-04-14 00:12:07 239,104 ------w c:\windows\system32\srrstr.dll
    - 2004-08-10 04:00:00 170,496 ------w c:\windows\system32\srsvc.dll
    + 2008-04-14 00:12:07 171,008 ----a-w c:\windows\system32\srsvc.dll
    - 2004-12-07 19:32:34 96,768 ------w c:\windows\system32\srvsvc.dll
    + 2008-04-14 00:12:07 96,768 ------w c:\windows\system32\srvsvc.dll
    - 2004-08-10 04:00:00 704,512 ------w c:\windows\system32\ss3dfo.scr
    + 2008-04-14 00:12:43 704,512 ------w c:\windows\system32\ss3dfo.scr
    - 2004-08-10 04:00:00 19,968 ------w c:\windows\system32\ssbezier.scr
    + 2008-04-14 00:12:43 19,968 ------w c:\windows\system32\ssbezier.scr
    - 2004-08-10 04:00:00 34,816 ------w c:\windows\system32\ssdpapi.dll
    + 2008-04-14 00:12:07 34,816 ----a-w c:\windows\system32\ssdpapi.dll
    - 2004-08-10 04:00:00 71,680 ------w c:\windows\system32\ssdpsrv.dll
    + 2008-04-14 00:12:07 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
    - 2004-08-10 04:00:00 393,216 ------w c:\windows\system32\ssflwbox.scr
    + 2008-04-14 00:12:43 393,216 ------w c:\windows\system32\ssflwbox.scr
    - 2004-08-10 04:00:00 20,992 ------w c:\windows\system32\ssmarque.scr
    + 2008-04-14 00:12:44 20,992 ------w c:\windows\system32\ssmarque.scr
    - 2004-08-10 04:00:00 47,104 ------w c:\windows\system32\ssmypics.scr
    + 2008-04-14 00:12:44 47,104 ------w c:\windows\system32\ssmypics.scr
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\ssmyst.scr
    + 2008-04-14 00:12:44 18,944 ------w c:\windows\system32\ssmyst.scr
    - 2004-08-10 04:00:00 610,304 ------w c:\windows\system32\sspipes.scr
    + 2008-04-14 00:12:44 610,304 ------w c:\windows\system32\sspipes.scr
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\ssstars.scr
    + 2008-04-14 00:12:44 14,336 ------w c:\windows\system32\ssstars.scr
    - 2004-08-10 04:00:00 679,936 ------w c:\windows\system32\sstext3d.scr
    + 2008-04-14 00:12:44 679,936 ------w c:\windows\system32\sstext3d.scr
    - 2004-08-10 04:00:00 54,272 ------w c:\windows\system32\stclient.dll
    + 2008-04-14 00:12:07 59,392 ------w c:\windows\system32\stclient.dll
    - 2004-08-10 04:00:00 67,584 ------w c:\windows\system32\sti.dll
    + 2008-04-14 00:12:07 68,096 ----a-w c:\windows\system32\sti.dll
    - 2004-08-10 04:00:00 136,704 ------w c:\windows\system32\sti_ci.dll
    + 2008-04-14 00:12:07 136,704 ------w c:\windows\system32\sti_ci.dll
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\stimon.exe
    + 2008-04-14 00:12:36 14,848 ------w c:\windows\system32\stimon.exe
    - 2004-08-10 04:00:00 121,856 ------w c:\windows\system32\stobject.dll
    + 2008-04-14 00:12:07 121,856 ----a-w c:\windows\system32\stobject.dll
    - 2004-08-03 23:56:46 74,752 ------w c:\windows\system32\storprop.dll
    + 2008-04-14 00:12:07 74,752 ------w c:\windows\system32\storprop.dll
    - 2006-08-21 14:52:08 246,814 ------w c:\windows\system32\strmdll.dll
    + 2008-10-03 10:02:42 247,326 ------w c:\windows\system32\strmdll.dll
    - 2004-08-10 04:00:00 75,776 ------w c:\windows\system32\strmfilt.dll
    + 2008-04-14 00:12:07 75,776 ------w c:\windows\system32\strmfilt.dll
    - 2004-08-10 04:00:00 14,336 ------w c:\windows\system32\svchost.exe
    + 2008-04-14 00:12:36 14,336 ----a-w c:\windows\system32\svchost.exe
    - 2006-10-19 13:56:32 713,216 ----a-w c:\windows\system32\sxs.dll
    + 2008-04-14 00:12:07 713,216 ----a-w c:\windows\system32\sxs.dll
    - 2004-08-10 04:00:00 57,856 ------w c:\windows\system32\synceng.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\system32\synceng.dll
    - 2004-08-10 04:00:00 191,488 ------w c:\windows\system32\syncui.dll
    + 2008-04-14 00:12:07 191,488 ------w c:\windows\system32\syncui.dll
    - 2004-08-10 04:00:00 105,984 ------w c:\windows\system32\sysocmgr.exe
    + 2008-04-14 00:12:37 106,496 ------w c:\windows\system32\sysocmgr.exe
    - 2004-08-10 04:00:00 984,576 ------w c:\windows\system32\syssetup.dll
    + 2008-04-14 00:12:07 990,208 ------w c:\windows\system32\syssetup.dll
    - 2004-08-10 11:00:00 68,096 ------w c:\windows\system32\systeminfo.exe
    + 2008-04-14 00:12:36 71,680 ------w c:\windows\system32\systeminfo.exe
    - 2005-10-18 04:14:46 118,272 ------w c:\windows\system32\t2embed.dll
    + 2008-04-14 00:12:07 117,760 ------w c:\windows\system32\t2embed.dll
    - 2004-08-10 04:00:00 858,624 ------w c:\windows\system32\tapi3.dll
    + 2008-04-14 00:12:07 858,624 ------w c:\windows\system32\tapi3.dll
    - 2004-08-10 04:00:00 181,760 ------w c:\windows\system32\tapi32.dll
    + 2008-04-14 00:12:07 181,760 ----a-w c:\windows\system32\tapi32.dll
    - 2005-07-08 16:27:56 249,344 ----a-w c:\windows\system32\tapisrv.dll
    + 2008-04-14 00:12:07 249,856 ----a-w c:\windows\system32\tapisrv.dll
    - 2004-08-10 04:00:00 72,192 ------w c:\windows\system32\taskkill.exe
    + 2008-04-14 00:12:37 76,288 ------w c:\windows\system32\taskkill.exe
    - 2004-08-10 04:00:00 72,192 ------w c:\windows\system32\tasklist.exe
    + 2008-04-14 00:12:37 77,824 ------w c:\windows\system32\tasklist.exe
    - 2004-08-10 04:00:00 135,680 ------w c:\windows\system32\taskmgr.exe
    + 2008-04-14 00:12:37 135,680 ------w c:\windows\system32\taskmgr.exe
    - 2004-08-10 04:00:00 14,848 ------w c:\windows\system32\tcpmib.dll
    + 2008-04-14 00:12:07 14,848 ------w c:\windows\system32\tcpmib.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ----a-w c:\windows\system32\tcpmon.dll
    - 2004-08-10 04:00:00 45,568 ------w c:\windows\system32\tcpmonui.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\system32\tcpmonui.dll
    - 2005-05-10 23:45:48 75,776 ------w c:\windows\system32\telnet.exe
    + 2008-04-14 00:12:37 75,776 ------w c:\windows\system32\telnet.exe
    - 2004-08-10 04:00:00 358,400 ------w c:\windows\system32\termmgr.dll
    + 2008-04-14 00:12:07 358,400 ------w c:\windows\system32\termmgr.dll
    - 2005-03-10 14:49:51 295,424 ----a-w c:\windows\system32\termsrv.dll
    + 2008-04-14 00:12:07 295,424 ----a-w c:\windows\system32\termsrv.dll
    - 2004-08-10 04:00:00 385,536 ------w c:\windows\system32\themeui.dll
    + 2008-04-14 00:12:07 385,536 ----a-w c:\windows\system32\themeui.dll
    - 2004-08-10 04:00:00 61,440 ------w c:\windows\system32\tlntadmn.exe
    + 2008-04-14 00:12:37 61,440 ------w c:\windows\system32\tlntadmn.exe
    - 2004-08-10 04:00:00 78,336 ------w c:\windows\system32\tlntsess.exe
    + 2008-04-14 00:12:37 78,336 ------w c:\windows\system32\tlntsess.exe
    - 2004-08-10 04:00:00 73,216 ------w c:\windows\system32\tlntsvr.exe
    + 2008-04-14 00:12:38 73,216 ------w c:\windows\system32\tlntsvr.exe
    - 2004-08-10 04:00:00 7,168 ------w c:\windows\system32\tlntsvrp.dll
    + 2008-04-14 00:12:07 7,168 ------w c:\windows\system32\tlntsvrp.dll
    - 2004-08-10 11:00:00 347,136 ------w c:\windows\system32\tourstart.exe
    + 2008-04-14 00:12:38 347,136 ------w c:\windows\system32\tourstart.exe
    - 2004-08-10 04:00:00 259,584 ------w c:\windows\system32\tracerpt.exe
    + 2008-04-14 00:12:38 259,584 ------w c:\windows\system32\tracerpt.exe
    - 2004-08-10 04:00:00 12,288 ------w c:\windows\system32\tracert.exe
    + 2008-04-14 00:12:38 12,288 ------w c:\windows\system32\tracert.exe
    - 2004-08-10 04:00:00 11,264 ------w c:\windows\system32\tree.com
    + 2008-04-14 00:12:42 12,800 ------w c:\windows\system32\tree.com
    - 2004-08-10 04:00:00 90,624 ------w c:\windows\system32\trkwks.dll
    + 2008-04-14 00:12:07 90,112 ----a-w c:\windows\system32\trkwks.dll
    - 2004-08-10 04:00:00 93,696 ------w c:\windows\system32\tscfgwmi.dll
    + 2008-04-14 00:12:07 93,696 ------w c:\windows\system32\tscfgwmi.dll
    - 2004-08-10 04:00:00 12,168 ------w c:\windows\system32\tsddd.dll
    + 2008-04-14 00:13:21 12,168 ------w c:\windows\system32\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\system32\tsgqec.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\system32\tspkg.dll
    + 2008-07-30 02:10:04 26,112 ----a-w c:\windows\system32\TsWpfWrp.exe
    - 2004-08-10 04:00:00 44,032 ------w c:\windows\system32\twext.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\system32\twext.dll
    - 2005-07-26 11:39:49 101,376 ----a-w c:\windows\system32\txflog.dll
    + 2008-04-14 00:12:07 101,376 ----a-w c:\windows\system32\txflog.dll
    - 2007-11-13 11:31:11 60,416 ------w c:\windows\system32\tzchange.exe
    + 2008-10-23 10:06:59 62,976 ------w c:\windows\system32\tzchange.exe
    - 2004-08-10 04:00:00 25,600 ------w c:\windows\system32\udhisapi.dll
    + 2008-04-14 00:12:07 26,624 ------w c:\windows\system32\udhisapi.dll
    - 2004-08-10 04:00:00 275,456 ------w c:\windows\system32\ulib.dll
    + 2008-04-14 00:12:07 275,456 ------w c:\windows\system32\ulib.dll
    - 2004-08-10 04:00:00 35,840 ------w c:\windows\system32\umandlg.dll
    + 2008-04-14 00:12:07 35,840 ------w c:\windows\system32\umandlg.dll
    - 2005-08-23 03:35:42 123,392 ----a-w c:\windows\system32\umpnpmgr.dll
    + 2008-04-14 00:12:07 123,392 ----a-w c:\windows\system32\umpnpmgr.dll
    - 2004-08-10 04:00:00 74,240 ------w c:\windows\system32\unimdmat.dll
    + 2008-04-14 00:12:07 74,240 ----a-w c:\windows\system32\unimdmat.dll
    - 2004-08-10 04:00:00 13,824 ------w c:\windows\system32\uniplat.dll
    + 2008-04-14 00:12:07 13,824 ----a-w c:\windows\system32\uniplat.dll
    - 2004-08-10 04:00:00 316,416 ------w c:\windows\system32\untfs.dll
    + 2008-04-14 00:12:07 316,416 ------w c:\windows\system32\untfs.dll
    - 2004-08-10 04:00:00 132,608 ------w c:\windows\system32\upnp.dll
    + 2008-04-14 00:12:08 133,632 ----a-w c:\windows\system32\upnp.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\upnpcont.exe
    + 2008-04-14 00:12:38 16,896 ------w c:\windows\system32\upnpcont.exe
    - 2007-02-05 20:17:02 185,344 ------w c:\windows\system32\upnphost.dll
    + 2008-04-14 00:12:08 185,856 ------w c:\windows\system32\upnphost.dll
    - 2004-08-10 04:00:00 239,616 ------w c:\windows\system32\upnpui.dll
    + 2008-04-14 00:12:08 239,616 ------w c:\windows\system32\upnpui.dll
    - 2004-08-10 04:00:00 18,432 ------w c:\windows\system32\ups.exe
    + 2008-04-14 00:12:38 18,432 ------w c:\windows\system32\ups.exe
    - 2008-04-23 04:16:28 105,984 ----a-w c:\windows\system32\url.dll
    + 2008-12-20 23:15:39 105,984 ----a-w c:\windows\system32\url.dll
    - 2008-04-23 04:16:29 1,159,680 ----a-w c:\windows\system32\urlmon.dll
    + 2008-12-20 23:15:40 1,160,192 ----a-w c:\windows\system32\urlmon.dll
    - 2004-08-10 04:00:00 16,896 ------w c:\windows\system32\usbmon.dll
    + 2008-04-14 00:12:08 16,896 ----a-w c:\windows\system32\usbmon.dll
    + 2003-04-16 09:32:06 45,056 ----a-r c:\windows\system32\usbmonit.exe
    - 2004-08-04 14:56:48 74,240 ----a-w c:\windows\system32\usbui.dll
    + 2008-04-14 00:12:08 74,240 ----a-w c:\windows\system32\usbui.dll
    - 2007-03-08 15:36:28 577,536 ----a-w c:\windows\system32\user32.dll
    + 2008-04-14 00:12:08 578,560 ----a-w c:\windows\system32\user32.dll
    - 2004-08-10 04:00:00 723,456 ------w c:\windows\system32\userenv.dll
    + 2008-04-14 00:12:08 727,040 ----a-w c:\windows\system32\userenv.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\userinit.exe
    + 2008-04-14 00:12:38 26,112 ------w c:\windows\system32\userinit.exe
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\system32\usmt\cobramsg.dll
    - 2004-08-10 04:00:00 123,904 ------w c:\windows\system32\usmt\guitrn.dll
    + 2008-04-14 00:11:54 133,120 ------w c:\windows\system32\usmt\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\system32\usmt\guitrna.dll
    - 2004-08-10 04:00:00 4,096 ------w c:\windows\system32\usmt\iconlib.dll
    + 2008-04-13 16:44:29 2,560 ------w c:\windows\system32\usmt\iconlib.dll
    - 2004-08-10 04:00:00 19,968 ------w c:\windows\system32\usmt\log.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\system32\usmt\log.dll
    - 2004-08-10 04:00:00 201,216 ------w c:\windows\system32\usmt\migism.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\system32\usmt\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\system32\usmt\migisma.dll
    - 2004-08-10 04:00:00 103,424 ------w c:\windows\system32\usmt\migload.exe
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\system32\usmt\migload.exe
    - 2004-08-10 04:00:00 240,128 ------w c:\windows\system32\usmt\migwiz.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\system32\usmt\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\system32\usmt\migwiza.exe
    - 2004-08-10 04:00:00 202,752 ------w c:\windows\system32\usmt\script.dll
    + 2008-04-14 00:12:05 215,552 ------w c:\windows\system32\usmt\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\system32\usmt\scripta.dll
    - 2004-08-10 04:00:00 168,960 ------w c:\windows\system32\usmt\sysmod.dll
    + 2008-04-14 00:12:07 193,024 ------w c:\windows\system32\usmt\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\system32\usmt\sysmoda.dll
    - 2004-08-10 04:00:00 406,528 ------w c:\windows\system32\usp10.dll
    + 2008-04-14 00:12:08 406,016 ------w c:\windows\system32\usp10.dll
    - 2004-08-10 04:00:00 50,176 ------w c:\windows\system32\utilman.exe
    + 2008-04-14 00:12:38 50,176 ------w c:\windows\system32\utilman.exe
    - 2004-08-10 04:00:00 218,624 ------w c:\windows\system32\uxtheme.dll
    + 2008-04-14 00:12:08 218,624 ----a-w c:\windows\system32\uxtheme.dll
    - 2004-08-10 04:00:00 30,749 ------w c:\windows\system32\vbajet32.dll
    + 2008-04-14 00:12:08 30,749 ------w c:\windows\system32\vbajet32.dll
    - 2006-11-08 02:03:36 413,696 ----a-w c:\windows\system32\vbscript.dll
    + 2008-05-09 10:53:40 430,080 ----a-w c:\windows\system32\vbscript.dll
    - 2004-08-10 04:00:00 26,112 ------w c:\windows\system32\vdmdbg.dll
    + 2008-04-14 00:12:08 26,112 ------w c:\windows\system32\vdmdbg.dll
    - 2004-08-10 04:00:00 51,712 ------w c:\windows\system32\vdmredir.dll
    + 2008-04-14 00:12:08 51,712 ------w c:\windows\system32\vdmredir.dll
    - 2006-03-17 00:38:01 28,672 ------w c:\windows\system32\verclsid.exe
    + 2008-04-14 00:12:38 28,672 ------w c:\windows\system32\verclsid.exe
    - 2004-08-10 04:00:00 13,312 ------w c:\windows\system32\verifier.dll
    + 2008-04-14 00:12:08 26,624 ------w c:\windows\system32\verifier.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\version.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\version.dll
    - 2004-08-10 04:00:00 430,592 ------w c:\windows\system32\vssapi.dll
    + 2008-04-14 00:12:08 430,592 ----a-w c:\windows\system32\vssapi.dll
    - 2004-08-10 04:00:00 289,792 ------w c:\windows\system32\vssvc.exe
    + 2008-04-14 00:12:38 289,792 ------w c:\windows\system32\vssvc.exe
    - 2004-08-10 04:00:00 174,592 ------w c:\windows\system32\w32time.dll
    + 2008-04-14 00:12:08 175,104 ----a-w c:\windows\system32\w32time.dll
    - 2004-08-10 04:00:00 15,872 ------w c:\windows\system32\w3ssl.dll
    + 2008-04-14 00:12:08 15,872 ------w c:\windows\system32\w3ssl.dll
    - 2004-08-10 04:00:00 17,664 ------w c:\windows\system32\watchdog.sys
    + 2008-04-13 18:44:59 17,664 ------w c:\windows\system32\watchdog.sys
    - 2004-08-10 04:00:00 208,896 ------w c:\windows\system32\wavemsp.dll
    + 2008-04-14 00:12:08 215,552 ------w c:\windows\system32\wavemsp.dll
    - 2004-08-10 04:00:00 1,352,192 ------w c:\windows\system32\wbem\cimwin32.dll
    + 2008-04-14 00:11:50 1,358,848 ------w c:\windows\system32\wbem\cimwin32.dll
    - 2004-08-10 11:00:00 45,568 ------w c:\windows\system32\wbem\CmdEvTgProv.dll
    + 2008-04-14 00:11:53 45,056 ------w c:\windows\system32\wbem\cmdevtgprov.dll
    - 2004-08-10 04:00:00 247,808 ------w c:\windows\system32\wbem\esscli.dll
    + 2008-04-14 00:11:53 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
    - 2004-08-10 04:00:00 22,016 ------w c:\windows\system32\wbem\evntrprv.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\system32\wbem\evntrprv.dll
    - 2004-08-10 04:00:00 472,064 ------w c:\windows\system32\wbem\fastprox.dll
    + 2008-04-14 00:11:53 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
    - 2004-08-10 04:00:00 185,856 ------w c:\windows\system32\wbem\framedyn.dll
    + 2008-04-14 00:11:53 185,344 ----a-w c:\windows\system32\wbem\framedyn.dll
    - 2004-08-10 04:00:00 24,576 ------w c:\windows\system32\wbem\krnlprov.dll
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\system32\wbem\krnlprov.dll
    - 2004-08-10 04:00:00 16,384 ------w c:\windows\system32\wbem\mofcomp.exe
    + 2008-04-14 00:12:26 16,384 ----a-w c:\windows\system32\wbem\mofcomp.exe
    - 2004-08-10 04:00:00 123,904 ------w c:\windows\system32\wbem\mofd.dll
    + 2008-04-14 00:11:57 123,904 ----a-w c:\windows\system32\wbem\mofd.dll
    - 2004-08-10 04:00:00 47,104 ------w c:\windows\system32\wbem\ncprov.dll
    + 2008-04-14 00:12:01 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
    - 2004-08-10 04:00:00 212,992 ------w c:\windows\system32\wbem\ntevt.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\system32\wbem\ntevt.dll
    - 2004-08-10 04:00:00 92,672 ------w c:\windows\system32\wbem\policman.dll
    + 2008-04-14 00:12:02 92,672 ------w c:\windows\system32\wbem\policman.dll
    - 2004-08-10 04:00:00 237,056 ------w c:\windows\system32\wbem\provthrd.dll
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\system32\wbem\provthrd.dll
    - 2004-08-10 04:00:00 177,152 ------w c:\windows\system32\wbem\repdrvfs.dll
    + 2008-04-14 00:12:04 178,176 ----a-w c:\windows\system32\wbem\repdrvfs.dll
    - 2004-08-10 04:00:00 36,864 ------w c:\windows\system32\wbem\scrcons.exe
    + 2008-04-14 00:12:34 36,352 ------w c:\windows\system32\wbem\scrcons.exe
    - 2004-08-10 04:00:00 86,528 ------w c:\windows\system32\wbem\stdprov.dll
    + 2008-04-14 00:12:07 86,528 ------w c:\windows\system32\wbem\stdprov.dll
    - 2004-08-10 04:00:00 131,584 ------w c:\windows\system32\wbem\viewprov.dll
    + 2008-04-14 00:12:08 131,584 ------w c:\windows\system32\wbem\viewprov.dll
    - 2004-08-10 04:00:00 196,608 ------w c:\windows\system32\wbem\wbemcntl.dll
    + 2008-04-14 00:12:08 196,608 ------w c:\windows\system32\wbem\wbemcntl.dll
    - 2004-08-10 04:00:00 214,528 ------w c:\windows\system32\wbem\wbemcomn.dll
    + 2008-04-14 00:12:08 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
    - 2004-08-10 04:00:00 71,680 ------w c:\windows\system32\wbem\wbemcons.dll
    + 2008-04-14 00:12:08 71,680 ------w c:\windows\system32\wbem\wbemcons.dll
    - 2004-08-10 04:00:00 530,944 ------w c:\windows\system32\wbem\wbemcore.dll
    + 2008-04-14 00:12:08 531,456 ----a-w c:\windows\system32\wbem\wbemcore.dll
    - 2004-08-10 04:00:00 178,176 ------w c:\windows\system32\wbem\wbemdisp.dll
    + 2008-04-14 00:12:08 178,176 ------w c:\windows\system32\wbem\wbemdisp.dll
    - 2004-08-10 04:00:00 273,920 ------w c:\windows\system32\wbem\wbemess.dll
    + 2008-04-14 00:12:08 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
    - 2004-08-10 04:00:00 43,008 ------w c:\windows\system32\wbem\wbemperf.dll
    + 2008-04-14 00:12:08 43,008 ------w c:\windows\system32\wbem\wbemperf.dll
    - 2004-08-10 04:00:00 18,944 ------w c:\windows\system32\wbem\wbemprox.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
    - 2004-08-10 04:00:00 43,520 ------w c:\windows\system32\wbem\wbemsvc.dll
    + 2008-04-14 00:12:08 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
    - 2004-08-10 04:00:00 116,224 ------w c:\windows\system32\wbem\wbemtest.exe
    + 2008-04-14 00:12:39 116,224 ------w c:\windows\system32\wbem\wbemtest.exe
    - 2004-08-10 04:00:00 197,120 ------w c:\windows\system32\wbem\wbemupgd.dll
    + 2008-04-14 00:12:08 197,120 ------w c:\windows\system32\wbem\wbemupgd.dll
    - 2004-08-10 04:00:00 196,608 ------w c:\windows\system32\wbem\wmiadap.exe
    + 2008-04-14 00:12:40 196,608 ------w c:\windows\system32\wbem\wmiadap.exe
    - 2004-08-10 04:00:00 6,656 ------w c:\windows\system32\wbem\wmiapres.dll
    + 2008-04-13 17:10:20 6,656 ------w c:\windows\system32\wbem\wmiapres.dll
    - 2004-08-10 04:00:00 89,088 ------w c:\windows\system32\wbem\wmiaprpl.dll
    + 2008-04-14 00:12:09 88,576 ------w c:\windows\system32\wbem\wmiaprpl.dll
    - 2004-08-10 04:00:00 126,464 ------w c:\windows\system32\wbem\wmiapsrv.exe
    + 2008-04-14 00:12:40 126,464 ------w c:\windows\system32\wbem\wmiapsrv.exe
    - 2004-08-10 04:00:00 358,912 ------w c:\windows\system32\wbem\wmic.exe
    + 2008-04-14 00:12:40 358,912 ------w c:\windows\system32\wbem\wmic.exe
    - 2004-08-10 04:00:00 60,928 ------w c:\windows\system32\wbem\wmicookr.dll
    + 2008-04-14 00:12:09 60,928 ------w c:\windows\system32\wbem\wmicookr.dll
    - 2004-08-10 04:00:00 140,800 ------w c:\windows\system32\wbem\wmidcprv.dll
    + 2008-04-14 00:12:09 140,800 ------w c:\windows\system32\wbem\wmidcprv.dll
    - 2004-08-10 04:00:00 156,672 ------w c:\windows\system32\wbem\wmipcima.dll
    + 2008-04-14 00:12:09 156,672 ------w c:\windows\system32\wbem\wmipcima.dll
    - 2004-08-10 04:00:00 132,096 ------w c:\windows\system32\wbem\wmipdskq.dll
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\system32\wbem\wmipdskq.dll
    - 2004-08-10 04:00:00 62,464 ------w c:\windows\system32\wbem\wmipiprt.dll
    + 2008-04-14 00:12:09 61,952 ------w c:\windows\system32\wbem\wmipiprt.dll
    - 2004-08-10 04:00:00 62,976 ------w c:\windows\system32\wbem\wmipjobj.dll
    + 2008-04-14 00:12:09 62,464 ------w c:\windows\system32\wbem\wmipjobj.dll
    - 2004-08-10 04:00:00 144,896 ------w c:\windows\system32\wbem\wmiprov.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
    - 2004-08-10 04:00:00 437,248 ------w c:\windows\system32\wbem\wmiprvsd.dll
    + 2008-04-14 00:12:09 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
    - 2004-08-10 04:00:00 218,112 ------w c:\windows\system32\wbem\wmiprvse.exe
    + 2008-04-14 00:12:40 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
    - 2004-08-10 04:00:00 41,472 ------w c:\windows\system32\wbem\wmipsess.dll
    + 2008-04-14 00:12:09 41,472 ------w c:\windows\system32\wbem\wmipsess.dll
    - 2004-08-10 04:00:00 144,896 ------w c:\windows\system32\wbem\wmisvc.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmisvc.dll
    - 2004-08-10 04:00:00 95,232 ------w c:\windows\system32\wbem\wmiutils.dll
    + 2008-04-14 00:12:09 95,232 ----a-w c:\windows\system32\wbem\wmiutils.dll
    - 2006-03-24 04:37:50 49,152 ----a-w c:\windows\system32\wdigest.dll
    + 2008-04-14 00:12:08 49,152 ----a-w c:\windows\system32\wdigest.dll
    - 2004-08-04 14:56:58 23,552 ----a-w c:\windows\system32\wdmaud.drv
    + 2008-04-14 00:12:45 23,552 ----a-w c:\windows\system32\wdmaud.drv
    - 2008-04-23 04:16:29 233,472 ----a-w c:\windows\system32\webcheck.dll
    + 2008-12-20 23:15:40 233,472 ----a-w c:\windows\system32\webcheck.dll
    - 2006-01-04 03:35:05 68,096 ----a-w c:\windows\system32\webclnt.dll
    + 2008-04-14 00:12:08 68,096 ----a-w c:\windows\system32\webclnt.dll
    - 2004-08-10 04:00:00 135,680 ----a-w c:\windows\system32\webvw.dll
    + 2008-04-14 00:12:08 135,680 ----a-w c:\windows\system32\webvw.dll
    - 2004-08-10 04:00:00 65,536 ----a-w c:\windows\system32\wextract.exe
    + 2008-04-14 00:12:39 65,024 ----a-w c:\windows\system32\wextract.exe
    - 2004-08-10 04:00:00 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
    + 2008-04-14 00:12:39 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
    - 2004-08-10 04:00:00 463,360 ----a-w c:\windows\system32\wiadefui.dll
    + 2008-04-14 00:12:08 463,360 ----a-w c:\windows\system32\wiadefui.dll
    - 2004-08-10 04:00:00 124,416 ----a-w c:\windows\system32\wiadss.dll
    + 2008-04-14 00:12:08 124,416 ----a-w c:\windows\system32\wiadss.dll
    - 2004-08-10 04:00:00 75,776 ----a-w c:\windows\system32\wiascr.dll
    + 2008-04-14 00:12:08 75,776 ----a-w c:\windows\system32\wiascr.dll
    - 2006-12-19 18:16:47 333,824 ----a-w c:\windows\system32\wiaservc.dll
    + 2008-04-14 00:12:08 333,824 ----a-w c:\windows\system32\wiaservc.dll
    - 2004-08-10 04:00:00 589,312 ----a-w c:\windows\system32\wiashext.dll
    + 2008-04-14 00:12:08 589,312 ----a-w c:\windows\system32\wiashext.dll
    - 2004-08-10 04:00:00 111,104 ----a-w c:\windows\system32\wiavideo.dll
    + 2008-04-14 00:12:08 111,104 ----a-w c:\windows\system32\wiavideo.dll
    - 2008-03-19 09:47:00 1,845,248 ----a-w c:\windows\system32\win32k.sys
    + 2008-09-15 12:12:56 1,846,400 ----a-w c:\windows\system32\win32k.sys
    - 2004-08-10 04:00:00 101,888 ----a-w c:\windows\system32\win32spl.dll
    + 2008-04-14 00:12:08 102,400 ----a-w c:\windows\system32\win32spl.dll
    - 2004-08-10 04:00:00 937,984 ----a-w c:\windows\system32\winbrand.dll
    + 2008-04-13 16:48:53 1,647,616 ----a-w c:\windows\system32\winbrand.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\system32\windowscodecs.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\system32\windowscodecsext.dll
    - 2004-08-10 04:00:00 351,232 ----a-w c:\windows\system32\winhttp.dll
    + 2008-04-14 00:12:08 354,304 ----a-w c:\windows\system32\winhttp.dll
    - 2008-04-23 04:16:29 826,368 ----a-w c:\windows\system32\wininet.dll
    + 2008-12-20 23:15:41 826,368 ----a-w c:\windows\system32\wininet.dll
    - 2004-08-10 04:00:00 32,768 ----a-w c:\windows\system32\winipsec.dll
    + 2008-04-14 00:12:09 32,256 ----a-w c:\windows\system32\winipsec.dll
    - 2004-08-10 04:00:00 502,272 ----a-w c:\windows\system32\winlogon.exe
    + 2008-04-14 00:12:39 507,904 ----a-w c:\windows\system32\winlogon.exe
    - 2004-08-10 04:00:00 176,128 ----a-w c:\windows\system32\winmm.dll
    + 2008-04-14 00:12:09 176,128 ----a-w c:\windows\system32\winmm.dll
    - 2004-08-10 11:00:00 764,928 ----a-w c:\windows\system32\winntbbu.dll
    + 2008-04-14 00:11:11 756,224 ----a-w c:\windows\system32\winntbbu.dll
    - 2004-08-10 04:00:00 16,896 ----a-w c:\windows\system32\winrnr.dll
    + 2008-04-14 00:12:09 16,896 ----a-w c:\windows\system32\winrnr.dll
    - 2004-08-10 04:00:00 99,328 ----a-w c:\windows\system32\winscard.dll
    + 2008-04-14 00:12:09 99,328 ----a-w c:\windows\system32\winscard.dll
    - 2004-08-10 04:00:00 17,408 ----a-w c:\windows\system32\winshfhc.dll
    + 2008-04-14 00:12:09 17,408 ----a-w c:\windows\system32\winshfhc.dll
    - 2004-08-10 04:00:00 146,432 ----a-w c:\windows\system32\winspool.drv
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system32\winspool.drv
    - 2007-03-17 13:43:01 292,864 ----a-w c:\windows\system32\winsrv.dll
    + 2008-04-14 00:12:09 293,376 ----a-w c:\windows\system32\winsrv.dll
    - 2004-08-10 04:00:00 53,760 ----a-w c:\windows\system32\winsta.dll
    + 2008-04-14 00:12:09 53,760 ----a-w c:\windows\system32\winsta.dll
    - 2004-08-10 04:00:00 176,640 ----a-w c:\windows\system32\wintrust.dll
    + 2008-04-14 00:12:09 176,640 ----a-w c:\windows\system32\wintrust.dll
    - 2004-08-10 04:00:00 5,632 ----a-w c:\windows\system32\winver.exe
    + 2008-04-14 00:12:40 5,632 ----a-w c:\windows\system32\winver.exe
    - 2006-08-17 12:28:27 132,096 ----a-w c:\windows\system32\wkssvc.dll
    + 2008-04-14 00:12:09 132,096 ----a-w c:\windows\system32\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\system32\wlanapi.dll
    - 2004-08-10 04:00:00 172,032 ----a-w c:\windows\system32\wldap32.dll
    + 2008-04-14 00:12:09 172,032 ----a-w c:\windows\system32\wldap32.dll
    - 2004-08-10 04:00:00 92,672 ----a-w c:\windows\system32\wlnotify.dll
    + 2008-04-14 00:12:09 92,672 ----a-w c:\windows\system32\wlnotify.dll
    - 2004-08-10 04:00:00 5,632 ----a-w c:\windows\system32\wmi.dll
    + 2008-04-14 00:11:15 5,632 ----a-w c:\windows\system32\wmi.dll
    - 2006-10-19 02:47:20 937,984 ----a-w c:\windows\system32\WMNetMgr.dll
    + 2008-06-18 10:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
    - 2007-06-12 04:51:12 10,834,944 ----a-w c:\windows\system32\wmp.dll
    + 2008-11-11 23:34:42 10,838,016 ----a-w c:\windows\system32\wmp.dll
    - 2004-08-10 04:00:00 20,480 ----a-w c:\windows\system32\wmpcd.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcd.dll
    - 2004-08-10 04:00:00 20,480 ----a-w c:\windows\system32\wmpcore.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcore.dll
    - 2006-10-19 02:47:20 295,936 ------w c:\windows\system32\wmpeffects.dll
    + 2008-06-24 22:12:58 295,936 ------w c:\windows\system32\wmpeffects.dll
    + 2008-04-14 00:12:09 276,992 ------w c:\windows\system32\wmphoto.dll
    - 2004-08-10 04:00:00 20,480 ----a-w c:\windows\system32\wmpui.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpui.dll
    - 2004-08-10 04:00:00 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
    + 2008-04-14 00:12:09 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
    - 2004-08-10 04:00:00 303,616 ----a-w c:\windows\system32\wmstream.dll
    + 2008-04-14 00:12:10 303,616 ----a-w c:\windows\system32\wmstream.dll
    - 2006-10-19 02:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
    + 2008-06-18 10:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
    - 2004-08-10 04:00:00 264,192 ----a-w c:\windows\system32\wow32.dll
    + 2008-04-14 00:12:10 264,192 ----a-w c:\windows\system32\wow32.dll
    - 2004-08-10 04:00:00 32,256 ----a-w c:\windows\system32\wpabaln.exe
    + 2008-04-14 00:12:40 32,256 ----a-w c:\windows\system32\wpabaln.exe
    - 2004-08-10 04:00:00 32,256 ----a-w c:\windows\system32\wpnpinst.exe
    + 2008-04-14 00:12:41 11,264 ----a-w c:\windows\system32\wpnpinst.exe
    - 2004-08-10 04:00:00 82,944 ----a-w c:\windows\system32\ws2_32.dll
    + 2008-04-14 00:12:10 82,432 ----a-w c:\windows\system32\ws2_32.dll
    - 2004-08-10 04:00:00 19,968 ----a-w c:\windows\system32\ws2help.dll
    + 2008-04-14 00:12:10 19,968 ----a-w c:\windows\system32\ws2help.dll
    - 2004-08-10 04:00:00 13,824 ----a-w c:\windows\system32\wscntfy.exe
    + 2008-04-14 00:12:41 13,824 ----a-w c:\windows\system32\wscntfy.exe
    - 2004-08-10 04:00:00 114,688 ----a-w c:\windows\system32\wscript.exe
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\system32\wscript.exe
    - 2004-08-10 04:00:00 81,408 ----a-w c:\windows\system32\wscsvc.dll
    + 2008-04-14 00:12:10 80,896 ----a-w c:\windows\system32\wscsvc.dll
    - 2004-08-10 04:00:00 596,992 ----a-w c:\windows\system32\wsecedit.dll
    + 2008-04-14 00:12:10 604,160 ----a-w c:\windows\system32\wsecedit.dll
    - 2004-08-10 04:00:00 108,032 ----a-w c:\windows\system32\wshbth.dll
    + 2008-04-14 00:12:10 108,032 ----a-w c:\windows\system32\wshbth.dll
    - 2004-08-10 04:00:00 28,672 ----a-w c:\windows\system32\wshcon.dll
    + 2008-04-14 00:12:10 36,864 ----a-w c:\windows\system32\wshcon.dll
    - 2004-08-10 04:00:00 65,536 ----a-w c:\windows\system32\wshext.dll
    + 2008-05-09 10:53:40 90,112 ----a-w c:\windows\system32\wshext.dll
    - 2004-08-10 04:00:00 14,336 ----a-w c:\windows\system32\wship6.dll
    + 2008-04-14 00:12:10 14,336 ----a-w c:\windows\system32\wship6.dll
    - 2004-08-10 04:00:00 11,776 ----a-w c:\windows\system32\WshRm.dll
    + 2008-04-14 00:12:10 11,264 ----a-w c:\windows\system32\wshrm.dll
    - 2004-08-10 04:00:00 19,968 ----a-w c:\windows\system32\wshtcpip.dll
    + 2008-04-14 00:12:10 19,456 ----a-w c:\windows\system32\wshtcpip.dll
    - 2004-08-10 04:00:00 42,496 ----a-w c:\windows\system32\wsnmp32.dll
    + 2008-04-14 00:12:10 41,984 ----a-w c:\windows\system32\wsnmp32.dll
    - 2004-08-10 04:00:00 22,528 ----a-w c:\windows\system32\wsock32.dll
    + 2008-04-14 00:12:10 22,528 ----a-w c:\windows\system32\wsock32.dll
    - 2004-08-10 04:00:00 50,688 ----a-w c:\windows\system32\wstdecod.dll
    + 2008-04-14 00:12:10 50,688 ----a-w c:\windows\system32\wstdecod.dll
    - 2004-08-10 04:00:00 18,432 ----a-w c:\windows\system32\wtsapi32.dll
    + 2008-04-14 00:12:10 18,432 ----a-w c:\windows\system32\wtsapi32.dll
    - 2007-07-30 23:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
    + 2008-10-16 19:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
    - 2007-07-30 23:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
    + 2008-10-16 19:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
    - 2007-07-30 23:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
    + 2008-10-16 19:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    - 2004-08-10 04:00:00 6,656 ----a-w c:\windows\system32\wuauserv.dll
    + 2008-04-14 00:12:11 6,656 ----a-w c:\windows\system32\wuauserv.dll
    - 2007-07-30 23:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll
    + 2008-10-16 19:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
    - 2007-07-30 23:18:40 33,624 ----a-w c:\windows\system32\wups.dll
    + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\system32\wups.dll
    - 2007-07-30 23:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
    + 2008-10-16 19:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
    - 2007-07-30 23:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll
    + 2008-10-16 19:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
    - 2005-06-22 05:00:18 383,488 ----a-w c:\windows\system32\wzcdlg.dll
    + 2008-04-14 00:12:11 383,488 ----a-w c:\windows\system32\wzcdlg.dll
    - 2005-06-22 05:00:18 52,736 ----a-w c:\windows\system32\wzcsapi.dll
    + 2008-04-14 00:12:11 52,736 ----a-w c:\windows\system32\wzcsapi.dll
    - 2005-06-22 05:00:18 474,624 ----a-w c:\windows\system32\wzcsvc.dll
    + 2008-04-14 00:12:11 483,840 ----a-w c:\windows\system32\wzcsvc.dll
    + 2006-02-03 12:41:26 14,032 ----a-w c:\windows\system32\x3daudio1_0.dll
    + 2006-02-03 12:42:06 230,096 ----a-w c:\windows\system32\xactengine2_0.dll
    + 2006-03-31 16:39:48 229,584 ----a-w c:\windows\system32\xactengine2_1.dll
    + 2006-05-31 11:24:16 230,168 ----a-w c:\windows\system32\xactengine2_2.dll
    - 2004-08-10 04:00:00 91,648 ----a-w c:\windows\system32\xactsrv.dll
    + 2008-04-14 00:12:11 91,648 ----a-w c:\windows\system32\xactsrv.dll
    - 2004-08-10 04:00:00 30,720 ----a-w c:\windows\system32\xcopy.exe
    + 2008-04-14 00:12:41 30,720 ----a-w c:\windows\system32\xcopy.exe
    + 2006-03-31 16:39:24 62,672 ----a-w c:\windows\system32\xinput1_1.dll
    + 2005-12-05 22:07:30 61,136 ----a-w c:\windows\system32\xinput9_1_0.dll
    - 2006-07-14 15:51:51 121,856 ------w c:\windows\system32\xmllite.dll
    + 2008-04-14 00:12:11 121,856 ------w c:\windows\system32\xmllite.dll
    - 2004-08-10 04:00:00 129,536 ----a-w c:\windows\system32\xmlprov.dll
    + 2008-04-14 00:12:11 129,024 ----a-w c:\windows\system32\xmlprov.dll
    - 2004-08-10 04:00:00 50,176 ----a-w c:\windows\system32\xmlprovi.dll
    + 2008-04-14 00:12:11 50,176 ----a-w c:\windows\system32\xmlprovi.dll
    - 2006-03-01 19:42:42 11,776 ----a-w c:\windows\system32\xolehlp.dll
    + 2008-04-14 00:12:11 11,776 ----a-w c:\windows\system32\xolehlp.dll
    - 2004-08-10 04:00:00 438,784 ----a-w c:\windows\system32\xpob2res.dll
    + 2008-04-13 17:39:29 438,784 ----a-w c:\windows\system32\xpob2res.dll
    - 2004-08-10 04:00:00 187,392 ----a-w c:\windows\system32\xpsp1res.dll
    + 2008-04-13 17:39:22 187,392 ----a-w c:\windows\system32\xpsp1res.dll
    - 2004-08-10 04:00:00 2,897,920 ----a-w c:\windows\system32\xpsp2res.dll
    + 2008-04-13 17:39:24 2,897,920 ----a-w c:\windows\system32\xpsp2res.dll
    - 2007-10-29 10:04:03 350,720 ----a-w c:\windows\system32\xpsp3res.dll
    + 2008-04-13 17:39:26 689,152 ----a-w c:\windows\system32\xpsp3res.dll
    + 2008-07-06 12:06:10 575,488 ------w c:\windows\system32\xpsshhdr.dll
    + 2008-07-06 12:06:10 1,676,288 ------w c:\windows\system32\xpssvcs.dll
    + 2008-07-30 02:26:06 301,568 ----a-w c:\windows\system32\XPSViewer\XPSViewer.exe
    - 2004-08-10 04:00:00 337,920 ----a-w c:\windows\system32\zipfldr.dll
    + 2008-04-14 00:12:11 338,432 ----a-w c:\windows\system32\zipfldr.dll
    + 2009-03-12 01:22:44 16,384 ----atw c:\windows\temp\Perflib_Perfdata_78c.dat
    - 2004-08-10 04:00:00 50,688 ----a-w c:\windows\twain_32.dll
    + 2008-04-14 00:12:07 50,688 ----a-w c:\windows\twain_32.dll
    - 2004-08-10 04:00:00 283,648 ----a-w c:\windows\winhlp32.exe
    + 2008-04-14 00:12:39 283,648 ----a-w c:\windows\winhlp32.exe
    + 2009-01-30 02:56:20 8,192 ----a-w c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2008-09-30 21:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2008-09-30 21:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    - 2007-01-19 20:15:24 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2008-04-14 00:12:50 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    - 2007-01-19 20:15:24 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    + 2008-04-14 00:12:50 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    - 2007-01-19 20:15:24 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    + 2008-04-14 00:12:50 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    - 2007-01-19 20:15:24 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2008-04-14 00:12:50 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2008-07-25 16:17:20 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
    + 2008-07-25 16:17:20 558,080 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
    + 2008-07-25 16:17:20 635,904 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
    + 2005-09-23 12:29:16 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
    + 2005-09-23 12:29:16 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
    + 2005-09-23 12:29:16 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
    + 2008-07-29 12:05:06 161,784 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\atl90.dll
    + 2007-11-07 02:23:56 224,768 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
    + 2007-11-07 07:19:32 568,832 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
    + 2007-11-07 07:19:32 655,872 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
    + 2008-07-29 07:54:08 225,280 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
    + 2008-07-29 12:05:08 572,928 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
    + 2008-07-29 12:05:08 655,872 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
    + 2008-07-29 07:54:12 312,832 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcm90d.dll
    + 2008-07-29 12:05:08 875,520 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcp90d.dll
    + 2008-07-29 12:05:08 1,180,672 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcr90d.dll
    + 2008-07-29 12:05:12 5,937,144 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfc90d.dll
    + 2008-07-29 12:05:12 5,982,720 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfc90ud.dll
    + 2008-07-29 10:07:42 80,896 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90d.dll
    + 2008-07-29 10:07:42 80,896 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90ud.dll
    + 2008-07-29 12:05:08 3,768,312 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll
    + 2008-07-29 12:05:10 3,783,672 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll
    + 2008-07-29 10:07:42 59,904 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
    + 2008-07-29 10:07:42 59,904 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
    + 2008-07-29 12:05:06 38,912 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
    + 2008-07-29 12:05:06 39,936 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
    + 2008-07-29 12:05:08 66,560 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
    + 2008-07-29 12:05:08 56,832 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
    + 2008-07-29 12:05:06 65,024 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
    + 2008-07-29 12:05:08 65,024 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
    + 2008-07-29 12:05:06 66,048 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
    + 2008-07-29 12:05:08 64,512 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
    + 2008-07-29 12:05:08 46,592 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
    + 2008-07-29 12:05:08 46,080 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
    + 2008-07-29 12:05:08 62,976 ----a-w c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
    + 2008-04-14 00:12:51 1,054,208 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-
  6. 2009-03-13, 04:41 #16
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    This is the last of the combofix.txt file

    I'm sure you're goingreading all this.....

    Section 12

    Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
    + 2008-04-14 00:12:51 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2008-04-14 00:12:51 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
    + 2008-04-14 00:12:47 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
    + 2008-04-15 17:47:33 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll
    - 2004-08-10 11:00:00 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    + 2008-04-14 00:12:49 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    - 2004-08-10 11:00:00 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    + 2008-04-14 00:12:50 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    - 2004-08-10 11:00:00 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    + 2008-04-13 18:26:33 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    + 2009-01-30 02:56:22 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2009-01-30 02:56:22 113,664 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2005-06-02 48752]
    "vptray"="c:\progra~1\SYMANT~2\VPTray.exe" [2005-06-23 85696]
    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-25 148888]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-04 141848]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-04 166424]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-04 137752]
    "Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-03-09 515416]
    "RTHDCPL"="RTHDCPL.EXE" [2007-10-25 c:\windows\RTHDCPL.EXE]

    c:\documents and settings\Default User\Start Menu\Programs\Startup\
    Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-06-10 27136]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=bzqpfd.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lavasoft ad-aware service]
    @="Service"

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk.disabled]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk.disabled
    backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.disabledCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Updates From HP.lnk.disabled]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Updates From HP.lnk.disabled
    backup=c:\windows\pss\Updates From HP.lnk.disabledCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "BellCanada_McciTrayApp"=c:\program files\BellCanada\McciTrayApp.exe
    "DISCover"=c:\program files\DISC\DISCover.exe
    "DiscUpdateManager"=c:\program files\DISC\DiscUpdMgr.exe
    "ehTray"=c:\windows\ehome\ehtray.exe
    "HP Software Update"=c:\program files\HP\HP Software Update\HPwuSchd2.exe
    "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    "HPHUPD08"=c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
    "IAAnotif"=c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
    "KBD"=c:\hp\KBD\KBD.EXE
    "DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe"
    "vptray"=c:\program files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe
    "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe"
    "RTHDCPL"=RTHDCPL.EXE
    "Recguard"=c:\windows\SMINST\RECGUARD.EXE
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
    "WinampAgent"="c:\program files\Winamp\winampa.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\DISC\\DISCover.exe"=
    "c:\\Program Files\\DISC\\DiscStreamHub.exe"=
    "c:\\Program Files\\DISC\\myFTP.exe"=
    "c:\\Program Files\\Updates from HP\\9972322\\Program\\Updates from HP.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=
    "c:\\Program Files\\TmNationsForever\\TmForever.exe"=

    R0 lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-03-09 64160]
    R2 lavasoft ad-aware service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 951632]
    R3 eraserutildrv10910;EraserUtilDrv10910;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10910.sys [2009-03-11 101936]
    S0 xbfgcf;xbfgcf;c:\windows\system32\drivers\rvuttqrz.sys --> c:\windows\system32\drivers\rvuttqrz.sys [?]
    S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2005-06-23 124608]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a1873c6-7a31-11dd-8a2e-001731c05904}]
    \Shell\Shell00\Command - F:\Start.exe
    .
    Contents of the 'Scheduled Tasks' folder

    2009-02-03 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{d2622bef-046a-4ca8-9fd7-b48c77dd5534} - (no file)
    Notify-fccccYpM - (no file)


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.ca/
    uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
    uInternet Settings,ProxyOverride = 127.0.0.1
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    Trusted Zone: trymedia.com
    Handler: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} -
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\70ydwwu5.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
    FF - component: c:\documents and settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\70ydwwu5.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}\platform\WINNT\components\FoxyTunes.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-03-11 21:23:21
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\7e10e056]
    "ImagePath"="\SystemRoot\System32\drivers\7e10e056.sys"
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\program files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    c:\program files\Common Files\Symantec Shared\ccEvtMgr.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Symantec AntiVirus\DefWatch.exe
    c:\windows\ehome\ehrecvr.exe
    c:\windows\ehome\ehSched.exe
    c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Common Files\LightScribe\LSSrvc.exe
    c:\windows\system32\igfxsrvc.exe
    c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    c:\program files\Symantec AntiVirus\Rtvscan.exe
    c:\windows\ehome\mcrdsvc.exe
    c:\program files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
    c:\windows\system32\wbem\unsecapp.exe
    c:\windows\system32\dllhost.exe
    .
    **************************************************************************
    .
    Completion time: 2009-03-11 21:34:50 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-03-12 01:34:47
    ComboFix2.txt 2008-07-20 16:27:24

    Pre-Run: 188,732,297,216 bytes free
    Post-Run: 188,774,297,600 bytes free

    8357 --- E O F --- 2009-02-24 23:03:27





    Well, that's all of combofix.txt, now that it's posted you probably won't need it and I guess that would be good. Better safe than sorry, right?

    Thanks again for help so far. I am working your instructions and will post those results too.
  7. 2009-03-13, 10:45 #17
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    You really need to read the directions more carefully I even posted this in red so you would not miss it:
    This may start ComboFix again. I do not need to see the log this time.
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  8. 2009-03-13, 21:56 #18
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    I did read the directions carefully. You started the last post by saying:

    Quote Originally Posted by pskelley View Post
    Use multiple posts to post all of the information so I can see it if needed.
    This was the combofix.txt from the initial scan.


    The computer seems to be running better so far, but I have a questions about things from your post yesterday.

    Is the ATF Cleaner something I could run weekly/bi-weekly as an assist to stay clean, or is it better left alone unless instructed?


    I am getting started on uninstalling the programs.

    I am also going to install the PSI as well.


    I will post again after the weekend with how the computer is running. Thanks again!
  9. 2009-03-13, 22:15 #19
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    I personally run ATF-Cleaner about once a month and that is probably not enough.

    I still don't see the results from the MBAM scan I asked for here:
    6) Download Malwarebytes' Anti-Malware to your Desktop
    Do not post anything else please, proceed like this:

    Remove combofix from the computer like this:

    Click START then RUN
    Now type or copy Combofix /u in the runbox and click OK.
    Note the space between the X and the U, it needs to be there.



    Clean the System Restore files like this:

    Turn off System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    Reboot

    Turn ON System Restore,
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    UN-Check *Turn off System Restore*.
    Click Apply, and then click OK.

    Update MBAM and scan to be sure we missed none of the junk, there is no need to post a clean scan result.
    (MBAM is yours to keep if you wish, update it and run it once a month or so)

    Update Symantec AntiVirus and scan the system, to be sure it is running right and scanning clean. If you have problems with the program, contact tech support for instructions.

    If all is well at this point, let me know and I will close the topic.

    Some good information for you:
    http://users.telenet.be/bluepatchy/m...wcomputer.html
    http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

    Here is some great information from experts in this field that will help you stay clean and safe online.
    http://users.telenet.be/bluepatchy/m...revention.html
    http://forums.spybot.info/showthread.php?t=279
    http://russelltexas.com/malware/allclear.htm
    http://forum.malwareremoval.com/viewtopic.php?t=14
    http://www.bleepingcomputer.com/forums/topict2520.html
    http://cybercoyote.org/security/not-admin.shtml

    http://www.malwarecomplaints.info/

    Thanks...pskelley
    Safer Networking Forums
    http://www.spybot.info/en/donate/index.html
    If you are reading this information...thank a teacher,
    If you are reading it in English...thank a soldier.

    http://users.telenet.be/bluepatchy/m...oes/Links.html
    http://www.microsoft.com/windows/ie/...rotection.mspx
    Improve the safety of your browsing and e-mail activities
    http://www.microsoft.com/protect/com.../browsing.mspx
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  10. 2009-03-16, 00:52 #20
    Fuzzhead23
    Fuzzhead23 is offline
    Junior Member
    Join Date
    Jul 2008
    Posts
    19

    Default

    Thanks pskelley

    I had run MBAM before my last post but forgot to post the log for you.

    I ran MBAM again after uninstalling Combofix, & both MBAM & NAV came back with clean scans and the computer is running well again.

    I have gone thru the uninstall and got rid of the old versions of programs. I was unaware that I could be infected this way. I will spread the word!

    Thanks for the help and the additional articles for reading.

    Thanks!
    Fuzzhead23

« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules