Page 2 of 5 FirstFirst 12345 LastLast
Results 11 to 20 of 47

Thread: Virtumonde.sdn

  1. 2009-03-24, 00:16 #11
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2003-03-31 12:00:00 406,528 -c----w c:\winnt\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-04 07:56:41 450,048 -c----w c:\winnt\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-04 07:56:41 450,048 -c----w c:\winnt\$NtServicePackUninstall$\aclayers.dll.000
    - 2003-03-31 12:00:00 125,440 -c----w c:\winnt\$NtServicePackUninstall$\aclua.dll
    + 2004-08-04 07:56:41 137,728 -c----w c:\winnt\$NtServicePackUninstall$\aclua.dll
    + 2004-08-04 07:56:41 137,728 -c----w c:\winnt\$NtServicePackUninstall$\aclua.dll.000
    - 2003-03-31 12:00:00 107,008 -c----w c:\winnt\$NtServicePackUninstall$\aclui.dll
    + 2004-08-04 07:56:41 114,688 -c----w c:\winnt\$NtServicePackUninstall$\aclui.dll
    - 2003-03-31 12:00:00 179,328 -c----w c:\winnt\$NtServicePackUninstall$\acpi.sys
    + 2004-08-04 06:07:38 187,776 -c----w c:\winnt\$NtServicePackUninstall$\acpi.sys
    - 2003-03-31 12:00:00 219,136 -c----w c:\winnt\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-04 07:56:41 244,736 -c----w c:\winnt\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-04 07:56:41 244,736 -c----w c:\winnt\$NtServicePackUninstall$\acspecfc.dll.000
    - 2003-03-31 12:00:00 181,760 -c----w c:\winnt\$NtServicePackUninstall$\activeds.dll
    + 2004-08-04 07:56:41 194,048 -c----w c:\winnt\$NtServicePackUninstall$\activeds.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-04 07:56:47 4,096 -c----w c:\winnt\$NtServicePackUninstall$\actmovie.exe
    - 2003-03-31 12:00:00 98,304 -c----w c:\winnt\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-04 07:56:41 101,888 -c----w c:\winnt\$NtServicePackUninstall$\actxprxy.dll
    - 2003-03-31 12:00:00 107,520 -c----w c:\winnt\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-04 07:56:41 116,224 -c----w c:\winnt\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-04 07:56:41 116,224 -c----w c:\winnt\$NtServicePackUninstall$\acxtrnal.dll.000
    - 2002-05-14 18:08:54 20,540 -c----w c:\winnt\$NtServicePackUninstall$\admin.dll
    + 2004-08-04 07:56:41 20,540 -c----w c:\winnt\$NtServicePackUninstall$\admin.dll
    - 2002-05-14 18:08:54 16,439 -c----w c:\winnt\$NtServicePackUninstall$\admin.exe
    + 2004-08-04 07:56:47 16,439 -c----w c:\winnt\$NtServicePackUninstall$\admin.exe
    - 2003-03-31 12:00:00 57,344 -c----w c:\winnt\$NtServicePackUninstall$\admparse.dll
    + 2004-08-04 07:56:41 61,440 -c----w c:\winnt\$NtServicePackUninstall$\admparse.dll
    - 2003-03-31 12:00:00 162,816 -c----w c:\winnt\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-04 07:56:41 175,616 -c----w c:\winnt\$NtServicePackUninstall$\adsldp.dll
    - 2003-03-31 12:00:00 139,776 -c----w c:\winnt\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-04 07:56:41 143,360 -c----w c:\winnt\$NtServicePackUninstall$\adsldpc.dll
    - 2003-03-31 12:00:00 62,464 -c----w c:\winnt\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-04 07:56:41 68,096 -c----w c:\winnt\$NtServicePackUninstall$\adsmsext.dll
    - 2003-03-31 12:00:00 239,616 -c----w c:\winnt\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-04 07:56:41 263,680 -c----w c:\winnt\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-04 07:56:41 4,255 -c----w c:\winnt\$NtServicePackUninstall$\adv01nt5.dll
    + 2004-08-04 07:56:41 3,967 -c----w c:\winnt\$NtServicePackUninstall$\adv02nt5.dll
    + 2004-08-04 07:56:41 3,615 -c----w c:\winnt\$NtServicePackUninstall$\adv05nt5.dll
    + 2004-08-04 07:56:41 3,647 -c----w c:\winnt\$NtServicePackUninstall$\adv07nt5.dll
    + 2004-08-04 07:56:41 3,135 -c----w c:\winnt\$NtServicePackUninstall$\adv08nt5.dll
    + 2004-08-04 07:56:41 3,711 -c----w c:\winnt\$NtServicePackUninstall$\adv09nt5.dll
    + 2004-08-04 07:56:41 3,775 -c----w c:\winnt\$NtServicePackUninstall$\adv11nt5.dll
    - 2003-03-31 12:00:00 558,080 -c----w c:\winnt\$NtServicePackUninstall$\advapi32.dll
    + 2004-08-04 07:56:41 616,960 -c----w c:\winnt\$NtServicePackUninstall$\advapi32.dll
    - 2003-03-31 12:00:00 91,136 -c----w c:\winnt\$NtServicePackUninstall$\advpack.dll
    + 2004-08-04 07:56:41 99,840 -c----w c:\winnt\$NtServicePackUninstall$\advpack.dll
    - 2002-08-29 05:16:38 142,208 -c----w c:\winnt\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\winnt\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\winnt\$NtServicePackUninstall$\aec.sys.001
    - 2003-03-31 12:00:00 131,968 -c----w c:\winnt\$NtServicePackUninstall$\afd.sys
    + 2008-06-20 10:44:38 138,368 -c----w c:\winnt\$NtServicePackUninstall$\afd.sys
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\winnt\$NtServicePackUninstall$\agentanm.dll
    - 2003-03-31 12:00:00 204,288 -c----w c:\winnt\$NtServicePackUninstall$\agentctl.dll
    + 2004-08-04 07:56:41 214,016 -c----w c:\winnt\$NtServicePackUninstall$\agentctl.dll
    - 2003-03-31 12:00:00 35,840 -c----w c:\winnt\$NtServicePackUninstall$\agentdp2.dll
    + 2006-10-12 13:54:18 42,496 -c----w c:\winnt\$NtServicePackUninstall$\agentdp2.dll
    - 2003-03-31 12:00:00 50,688 -c----w c:\winnt\$NtServicePackUninstall$\agentdpv.dll
    + 2007-03-09 13:58:57 57,344 -c----w c:\winnt\$NtServicePackUninstall$\agentdpv.dll
    - 2003-03-31 12:00:00 44,032 -c----w c:\winnt\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-04 07:56:41 49,152 -c----w c:\winnt\$NtServicePackUninstall$\agentmpx.dll
    - 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\winnt\$NtServicePackUninstall$\agentpsh.dll
    - 2003-03-31 12:00:00 39,936 -c----w c:\winnt\$NtServicePackUninstall$\agentsr.dll
    + 2004-08-04 07:56:41 44,032 -c----w c:\winnt\$NtServicePackUninstall$\agentsr.dll
    - 2003-03-31 12:00:00 235,008 -c----w c:\winnt\$NtServicePackUninstall$\agentsvr.exe
    + 2006-10-12 11:54:07 256,512 -c----w c:\winnt\$NtServicePackUninstall$\agentsvr.exe
    - 2001-08-17 19:58:00 25,472 -c----w c:\winnt\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 06:07:41 42,368 -c----w c:\winnt\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 06:07:42 44,928 -c----w c:\winnt\$NtServicePackUninstall$\agpcpq.sys
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0401.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0404.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0405.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0406.dll
    + 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\agt0407.dll
    + 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\agt0408.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0409.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt040b.dll
    + 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\agt040c.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt040d.dll
    + 2003-03-31 12:00:00 19,968 -c----w c:\winnt\$NtServicePackUninstall$\agt040e.dll
    + 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\agt0410.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0411.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0412.dll
    + 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\agt0413.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0414.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0415.dll
    + 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\agt0416.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0419.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt041d.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt041f.dll
    + 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\agt0804.dll
    + 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\agt0816.dll
    + 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\agt0c0a.dll
    - 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\winnt\$NtServicePackUninstall$\agtintl.dll
    - 2003-03-31 12:00:00 91,648 -c----w c:\winnt\$NtServicePackUninstall$\ahui.exe
    + 2004-08-04 07:56:47 98,304 -c----w c:\winnt\$NtServicePackUninstall$\ahui.exe
    - 2003-03-31 12:00:00 41,984 -c----w c:\winnt\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 07:56:47 44,544 -c----w c:\winnt\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 06:07:41 42,752 -c----w c:\winnt\$NtServicePackUninstall$\alim1541.sys
    - 2003-03-31 12:00:00 15,872 -c----w c:\winnt\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 07:56:41 17,408 -c----w c:\winnt\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 06:07:42 43,008 -c----w c:\winnt\$NtServicePackUninstall$\amdagp.sys
    - 2003-03-31 12:00:00 32,000 -c----w c:\winnt\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-04 05:59:19 36,992 -c----w c:\winnt\$NtServicePackUninstall$\amdk6.sys
    - 2003-03-31 12:00:00 32,512 -c----w c:\winnt\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-04 05:59:20 37,376 -c----w c:\winnt\$NtServicePackUninstall$\amdk7.sys
    - 2002-12-12 06:14:32 64,512 -c----w c:\winnt\$NtServicePackUninstall$\amstream.dll
    + 2004-08-04 07:56:41 70,656 -c----w c:\winnt\$NtServicePackUninstall$\amstream.dll
    - 2003-03-31 12:00:00 115,712 -c----w c:\winnt\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-04 07:56:41 126,976 -c----w c:\winnt\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-04 07:56:41 331,264 -c----w c:\winnt\$NtServicePackUninstall$\aqueue.dll
    - 2003-03-31 12:00:00 57,344 -c----w c:\winnt\$NtServicePackUninstall$\arp1394.sys
    + 2004-08-04 05:58:29 60,800 -c----w c:\winnt\$NtServicePackUninstall$\arp1394.sys
    - 2003-03-31 12:00:00 77,824 -c----w c:\winnt\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-04 07:56:41 65,024 -c----w c:\winnt\$NtServicePackUninstall$\asycfilt.dll
    - 2003-03-31 12:00:00 13,568 -c----w c:\winnt\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-04 06:05:03 14,336 -c----w c:\winnt\$NtServicePackUninstall$\asyncmac.sys
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\at.exe
    + 2004-08-04 07:56:47 25,088 -c----w c:\winnt\$NtServicePackUninstall$\at.exe
    - 2003-04-23 15:29:54 87,296 -c----w c:\winnt\$NtServicePackUninstall$\atapi.sys
    + 2004-08-04 05:59:42 95,360 -c----w c:\winnt\$NtServicePackUninstall$\atapi.sys
    + 2004-08-04 07:56:41 229,376 -c----w c:\winnt\$NtServicePackUninstall$\ati2cqag.dll
    + 2004-08-04 07:56:41 377,984 -c----w c:\winnt\$NtServicePackUninstall$\ati2dvaa.dll
    - 2003-07-20 04:26:48 366,080 -c----w c:\winnt\$NtServicePackUninstall$\ati2dvag.dll
    + 2004-08-04 07:56:41 201,728 -c----w c:\winnt\$NtServicePackUninstall$\ati2dvag.dll
    - 2003-07-20 03:43:32 849,376 -c----w c:\winnt\$NtServicePackUninstall$\ati3d1ag.dll
    + 2004-08-04 07:56:41 870,784 -c----w c:\winnt\$NtServicePackUninstall$\ati3d1ag.dll
    - 2003-07-20 03:54:48 1,037,216 -c----w c:\winnt\$NtServicePackUninstall$\ati3d2ag.dll
    + 2004-08-04 07:56:41 1,057,760 -c----w c:\winnt\$NtServicePackUninstall$\ati3d2ag.dll
    + 2004-08-04 07:56:41 1,888,992 -c----w c:\winnt\$NtServicePackUninstall$\ati3duag.dll
    + 2004-08-04 07:56:41 32,768 -c----w c:\winnt\$NtServicePackUninstall$\ativtmxx.dll
    + 2004-08-04 07:56:41 516,768 -c----w c:\winnt\$NtServicePackUninstall$\ativvaxx.dll
    - 2003-03-31 12:00:00 74,810 -c----w c:\winnt\$NtServicePackUninstall$\atl.dll
    + 2004-08-04 07:56:41 58,880 -c----w c:\winnt\$NtServicePackUninstall$\atl.dll
    - 2003-03-31 12:00:00 10,240 -c----w c:\winnt\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-04 07:56:47 11,264 -c----w c:\winnt\$NtServicePackUninstall$\atmadm.exe
    - 2003-03-31 12:00:00 57,216 -c----w c:\winnt\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-04 05:58:30 59,904 -c----w c:\winnt\$NtServicePackUninstall$\atmarpc.sys
    - 2003-03-31 12:00:00 272,768 -c----w c:\winnt\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-04 07:55:59 285,696 -c----w c:\winnt\$NtServicePackUninstall$\atmfd.dll
    - 2003-03-31 12:00:00 53,888 -c----w c:\winnt\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-04 05:58:34 55,936 -c----w c:\winnt\$NtServicePackUninstall$\atmlane.sys
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-04 07:56:41 30,208 -c----w c:\winnt\$NtServicePackUninstall$\atmlib.dll
    + 2003-03-31 12:00:00 11,264 -c----w c:\winnt\$NtServicePackUninstall$\attrib.exe
    + 2004-08-04 07:56:41 21,183 -c----w c:\winnt\$NtServicePackUninstall$\atv01nt5.dll
    + 2004-08-04 07:56:41 11,359 -c----w c:\winnt\$NtServicePackUninstall$\atv02nt5.dll
    + 2004-08-04 07:56:41 25,471 -c----w c:\winnt\$NtServicePackUninstall$\atv04nt5.dll
    + 2004-08-04 07:56:41 14,143 -c----w c:\winnt\$NtServicePackUninstall$\atv06nt5.dll
    + 2004-08-04 07:56:41 17,279 -c----w c:\winnt\$NtServicePackUninstall$\atv10nt5.dll
    - 2003-03-31 12:00:00 38,912 -c----w c:\winnt\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-04 07:56:41 42,496 -c----w c:\winnt\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-04 07:56:47 14,336 -c----w c:\winnt\$NtServicePackUninstall$\auditusr.exe
    - 2002-05-14 18:08:54 20,540 -c----w c:\winnt\$NtServicePackUninstall$\author.dll
    + 2004-08-04 07:56:41 20,540 -c----w c:\winnt\$NtServicePackUninstall$\author.dll
    - 2002-05-14 18:08:54 16,439 -c----w c:\winnt\$NtServicePackUninstall$\author.exe
    + 2004-08-04 07:56:47 16,439 -c----w c:\winnt\$NtServicePackUninstall$\author.exe
    - 2003-03-31 12:00:00 51,200 -c----w c:\winnt\$NtServicePackUninstall$\authz.dll
    + 2005-03-02 18:09:29 56,832 -c----w c:\winnt\$NtServicePackUninstall$\authz.dll
    - 2003-03-31 12:00:00 565,760 -c----w c:\winnt\$NtServicePackUninstall$\autochk.exe
    + 2004-08-04 07:56:47 588,800 -c----w c:\winnt\$NtServicePackUninstall$\autochk.exe
    - 2003-03-31 12:00:00 578,560 -c----w c:\winnt\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-04 07:56:47 602,624 -c----w c:\winnt\$NtServicePackUninstall$\autoconv.exe
    - 2003-03-31 12:00:00 558,592 -c----w c:\winnt\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-04 07:56:47 580,608 -c----w c:\winnt\$NtServicePackUninstall$\autofmt.exe
    - 2003-03-31 12:00:00 8,192 -c----w c:\winnt\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-04 07:56:47 11,264 -c----w c:\winnt\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-04 06:10:10 38,912 -c----w c:\winnt\$NtServicePackUninstall$\avc.sys
    + 2004-08-04 06:09:58 13,696 -c----w c:\winnt\$NtServicePackUninstall$\avcstrm.sys
    - 2003-03-31 12:00:00 76,288 -c----w c:\winnt\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-04 07:56:41 84,992 -c----w c:\winnt\$NtServicePackUninstall$\avifil32.dll
    - 2003-03-31 12:00:00 44,032 -c----w c:\winnt\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-04 07:56:41 52,736 -c----w c:\winnt\$NtServicePackUninstall$\basesrv.dll
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-04 07:56:41 28,672 -c----w c:\winnt\$NtServicePackUninstall$\batmeter.dll
    - 2003-03-31 12:00:00 6,656 -c----w c:\winnt\$NtServicePackUninstall$\batt.dll
    + 2004-08-04 07:56:41 8,704 -c----w c:\winnt\$NtServicePackUninstall$\batt.dll
    + 2001-08-17 19:57:54 14,080 -c----w c:\winnt\$NtServicePackUninstall$\battc.sys
    - 2003-02-17 16:16:26 11,392 -c----w c:\winnt\$NtServicePackUninstall$\bdasup.sys
    + 2004-08-04 06:10:12 11,776 -c----w c:\winnt\$NtServicePackUninstall$\bdasup.sys
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-04 07:56:41 17,408 -c----w c:\winnt\$NtServicePackUninstall$\bidispl.dll
    - 2004-07-01 22:08:18 7,680 -c----w c:\winnt\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-04 07:56:41 8,192 -c----w c:\winnt\$NtServicePackUninstall$\bitsprx2.dll
    - 2004-07-01 22:08:18 7,168 -c----w c:\winnt\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-04 07:56:41 7,168 -c----w c:\winnt\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-04 07:56:47 71,680 -c----w c:\winnt\$NtServicePackUninstall$\blastcln.exe
    - 2003-03-31 12:00:00 68,864 -c----w c:\winnt\$NtServicePackUninstall$\bridge.sys
    + 2004-08-04 05:59:57 71,552 -c----w c:\winnt\$NtServicePackUninstall$\bridge.sys
    - 2003-03-31 12:00:00 62,976 -c----w c:\winnt\$NtServicePackUninstall$\browselc.dll
    + 2004-08-04 07:55:59 63,488 -c----w c:\winnt\$NtServicePackUninstall$\browselc.dll
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\browser.dll
    + 2004-08-04 07:56:41 77,312 -c----w c:\winnt\$NtServicePackUninstall$\browser.dll
    - 2004-01-22 00:21:08 1,026,048 -c----w c:\winnt\$NtServicePackUninstall$\browseui.dll
    + 2006-09-23 20:12:50 1,022,976 -c----w c:\winnt\$NtServicePackUninstall$\browseui.dll
    - 2003-03-31 12:00:00 71,680 -c----w c:\winnt\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-04 07:56:41 78,336 -c----w c:\winnt\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-04 07:56:41 20,992 -c----w c:\winnt\$NtServicePackUninstall$\bthci.dll
    + 2004-08-04 06:10:38 17,024 -c----w c:\winnt\$NtServicePackUninstall$\bthenum.sys
    + 2004-08-04 06:10:38 38,016 -c----w c:\winnt\$NtServicePackUninstall$\bthmodem.sys
    + 2004-08-04 05:58:38 100,992 -c----w c:\winnt\$NtServicePackUninstall$\bthpan.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\winnt\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\winnt\$NtServicePackUninstall$\bthport.sys.001
    + 2004-08-04 06:10:37 35,456 -c----w c:\winnt\$NtServicePackUninstall$\bthprint.sys
    + 2004-08-04 07:56:41 30,208 -c----w c:\winnt\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-04 06:10:34 18,944 -c----w c:\winnt\$NtServicePackUninstall$\bthusb.sys
    + 2004-08-04 07:56:41 50,688 -c----w c:\winnt\$NtServicePackUninstall$\btpanui.dll
    + 2003-03-31 12:00:00 218,112 -c----w c:\winnt\$NtServicePackUninstall$\c_g18030.dll
    - 2003-03-31 12:00:00 59,904 -c----w c:\winnt\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-04 07:56:41 59,904 -c----w c:\winnt\$NtServicePackUninstall$\cabinet.dll
    - 2003-03-31 12:00:00 80,384 -c----w c:\winnt\$NtServicePackUninstall$\cabview.dll
    + 2004-08-04 07:56:41 84,480 -c----w c:\winnt\$NtServicePackUninstall$\cabview.dll
    + 2003-03-31 12:00:00 18,432 -c----w c:\winnt\$NtServicePackUninstall$\cacls.exe
    - 2004-03-30 01:48:36 364,544 -c----w c:\winnt\$NtServicePackUninstall$\callcont.dll
    + 2004-08-04 07:56:41 385,024 -c----w c:\winnt\$NtServicePackUninstall$\callcont.dll
    - 2003-03-31 12:00:00 45,056 -c----w c:\winnt\$NtServicePackUninstall$\camocx.dll
    + 2004-08-04 07:56:41 50,688 -c----w c:\winnt\$NtServicePackUninstall$\camocx.dll
    + 2003-03-31 12:00:00 142,848 -c----w c:\winnt\$NtServicePackUninstall$\capesnpn.dll
    - 2004-03-06 02:16:10 225,280 -c----w c:\winnt\$NtServicePackUninstall$\catsrv.dll
    + 2005-07-26 04:39:42 225,792 -c----w c:\winnt\$NtServicePackUninstall$\catsrv.dll
    - 2003-03-31 12:00:00 85,504 -c----w c:\winnt\$NtServicePackUninstall$\catsrvps.dll
    + 2004-08-04 07:56:41 85,504 -c----w c:\winnt\$NtServicePackUninstall$\catsrvps.dll
    - 2004-03-06 02:16:10 594,944 -c----w c:\winnt\$NtServicePackUninstall$\catsrvut.dll
    + 2005-07-26 04:39:43 625,152 -c----w c:\winnt\$NtServicePackUninstall$\catsrvut.dll
    - 2003-02-17 16:16:26 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-04 06:10:16 17,024 -c----w c:\winnt\$NtServicePackUninstall$\ccdecode.sys
    - 2003-03-31 12:00:00 59,648 -c----w c:\winnt\$NtServicePackUninstall$\cdfs.sys
    + 2004-08-04 06:14:10 63,744 -c----w c:\winnt\$NtServicePackUninstall$\cdfs.sys
    - 2003-03-31 12:00:00 142,336 -c----w c:\winnt\$NtServicePackUninstall$\cdfview.dll
    + 2006-06-23 11:25:29 151,040 -c----w c:\winnt\$NtServicePackUninstall$\cdfview.dll
    + 2004-08-04 07:56:41 66,560 -c----w c:\winnt\$NtServicePackUninstall$\cdm.dll
    - 2003-03-31 12:00:00 2,028,032 -c----w c:\winnt\$NtServicePackUninstall$\cdosys.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\winnt\$NtServicePackUninstall$\cdosys.dll
    - 2003-03-31 12:00:00 47,488 -c----w c:\winnt\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-04 05:59:52 49,536 -c----w c:\winnt\$NtServicePackUninstall$\cdrom.sys
    - 2003-03-31 12:00:00 186,880 -c----w c:\winnt\$NtServicePackUninstall$\certcli.dll
    + 2004-08-04 07:56:41 194,560 -c----w c:\winnt\$NtServicePackUninstall$\certcli.dll
    - 2003-03-31 12:00:00 436,736 -c----w c:\winnt\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-04 07:56:41 457,728 -c----w c:\winnt\$NtServicePackUninstall$\certmgr.dll
    - 2003-03-31 12:00:00 32,768 -c----w c:\winnt\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-04 07:56:41 38,912 -c----w c:\winnt\$NtServicePackUninstall$\cfgbkend.dll
    - 2003-03-31 12:00:00 16,896 -c----w c:\winnt\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-04 07:56:00 16,896 -c----w c:\winnt\$NtServicePackUninstall$\cfgmgr32.dll
    - 2002-05-14 18:08:54 188,480 -c----w c:\winnt\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-04 07:56:47 188,480 -c----w c:\winnt\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-04 07:56:41 15,423 -c----w c:\winnt\$NtServicePackUninstall$\ch7xxnt5.dll
    + 2004-08-04 06:00:12 8,192 -c----w c:\winnt\$NtServicePackUninstall$\changer.sys
    + 2004-08-04 05:31:51 97,792 -c----w c:\winnt\$NtServicePackUninstall$\chtmbx.dll
    + 2004-08-04 05:31:52 56,320 -c----w c:\winnt\$NtServicePackUninstall$\chtskdic.dll
    + 2004-08-04 05:31:53 173,568 -c----w c:\winnt\$NtServicePackUninstall$\chtskf.dll
    + 2003-03-31 12:00:00 109,568 -c----w c:\winnt\$NtServicePackUninstall$\cic.dll
    - 2003-03-31 12:00:00 1,267,712 -c----w c:\winnt\$NtServicePackUninstall$\cimwin32.dll
    + 2004-08-04 07:56:41 1,352,192 -c----w c:\winnt\$NtServicePackUninstall$\cimwin32.dll
  2. 2009-03-24, 00:17 #12
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    + 2004-08-04 05:31:52 198,656 -c----w c:\winnt\$NtServicePackUninstall$\cintime.dll
    - 2003-03-31 12:00:00 64,512 -c----w c:\winnt\$NtServicePackUninstall$\ciodm.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\winnt\$NtServicePackUninstall$\ciodm.dll
    - 2003-03-31 12:00:00 5,120 -c----w c:\winnt\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-04 07:56:47 5,632 -c----w c:\winnt\$NtServicePackUninstall$\cisvc.exe
    - 2003-03-31 12:00:00 46,336 -c----w c:\winnt\$NtServicePackUninstall$\classpnp.sys
    + 2004-08-04 06:14:26 49,664 -c----w c:\winnt\$NtServicePackUninstall$\classpnp.sys
    - 2004-03-06 02:16:10 110,080 -c----w c:\winnt\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:43 110,080 -c----w c:\winnt\$NtServicePackUninstall$\clbcatex.dll
    - 2004-03-06 02:16:11 499,712 -c----w c:\winnt\$NtServicePackUninstall$\clbcatq.dll
    + 2005-07-26 04:39:43 498,688 -c----w c:\winnt\$NtServicePackUninstall$\clbcatq.dll
    - 2003-03-31 12:00:00 61,440 -c----w c:\winnt\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-04 07:56:47 64,000 -c----w c:\winnt\$NtServicePackUninstall$\cleanmgr.exe
    - 2003-03-31 12:00:00 127,552 -c----w c:\winnt\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-04 07:56:41 77,824 -c----w c:\winnt\$NtServicePackUninstall$\cliconfg.dll
    - 2003-03-31 12:00:00 45,632 -c----w c:\winnt\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-04 07:56:47 20,480 -c----w c:\winnt\$NtServicePackUninstall$\cliconfg.exe
    - 2003-03-31 12:00:00 98,816 -c----w c:\winnt\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-04 07:56:47 102,912 -c----w c:\winnt\$NtServicePackUninstall$\clipbrd.exe
    - 2003-03-31 12:00:00 30,720 -c----w c:\winnt\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-04 07:56:47 33,280 -c----w c:\winnt\$NtServicePackUninstall$\clipsrv.exe
    - 2003-03-31 12:00:00 54,272 -c----w c:\winnt\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-04 07:56:41 57,856 -c----w c:\winnt\$NtServicePackUninstall$\clusapi.dll
    - 2002-08-29 07:09:06 13,184 -c----w c:\winnt\$NtServicePackUninstall$\cmbatt.sys
    + 2004-08-04 06:07:39 14,080 -c----w c:\winnt\$NtServicePackUninstall$\cmbatt.sys
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-04 07:56:41 15,872 -c----w c:\winnt\$NtServicePackUninstall$\cmcfg32.dll
    - 2003-03-31 12:00:00 375,808 -c----w c:\winnt\$NtServicePackUninstall$\cmd.exe
    + 2004-08-04 07:56:48 388,608 -c----w c:\winnt\$NtServicePackUninstall$\cmd.exe
    - 2003-03-31 12:00:00 324,608 -c----w c:\winnt\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-04 07:56:41 343,040 -c----w c:\winnt\$NtServicePackUninstall$\cmdial32.dll
    - 2003-03-31 12:00:00 41,472 -c----w c:\winnt\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-04 07:56:48 47,104 -c----w c:\winnt\$NtServicePackUninstall$\cmdl32.exe
    - 2003-03-31 12:00:00 35,840 -c----w c:\winnt\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-04 07:56:48 39,936 -c----w c:\winnt\$NtServicePackUninstall$\cmmon32.exe
    - 2003-03-31 12:00:00 174,592 -c----w c:\winnt\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-04 07:56:41 185,344 -c----w c:\winnt\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-04 07:56:41 13,824 -c----w c:\winnt\$NtServicePackUninstall$\cmsetacl.dll
    - 2003-03-31 12:00:00 54,784 -c----w c:\winnt\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-04 07:56:48 63,488 -c----w c:\winnt\$NtServicePackUninstall$\cmstp.exe
    - 2003-03-31 12:00:00 36,352 -c----w c:\winnt\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-04 07:56:41 39,936 -c----w c:\winnt\$NtServicePackUninstall$\cmutil.dll
    - 2003-03-31 12:00:00 45,568 -c----w c:\winnt\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-04 07:56:41 47,104 -c----w c:\winnt\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-04 07:56:41 79,360 -c----w c:\winnt\$NtServicePackUninstall$\cnbjmon2.dll
    + 2005-04-27 23:15:36 17,920 -c----w c:\winnt\$NtServicePackUninstall$\cobramsg.dll
    - 2004-03-06 02:16:10 64,512 -c----w c:\winnt\$NtServicePackUninstall$\colbact.dll
    + 2005-07-26 04:39:43 60,416 -c----w c:\winnt\$NtServicePackUninstall$\colbact.dll
    + 2003-03-31 12:00:00 25,600 -c----w c:\winnt\$NtServicePackUninstall$\comaddin.dll
    - 2004-03-06 02:16:10 187,904 -c----w c:\winnt\$NtServicePackUninstall$\comadmin.dll
    + 2005-07-26 04:39:44 195,072 -c----w c:\winnt\$NtServicePackUninstall$\comadmin.dll
    - 2003-03-31 12:00:00 557,056 -c----w c:\winnt\$NtServicePackUninstall$\comctl32.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\winnt\$NtServicePackUninstall$\comctl32.dll
    - 2003-03-31 12:00:00 258,048 -c----w c:\winnt\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-04 07:56:41 276,992 -c----w c:\winnt\$NtServicePackUninstall$\comdlg32.dll
    - 2003-03-31 12:00:00 238,592 -c----w c:\winnt\$NtServicePackUninstall$\compatui.dll
    + 2004-08-04 07:56:41 252,928 -c----w c:\winnt\$NtServicePackUninstall$\compatui.dll
    + 2001-08-17 19:58:00 9,344 -c----w c:\winnt\$NtServicePackUninstall$\compbatt.sys
    - 2003-03-31 12:00:00 222,208 -c----w c:\winnt\$NtServicePackUninstall$\compstui.dll
    + 2004-08-04 07:56:41 229,376 -c----w c:\winnt\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:44 97,792 -c----w c:\winnt\$NtServicePackUninstall$\comrepl.dll
    - 2004-02-17 18:49:58 8,192 -c----w c:\winnt\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-04 07:56:48 9,728 -c----w c:\winnt\$NtServicePackUninstall$\comrepl.exe
    + 2003-03-31 12:00:00 5,120 -c----w c:\winnt\$NtServicePackUninstall$\comrereg.exe
    - 2003-03-31 12:00:00 792,064 -c----w c:\winnt\$NtServicePackUninstall$\comres.dll
    + 2004-08-04 07:56:41 792,064 -c----w c:\winnt\$NtServicePackUninstall$\comres.dll
    + 2003-03-31 12:00:00 259,584 -c----w c:\winnt\$NtServicePackUninstall$\comsetup.dll
    + 2003-03-31 12:00:00 147,456 -c----w c:\winnt\$NtServicePackUninstall$\comsnap.dll
    - 2004-03-06 02:16:11 1,194,496 -c----w c:\winnt\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:44 1,267,200 -c----w c:\winnt\$NtServicePackUninstall$\comsvcs.dll
    - 2004-03-06 02:16:10 499,200 -c----w c:\winnt\$NtServicePackUninstall$\comuid.dll
    + 2005-07-26 04:39:45 540,160 -c----w c:\winnt\$NtServicePackUninstall$\comuid.dll
    - 2003-03-31 12:00:00 995,328 -c----w c:\winnt\$NtServicePackUninstall$\conf.exe
    + 2004-08-04 07:56:48 1,032,192 -c----w c:\winnt\$NtServicePackUninstall$\conf.exe
    - 2003-03-31 12:00:00 45,056 -c----w c:\winnt\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-04 07:56:41 45,056 -c----w c:\winnt\$NtServicePackUninstall$\confmrsl.dll
    + 2003-03-31 12:00:00 345,600 -c----w c:\winnt\$NtServicePackUninstall$\confmsp.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\conime.exe
    + 2004-08-04 07:56:48 27,648 -c----w c:\winnt\$NtServicePackUninstall$\conime.exe
    - 2003-03-31 12:00:00 14,877 -c----w c:\winnt\$NtServicePackUninstall$\corpol.dll
    + 2007-01-09 03:01:14 17,408 -c----w c:\winnt\$NtServicePackUninstall$\corpol.dll
    - 2003-03-31 12:00:00 158,720 -c----w c:\winnt\$NtServicePackUninstall$\credui.dll
    + 2004-08-04 07:56:41 163,840 -c----w c:\winnt\$NtServicePackUninstall$\credui.dll
    - 2003-03-31 12:00:00 31,488 -c----w c:\winnt\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-04 05:59:20 36,480 -c----w c:\winnt\$NtServicePackUninstall$\crusoe.sys
    - 2002-09-23 21:10:26 544,256 -c----w c:\winnt\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-04 07:56:41 597,504 -c----w c:\winnt\$NtServicePackUninstall$\crypt32.dll
    - 2003-03-31 12:00:00 70,144 -c----w c:\winnt\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-04 07:56:41 74,752 -c----w c:\winnt\$NtServicePackUninstall$\cryptdlg.dll
    - 2003-03-31 12:00:00 29,184 -c----w c:\winnt\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-04 07:56:41 33,280 -c----w c:\winnt\$NtServicePackUninstall$\cryptdll.dll
    - 2003-03-31 12:00:00 48,640 -c----w c:\winnt\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-04 07:56:41 53,760 -c----w c:\winnt\$NtServicePackUninstall$\cryptext.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-04 07:56:41 63,488 -c----w c:\winnt\$NtServicePackUninstall$\cryptnet.dll
    - 2003-03-25 22:40:14 53,760 -c----w c:\winnt\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-04 07:56:41 60,416 -c----w c:\winnt\$NtServicePackUninstall$\cryptsvc.dll
    - 2003-07-24 22:40:22 477,696 -c----w c:\winnt\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-04 07:56:41 512,512 -c----w c:\winnt\$NtServicePackUninstall$\cryptui.dll
    - 2003-03-31 12:00:00 89,600 -c----w c:\winnt\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-04 07:56:41 101,888 -c----w c:\winnt\$NtServicePackUninstall$\cscdll.dll
    - 2003-03-31 12:00:00 102,450 -c----w c:\winnt\$NtServicePackUninstall$\cscript.exe
    + 2004-08-04 07:56:48 98,304 -c----w c:\winnt\$NtServicePackUninstall$\cscript.exe
    - 2003-03-31 12:00:00 307,712 -c----w c:\winnt\$NtServicePackUninstall$\cscui.dll
    + 2004-08-04 07:56:41 326,656 -c----w c:\winnt\$NtServicePackUninstall$\cscui.dll
    - 2003-03-31 12:00:00 29,184 -c----w c:\winnt\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-04 07:56:41 32,768 -c----w c:\winnt\$NtServicePackUninstall$\csrsrv.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\csrss.exe
    + 2004-08-04 07:56:48 6,144 -c----w c:\winnt\$NtServicePackUninstall$\csrss.exe
    - 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\ctfmon.exe
    + 2004-08-04 07:56:48 15,360 -c----w c:\winnt\$NtServicePackUninstall$\ctfmon.exe
    + 2004-08-04 07:56:41 249,856 -c----w c:\winnt\$NtServicePackUninstall$\ctmasetp.dll
    - 2002-07-07 02:01:46 114,688 -c----w c:\winnt\$NtServicePackUninstall$\custsat.dll
    + 2006-06-03 11:40:49 33,792 -c----w c:\winnt\$NtServicePackUninstall$\custsat.dll
    - 2002-12-12 06:14:32 1,177,600 -c----w c:\winnt\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-04 07:56:41 1,179,648 -c----w c:\winnt\$NtServicePackUninstall$\d3d8.dll
    - 2002-12-12 06:14:32 8,192 -c----w c:\winnt\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-04 07:56:41 8,192 -c----w c:\winnt\$NtServicePackUninstall$\d3d8thk.dll
    - 2003-05-30 15:00:02 1,634,304 -c----w c:\winnt\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-04 07:56:41 1,689,088 -c----w c:\winnt\$NtServicePackUninstall$\d3d9.dll
    - 2003-05-30 15:00:02 797,184 -c----w c:\winnt\$NtServicePackUninstall$\d3dim700.dll
    + 2004-08-04 07:56:41 825,344 -c----w c:\winnt\$NtServicePackUninstall$\d3dim700.dll
    - 2003-03-31 12:00:00 986,112 -c----w c:\winnt\$NtServicePackUninstall$\danim.dll
    + 2006-06-23 11:25:29 1,054,208 -c----w c:\winnt\$NtServicePackUninstall$\danim.dll
    - 2004-03-01 18:55:22 561,179 -c----w c:\winnt\$NtServicePackUninstall$\dao360.dll
    + 2004-08-04 07:56:42 561,179 -c----w c:\winnt\$NtServicePackUninstall$\dao360.dll
    - 2003-03-31 12:00:00 51,712 -c----w c:\winnt\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-04 07:56:42 54,272 -c----w c:\winnt\$NtServicePackUninstall$\dataclen.dll
    + 2003-03-31 12:00:00 152,064 -c----w c:\winnt\$NtServicePackUninstall$\datime.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\winnt\$NtServicePackUninstall$\davclnt.dll
    - 2003-03-31 12:00:00 489,984 -c----w c:\winnt\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-04 07:56:42 640,000 -c----w c:\winnt\$NtServicePackUninstall$\dbghelp.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\winnt\$NtServicePackUninstall$\dbmsrpcn.dll
    - 2003-10-28 04:12:42 61,440 -c----w c:\winnt\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-04 07:56:42 110,592 -c----w c:\winnt\$NtServicePackUninstall$\dbnetlib.dll
    - 2003-03-31 12:00:00 28,672 -c----w c:\winnt\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\winnt\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-04 08:07:21 1,788 -c----w c:\winnt\$NtServicePackUninstall$\dcache.bin
    - 2003-03-31 12:00:00 40,960 -c----w c:\winnt\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-04 07:56:42 40,960 -c----w c:\winnt\$NtServicePackUninstall$\dcap32.dll
    - 2003-03-31 12:00:00 7,680 -c----w c:\winnt\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-04 07:56:42 8,704 -c----w c:\winnt\$NtServicePackUninstall$\dciman32.dll
    + 2003-03-31 12:00:00 5,120 -c----w c:\winnt\$NtServicePackUninstall$\dcomcnfg.exe
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-04 07:56:48 30,208 -c----w c:\winnt\$NtServicePackUninstall$\ddeshare.exe
    - 2002-12-12 06:14:32 284,160 -c----w c:\winnt\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-04 07:56:42 266,240 -c----w c:\winnt\$NtServicePackUninstall$\ddraw.dll
    - 2002-12-12 06:14:32 24,064 -c----w c:\winnt\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-04 07:56:42 27,136 -c----w c:\winnt\$NtServicePackUninstall$\ddrawex.dll
    - 2003-03-31 12:00:00 70,656 -c----w c:\winnt\$NtServicePackUninstall$\defrag.exe
    + 2004-08-04 07:56:48 25,088 -c----w c:\winnt\$NtServicePackUninstall$\defrag.exe
    - 2003-05-30 15:00:02 132,608 -c----w c:\winnt\$NtServicePackUninstall$\devenum.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\winnt\$NtServicePackUninstall$\devenum.dll
    - 2003-03-31 12:00:00 263,168 -c----w c:\winnt\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-04 07:56:42 282,624 -c----w c:\winnt\$NtServicePackUninstall$\devmgr.dll
    - 2003-03-31 12:00:00 76,288 -c----w c:\winnt\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-04 07:56:48 82,432 -c----w c:\winnt\$NtServicePackUninstall$\dfrgfat.exe
    - 2003-03-31 12:00:00 99,328 -c----w c:\winnt\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-04 07:56:48 104,960 -c----w c:\winnt\$NtServicePackUninstall$\dfrgntfs.exe
    - 2003-03-31 12:00:00 35,328 -c----w c:\winnt\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-04 07:56:42 38,912 -c----w c:\winnt\$NtServicePackUninstall$\dfrgsnap.dll
    - 2003-03-31 12:00:00 113,152 -c----w c:\winnt\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-04 07:56:42 123,904 -c----w c:\winnt\$NtServicePackUninstall$\dfrgui.dll
    - 2003-03-31 12:00:00 25,600 -c----w c:\winnt\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\winnt\$NtServicePackUninstall$\dfsshlex.dll
    - 2003-03-31 12:00:00 103,424 -c----w c:\winnt\$NtServicePackUninstall$\dgnet.dll
    + 2004-08-04 07:56:42 111,104 -c----w c:\winnt\$NtServicePackUninstall$\dgnet.dll
    - 2003-10-07 01:30:25 99,840 -c----w c:\winnt\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\winnt\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2003-03-31 12:00:00 370,176 -c----w c:\winnt\$NtServicePackUninstall$\dhcpmon.dll
    - 2003-03-31 12:00:00 522,240 -c----w c:\winnt\$NtServicePackUninstall$\dialer.exe
    + 2004-08-04 07:56:48 539,136 -c----w c:\winnt\$NtServicePackUninstall$\dialer.exe
    - 2003-03-31 12:00:00 79,360 -c----w c:\winnt\$NtServicePackUninstall$\diantz.exe
    + 2004-08-04 07:56:48 85,504 -c----w c:\winnt\$NtServicePackUninstall$\diantz.exe
    - 2003-03-31 12:00:00 55,296 -c----w c:\winnt\$NtServicePackUninstall$\digest.dll
    + 2004-08-04 07:56:42 68,608 -c----w c:\winnt\$NtServicePackUninstall$\digest.dll
    - 2003-03-31 12:00:00 151,552 -c----w c:\winnt\$NtServicePackUninstall$\dinput.dll
    + 2004-08-04 07:56:42 159,232 -c----w c:\winnt\$NtServicePackUninstall$\dinput.dll
    - 2003-03-31 12:00:00 168,960 -c----w c:\winnt\$NtServicePackUninstall$\dinput8.dll
    + 2004-08-04 07:56:42 181,760 -c----w c:\winnt\$NtServicePackUninstall$\dinput8.dll
    - 2003-03-03 23:57:20 75,776 -c----w c:\winnt\$NtServicePackUninstall$\directdb.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\winnt\$NtServicePackUninstall$\directdb.dll
    - 2003-03-31 12:00:00 33,792 -c----w c:\winnt\$NtServicePackUninstall$\disk.sys
    + 2004-08-04 05:59:54 36,352 -c----w c:\winnt\$NtServicePackUninstall$\disk.sys
    + 2003-03-31 12:00:00 1,501,696 -c----w c:\winnt\$NtServicePackUninstall$\diskcopy.dll
    - 2003-03-31 12:00:00 13,184 -c----w c:\winnt\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-04 05:59:52 14,208 -c----w c:\winnt\$NtServicePackUninstall$\diskdump.sys
    - 2003-03-31 12:00:00 145,920 -c----w c:\winnt\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-04 07:56:48 163,840 -c----w c:\winnt\$NtServicePackUninstall$\diskpart.exe
    + 2003-03-31 12:00:00 45,083 -c----w c:\winnt\$NtServicePackUninstall$\dispex.dll
    - 2003-03-31 12:00:00 294,912 -c----w c:\winnt\$NtServicePackUninstall$\dlimport.exe
    + 2004-08-04 07:56:48 294,912 -c----w c:\winnt\$NtServicePackUninstall$\dlimport.exe
    - 2003-03-31 12:00:00 4,608 -c----w c:\winnt\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-04 07:56:48 5,120 -c----w c:\winnt\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-04 06:00:04 8,320 -c----w c:\winnt\$NtServicePackUninstall$\dlttape.sys
    - 2003-03-31 12:00:00 204,800 -c----w c:\winnt\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-04 07:56:48 224,768 -c----w c:\winnt\$NtServicePackUninstall$\dmadmin.exe
    - 2002-12-12 06:14:32 27,136 -c----w c:\winnt\$NtServicePackUninstall$\dmband.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\winnt\$NtServicePackUninstall$\dmband.dll
    - 2003-03-31 12:00:00 780,928 -c----w c:\winnt\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-04 06:07:17 799,744 -c----w c:\winnt\$NtServicePackUninstall$\dmboot.sys
    - 2002-12-12 06:14:32 58,368 -c----w c:\winnt\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\winnt\$NtServicePackUninstall$\dmcompos.dll
    + 2003-03-31 12:00:00 273,920 -c----w c:\winnt\$NtServicePackUninstall$\dmdlgs.dll
    - 2003-03-31 12:00:00 184,320 -c----w c:\winnt\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-04 07:56:42 200,704 -c----w c:\winnt\$NtServicePackUninstall$\dmdskmgr.dll
    - 2002-12-12 06:14:32 171,520 -c----w c:\winnt\$NtServicePackUninstall$\dmime.dll
    + 2004-08-04 07:56:42 181,248 -c----w c:\winnt\$NtServicePackUninstall$\dmime.dll
    - 2003-03-31 12:00:00 146,304 -c----w c:\winnt\$NtServicePackUninstall$\dmio.sys
    + 2004-08-04 06:07:16 153,344 -c----w c:\winnt\$NtServicePackUninstall$\dmio.sys
    - 2002-12-12 06:14:32 33,280 -c----w c:\winnt\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-04 07:56:42 35,840 -c----w c:\winnt\$NtServicePackUninstall$\dmloader.dll
    - 2003-03-31 12:00:00 14,336 -c----w c:\winnt\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-04 07:56:48 15,872 -c----w c:\winnt\$NtServicePackUninstall$\dmremote.exe
    - 2002-12-12 06:14:32 76,800 -c----w c:\winnt\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-04 07:56:42 82,432 -c----w c:\winnt\$NtServicePackUninstall$\dmscript.dll
    - 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\winnt\$NtServicePackUninstall$\dmserver.dll
    - 2002-12-12 06:14:32 98,816 -c----w c:\winnt\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-04 07:56:42 105,984 -c----w c:\winnt\$NtServicePackUninstall$\dmstyle.dll
    - 2002-12-12 06:14:32 100,864 -c----w c:\winnt\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-04 07:56:42 103,424 -c----w c:\winnt\$NtServicePackUninstall$\dmsynth.dll
    - 2002-12-12 06:14:32 116,736 -c----w c:\winnt\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 07:56:42 104,448 -c----w c:\winnt\$NtServicePackUninstall$\dmusic.dll
    - 2001-08-17 19:59:58 50,048 -c----w c:\winnt\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-04 06:07:38 52,864 -c----w c:\winnt\$NtServicePackUninstall$\dmusic.sys
    - 2003-03-31 12:00:00 50,688 -c----w c:\winnt\$NtServicePackUninstall$\dmutil.dll
    + 2004-08-04 07:56:42 52,224 -c----w c:\winnt\$NtServicePackUninstall$\dmutil.dll
    - 2003-03-31 12:00:00 139,264 -c----w c:\winnt\$NtServicePackUninstall$\dnsapi.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\winnt\$NtServicePackUninstall$\dnsapi.dll
    - 2003-03-31 12:00:00 44,032 -c----w c:\winnt\$NtServicePackUninstall$\dnsrslvr.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\winnt\$NtServicePackUninstall$\dnsrslvr.dll
    - 2003-03-31 12:00:00 45,568 -c----w c:\winnt\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-04 07:56:42 48,128 -c----w c:\winnt\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-04 05:58:29 207,360 -c----w c:\winnt\$NtServicePackUninstall$\dot4.sys
    - 2003-03-31 12:00:00 115,200 -c----w c:\winnt\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-04 06:13:53 97,280 -c----w c:\winnt\$NtServicePackUninstall$\dpcdll.dll
    - 2002-12-12 06:14:32 28,160 -c----w c:\winnt\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-04 07:56:48 30,208 -c----w c:\winnt\$NtServicePackUninstall$\dplaysvr.exe
    - 2004-04-14 21:56:46 219,648 -c----w c:\winnt\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-04 07:56:42 229,888 -c----w c:\winnt\$NtServicePackUninstall$\dplayx.dll
    - 2002-12-12 06:14:32 77,824 -c----w c:\winnt\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\winnt\$NtServicePackUninstall$\dpmodemx.dll
    - 2002-12-12 06:14:32 3,072 -c----w c:\winnt\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-04 07:56:03 3,584 -c----w c:\winnt\$NtServicePackUninstall$\dpnaddr.dll
    - 2002-12-12 06:14:32 723,968 -c----w c:\winnt\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-04 07:56:42 375,296 -c----w c:\winnt\$NtServicePackUninstall$\dpnet.dll
    - 2003-03-24 15:00:02 32,768 -c----w c:\winnt\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\winnt\$NtServicePackUninstall$\dpnhpast.dll
    - 2003-03-24 15:00:02 68,096 -c----w c:\winnt\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-04 07:56:42 60,928 -c----w c:\winnt\$NtServicePackUninstall$\dpnhupnp.dll
    - 2002-12-12 06:14:32 3,072 -c----w c:\winnt\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-04 07:56:03 3,584 -c----w c:\winnt\$NtServicePackUninstall$\dpnlobby.dll
    - 2002-12-12 06:14:32 16,896 -c----w c:\winnt\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-04 07:56:48 18,432 -c----w c:\winnt\$NtServicePackUninstall$\dpnsvr.exe
    - 2002-12-12 06:14:32 19,968 -c----w c:\winnt\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-04 07:56:42 21,504 -c----w c:\winnt\$NtServicePackUninstall$\dpvacm.dll
    - 2002-12-12 06:14:32 381,952 -c----w c:\winnt\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-04 07:56:42 212,480 -c----w c:\winnt\$NtServicePackUninstall$\dpvoice.dll
    - 2002-12-12 06:14:32 80,896 -c----w c:\winnt\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-04 07:56:48 83,456 -c----w c:\winnt\$NtServicePackUninstall$\dpvsetup.exe
    - 2002-12-12 06:14:32 112,128 -c----w c:\winnt\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-04 07:56:42 116,736 -c----w c:\winnt\$NtServicePackUninstall$\dpvvox.dll
    - 2004-04-13 06:11:26 76,800 -c----w c:\winnt\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\winnt\$NtServicePackUninstall$\dpwsockx.dll
    - 2002-08-29 07:32:34 57,856 -c----w c:\winnt\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 06:07:58 60,288 -c----w c:\winnt\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 06:07:57 2,944 -c----w c:\winnt\$NtServicePackUninstall$\drmkaud.sys
    - 2003-03-31 12:00:00 11,776 -c----w c:\winnt\$NtServicePackUninstall$\drprov.dll
    + 2004-08-04 07:56:42 14,336 -c----w c:\winnt\$NtServicePackUninstall$\drprov.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-04 07:56:42 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ds32gt.dll
    - 2002-12-12 06:14:32 186,880 -c----w c:\winnt\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-04 07:56:42 181,760 -c----w c:\winnt\$NtServicePackUninstall$\dsdmo.dll
    - 2002-12-12 06:14:32 491,520 -c----w c:\winnt\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-04 07:56:42 71,680 -c----w c:\winnt\$NtServicePackUninstall$\dsdmoprp.dll
    - 2003-03-31 12:00:00 84,992 -c----w c:\winnt\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-04 07:56:42 92,672 -c----w c:\winnt\$NtServicePackUninstall$\dskquota.dll
    + 2003-03-31 12:00:00 144,384 -c----w c:\winnt\$NtServicePackUninstall$\dskquoui.dll
    - 2002-12-12 06:14:32 355,328 -c----w c:\winnt\$NtServicePackUninstall$\dsound.dll
    + 2004-08-04 07:56:42 367,616 -c----w c:\winnt\$NtServicePackUninstall$\dsound.dll
    - 2002-12-12 06:14:32 1,294,336 -c----w c:\winnt\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-04 07:56:42 1,294,336 -c----w c:\winnt\$NtServicePackUninstall$\dsound3d.dll
    - 2003-03-31 12:00:00 135,680 -c----w c:\winnt\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-04 07:56:42 142,336 -c----w c:\winnt\$NtServicePackUninstall$\dsprop.dll
    - 2003-03-31 12:00:00 3,584 -c----w c:\winnt\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-04 07:56:04 4,096 -c----w c:\winnt\$NtServicePackUninstall$\dsprpres.dll
    - 2003-03-31 12:00:00 227,840 -c----w c:\winnt\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-04 07:56:42 239,104 -c----w c:\winnt\$NtServicePackUninstall$\dsquery.dll
    - 2003-03-31 12:00:00 47,104 -c----w c:\winnt\$NtServicePackUninstall$\dssec.dll
    + 2004-08-04 07:56:42 51,200 -c----w c:\winnt\$NtServicePackUninstall$\dssec.dll
    - 2003-03-31 12:00:00 124,928 -c----w c:\winnt\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-04 05:31:43 137,216 -c----w c:\winnt\$NtServicePackUninstall$\dssenh.dll
    - 2003-03-31 12:00:00 106,496 -c----w c:\winnt\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-04 07:56:42 113,152 -c----w c:\winnt\$NtServicePackUninstall$\dsuiext.dll
    - 2002-12-12 06:14:32 18,432 -c----w c:\winnt\$NtServicePackUninstall$\dswave.dll
    + 2004-08-04 07:56:42 19,456 -c----w c:\winnt\$NtServicePackUninstall$\dswave.dll
    - 2003-03-31 12:00:00 9,216 -c----w c:\winnt\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-04 07:56:48 10,752 -c----w c:\winnt\$NtServicePackUninstall$\dumprep.exe
    - 2003-03-31 12:00:00 263,680 -c----w c:\winnt\$NtServicePackUninstall$\duser.dll
    + 2004-08-04 07:56:42 304,128 -c----w c:\winnt\$NtServicePackUninstall$\duser.dll
    - 2003-03-31 12:00:00 15,872 -c----w c:\winnt\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-04 07:56:48 17,920 -c----w c:\winnt\$NtServicePackUninstall$\dvdupgrd.exe
    - 2003-06-09 22:06:08 180,224 -c----w c:\winnt\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-04 07:56:48 180,224 -c----w c:\winnt\$NtServicePackUninstall$\dwwin.exe
    - 2002-12-12 06:14:32 602,624 -c----w c:\winnt\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-04 07:56:42 619,008 -c----w c:\winnt\$NtServicePackUninstall$\dx7vb.dll
    - 2003-05-30 15:00:02 1,189,888 -c----w c:\winnt\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-04 07:56:42 1,227,264 -c----w c:\winnt\$NtServicePackUninstall$\dx8vb.dll
    - 2003-05-30 15:00:02 937,984 -c----w c:\winnt\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-04 07:56:48 1,298,432 -c----w c:\winnt\$NtServicePackUninstall$\dxdiag.exe
    - 2003-05-30 15:00:02 1,675,264 -c----w c:\winnt\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-04 07:56:42 2,113,536 -c----w c:\winnt\$NtServicePackUninstall$\dxdiagn.dll
    - 2003-03-31 12:00:00 68,992 -c----w c:\winnt\$NtServicePackUninstall$\dxg.sys
    + 2004-08-04 06:00:54 71,040 -c----w c:\winnt\$NtServicePackUninstall$\dxg.sys
    - 2003-03-31 12:00:00 498,205 -c----w c:\winnt\$NtServicePackUninstall$\dxmasf.dll
    + 2006-08-22 12:05:26 498,742 -c----w c:\winnt\$NtServicePackUninstall$\dxmasf.dll
    - 2003-03-31 12:00:00 337,920 -c----w c:\winnt\$NtServicePackUninstall$\dxtmsft.dll
    + 2004-08-04 07:56:42 357,888 -c----w c:\winnt\$NtServicePackUninstall$\dxtmsft.dll
    - 2003-03-31 12:00:00 194,560 -c----w c:\winnt\$NtServicePackUninstall$\dxtrans.dll
    + 2004-08-04 07:56:42 201,728 -c----w c:\winnt\$NtServicePackUninstall$\dxtrans.dll
    - 2003-03-31 12:00:00 165,376 -c----w c:\winnt\$NtServicePackUninstall$\els.dll
    + 2004-08-04 07:56:42 183,296 -c----w c:\winnt\$NtServicePackUninstall$\els.dll
    - 2002-12-12 06:14:32 18,944 -c----w c:\winnt\$NtServicePackUninstall$\encapi.dll
    + 2004-08-04 07:56:42 20,480 -c----w c:\winnt\$NtServicePackUninstall$\encapi.dll
    - 2002-11-26 20:15:52 166,912 -c----w c:\winnt\$NtServicePackUninstall$\encdec.dll
    + 2004-08-04 07:56:42 186,368 -c----w c:\winnt\$NtServicePackUninstall$\encdec.dll
    + 2004-08-04 07:56:05 40,960 -c----w c:\winnt\$NtServicePackUninstall$\ep9res.dll
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\ersvc.dll
    + 2004-08-04 07:56:42 23,040 -c----w c:\winnt\$NtServicePackUninstall$\ersvc.dll
    - 2004-03-06 02:16:11 226,816 -c----w c:\winnt\$NtServicePackUninstall$\es.dll
    + 2008-07-07 20:32:22 253,952 -c----w c:\winnt\$NtServicePackUninstall$\es.dll
    - 2003-03-31 12:00:00 1,018,368 -c----w c:\winnt\$NtServicePackUninstall$\esent.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\winnt\$NtServicePackUninstall$\esent.dll
    - 2003-03-31 12:00:00 235,520 -c----w c:\winnt\$NtServicePackUninstall$\esscli.dll
    + 2004-08-04 07:56:42 247,808 -c----w c:\winnt\$NtServicePackUninstall$\esscli.dll
    - 2003-03-31 12:00:00 178,688 -c----w c:\winnt\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-04 07:56:49 193,024 -c----w c:\winnt\$NtServicePackUninstall$\eudcedit.exe
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-04 07:56:42 55,808 -c----w c:\winnt\$NtServicePackUninstall$\eventlog.dll
    - 2003-03-31 12:00:00 96,256 -c----w c:\winnt\$NtServicePackUninstall$\evntagnt.dll
    + 2004-08-04 07:56:42 101,888 -c----w c:\winnt\$NtServicePackUninstall$\evntagnt.dll
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\evntcmd.exe
    + 2004-08-04 07:56:49 24,064 -c----w c:\winnt\$NtServicePackUninstall$\evntcmd.exe
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\winnt\$NtServicePackUninstall$\evntrprv.dll
    - 2003-03-31 12:00:00 84,992 -c----w c:\winnt\$NtServicePackUninstall$\evntwin.exe
    + 2004-08-04 07:56:49 92,160 -c----w c:\winnt\$NtServicePackUninstall$\evntwin.exe
    - 2003-05-12 05:12:10 996,352 -c----w c:\winnt\$NtServicePackUninstall$\explorer.exe
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\winnt\$NtServicePackUninstall$\explorer.exe
  3. 2009-03-24, 00:17 #13
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2003-05-12 02:35:32 380,957 -c----w c:\winnt\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-04 07:56:42 380,957 -c----w c:\winnt\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-04 07:56:42 55,808 -c----w c:\winnt\$NtServicePackUninstall$\extmgr.dll
    - 2003-03-31 12:00:00 40,960 -c----w c:\winnt\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-04 07:56:49 45,568 -c----w c:\winnt\$NtServicePackUninstall$\extrac32.exe
    + 2003-03-31 12:00:00 121,856 -c----w c:\winnt\$NtServicePackUninstall$\exts.dll
    + 2003-03-31 12:00:00 7,168 -c----w c:\winnt\$NtServicePackUninstall$\f3ahvoas.dll
    - 2003-03-31 12:00:00 145,152 -c----w c:\winnt\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-04 06:14:16 143,360 -c----w c:\winnt\$NtServicePackUninstall$\fastfat.sys
    - 2003-03-31 12:00:00 565,248 -c----w c:\winnt\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-04 07:56:42 472,064 -c----w c:\winnt\$NtServicePackUninstall$\fastprox.dll
    - 2003-06-10 00:10:58 66,560 -c----w c:\winnt\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-04 07:56:42 80,384 -c----w c:\winnt\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-04 07:56:49 20,992 -c----w c:\winnt\$NtServicePackUninstall$\faxpatch.exe
    - 2003-03-31 12:00:00 26,240 -c----w c:\winnt\$NtServicePackUninstall$\fdc.sys
    + 2004-08-04 05:59:27 27,392 -c----w c:\winnt\$NtServicePackUninstall$\fdc.sys
    - 2003-03-31 12:00:00 18,432 -c----w c:\winnt\$NtServicePackUninstall$\feclient.dll
    + 2004-08-04 07:56:42 21,504 -c----w c:\winnt\$NtServicePackUninstall$\feclient.dll
    - 2003-03-31 12:00:00 323,072 -c----w c:\winnt\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-04 07:56:42 337,920 -c----w c:\winnt\$NtServicePackUninstall$\filemgmt.dll
    - 2003-03-31 12:00:00 25,088 -c----w c:\winnt\$NtServicePackUninstall$\findstr.exe
    + 2004-08-04 07:56:49 27,136 -c----w c:\winnt\$NtServicePackUninstall$\findstr.exe
    + 2003-03-31 12:00:00 34,944 -c----w c:\winnt\$NtServicePackUninstall$\fips.sys
    - 2004-04-17 00:56:06 82,432 -c----w c:\winnt\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-04 07:56:42 87,552 -c----w c:\winnt\$NtServicePackUninstall$\fldrclnr.dll
    - 2003-03-31 12:00:00 19,712 -c----w c:\winnt\$NtServicePackUninstall$\flpydisk.sys
    + 2004-08-04 05:59:27 20,480 -c----w c:\winnt\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\winnt\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\winnt\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\winnt\$NtServicePackUninstall$\fltmgr.sys
    - 2003-03-31 12:00:00 361,472 -c----w c:\winnt\$NtServicePackUninstall$\fontext.dll
    + 2004-08-04 07:56:42 382,976 -c----w c:\winnt\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:14:45 80,896 -c----w c:\winnt\$NtServicePackUninstall$\fontsub.dll
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\fontview.exe
    + 2004-08-04 07:56:49 20,992 -c----w c:\winnt\$NtServicePackUninstall$\fontview.exe
    + 2003-03-31 12:00:00 7,168 -c----w c:\winnt\$NtServicePackUninstall$\forcedos.exe
    + 2003-03-31 12:00:00 25,600 -c----w c:\winnt\$NtServicePackUninstall$\format.com
    - 2003-03-31 12:00:00 32,828 -c----w c:\winnt\$NtServicePackUninstall$\fp40ext.dll
    + 2004-08-04 07:56:42 32,828 -c----w c:\winnt\$NtServicePackUninstall$\fp40ext.dll
    - 2002-05-14 18:08:54 184,435 -c----w c:\winnt\$NtServicePackUninstall$\fp4amsft.dll
    + 2004-08-04 07:56:42 184,435 -c----w c:\winnt\$NtServicePackUninstall$\fp4amsft.dll
    - 2002-05-14 18:08:54 82,035 -c----w c:\winnt\$NtServicePackUninstall$\fp4anscp.dll
    + 2004-08-04 07:56:42 82,035 -c----w c:\winnt\$NtServicePackUninstall$\fp4anscp.dll
    - 2002-05-14 18:08:54 147,513 -c----w c:\winnt\$NtServicePackUninstall$\fp4apws.dll
    + 2004-08-04 07:56:42 147,513 -c----w c:\winnt\$NtServicePackUninstall$\fp4apws.dll
    - 2002-05-14 18:08:54 127,034 -c----w c:\winnt\$NtServicePackUninstall$\fp4areg.dll
    + 2004-08-04 07:56:42 49,210 -c----w c:\winnt\$NtServicePackUninstall$\fp4areg.dll
    - 2002-05-14 18:08:54 102,509 -c----w c:\winnt\$NtServicePackUninstall$\fp4atxt.dll
    + 2004-08-04 07:56:42 102,509 -c----w c:\winnt\$NtServicePackUninstall$\fp4atxt.dll
    - 2002-05-14 18:08:54 618,605 -c----w c:\winnt\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-04 07:56:42 618,605 -c----w c:\winnt\$NtServicePackUninstall$\fp4autl.dll
    - 2002-05-14 18:08:54 41,020 -c----w c:\winnt\$NtServicePackUninstall$\fp4avnb.dll
    + 2004-08-04 07:56:42 41,020 -c----w c:\winnt\$NtServicePackUninstall$\fp4avnb.dll
    - 2002-05-14 18:08:54 32,826 -c----w c:\winnt\$NtServicePackUninstall$\fp4avss.dll
    + 2004-08-04 07:56:42 32,826 -c----w c:\winnt\$NtServicePackUninstall$\fp4avss.dll
    - 2002-05-14 18:08:54 49,212 -c----w c:\winnt\$NtServicePackUninstall$\fp4awebs.dll
    + 2004-08-04 07:56:42 49,212 -c----w c:\winnt\$NtServicePackUninstall$\fp4awebs.dll
    - 2002-05-14 18:08:54 872,557 -c----w c:\winnt\$NtServicePackUninstall$\fp4awel.dll
    + 2004-08-04 07:56:42 876,653 -c----w c:\winnt\$NtServicePackUninstall$\fp4awel.dll
    - 2002-05-14 18:08:54 14,608 -c----w c:\winnt\$NtServicePackUninstall$\fp98sadm.exe
    + 2004-08-04 07:56:49 15,120 -c----w c:\winnt\$NtServicePackUninstall$\fp98sadm.exe
    - 2002-05-14 18:08:54 109,328 -c----w c:\winnt\$NtServicePackUninstall$\fp98swin.exe
    + 2004-08-04 07:56:49 109,840 -c----w c:\winnt\$NtServicePackUninstall$\fp98swin.exe
    - 2002-05-14 18:08:54 24,632 -c----w c:\winnt\$NtServicePackUninstall$\fpadmcgi.exe
    + 2004-08-04 07:56:49 24,632 -c----w c:\winnt\$NtServicePackUninstall$\fpadmcgi.exe
    - 2002-05-14 18:08:54 20,541 -c----w c:\winnt\$NtServicePackUninstall$\fpadmdll.dll
    + 2004-08-04 07:56:42 20,541 -c----w c:\winnt\$NtServicePackUninstall$\fpadmdll.dll
    - 2002-05-14 18:08:54 188,494 -c----w c:\winnt\$NtServicePackUninstall$\fpcount.exe
    + 2004-08-04 07:56:49 188,494 -c----w c:\winnt\$NtServicePackUninstall$\fpcount.exe
    - 2002-05-14 18:08:54 94,208 -c----w c:\winnt\$NtServicePackUninstall$\fpencode.dll
    + 2004-08-04 07:56:42 94,208 -c----w c:\winnt\$NtServicePackUninstall$\fpencode.dll
    - 2002-05-14 18:08:54 20,541 -c----w c:\winnt\$NtServicePackUninstall$\fpexedll.dll
    + 2004-08-04 07:56:42 20,541 -c----w c:\winnt\$NtServicePackUninstall$\fpexedll.dll
    - 2002-05-14 18:08:54 598,071 -c----w c:\winnt\$NtServicePackUninstall$\fpmmc.dll
    + 2004-08-04 07:56:42 598,071 -c----w c:\winnt\$NtServicePackUninstall$\fpmmc.dll
    - 2002-05-14 18:08:56 208,896 -c----w c:\winnt\$NtServicePackUninstall$\fpmmcsat.dll
    + 2004-08-04 07:56:06 208,896 -c----w c:\winnt\$NtServicePackUninstall$\fpmmcsat.dll
    - 2002-05-14 18:08:54 20,538 -c----w c:\winnt\$NtServicePackUninstall$\fpremadm.exe
    + 2004-08-04 07:56:49 20,538 -c----w c:\winnt\$NtServicePackUninstall$\fpremadm.exe
    + 2004-08-04 07:56:49 28,728 -c----w c:\winnt\$NtServicePackUninstall$\fpsrvadm.exe
    - 2003-03-31 12:00:00 8,832 -c----w c:\winnt\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-04 07:56:06 9,344 -c----w c:\winnt\$NtServicePackUninstall$\framebuf.dll
    - 2003-03-31 12:00:00 174,592 -c----w c:\winnt\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-04 07:56:42 185,856 -c----w c:\winnt\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-04 07:56:49 193,024 -c----w c:\winnt\$NtServicePackUninstall$\fsquirt.exe
    - 2003-03-31 12:00:00 40,448 -c----w c:\winnt\$NtServicePackUninstall$\ftp.exe
    + 2004-08-04 07:56:49 42,496 -c----w c:\winnt\$NtServicePackUninstall$\ftp.exe
    + 2004-08-04 07:56:42 60,416 -c----w c:\winnt\$NtServicePackUninstall$\fwcfg.dll
    - 2003-03-31 12:00:00 443,392 -c----w c:\winnt\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-04 07:56:42 452,096 -c----w c:\winnt\$NtServicePackUninstall$\fxsapi.dll
    - 2003-03-31 12:00:00 130,048 -c----w c:\winnt\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-04 07:56:49 143,360 -c----w c:\winnt\$NtServicePackUninstall$\fxsclnt.exe
    - 2003-03-31 12:00:00 68,096 -c----w c:\winnt\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-04 07:56:42 72,192 -c----w c:\winnt\$NtServicePackUninstall$\fxscom.dll
    - 2003-03-31 12:00:00 271,360 -c----w c:\winnt\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-04 07:56:42 285,184 -c----w c:\winnt\$NtServicePackUninstall$\fxscomex.dll
    - 2003-03-31 12:00:00 216,064 -c----w c:\winnt\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-04 07:56:49 229,376 -c----w c:\winnt\$NtServicePackUninstall$\fxscover.exe
    - 2003-03-31 12:00:00 24,064 -c----w c:\winnt\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-04 07:56:42 27,136 -c----w c:\winnt\$NtServicePackUninstall$\fxsdrv.dll
    - 2003-03-31 12:00:00 53,760 -c----w c:\winnt\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-04 07:56:42 55,296 -c----w c:\winnt\$NtServicePackUninstall$\fxsevent.dll
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\winnt\$NtServicePackUninstall$\fxsext32.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\winnt\$NtServicePackUninstall$\fxsmon.dll
    - 2003-03-31 12:00:00 122,880 -c----w c:\winnt\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-04 07:56:42 132,608 -c----w c:\winnt\$NtServicePackUninstall$\fxsocm.dll
    - 2003-03-31 12:00:00 7,168 -c----w c:\winnt\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-04 07:56:42 8,704 -c----w c:\winnt\$NtServicePackUninstall$\fxsperf.dll
    - 2003-03-31 12:00:00 6,656 -c----w c:\winnt\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-04 07:56:06 6,656 -c----w c:\winnt\$NtServicePackUninstall$\fxsres.dll
    - 2003-03-31 12:00:00 559,616 -c----w c:\winnt\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-04 07:56:42 562,176 -c----w c:\winnt\$NtServicePackUninstall$\fxsst.dll
    - 2003-03-31 12:00:00 250,368 -c----w c:\winnt\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-04 07:56:49 267,776 -c----w c:\winnt\$NtServicePackUninstall$\fxssvc.exe
    - 2003-03-31 12:00:00 236,032 -c----w c:\winnt\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-04 07:56:42 246,272 -c----w c:\winnt\$NtServicePackUninstall$\fxst30.dll
    - 2003-03-31 12:00:00 391,168 -c----w c:\winnt\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-04 07:56:42 397,312 -c----w c:\winnt\$NtServicePackUninstall$\fxstiff.dll
    - 2003-03-31 12:00:00 149,504 -c----w c:\winnt\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-04 07:56:42 154,112 -c----w c:\winnt\$NtServicePackUninstall$\fxsui.dll
    - 2003-03-31 12:00:00 185,856 -c----w c:\winnt\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-04 07:56:42 192,512 -c----w c:\winnt\$NtServicePackUninstall$\fxswzrd.dll
    - 2003-03-31 12:00:00 395,264 -c----w c:\winnt\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-08-04 07:56:42 400,384 -c----w c:\winnt\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-08-04 06:07:43 46,464 -c----w c:\winnt\$NtServicePackUninstall$\gagp30kx.sys
    + 2004-08-04 06:08:21 10,624 -c----w c:\winnt\$NtServicePackUninstall$\gameenum.sys
    + 2004-08-04 06:08:29 59,136 -c----w c:\winnt\$NtServicePackUninstall$\gckernel.sys
    - 2004-03-30 01:48:36 257,536 -c----w c:\winnt\$NtServicePackUninstall$\gdi32.dll
    + 2008-02-20 06:51:05 282,624 -c----w c:\winnt\$NtServicePackUninstall$\gdi32.dll
    - 2003-03-31 12:00:00 116,736 -c----w c:\winnt\$NtServicePackUninstall$\glu32.dll
    + 2004-08-04 07:56:42 122,880 -c----w c:\winnt\$NtServicePackUninstall$\glu32.dll
    - 2003-03-31 12:00:00 9,728 -c----w c:\winnt\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-04 07:56:07 9,728 -c----w c:\winnt\$NtServicePackUninstall$\gpkrsrc.dll
    - 2003-03-31 12:00:00 37,888 -c----w c:\winnt\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-04 07:56:49 39,424 -c----w c:\winnt\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-04 05:59:19 28,288 -c----w c:\winnt\$NtServicePackUninstall$\grserial.sys
    - 2003-03-31 12:00:00 114,688 -c----w c:\winnt\$NtServicePackUninstall$\guitrn.dll
    + 2005-04-28 19:16:29 133,120 -c----w c:\winnt\$NtServicePackUninstall$\guitrn.dll
    + 2005-04-28 19:16:29 115,200 -c----w c:\winnt\$NtServicePackUninstall$\guitrna.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\winnt\$NtServicePackUninstall$\h323cc.dll
    - 2004-03-30 01:48:36 593,408 -c----w c:\winnt\$NtServicePackUninstall$\h323msp.dll
    + 2004-08-04 07:56:42 614,912 -c----w c:\winnt\$NtServicePackUninstall$\h323msp.dll
    - 2002-08-29 07:05:04 129,920 -c----w c:\winnt\$NtServicePackUninstall$\hal.dll
    + 2004-08-04 05:59:12 134,400 -c----w c:\winnt\$NtServicePackUninstall$\hal.dll
    + 2004-08-04 05:59:09 131,968 -c----w c:\winnt\$NtServicePackUninstall$\halaacpi.dll
    + 2004-08-04 05:59:06 81,280 -c----w c:\winnt\$NtServicePackUninstall$\halacpi.dll
    + 2004-08-04 05:59:13 150,656 -c----w c:\winnt\$NtServicePackUninstall$\halapic.dll
    + 2004-08-04 05:59:12 134,400 -c----w c:\winnt\$NtServicePackUninstall$\halmacpi.dll
    + 2004-08-04 05:59:18 152,704 -c----w c:\winnt\$NtServicePackUninstall$\halmps.dll
    + 2004-08-04 05:59:19 77,696 -c----w c:\winnt\$NtServicePackUninstall$\halsp.dll
    - 2003-07-03 23:50:12 5,632 -c----w c:\winnt\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-04 07:56:42 7,168 -c----w c:\winnt\$NtServicePackUninstall$\hccoin.dll
    + 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\help.exe
    - 2004-04-15 00:50:06 740,864 -c----w c:\winnt\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-04 07:56:49 768,512 -c----w c:\winnt\$NtServicePackUninstall$\helpctr.exe
    - 2003-03-31 12:00:00 703,488 -c----w c:\winnt\$NtServicePackUninstall$\helpsvc.exe
    + 2004-08-04 07:56:50 743,936 -c----w c:\winnt\$NtServicePackUninstall$\helpsvc.exe
    - 2002-09-22 02:13:26 10,752 -c----w c:\winnt\$NtServicePackUninstall$\hh.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\winnt\$NtServicePackUninstall$\hh.exe
    - 2003-01-10 20:43:46 37,888 -c----w c:\winnt\$NtServicePackUninstall$\hhsetup.dll
    + 2005-05-27 02:04:27 41,472 -c----w c:\winnt\$NtServicePackUninstall$\hhsetup.dll
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\hid.dll
    + 2004-08-04 07:56:42 20,992 -c----w c:\winnt\$NtServicePackUninstall$\hid.dll
    + 2004-08-04 06:10:36 25,600 -c----w c:\winnt\$NtServicePackUninstall$\hidbth.sys
    - 2003-03-31 12:00:00 34,560 -c----w c:\winnt\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-04 06:08:19 36,224 -c----w c:\winnt\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-04 06:08:18 15,104 -c----w c:\winnt\$NtServicePackUninstall$\hidir.sys
    - 2003-03-31 12:00:00 23,680 -c----w c:\winnt\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 06:08:16 24,960 -c----w c:\winnt\$NtServicePackUninstall$\hidparse.sys
    - 2003-08-21 17:54:08 20,480 -c----w c:\winnt\$NtServicePackUninstall$\hidserv.dll
    + 2004-08-04 07:56:42 21,504 -c----w c:\winnt\$NtServicePackUninstall$\hidserv.dll
    + 2001-08-17 21:02:20 9,600 -c----w c:\winnt\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:24:43 72,704 -c----w c:\winnt\$NtServicePackUninstall$\hlink.dll
    - 2003-03-31 12:00:00 36,352 -c----w c:\winnt\$NtServicePackUninstall$\hmmapi.dll
    + 2004-08-04 07:56:42 38,912 -c----w c:\winnt\$NtServicePackUninstall$\hmmapi.dll
    - 2003-03-31 12:00:00 240,640 -c----w c:\winnt\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-04 07:56:42 344,064 -c----w c:\winnt\$NtServicePackUninstall$\hnetcfg.dll
    - 2003-03-31 12:00:00 315,904 -c----w c:\winnt\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-04 07:56:42 330,752 -c----w c:\winnt\$NtServicePackUninstall$\hnetwiz.dll
    - 2003-03-31 12:00:00 35,328 -c----w c:\winnt\$NtServicePackUninstall$\hostmib.dll
    + 2004-08-04 07:56:42 39,936 -c----w c:\winnt\$NtServicePackUninstall$\hostmib.dll
    - 2003-03-31 12:00:00 137,216 -c----w c:\winnt\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-04 07:56:42 144,896 -c----w c:\winnt\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-04 07:56:42 10,752 -c----w c:\winnt\$NtServicePackUninstall$\hpcjrr.dll
    + 2004-08-04 07:56:42 10,240 -c----w c:\winnt\$NtServicePackUninstall$\hpcjrrps.dll
    + 2004-08-04 07:56:42 87,552 -c----w c:\winnt\$NtServicePackUninstall$\hpfud50.dll
    - 2004-04-11 02:53:14 16,384 -c----w c:\winnt\$NtServicePackUninstall$\hscupd.exe
    + 2004-08-04 07:56:50 18,944 -c----w c:\winnt\$NtServicePackUninstall$\hscupd.exe
    + 2004-08-04 07:56:42 32,285 -c----w c:\winnt\$NtServicePackUninstall$\hsfcisp2.dll
    + 2006-03-17 00:33:10 262,784 -c----w c:\winnt\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\winnt\$NtServicePackUninstall$\http.sys.001
    + 2004-08-04 07:56:42 24,576 -c----w c:\winnt\$NtServicePackUninstall$\httpapi.dll
    - 2003-03-31 12:00:00 39,936 -c----w c:\winnt\$NtServicePackUninstall$\htui.dll
    + 2004-08-04 07:56:42 41,984 -c----w c:\winnt\$NtServicePackUninstall$\htui.dll
    - 2003-03-31 12:00:00 489,984 -c----w c:\winnt\$NtServicePackUninstall$\hypertrm.dll
    + 2004-11-17 17:41:24 347,136 -c----w c:\winnt\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-04 06:00:50 8,192 -c----w c:\winnt\$NtServicePackUninstall$\i2omgmt.sys
    + 2004-08-04 06:00:50 18,560 -c----w c:\winnt\$NtServicePackUninstall$\i2omp.sys
    - 2003-03-31 12:00:00 51,072 -c----w c:\winnt\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-04 06:14:36 52,736 -c----w c:\winnt\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-04 07:56:42 702,845 -c----w c:\winnt\$NtServicePackUninstall$\i81xdnt5.dll
    - 2003-03-31 12:00:00 116,224 -c----w c:\winnt\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-04 07:56:42 119,808 -c----w c:\winnt\$NtServicePackUninstall$\iasrad.dll
    - 2003-03-31 12:00:00 9,216 -c----w c:\winnt\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-04 07:56:42 11,264 -c----w c:\winnt\$NtServicePackUninstall$\icaapi.dll
    - 2003-03-31 12:00:00 110,592 -c----w c:\winnt\$NtServicePackUninstall$\iccvid.dll
    + 2004-08-04 07:56:42 80,384 -c----w c:\winnt\$NtServicePackUninstall$\iccvid.dll
    - 2003-03-31 12:00:00 236,032 -c----w c:\winnt\$NtServicePackUninstall$\icm32.dll
    + 2005-06-29 01:46:00 254,976 -c----w c:\winnt\$NtServicePackUninstall$\icm32.dll
    - 2003-03-31 12:00:00 3,072 -c----w c:\winnt\$NtServicePackUninstall$\icmp.dll
    + 2004-08-04 07:56:07 3,584 -c----w c:\winnt\$NtServicePackUninstall$\icmp.dll
    - 2003-03-31 12:00:00 3,584 -c----w c:\winnt\$NtServicePackUninstall$\iconlib.dll
    + 2005-04-27 23:15:45 2,560 -c----w c:\winnt\$NtServicePackUninstall$\iconlib.dll
    - 2003-03-31 12:00:00 57,344 -c----w c:\winnt\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\winnt\$NtServicePackUninstall$\icwconn.dll
    - 2003-03-31 12:00:00 208,896 -c----w c:\winnt\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-04 07:56:50 214,528 -c----w c:\winnt\$NtServicePackUninstall$\icwconn1.exe
    - 2003-03-31 12:00:00 77,824 -c----w c:\winnt\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-04 07:56:50 86,016 -c----w c:\winnt\$NtServicePackUninstall$\icwconn2.exe
    - 2003-03-31 12:00:00 69,632 -c----w c:\winnt\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-04 07:56:42 73,728 -c----w c:\winnt\$NtServicePackUninstall$\icwdial.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-04 07:56:42 32,768 -c----w c:\winnt\$NtServicePackUninstall$\icwdl.dll
    - 2003-03-31 12:00:00 155,648 -c----w c:\winnt\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-04 07:56:42 172,032 -c----w c:\winnt\$NtServicePackUninstall$\icwhelp.dll
    - 2003-03-31 12:00:00 61,440 -c----w c:\winnt\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-04 07:56:42 65,536 -c----w c:\winnt\$NtServicePackUninstall$\icwphbk.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-04 07:56:50 24,576 -c----w c:\winnt\$NtServicePackUninstall$\icwrmind.exe
    - 2003-03-31 12:00:00 45,056 -c----w c:\winnt\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-04 07:56:42 49,152 -c----w c:\winnt\$NtServicePackUninstall$\icwutil.dll
    - 2003-03-31 12:00:00 113,152 -c----w c:\winnt\$NtServicePackUninstall$\idq.dll
    + 2004-08-04 07:56:42 120,832 -c----w c:\winnt\$NtServicePackUninstall$\idq.dll
    - 2003-03-31 12:00:00 28,672 -c----w c:\winnt\$NtServicePackUninstall$\ie4uinit.exe
    + 2004-08-04 07:56:50 34,304 -c----w c:\winnt\$NtServicePackUninstall$\ie4uinit.exe
    - 2003-03-31 12:00:00 126,976 -c----w c:\winnt\$NtServicePackUninstall$\ieakeng.dll
    + 2004-08-04 07:56:42 139,264 -c----w c:\winnt\$NtServicePackUninstall$\ieakeng.dll
    - 2003-03-31 12:00:00 204,288 -c----w c:\winnt\$NtServicePackUninstall$\ieaksie.dll
    + 2004-08-04 07:56:42 216,576 -c----w c:\winnt\$NtServicePackUninstall$\ieaksie.dll
    - 2003-03-31 12:00:00 294,912 -c----w c:\winnt\$NtServicePackUninstall$\iedkcs32.dll
    + 2004-08-04 07:56:42 323,584 -c----w c:\winnt\$NtServicePackUninstall$\iedkcs32.dll
    + 2004-08-04 07:56:50 18,432 -c----w c:\winnt\$NtServicePackUninstall$\iedw.exe
    + 2006-10-17 20:06:00 78,336 -c----w c:\winnt\$NtServicePackUninstall$\ieencode.dll
    - 2003-03-31 12:00:00 231,424 -c----w c:\winnt\$NtServicePackUninstall$\iepeers.dll
    + 2004-08-04 07:56:42 249,344 -c----w c:\winnt\$NtServicePackUninstall$\iepeers.dll
    - 2003-03-31 12:00:00 23,040 -c----w c:\winnt\$NtServicePackUninstall$\iernonce.dll
    + 2004-08-04 07:56:42 48,640 -c----w c:\winnt\$NtServicePackUninstall$\iernonce.dll
    - 2003-03-31 12:00:00 59,392 -c----w c:\winnt\$NtServicePackUninstall$\iesetup.dll
    + 2004-08-04 07:56:42 62,976 -c----w c:\winnt\$NtServicePackUninstall$\iesetup.dll
    - 2003-03-31 12:00:00 91,136 -c----w c:\winnt\$NtServicePackUninstall$\iexplore.exe
    + 2004-08-04 07:56:50 93,184 -c----w c:\winnt\$NtServicePackUninstall$\iexplore.exe
    - 2003-03-31 12:00:00 99,840 -c----w c:\winnt\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-04 07:56:50 114,688 -c----w c:\winnt\$NtServicePackUninstall$\iexpress.exe
    - 2003-03-31 12:00:00 125,952 -c----w c:\winnt\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-04 07:56:42 135,680 -c----w c:\winnt\$NtServicePackUninstall$\ifmon.dll
    - 2003-03-31 12:00:00 8,192 -c----w c:\winnt\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-04 07:56:42 8,192 -c----w c:\winnt\$NtServicePackUninstall$\igmpagnt.dll
    - 2003-03-31 12:00:00 468,480 -c----w c:\winnt\$NtServicePackUninstall$\iis.dll
    + 2004-08-04 07:56:42 505,344 -c----w c:\winnt\$NtServicePackUninstall$\iis.dll
    - 2003-03-31 12:00:00 73,728 -c----w c:\winnt\$NtServicePackUninstall$\ils.dll
    + 2004-08-04 07:56:42 81,920 -c----w c:\winnt\$NtServicePackUninstall$\ils.dll
    - 2003-03-31 12:00:00 126,976 -c----w c:\winnt\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-04 07:56:42 144,384 -c----w c:\winnt\$NtServicePackUninstall$\imagehlp.dll
    - 2003-03-31 12:00:00 123,904 -c----w c:\winnt\$NtServicePackUninstall$\imapi.exe
    + 2004-08-04 07:56:50 150,016 -c----w c:\winnt\$NtServicePackUninstall$\imapi.exe
    - 2003-03-31 12:00:00 39,808 -c----w c:\winnt\$NtServicePackUninstall$\imapi.sys
    + 2004-08-04 06:00:15 41,856 -c----w c:\winnt\$NtServicePackUninstall$\imapi.sys
    + 2004-08-04 06:04:36 106,496 -c----w c:\winnt\$NtServicePackUninstall$\imekrcic.dll
    + 2004-08-04 06:04:32 86,016 -c----w c:\winnt\$NtServicePackUninstall$\imekrmbx.dll
    - 2003-03-31 12:00:00 36,922 -c----w c:\winnt\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-04 07:56:42 36,921 -c----w c:\winnt\$NtServicePackUninstall$\imeshare.dll
    - 2003-03-31 12:00:00 30,208 -c----w c:\winnt\$NtServicePackUninstall$\imgutil.dll
    + 2004-08-04 07:56:42 35,840 -c----w c:\winnt\$NtServicePackUninstall$\imgutil.dll
    + 2004-08-04 05:31:48 811,064 -c----w c:\winnt\$NtServicePackUninstall$\imjp81k.dll
    + 2004-08-04 05:31:50 368,696 -c----w c:\winnt\$NtServicePackUninstall$\imjpcic.dll
    + 2004-08-04 05:31:51 716,856 -c----w c:\winnt\$NtServicePackUninstall$\imjpcus.dll
    + 2004-08-04 05:31:52 81,976 -c----w c:\winnt\$NtServicePackUninstall$\imjpdct.dll
    + 2004-08-04 05:32:15 274,489 -c----w c:\winnt\$NtServicePackUninstall$\imjputyc.dll
    + 2004-08-04 05:32:26 102,456 -c----w c:\winnt\$NtServicePackUninstall$\imlang.dll
    - 2003-03-31 12:00:00 103,936 -c----w c:\winnt\$NtServicePackUninstall$\imm32.dll
    + 2004-08-04 07:56:42 110,080 -c----w c:\winnt\$NtServicePackUninstall$\imm32.dll
    + 2003-03-31 12:00:00 115,712 -c----w c:\winnt\$NtServicePackUninstall$\imsinsnt.dll
    - 2003-03-31 12:00:00 266,240 -c----w c:\winnt\$NtServicePackUninstall$\inetcfg.dll
    + 2004-08-04 07:56:42 274,432 -c----w c:\winnt\$NtServicePackUninstall$\inetcfg.dll
    - 2004-06-07 21:19:46 596,480 -c----w c:\winnt\$NtServicePackUninstall$\inetcomm.dll
    + 2008-04-11 18:50:43 683,520 -c----w c:\winnt\$NtServicePackUninstall$\inetcomm.dll
    - 2003-03-31 12:00:00 31,232 -c----w c:\winnt\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-04 07:56:42 33,280 -c----w c:\winnt\$NtServicePackUninstall$\inetmib1.dll
    - 2003-03-31 12:00:00 68,096 -c----w c:\winnt\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-04 07:56:42 75,264 -c----w c:\winnt\$NtServicePackUninstall$\inetpp.dll
    - 2003-03-31 12:00:00 14,336 -c----w c:\winnt\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-04 07:56:42 15,872 -c----w c:\winnt\$NtServicePackUninstall$\inetppui.dll
    - 2002-10-11 22:08:36 47,616 -c----w c:\winnt\$NtServicePackUninstall$\inetres.dll
    + 2004-08-04 07:56:08 48,128 -c----w c:\winnt\$NtServicePackUninstall$\inetres.dll
    - 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-04 07:56:50 20,480 -c----w c:\winnt\$NtServicePackUninstall$\inetwiz.exe
    - 2003-03-31 12:00:00 144,896 -c----w c:\winnt\$NtServicePackUninstall$\initpki.dll
    + 2004-08-04 07:56:42 147,456 -c----w c:\winnt\$NtServicePackUninstall$\initpki.dll
    - 2003-03-31 12:00:00 114,176 -c----w c:\winnt\$NtServicePackUninstall$\input.dll
    + 2004-08-04 07:56:42 123,392 -c----w c:\winnt\$NtServicePackUninstall$\input.dll
    - 2003-03-31 12:00:00 69,632 -c----w c:\winnt\$NtServicePackUninstall$\inseng.dll
    + 2004-08-04 07:56:42 96,256 -c----w c:\winnt\$NtServicePackUninstall$\inseng.dll
    - 2002-08-29 07:27:48 4,736 -c----w c:\winnt\$NtServicePackUninstall$\intelide.sys
    + 2004-08-04 05:59:41 5,504 -c----w c:\winnt\$NtServicePackUninstall$\intelide.sys
    + 2004-08-04 05:59:19 36,096 -c----w c:\winnt\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-04 06:00:06 29,056 -c----w c:\winnt\$NtServicePackUninstall$\ip6fw.sys
    - 2003-03-31 12:00:00 51,712 -c----w c:\winnt\$NtServicePackUninstall$\ipconfig.exe
    + 2004-08-04 07:56:50 55,808 -c----w c:\winnt\$NtServicePackUninstall$\ipconfig.exe
    + 2004-08-04 07:56:05 97,280 -c----w c:\winnt\$NtServicePackUninstall$\ipevldpc.dll
    + 2004-08-04 07:56:04 24,064 -c----w c:\winnt\$NtServicePackUninstall$\ipevlpid.dll
    - 2003-03-31 12:00:00 82,944 -c----w c:\winnt\$NtServicePackUninstall$\iphlpapi.dll
    + 2006-05-19 12:59:41 94,720 -c----w c:\winnt\$NtServicePackUninstall$\iphlpapi.dll
    - 2003-03-31 12:00:00 19,584 -c----w c:\winnt\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-04 06:04:45 20,992 -c----w c:\winnt\$NtServicePackUninstall$\ipinip.sys
    + 2003-03-31 12:00:00 154,112 -c----w c:\winnt\$NtServicePackUninstall$\ipmontr.dll
    - 2003-03-31 12:00:00 79,488 -c----w c:\winnt\$NtServicePackUninstall$\ipnat.sys
    + 2004-09-29 22:28:37 134,912 -c----w c:\winnt\$NtServicePackUninstall$\ipnat.sys
    - 2004-03-30 01:48:36 439,808 -c----w c:\winnt\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-04 07:56:42 331,264 -c----w c:\winnt\$NtServicePackUninstall$\ipnathlp.dll
    - 2003-03-31 12:00:00 318,464 -c----w c:\winnt\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-04 07:56:42 330,752 -c----w c:\winnt\$NtServicePackUninstall$\ippromon.dll
    - 2003-03-31 12:00:00 33,280 -c----w c:\winnt\$NtServicePackUninstall$\iprip.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\winnt\$NtServicePackUninstall$\iprip.dll
    + 2003-03-31 12:00:00 169,984 -c----w c:\winnt\$NtServicePackUninstall$\iprtrmgr.dll
    - 2003-03-31 12:00:00 57,984 -c----w c:\winnt\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-04 06:14:28 74,752 -c----w c:\winnt\$NtServicePackUninstall$\ipsec.sys
    - 2003-03-31 12:00:00 332,800 -c----w c:\winnt\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-04 07:56:42 349,696 -c----w c:\winnt\$NtServicePackUninstall$\ipsecsnp.dll
    - 2003-03-31 12:00:00 155,648 -c----w c:\winnt\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-04 07:56:42 182,784 -c----w c:\winnt\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-04 07:56:26 96,768 -c----w c:\winnt\$NtServicePackUninstall$\ipseldpc.dll
    + 2004-08-04 07:56:04 24,064 -c----w c:\winnt\$NtServicePackUninstall$\ipselpid.dll
    - 2003-03-31 12:00:00 364,032 -c----w c:\winnt\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-04 07:56:42 384,000 -c----w c:\winnt\$NtServicePackUninstall$\ipsmsnap.dll
    - 2003-03-31 12:00:00 60,928 -c----w c:\winnt\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-04 07:56:50 53,248 -c----w c:\winnt\$NtServicePackUninstall$\ipv6.exe
    - 2003-03-31 12:00:00 134,144 -c----w c:\winnt\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\winnt\$NtServicePackUninstall$\ipv6mon.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-04 07:56:50 23,552 -c----w c:\winnt\$NtServicePackUninstall$\ipxroute.exe
    + 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\ipxwan.dll
    - 2002-11-14 18:58:02 120,320 -c----w c:\winnt\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-04 07:56:42 120,320 -c----w c:\winnt\$NtServicePackUninstall$\ir41_qc.dll
    - 2002-11-14 18:58:02 338,432 -c----w c:\winnt\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-04 07:56:42 338,432 -c----w c:\winnt\$NtServicePackUninstall$\ir41_qcx.dll
    - 2002-11-14 18:58:02 755,200 -c----w c:\winnt\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-04 07:56:42 755,200 -c----w c:\winnt\$NtServicePackUninstall$\ir50_32.dll
    - 2002-11-14 18:58:04 200,192 -c----w c:\winnt\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-04 07:56:42 200,192 -c----w c:\winnt\$NtServicePackUninstall$\ir50_qc.dll
    - 2002-11-14 18:58:04 183,808 -c----w c:\winnt\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-04 07:56:42 183,808 -c----w c:\winnt\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-04 06:00:53 87,424 -c----w c:\winnt\$NtServicePackUninstall$\irda.sys
    - 2003-03-31 12:00:00 10,496 -c----w c:\winnt\$NtServicePackUninstall$\irenum.sys
    + 2004-08-04 06:00:46 11,264 -c----w c:\winnt\$NtServicePackUninstall$\irenum.sys
    + 2004-08-04 07:56:50 152,576 -c----w c:\winnt\$NtServicePackUninstall$\irftp.exe
    + 2004-08-04 07:56:42 27,136 -c----w c:\winnt\$NtServicePackUninstall$\irmon.dll
    + 2001-08-17 19:58:02 35,840 -c----w c:\winnt\$NtServicePackUninstall$\isapnp.sys
    - 2003-03-31 12:00:00 77,824 -c----w c:\winnt\$NtServicePackUninstall$\isign32.dll
    + 2004-08-04 07:56:42 81,920 -c----w c:\winnt\$NtServicePackUninstall$\isign32.dll
    - 2003-03-31 12:00:00 28,672 -c----w c:\winnt\$NtServicePackUninstall$\isrdbg32.dll
    + 2004-08-04 07:56:42 32,768 -c----w c:\winnt\$NtServicePackUninstall$\isrdbg32.dll
    - 2003-08-28 15:57:04 143,872 -c----w c:\winnt\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:04:27 155,136 -c----w c:\winnt\$NtServicePackUninstall$\itircl.dll
    - 2004-06-23 00:43:42 123,392 -c----w c:\winnt\$NtServicePackUninstall$\itss.dll
    + 2005-05-27 02:04:27 137,216 -c----w c:\winnt\$NtServicePackUninstall$\itss.dll
    + 2004-08-04 07:56:42 192,000 -c----w c:\winnt\$NtServicePackUninstall$\iuengine.dll
    - 2003-03-31 12:00:00 49,664 -c----w c:\winnt\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-04 07:56:42 54,272 -c----w c:\winnt\$NtServicePackUninstall$\ixsso.dll
    - 2003-03-31 12:00:00 45,568 -c----w c:\winnt\$NtServicePackUninstall$\iyuv_32.dll
    + 2004-08-04 07:56:42 47,616 -c----w c:\winnt\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\winnt\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\winnt\$NtServicePackUninstall$\jgpl400.dll
    - 2003-01-13 20:57:58 589,881 -c----w c:\winnt\$NtServicePackUninstall$\jscript.dll
    + 2006-10-17 20:00:00 491,520 -c----w c:\winnt\$NtServicePackUninstall$\jscript.dll
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\jsproxy.dll
    + 2004-08-04 07:56:42 15,872 -c----w c:\winnt\$NtServicePackUninstall$\jsproxy.dll
    + 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbd101.dll
    + 2001-08-17 22:55:56 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbd106.dll
    + 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbd106n.dll
    + 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbdax2.dll
    - 2003-03-31 12:00:00 23,424 -c----w c:\winnt\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-04 05:58:32 24,576 -c----w c:\winnt\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-04 07:56:10 7,168 -c----w c:\winnt\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-04 05:58:34 14,848 -c----w c:\winnt\$NtServicePackUninstall$\kbdhid.sys
    + 2003-03-31 12:00:00 7,168 -c----w c:\winnt\$NtServicePackUninstall$\kbdibm02.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-04 07:56:10 6,656 -c----w c:\winnt\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-04 07:56:10 6,656 -c----w c:\winnt\$NtServicePackUninstall$\kbdinmal.dll
    + 2003-03-31 12:00:00 6,656 -c----w c:\winnt\$NtServicePackUninstall$\kbdlk41a.dll
    + 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbdlk41j.dll
    + 2004-08-04 07:56:10 5,632 -c----w c:\winnt\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\winnt\$NtServicePackUninstall$\kbdmlt48.dll
    + 2003-03-31 12:00:00 7,168 -c----w c:\winnt\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-04 07:56:10 7,168 -c----w c:\winnt\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-04 07:56:10 7,680 -c----w c:\winnt\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-04 07:56:10 7,680 -c----w c:\winnt\$NtServicePackUninstall$\kbdsmsno.dll
    + 2004-08-04 07:56:10 7,168 -c----w c:\winnt\$NtServicePackUninstall$\kbdukx.dll
    - 2003-03-31 12:00:00 7,040 -c----w c:\winnt\$NtServicePackUninstall$\kd1394.dll
    + 2004-08-04 05:59:23 7,424 -c----w c:\winnt\$NtServicePackUninstall$\kd1394.dll
    - 2003-03-31 12:00:00 272,896 -c----w c:\winnt\$NtServicePackUninstall$\kerberos.dll
    + 2005-06-15 17:49:30 295,936 -c----w c:\winnt\$NtServicePackUninstall$\kerberos.dll
    - 2003-03-31 12:00:00 930,304 -c----w c:\winnt\$NtServicePackUninstall$\kernel32.dll
    + 2007-04-16 15:52:53 984,576 -c----w c:\winnt\$NtServicePackUninstall$\kernel32.dll
    - 2003-03-31 12:00:00 146,432 -c----w c:\winnt\$NtServicePackUninstall$\keymgr.dll
    + 2004-08-04 07:56:42 150,528 -c----w c:\winnt\$NtServicePackUninstall$\keymgr.dll
    - 2002-08-29 07:32:30 159,360 -c----w c:\winnt\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\winnt\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\winnt\$NtServicePackUninstall$\kmixer.sys.001
    - 2003-03-31 12:00:00 23,552 -c----w c:\winnt\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\winnt\$NtServicePackUninstall$\krnlprov.dll
    - 2002-12-12 06:14:32 130,304 -c----w c:\winnt\$NtServicePackUninstall$\ks.sys
    + 2004-08-04 06:15:21 140,928 -c----w c:\winnt\$NtServicePackUninstall$\ks.sys
    - 2003-03-31 12:00:00 79,744 -c----w c:\winnt\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 05:59:47 92,032 -c----w c:\winnt\$NtServicePackUninstall$\ksecdd.sys
    - 2002-12-12 06:14:32 4,096 -c----w c:\winnt\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\winnt\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-04 05:59:32 34,688 -c----w c:\winnt\$NtServicePackUninstall$\lbrtfdc.sys
    - 2003-03-31 12:00:00 367,616 -c----w c:\winnt\$NtServicePackUninstall$\licdll.dll
    + 2004-08-04 07:56:44 423,936 -c----w c:\winnt\$NtServicePackUninstall$\licdll.dll
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\licmgr10.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\winnt\$NtServicePackUninstall$\licmgr10.dll
    - 2003-03-31 12:00:00 57,856 -c----w c:\winnt\$NtServicePackUninstall$\licwmi.dll
    + 2004-08-04 07:56:42 58,880 -c----w c:\winnt\$NtServicePackUninstall$\licwmi.dll
    - 2003-03-31 12:00:00 15,360 -c----w c:\winnt\$NtServicePackUninstall$\linkinfo.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\winnt\$NtServicePackUninstall$\linkinfo.dll
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-04 07:56:42 13,824 -c----w c:\winnt\$NtServicePackUninstall$\lmhsvc.dll
    - 2003-03-31 12:00:00 29,184 -c----w c:\winnt\$NtServicePackUninstall$\lmmib2.dll
    + 2004-08-04 07:56:42 33,792 -c----w c:\winnt\$NtServicePackUninstall$\lmmib2.dll
    - 2003-03-31 12:00:00 381,440 -c----w c:\winnt\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-04 07:56:42 399,872 -c----w c:\winnt\$NtServicePackUninstall$\lmrt.dll
    - 2003-03-31 12:00:00 91,648 -c----w c:\winnt\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-04 07:56:42 97,280 -c----w c:\winnt\$NtServicePackUninstall$\loadperf.dll
    - 2003-03-31 12:00:00 202,752 -c----w c:\winnt\$NtServicePackUninstall$\localsec.dll
    + 2004-08-04 07:56:42 221,696 -c----w c:\winnt\$NtServicePackUninstall$\localsec.dll
    - 2003-03-31 12:00:00 295,936 -c----w c:\winnt\$NtServicePackUninstall$\localspl.dll
    + 2004-08-04 07:56:42 341,504 -c----w c:\winnt\$NtServicePackUninstall$\localspl.dll
    - 2003-03-31 12:00:00 10,240 -c----w c:\winnt\$NtServicePackUninstall$\localui.dll
    + 2004-08-04 07:56:42 11,776 -c----w c:\winnt\$NtServicePackUninstall$\localui.dll
    - 2002-12-04 00:50:10 68,608 -c----w c:\winnt\$NtServicePackUninstall$\locator.exe
    + 2004-08-04 07:56:50 75,264 -c----w c:\winnt\$NtServicePackUninstall$\locator.exe
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\log.dll
    + 2005-04-28 19:16:29 19,968 -c----w c:\winnt\$NtServicePackUninstall$\log.dll
    + 2004-08-04 07:56:50 59,392 -c----w c:\winnt\$NtServicePackUninstall$\logman.exe
    - 2003-03-31 12:00:00 219,648 -c----w c:\winnt\$NtServicePackUninstall$\logon.scr
    + 2004-08-04 07:56:57 220,672 -c----w c:\winnt\$NtServicePackUninstall$\logon.scr
    - 2003-03-31 12:00:00 504,320 -c----w c:\winnt\$NtServicePackUninstall$\logonui.exe
    + 2004-08-04 07:56:50 514,560 -c----w c:\winnt\$NtServicePackUninstall$\logonui.exe
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\lpdsvc.dll
    + 2004-08-04 07:56:42 22,528 -c----w c:\winnt\$NtServicePackUninstall$\lpdsvc.dll
    - 2003-03-31 12:00:00 18,944 -c----w c:\winnt\$NtServicePackUninstall$\lpk.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\winnt\$NtServicePackUninstall$\lpk.dll
    - 2003-03-31 12:00:00 8,704 -c----w c:\winnt\$NtServicePackUninstall$\lprhelp.dll
    + 2004-08-04 07:56:42 10,240 -c----w c:\winnt\$NtServicePackUninstall$\lprhelp.dll
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\lprmon.dll
    + 2004-08-04 07:56:42 18,944 -c----w c:\winnt\$NtServicePackUninstall$\lprmon.dll
    - 2004-03-30 01:48:36 667,648 -c----w c:\winnt\$NtServicePackUninstall$\lsasrv.dll
    + 2007-11-07 09:26:56 721,920 -c----w c:\winnt\$NtServicePackUninstall$\lsasrv.dll
    - 2003-03-31 12:00:00 11,776 -c----w c:\winnt\$NtServicePackUninstall$\lsass.exe
    + 2004-08-04 07:56:50 13,312 -c----w c:\winnt\$NtServicePackUninstall$\lsass.exe
    + 2004-08-04 06:00:06 7,040 -c----w c:\winnt\$NtServicePackUninstall$\ltotape.sys
    - 2002-11-20 17:50:52 67,584 -c----w c:\winnt\$NtServicePackUninstall$\magnify.exe
    + 2006-10-04 08:48:36 72,704 -c----w c:\winnt\$NtServicePackUninstall$\magnify.exe
    - 2003-03-31 12:00:00 79,360 -c----w c:\winnt\$NtServicePackUninstall$\makecab.exe
    + 2004-08-04 07:56:50 85,504 -c----w c:\winnt\$NtServicePackUninstall$\makecab.exe
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-04 07:56:42 14,848 -c----w c:\winnt\$NtServicePackUninstall$\mcastmib.dll
    - 2003-03-31 12:00:00 80,384 -c----w c:\winnt\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-04 07:56:42 84,480 -c----w c:\winnt\$NtServicePackUninstall$\mciavi32.dll
    - 2002-12-12 06:14:32 34,304 -c----w c:\winnt\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\winnt\$NtServicePackUninstall$\mciqtz32.dll
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-04 07:56:42 23,040 -c----w c:\winnt\$NtServicePackUninstall$\mciseq.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\winnt\$NtServicePackUninstall$\mciwave.dll
    - 2003-03-31 12:00:00 108,544 -c----w c:\winnt\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-04 07:56:42 118,272 -c----w c:\winnt\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-04 07:56:42 86,016 -c----w c:\winnt\$NtServicePackUninstall$\mdmxsdk.dll
    + 2004-08-04 06:00:49 26,112 -c----w c:\winnt\$NtServicePackUninstall$\memstpci.sys
    - 2003-03-31 12:00:00 62,208 -c----w c:\winnt\$NtServicePackUninstall$\mf.sys
    + 2004-08-04 06:07:44 63,744 -c----w c:\winnt\$NtServicePackUninstall$\mf.sys
    - 2004-03-30 01:48:36 36,864 -c----w c:\winnt\$NtServicePackUninstall$\mf3216.dll
    + 2007-03-08 15:36:28 40,960 -c----w c:\winnt\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\winnt\$NtServicePackUninstall$\mfc40u.dll
    - 2003-03-31 12:00:00 995,383 -c----w c:\winnt\$NtServicePackUninstall$\mfc42.dll
    + 2004-08-04 07:56:42 1,028,096 -c----w c:\winnt\$NtServicePackUninstall$\mfc42.dll
    - 2003-03-31 12:00:00 995,384 -c----w c:\winnt\$NtServicePackUninstall$\mfc42u.dll
    + 2004-08-04 07:56:42 1,024,000 -c----w c:\winnt\$NtServicePackUninstall$\mfc42u.dll
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-04 07:56:42 22,528 -c----w c:\winnt\$NtServicePackUninstall$\mfcsubs.dll
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-04 07:56:42 14,848 -c----w c:\winnt\$NtServicePackUninstall$\mgmtapi.dll
    - 2003-03-31 12:00:00 17,920 -c----w c:\winnt\$NtServicePackUninstall$\midimap.dll
    + 2004-08-04 07:56:42 18,944 -c----w c:\winnt\$NtServicePackUninstall$\midimap.dll
    - 2003-03-31 12:00:00 179,200 -c----w c:\winnt\$NtServicePackUninstall$\migism.dll
    + 2005-04-28 19:16:29 274,432 -c----w c:\winnt\$NtServicePackUninstall$\migism.dll
    + 2005-04-28 20:16:30 261,120 -c----w c:\winnt\$NtServicePackUninstall$\migisma.dll
    - 2003-03-31 12:00:00 56,320 -c----w c:\winnt\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-04 07:56:42 60,928 -c----w c:\winnt\$NtServicePackUninstall$\miglibnt.dll
    - 2003-03-31 12:00:00 98,816 -c----w c:\winnt\$NtServicePackUninstall$\migload.exe
    + 2005-04-28 00:12:58 103,424 -c----w c:\winnt\$NtServicePackUninstall$\migload.exe
    - 2004-02-17 18:50:10 6,656 -c----w c:\winnt\$NtServicePackUninstall$\migregdb.exe
    + 2004-08-04 07:56:51 7,680 -c----w c:\winnt\$NtServicePackUninstall$\migregdb.exe
    - 2002-11-20 18:22:36 230,400 -c----w c:\winnt\$NtServicePackUninstall$\migwiz.exe
    + 2005-04-28 00:12:57 245,248 -c----w c:\winnt\$NtServicePackUninstall$\migwiz.exe
    + 2005-04-28 00:12:57 241,152 -c----w c:\winnt\$NtServicePackUninstall$\migwiza.exe
    + 2003-03-31 12:00:00 18,944 -c----w c:\winnt\$NtServicePackUninstall$\mimefilt.dll
    - 2003-03-31 12:00:00 577,024 -c----w c:\winnt\$NtServicePackUninstall$\mlang.dll
    + 2004-08-04 07:56:42 586,240 -c----w c:\winnt\$NtServicePackUninstall$\mlang.dll
    - 2003-03-31 12:00:00 774,144 -c----w c:\winnt\$NtServicePackUninstall$\mmc.exe
    + 2004-08-04 07:56:51 815,104 -c----w c:\winnt\$NtServicePackUninstall$\mmc.exe
    - 2003-03-31 12:00:00 66,560 -c----w c:\winnt\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-04 07:56:42 70,656 -c----w c:\winnt\$NtServicePackUninstall$\mmcbase.dll
    - 2003-03-31 12:00:00 1,128,960 -c----w c:\winnt\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-04 07:56:42 1,192,960 -c----w c:\winnt\$NtServicePackUninstall$\mmcndmgr.dll
    - 2003-03-31 12:00:00 46,592 -c----w c:\winnt\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-04 07:56:42 50,688 -c----w c:\winnt\$NtServicePackUninstall$\mmcshext.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-04 07:56:42 17,408 -c----w c:\winnt\$NtServicePackUninstall$\mmfutil.dll
    - 2003-03-31 12:00:00 32,256 -c----w c:\winnt\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-04 07:56:42 34,560 -c----w c:\winnt\$NtServicePackUninstall$\mnmdd.dll
    - 2003-03-31 12:00:00 32,768 -c----w c:\winnt\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-04 07:56:51 32,768 -c----w c:\winnt\$NtServicePackUninstall$\mnmsrvc.exe
    - 2003-03-31 12:00:00 196,096 -c----w c:\winnt\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-04 07:56:42 207,360 -c----w c:\winnt\$NtServicePackUninstall$\mobsync.dll
    - 2003-03-31 12:00:00 135,680 -c----w c:\winnt\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-04 07:56:51 143,360 -c----w c:\winnt\$NtServicePackUninstall$\mobsync.exe
    - 2003-03-31 12:00:00 28,800 -c----w c:\winnt\$NtServicePackUninstall$\modem.sys
    + 2004-08-04 06:08:05 30,080 -c----w c:\winnt\$NtServicePackUninstall$\modem.sys
    - 2003-03-31 12:00:00 145,408 -c----w c:\winnt\$NtServicePackUninstall$\modemui.dll
    + 2004-08-04 07:56:42 153,600 -c----w c:\winnt\$NtServicePackUninstall$\modemui.dll
    - 2003-03-31 12:00:00 15,360 -c----w c:\winnt\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-04 07:56:51 16,384 -c----w c:\winnt\$NtServicePackUninstall$\mofcomp.exe
    - 2003-03-31 12:00:00 104,960 -c----w c:\winnt\$NtServicePackUninstall$\mofd.dll
    + 2004-08-04 07:56:42 123,904 -c----w c:\winnt\$NtServicePackUninstall$\mofd.dll
    + 2003-03-31 12:00:00 15,872 -c----w c:\winnt\$NtServicePackUninstall$\more.com
    - 2003-03-31 12:00:00 210,944 -c----w c:\winnt\$NtServicePackUninstall$\moricons.dll
    + 2004-08-04 07:56:11 216,064 -c----w c:\winnt\$NtServicePackUninstall$\moricons.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-04 05:58:32 23,040 -c----w c:\winnt\$NtServicePackUninstall$\mouclass.sys
    - 2003-03-31 12:00:00 37,504 -c----w c:\winnt\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-04 05:58:30 42,240 -c----w c:\winnt\$NtServicePackUninstall$\mountmgr.sys
    - 2002-12-20 19:06:00 3,366,912 -c----w c:\winnt\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-04 07:56:52 3,555,328 -c----w c:\winnt\$NtServicePackUninstall$\moviemk.exe
  4. 2009-03-24, 00:18 #14
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2003-02-17 16:16:26 15,104 -c----w c:\winnt\$NtServicePackUninstall$\mpe.sys
    + 2004-08-04 06:10:12 15,360 -c----w c:\winnt\$NtServicePackUninstall$\mpe.sys
    - 2003-03-31 12:00:00 116,736 -c----w c:\winnt\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-04 07:56:52 123,392 -c----w c:\winnt\$NtServicePackUninstall$\mplay32.exe
    - 2003-03-31 12:00:00 4,639 -c----w c:\winnt\$NtServicePackUninstall$\mplayer2.exe
    + 2004-08-04 07:56:52 4,639 -c----w c:\winnt\$NtServicePackUninstall$\mplayer2.exe
    - 2003-03-31 12:00:00 55,808 -c----w c:\winnt\$NtServicePackUninstall$\mpr.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\winnt\$NtServicePackUninstall$\mpr.dll
    - 2003-03-31 12:00:00 79,360 -c----w c:\winnt\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-04 07:56:42 87,040 -c----w c:\winnt\$NtServicePackUninstall$\mprapi.dll
    + 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\mprdim.dll
    - 2003-03-31 12:00:00 172,672 -c----w c:\winnt\$NtServicePackUninstall$\mrxdav.sys
    + 2007-12-18 09:51:35 179,584 -c----w c:\winnt\$NtServicePackUninstall$\mrxdav.sys
    - 2002-11-18 17:27:40 392,576 -c----w c:\winnt\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\winnt\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\winnt\$NtServicePackUninstall$\mrxsmb.sys.001
    - 2003-03-31 12:00:00 67,072 -c----w c:\winnt\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-04 07:56:42 71,680 -c----w c:\winnt\$NtServicePackUninstall$\msacm32.dll
    - 2003-03-31 12:00:00 307,200 -c----w c:\winnt\$NtServicePackUninstall$\msadce.dll
    + 2004-08-04 07:56:42 331,776 -c----w c:\winnt\$NtServicePackUninstall$\msadce.dll
    - 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-04 07:56:12 20,480 -c----w c:\winnt\$NtServicePackUninstall$\msadcer.dll
    - 2003-03-31 12:00:00 57,344 -c----w c:\winnt\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\winnt\$NtServicePackUninstall$\msadcf.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msadcfr.dll
    + 2004-08-04 07:56:12 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msadcfr.dll
    - 2003-03-31 12:00:00 131,072 -c----w c:\winnt\$NtServicePackUninstall$\msadco.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\winnt\$NtServicePackUninstall$\msadco.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-04 07:56:12 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msadcor.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-04 07:56:42 53,248 -c----w c:\winnt\$NtServicePackUninstall$\msadcs.dll
    - 2003-03-31 12:00:00 147,456 -c----w c:\winnt\$NtServicePackUninstall$\msadds.dll
    + 2004-08-04 07:56:42 155,648 -c----w c:\winnt\$NtServicePackUninstall$\msadds.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-04 07:56:12 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msaddsr.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msader15.dll
    + 2004-08-04 07:56:12 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msader15.dll
    - 2003-03-31 12:00:00 487,424 -c----w c:\winnt\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\winnt\$NtServicePackUninstall$\msado15.dll
    - 2003-03-31 12:00:00 159,744 -c----w c:\winnt\$NtServicePackUninstall$\msadomd.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\winnt\$NtServicePackUninstall$\msadomd.dll
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\msador15.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\winnt\$NtServicePackUninstall$\msador15.dll
    - 2003-03-31 12:00:00 180,224 -c----w c:\winnt\$NtServicePackUninstall$\msadox.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\winnt\$NtServicePackUninstall$\msadox.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\winnt\$NtServicePackUninstall$\msadrh15.dll
    - 2003-03-31 12:00:00 3,584 -c----w c:\winnt\$NtServicePackUninstall$\msafd.dll
    + 2004-08-04 07:56:12 3,584 -c----w c:\winnt\$NtServicePackUninstall$\msafd.dll
    - 2003-03-31 12:00:00 80,128 -c----w c:\winnt\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-04 07:56:42 86,016 -c----w c:\winnt\$NtServicePackUninstall$\msapsspc.dll
    - 2004-03-30 01:48:36 51,712 -c----w c:\winnt\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\winnt\$NtServicePackUninstall$\msasn1.dll
    - 2003-03-31 12:00:00 203,776 -c----w c:\winnt\$NtServicePackUninstall$\mscandui.dll
    + 2004-08-04 07:56:42 220,160 -c----w c:\winnt\$NtServicePackUninstall$\mscandui.dll
    - 2003-03-31 12:00:00 68,096 -c----w c:\winnt\$NtServicePackUninstall$\mscms.dll
    + 2008-06-24 16:23:05 74,240 -c----w c:\winnt\$NtServicePackUninstall$\mscms.dll
    - 2003-03-31 12:00:00 65,536 -c----w c:\winnt\$NtServicePackUninstall$\msconf.dll
    + 2004-08-04 07:56:42 69,632 -c----w c:\winnt\$NtServicePackUninstall$\msconf.dll
    - 2003-03-31 12:00:00 145,408 -c----w c:\winnt\$NtServicePackUninstall$\msconfig.exe
    + 2004-08-04 07:56:53 158,208 -c----w c:\winnt\$NtServicePackUninstall$\msconfig.exe
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-04 07:56:12 12,288 -c----w c:\winnt\$NtServicePackUninstall$\mscpx32r.dll
    - 2003-03-31 12:00:00 36,864 -c----w c:\winnt\$NtServicePackUninstall$\mscpxl32.dll
    + 2004-08-04 07:56:42 36,864 -c----w c:\winnt\$NtServicePackUninstall$\mscpxl32.dll
    - 2003-03-31 12:00:00 266,752 -c----w c:\winnt\$NtServicePackUninstall$\msctf.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\winnt\$NtServicePackUninstall$\msctf.dll
    - 2003-03-31 12:00:00 67,584 -c----w c:\winnt\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-04 07:56:42 69,120 -c----w c:\winnt\$NtServicePackUninstall$\msctfp.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-04 07:56:42 118,784 -c----w c:\winnt\$NtServicePackUninstall$\msdadiag.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaenum.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaer.dll
    - 2002-05-24 04:22:16 532,480 -c----w c:\winnt\$NtServicePackUninstall$\msdaipp.dll
    + 2004-08-04 07:56:43 532,480 -c----w c:\winnt\$NtServicePackUninstall$\msdaipp.dll
    - 2003-03-31 12:00:00 221,184 -c----w c:\winnt\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-04 07:56:43 233,472 -c----w c:\winnt\$NtServicePackUninstall$\msdaora.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaorar.dll
    - 2003-03-31 12:00:00 73,728 -c----w c:\winnt\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-04 07:56:43 77,824 -c----w c:\winnt\$NtServicePackUninstall$\msdaosp.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaprsr.dll
    - 2003-03-31 12:00:00 180,224 -c----w c:\winnt\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-04 07:56:43 200,704 -c----w c:\winnt\$NtServicePackUninstall$\msdaprst.dll
    - 2003-03-31 12:00:00 188,416 -c----w c:\winnt\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-04 07:56:43 204,800 -c----w c:\winnt\$NtServicePackUninstall$\msdaps.dll
    - 2003-03-31 12:00:00 110,592 -c----w c:\winnt\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-04 07:56:43 118,784 -c----w c:\winnt\$NtServicePackUninstall$\msdarem.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdaremr.dll
    - 2003-10-28 04:09:50 126,976 -c----w c:\winnt\$NtServicePackUninstall$\msdart.dll
    + 2004-08-04 07:56:43 151,552 -c----w c:\winnt\$NtServicePackUninstall$\msdart.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-04 07:56:43 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdasc.dll
    - 2003-03-31 12:00:00 303,104 -c----w c:\winnt\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-04 07:56:43 315,392 -c----w c:\winnt\$NtServicePackUninstall$\msdasql.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdasqlr.dll
    - 2003-03-31 12:00:00 86,016 -c----w c:\winnt\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-04 07:56:43 94,208 -c----w c:\winnt\$NtServicePackUninstall$\msdatl3.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-04 07:56:43 20,480 -c----w c:\winnt\$NtServicePackUninstall$\msdatt.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-04 07:56:43 4,096 -c----w c:\winnt\$NtServicePackUninstall$\msdaurl.dll
    - 2003-03-31 12:00:00 32,768 -c----w c:\winnt\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-04 07:56:43 36,864 -c----w c:\winnt\$NtServicePackUninstall$\msdfmap.dll
    - 2002-12-12 06:14:32 13,312 -c----w c:\winnt\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-04 07:56:43 14,336 -c----w c:\winnt\$NtServicePackUninstall$\msdmo.dll
    - 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-04 07:56:53 6,144 -c----w c:\winnt\$NtServicePackUninstall$\msdtc.exe
    - 2003-03-31 12:00:00 54,784 -c----w c:\winnt\$NtServicePackUninstall$\msdtclog.dll
    + 2004-08-04 07:56:43 58,880 -c----w c:\winnt\$NtServicePackUninstall$\msdtclog.dll
    - 2004-03-06 02:16:10 367,616 -c----w c:\winnt\$NtServicePackUninstall$\msdtcprx.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\winnt\$NtServicePackUninstall$\msdtcprx.dll
    + 2003-03-31 12:00:00 82,432 -c----w c:\winnt\$NtServicePackUninstall$\msdtcstp.dll
    - 2004-03-06 02:16:11 977,920 -c----w c:\winnt\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\winnt\$NtServicePackUninstall$\msdtctm.dll
    - 2004-03-06 02:16:10 150,528 -c----w c:\winnt\$NtServicePackUninstall$\msdtcuiu.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\winnt\$NtServicePackUninstall$\msdtcuiu.dll
    - 2003-02-17 16:21:50 52,096 -c----w c:\winnt\$NtServicePackUninstall$\msdv.sys
    + 2004-08-04 06:09:58 51,328 -c----w c:\winnt\$NtServicePackUninstall$\msdv.sys
    - 2003-03-31 12:00:00 4,126 -c----w c:\winnt\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-04 07:56:13 4,126 -c----w c:\winnt\$NtServicePackUninstall$\msdxmlc.dll
    - 2003-05-12 02:35:16 512,029 -c----w c:\winnt\$NtServicePackUninstall$\msexch40.dll
    + 2004-08-04 07:56:43 512,029 -c----w c:\winnt\$NtServicePackUninstall$\msexch40.dll
    - 2004-03-01 18:55:24 319,517 -c----w c:\winnt\$NtServicePackUninstall$\msexcl40.dll
    + 2004-08-04 07:56:43 319,517 -c----w c:\winnt\$NtServicePackUninstall$\msexcl40.dll
    - 2003-03-31 12:00:00 18,048 -c----w c:\winnt\$NtServicePackUninstall$\msfs.sys
    + 2004-08-04 06:00:41 19,072 -c----w c:\winnt\$NtServicePackUninstall$\msfs.sys
    - 2003-03-31 12:00:00 504,832 -c----w c:\winnt\$NtServicePackUninstall$\msftedit.dll
    + 2006-11-27 14:54:06 539,136 -c----w c:\winnt\$NtServicePackUninstall$\msftedit.dll
    - 2004-03-30 01:48:36 971,264 -c----w c:\winnt\$NtServicePackUninstall$\msgina.dll
    + 2004-08-04 07:56:43 994,304 -c----w c:\winnt\$NtServicePackUninstall$\msgina.dll
    - 2003-03-31 12:00:00 33,792 -c----w c:\winnt\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-04 06:04:12 35,072 -c----w c:\winnt\$NtServicePackUninstall$\msgpc.sys
    - 2003-03-31 12:00:00 3,346,432 -c----w c:\winnt\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-04 07:56:43 3,166,208 -c----w c:\winnt\$NtServicePackUninstall$\msgr3en.dll
    - 2003-03-31 12:00:00 57,374 -c----w c:\winnt\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-04 07:56:43 15,360 -c----w c:\winnt\$NtServicePackUninstall$\msgrocm.dll
    - 2003-04-15 03:12:46 135,440 -c----w c:\winnt\$NtServicePackUninstall$\msgsc.dll
    + 2004-08-04 07:56:43 82,944 -c----w c:\winnt\$NtServicePackUninstall$\msgsc.dll
    - 2003-04-15 03:37:50 217,360 -c----w c:\winnt\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-04 07:56:13 180,224 -c----w c:\winnt\$NtServicePackUninstall$\msgslang.dll
    - 2003-10-21 23:06:41 32,256 -c----w c:\winnt\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-04 07:56:43 33,792 -c----w c:\winnt\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-04 07:56:57 188,416 -c----w c:\winnt\$NtServicePackUninstall$\msh261.drv
    + 2004-08-04 07:56:57 294,912 -c----w c:\winnt\$NtServicePackUninstall$\msh263.drv
    - 2003-03-31 12:00:00 24,064 -c----w c:\winnt\$NtServicePackUninstall$\mshta.exe
    + 2004-08-04 07:56:53 29,184 -c----w c:\winnt\$NtServicePackUninstall$\mshta.exe
    - 2004-07-08 01:37:28 2,803,712 -c----w c:\winnt\$NtServicePackUninstall$\mshtml.dll
    + 2004-08-04 07:56:43 3,003,392 -c----w c:\winnt\$NtServicePackUninstall$\mshtml.dll
    - 2003-03-31 12:00:00 440,320 -c----w c:\winnt\$NtServicePackUninstall$\mshtmled.dll
    + 2004-08-04 07:56:43 448,512 -c----w c:\winnt\$NtServicePackUninstall$\mshtmled.dll
    - 2003-03-31 12:00:00 56,320 -c----w c:\winnt\$NtServicePackUninstall$\mshtmler.dll
    + 2004-08-04 07:56:14 56,832 -c----w c:\winnt\$NtServicePackUninstall$\mshtmler.dll
    - 2003-03-31 12:00:00 2,086,400 -c----w c:\winnt\$NtServicePackUninstall$\msi.dll
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\winnt\$NtServicePackUninstall$\msi.dll
    - 2003-03-03 23:57:20 44,032 -c----w c:\winnt\$NtServicePackUninstall$\msident.dll
    + 2004-08-04 07:56:43 51,712 -c----w c:\winnt\$NtServicePackUninstall$\msident.dll
    - 2003-03-31 12:00:00 5,120 -c----w c:\winnt\$NtServicePackUninstall$\msidle.dll
    + 2004-08-04 07:56:43 6,656 -c----w c:\winnt\$NtServicePackUninstall$\msidle.dll
    - 2003-03-31 12:00:00 229,888 -c----w c:\winnt\$NtServicePackUninstall$\msieftp.dll
    + 2004-08-04 07:56:43 248,832 -c----w c:\winnt\$NtServicePackUninstall$\msieftp.dll
    - 2003-03-31 12:00:00 64,512 -c----w c:\winnt\$NtServicePackUninstall$\msiexec.exe
    + 2005-03-21 22:00:22 78,848 -c----w c:\winnt\$NtServicePackUninstall$\msiexec.exe
    - 2003-03-31 12:00:00 305,664 -c----w c:\winnt\$NtServicePackUninstall$\msihnd.dll
    + 2005-03-21 22:00:22 271,360 -c----w c:\winnt\$NtServicePackUninstall$\msihnd.dll
    - 2003-03-31 12:00:00 4,608 -c----w c:\winnt\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-04 07:56:43 4,608 -c----w c:\winnt\$NtServicePackUninstall$\msimg32.dll
    - 2003-03-03 23:57:18 56,832 -c----w c:\winnt\$NtServicePackUninstall$\msimn.exe
    + 2004-08-04 07:56:53 60,416 -c----w c:\winnt\$NtServicePackUninstall$\msimn.exe
    - 2003-03-31 12:00:00 847,872 -c----w c:\winnt\$NtServicePackUninstall$\msimsg.dll
    + 2005-03-21 22:00:22 884,736 -c----w c:\winnt\$NtServicePackUninstall$\msimsg.dll
    - 2003-03-31 12:00:00 143,872 -c----w c:\winnt\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-04 07:56:43 159,232 -c----w c:\winnt\$NtServicePackUninstall$\msimtf.dll
    - 2003-03-31 12:00:00 348,160 -c----w c:\winnt\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-04 07:56:43 376,320 -c----w c:\winnt\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-04 06:00:46 22,016 -c----w c:\winnt\$NtServicePackUninstall$\msircomm.sys
    - 2003-03-31 12:00:00 34,816 -c----w c:\winnt\$NtServicePackUninstall$\msiregmv.exe
    + 2004-08-04 07:56:53 40,960 -c----w c:\winnt\$NtServicePackUninstall$\msiregmv.exe
    - 2003-03-31 12:00:00 39,936 -c----w c:\winnt\$NtServicePackUninstall$\msisip.dll
    + 2005-03-21 22:00:22 15,360 -c----w c:\winnt\$NtServicePackUninstall$\msisip.dll
    - 2004-03-16 18:44:10 1,507,356 -c----w c:\winnt\$NtServicePackUninstall$\msjet40.dll
    + 2004-08-04 07:56:43 1,507,356 -c----w c:\winnt\$NtServicePackUninstall$\msjet40.dll
    + 2004-03-01 18:52:15 358,976 -c----w c:\winnt\$NtServicePackUninstall$\msjetol1.dll
    - 2003-05-12 02:35:20 151,583 -c----w c:\winnt\$NtServicePackUninstall$\msjint40.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\winnt\$NtServicePackUninstall$\msjint40.dll
    - 2003-03-31 12:00:00 90,112 -c----w c:\winnt\$NtServicePackUninstall$\msjro.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\winnt\$NtServicePackUninstall$\msjro.dll
    - 2003-05-12 02:35:20 53,279 -c----w c:\winnt\$NtServicePackUninstall$\msjter40.dll
    + 2004-08-04 07:56:43 53,279 -c----w c:\winnt\$NtServicePackUninstall$\msjter40.dll
    - 2004-03-01 18:55:29 241,693 -c----w c:\winnt\$NtServicePackUninstall$\msjtes40.dll
    + 2004-08-04 07:56:43 241,693 -c----w c:\winnt\$NtServicePackUninstall$\msjtes40.dll
    - 2002-12-12 06:14:32 7,424 -c----w c:\winnt\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-04 05:58:41 7,552 -c----w c:\winnt\$NtServicePackUninstall$\mskssrv.sys
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-04 07:56:43 25,088 -c----w c:\winnt\$NtServicePackUninstall$\mslbui.dll
    - 2003-05-12 02:35:22 213,023 -c----w c:\winnt\$NtServicePackUninstall$\msltus40.dll
    + 2004-08-04 07:56:43 213,023 -c----w c:\winnt\$NtServicePackUninstall$\msltus40.dll
    - 2003-03-31 12:00:00 36,352 -c----w c:\winnt\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-04 07:56:43 39,936 -c----w c:\winnt\$NtServicePackUninstall$\mslwvtts.dll
    - 2003-04-15 03:30:14 1,491,216 -c----w c:\winnt\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-04 07:56:53 1,667,584 -c----w c:\winnt\$NtServicePackUninstall$\msmsgs.exe
    - 2003-03-31 12:00:00 319,760 -c----w c:\winnt\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-04 07:56:43 290,816 -c----w c:\winnt\$NtServicePackUninstall$\msnsspc.dll
    - 2003-03-31 12:00:00 112,128 -c----w c:\winnt\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-04 07:56:43 122,368 -c----w c:\winnt\$NtServicePackUninstall$\msobcomm.dll
    - 2003-03-31 12:00:00 14,336 -c----w c:\winnt\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-04 07:56:43 16,384 -c----w c:\winnt\$NtServicePackUninstall$\msobdl.dll
    - 2003-03-31 12:00:00 536,576 -c----w c:\winnt\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-04 07:56:43 561,664 -c----w c:\winnt\$NtServicePackUninstall$\msobmain.dll
    - 2003-03-31 12:00:00 28,160 -c----w c:\winnt\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-04 07:56:43 30,720 -c----w c:\winnt\$NtServicePackUninstall$\msobshel.dll
    - 2003-03-31 12:00:00 16,896 -c----w c:\winnt\$NtServicePackUninstall$\msobweb.dll
    + 2004-08-04 07:56:43 18,944 -c----w c:\winnt\$NtServicePackUninstall$\msobweb.dll
    - 2004-05-26 21:26:42 1,175,040 -c----w c:\winnt\$NtServicePackUninstall$\msoe.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\winnt\$NtServicePackUninstall$\msoe.dll
    - 2003-03-03 23:57:20 228,864 -c----w c:\winnt\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-04 07:56:43 252,928 -c----w c:\winnt\$NtServicePackUninstall$\msoeacct.dll
    - 2002-10-11 22:09:02 2,479,616 -c----w c:\winnt\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-04 07:56:18 2,479,616 -c----w c:\winnt\$NtServicePackUninstall$\msoeres.dll
    - 2003-03-03 23:57:18 91,136 -c----w c:\winnt\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-04 07:56:43 105,984 -c----w c:\winnt\$NtServicePackUninstall$\msoert2.dll
    + 2003-03-31 12:00:00 28,160 -c----w c:\winnt\$NtServicePackUninstall$\msoobe.exe
    - 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-04 07:56:18 20,480 -c----w c:\winnt\$NtServicePackUninstall$\msorc32r.dll
    - 2003-03-31 12:00:00 131,072 -c----w c:\winnt\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-04 07:56:43 143,360 -c----w c:\winnt\$NtServicePackUninstall$\msorcl32.dll
    - 2003-03-31 12:00:00 339,968 -c----w c:\winnt\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-04 07:56:53 343,040 -c----w c:\winnt\$NtServicePackUninstall$\mspaint.exe
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 07:56:43 30,208 -c----w c:\winnt\$NtServicePackUninstall$\mspatcha.dll
    - 2004-03-01 18:55:31 348,189 -c----w c:\winnt\$NtServicePackUninstall$\mspbde40.dll
    + 2004-08-04 07:56:43 348,189 -c----w c:\winnt\$NtServicePackUninstall$\mspbde40.dll
    - 2002-12-12 06:14:32 5,248 -c----w c:\winnt\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 05:58:38 5,376 -c----w c:\winnt\$NtServicePackUninstall$\mspclock.sys
    - 2001-08-23 11:00:00 4,608 -c----w c:\winnt\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-04 05:58:40 4,992 -c----w c:\winnt\$NtServicePackUninstall$\mspqm.sys
    - 2003-03-31 12:00:00 45,056 -c----w c:\winnt\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-04 07:56:18 48,128 -c----w c:\winnt\$NtServicePackUninstall$\msprivs.dll
    - 2003-03-31 12:00:00 132,096 -c----w c:\winnt\$NtServicePackUninstall$\msrating.dll
    + 2004-08-04 07:56:43 146,432 -c----w c:\winnt\$NtServicePackUninstall$\msrating.dll
    - 2003-05-12 02:35:24 421,919 -c----w c:\winnt\$NtServicePackUninstall$\msrd2x40.dll
    + 2004-08-04 07:56:43 421,919 -c----w c:\winnt\$NtServicePackUninstall$\msrd2x40.dll
    - 2003-05-12 02:35:26 315,423 -c----w c:\winnt\$NtServicePackUninstall$\msrd3x40.dll
    + 2004-08-04 07:56:43 315,423 -c----w c:\winnt\$NtServicePackUninstall$\msrd3x40.dll
    - 2004-03-01 18:55:35 552,989 -c----w c:\winnt\$NtServicePackUninstall$\msrepl40.dll
    + 2004-08-04 07:56:43 552,989 -c----w c:\winnt\$NtServicePackUninstall$\msrepl40.dll
    - 2003-03-31 12:00:00 10,240 -c----w c:\winnt\$NtServicePackUninstall$\msrle32.dll
    + 2004-08-04 07:56:43 11,264 -c----w c:\winnt\$NtServicePackUninstall$\msrle32.dll
    - 2003-03-31 12:00:00 172,032 -c----w c:\winnt\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 07:56:43 134,656 -c----w c:\winnt\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 06:07:47 15,488 -c----w c:\winnt\$NtServicePackUninstall$\mssmbios.sys
    - 2004-03-30 01:48:36 253,952 -c----w c:\winnt\$NtServicePackUninstall$\mst120.dll
    + 2004-08-04 07:56:43 274,432 -c----w c:\winnt\$NtServicePackUninstall$\mst120.dll
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\mst123.dll
    + 2004-08-04 07:56:43 57,344 -c----w c:\winnt\$NtServicePackUninstall$\mst123.dll
    + 2004-08-04 06:09:58 49,024 -c----w c:\winnt\$NtServicePackUninstall$\mstape.sys
    - 2004-06-08 22:02:21 260,096 -c----w c:\winnt\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 07:56:43 274,944 -c----w c:\winnt\$NtServicePackUninstall$\mstask.dll
    - 2002-12-12 06:14:32 5,504 -c----w c:\winnt\$NtServicePackUninstall$\mstee.sys
    + 2004-08-04 05:58:38 5,504 -c----w c:\winnt\$NtServicePackUninstall$\mstee.sys
    - 2004-03-01 18:55:35 258,077 -c----w c:\winnt\$NtServicePackUninstall$\mstext40.dll
    + 2004-08-04 07:56:43 258,077 -c----w c:\winnt\$NtServicePackUninstall$\mstext40.dll
    - 2003-03-31 12:00:00 496,128 -c----w c:\winnt\$NtServicePackUninstall$\mstime.dll
    + 2004-08-04 07:56:43 530,432 -c----w c:\winnt\$NtServicePackUninstall$\mstime.dll
    - 2004-06-08 19:59:23 10,752 -c----w c:\winnt\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-04 07:56:53 12,288 -c----w c:\winnt\$NtServicePackUninstall$\mstinit.exe
    - 2003-03-31 12:00:00 103,936 -c----w c:\winnt\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-04 07:56:43 115,712 -c----w c:\winnt\$NtServicePackUninstall$\mstlsapi.dll
    - 2003-03-31 12:00:00 388,608 -c----w c:\winnt\$NtServicePackUninstall$\mstsc.exe
    + 2006-11-07 08:06:47 600,576 -c----w c:\winnt\$NtServicePackUninstall$\mstsc.exe
    - 2003-03-31 12:00:00 598,016 -c----w c:\winnt\$NtServicePackUninstall$\mstscax.dll
    + 2006-11-13 06:02:58 1,866,240 -c----w c:\winnt\$NtServicePackUninstall$\mstscax.dll
    - 2003-03-31 12:00:00 182,784 -c----w c:\winnt\$NtServicePackUninstall$\msutb.dll
    + 2004-08-04 07:56:43 195,072 -c----w c:\winnt\$NtServicePackUninstall$\msutb.dll
    - 2003-03-31 12:00:00 108,544 -c----w c:\winnt\$NtServicePackUninstall$\msv1_0.dll
    + 2004-08-04 07:56:43 129,536 -c----w c:\winnt\$NtServicePackUninstall$\msv1_0.dll
    - 2003-03-31 12:00:00 1,388,544 -c----w c:\winnt\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-04 07:56:43 1,392,671 -c----w c:\winnt\$NtServicePackUninstall$\msvbvm60.dll
    - 2003-03-31 12:00:00 50,688 -c----w c:\winnt\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-04 07:56:43 54,784 -c----w c:\winnt\$NtServicePackUninstall$\msvcirt.dll
    - 2003-03-31 12:00:00 401,462 -c----w c:\winnt\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-04 07:56:43 413,696 -c----w c:\winnt\$NtServicePackUninstall$\msvcp60.dll
    - 2003-03-31 12:00:00 323,072 -c----w c:\winnt\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-04 07:56:43 343,040 -c----w c:\winnt\$NtServicePackUninstall$\msvcrt.dll
    - 2003-03-31 12:00:00 65,024 -c----w c:\winnt\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-04 05:58:25 61,440 -c----w c:\winnt\$NtServicePackUninstall$\msvcrt40.dll
    - 2003-03-31 12:00:00 113,664 -c----w c:\winnt\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-04 07:56:43 120,832 -c----w c:\winnt\$NtServicePackUninstall$\msvfw32.dll
    - 2003-02-17 16:16:28 1,230,336 -c----w c:\winnt\$NtServicePackUninstall$\msvidctl.dll
    + 2004-08-04 07:56:43 1,428,480 -c----w c:\winnt\$NtServicePackUninstall$\msvidctl.dll
    - 2003-03-31 12:00:00 66,048 -c----w c:\winnt\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-04 07:56:43 72,704 -c----w c:\winnt\$NtServicePackUninstall$\msw3prt.dll
    - 2003-05-12 02:35:28 831,519 -c----w c:\winnt\$NtServicePackUninstall$\mswdat10.dll
    + 2004-08-04 07:56:44 831,519 -c----w c:\winnt\$NtServicePackUninstall$\mswdat10.dll
    - 2002-12-12 06:14:32 324,096 -c----w c:\winnt\$NtServicePackUninstall$\mswebdvd.dll
    + 2004-08-04 07:56:44 204,288 -c----w c:\winnt\$NtServicePackUninstall$\mswebdvd.dll
    - 2003-03-31 12:00:00 228,352 -c----w c:\winnt\$NtServicePackUninstall$\mswsock.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\winnt\$NtServicePackUninstall$\mswsock.dll
    - 2003-05-12 02:35:28 614,431 -c----w c:\winnt\$NtServicePackUninstall$\mswstr10.dll
    + 2004-08-04 07:56:44 614,429 -c----w c:\winnt\$NtServicePackUninstall$\mswstr10.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-04 07:56:44 24,576 -c----w c:\winnt\$NtServicePackUninstall$\msxactps.dll
    - 2004-03-01 18:55:39 348,189 -c----w c:\winnt\$NtServicePackUninstall$\msxbde40.dll
    + 2004-08-04 07:56:44 348,189 -c----w c:\winnt\$NtServicePackUninstall$\msxbde40.dll
    - 2003-03-31 12:00:00 495,376 -c----w c:\winnt\$NtServicePackUninstall$\msxml.dll
    + 2004-08-04 07:56:44 506,368 -c----w c:\winnt\$NtServicePackUninstall$\msxml.dll
    - 2003-03-31 12:00:00 699,392 -c----w c:\winnt\$NtServicePackUninstall$\msxml2.dll
    + 2004-08-04 07:56:44 701,440 -c----w c:\winnt\$NtServicePackUninstall$\msxml2.dll
    - 2003-03-31 12:00:00 1,122,304 -c----w c:\winnt\$NtServicePackUninstall$\msxml3.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\winnt\$NtServicePackUninstall$\msxml3.dll
    + 2007-05-15 23:43:10 1,320,800 -c----w c:\winnt\$NtServicePackUninstall$\msxml6.dll
    + 2006-10-19 21:33:20 86,728 -c----w c:\winnt\$NtServicePackUninstall$\msxml6r.dll
    - 2003-02-17 16:16:28 16,896 -c----w c:\winnt\$NtServicePackUninstall$\msyuv.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\winnt\$NtServicePackUninstall$\msyuv.dll
    - 2004-03-06 02:16:10 64,512 -c----w c:\winnt\$NtServicePackUninstall$\mtxclu.dll
    + 2006-03-01 19:42:42 66,560 -c----w c:\winnt\$NtServicePackUninstall$\mtxclu.dll
    + 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\mtxdm.dll
    + 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\mtxex.dll
    + 2003-03-31 12:00:00 25,088 -c----w c:\winnt\$NtServicePackUninstall$\mtxlegih.dll
    - 2004-03-06 02:16:10 82,432 -c----w c:\winnt\$NtServicePackUninstall$\mtxoci.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\winnt\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-04 07:56:44 1,737,856 -c----w c:\winnt\$NtServicePackUninstall$\mtxparhd.dll
    + 2004-08-04 07:56:53 90,624 -c----w c:\winnt\$NtServicePackUninstall$\muisetup.exe
    - 2003-03-31 12:00:00 104,064 -c----w c:\winnt\$NtServicePackUninstall$\mup.sys
    + 2004-08-04 06:15:20 107,904 -c----w c:\winnt\$NtServicePackUninstall$\mup.sys
    + 2004-08-04 06:04:51 12,672 -c----w c:\winnt\$NtServicePackUninstall$\mutohpen.sys
    - 2003-03-31 12:00:00 88,064 -c----w c:\winnt\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 07:56:44 90,624 -c----w c:\winnt\$NtServicePackUninstall$\mydocs.dll
    - 2003-02-17 16:16:28 83,968 -c----w c:\winnt\$NtServicePackUninstall$\nabtsfec.sys
    + 2004-08-04 06:10:28 85,376 -c----w c:\winnt\$NtServicePackUninstall$\nabtsfec.sys
    - 2003-03-31 12:00:00 208,896 -c----w c:\winnt\$NtServicePackUninstall$\nac.dll
    + 2004-08-04 07:56:44 221,184 -c----w c:\winnt\$NtServicePackUninstall$\nac.dll
    - 2002-11-20 17:50:52 51,200 -c----w c:\winnt\$NtServicePackUninstall$\narrator.exe
    + 2006-10-04 08:48:36 53,760 -c----w c:\winnt\$NtServicePackUninstall$\narrator.exe
    - 2003-03-31 12:00:00 42,496 -c----w c:\winnt\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-04 07:56:44 36,352 -c----w c:\winnt\$NtServicePackUninstall$\ncobjapi.dll
    - 2003-03-31 12:00:00 60,416 -c----w c:\winnt\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-04 07:56:44 47,104 -c----w c:\winnt\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-04 07:56:44 9,728 -c----w c:\winnt\$NtServicePackUninstall$\ncpsres.dll
    - 2003-03-31 12:00:00 15,360 -c----w c:\winnt\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-04 07:56:44 17,920 -c----w c:\winnt\$NtServicePackUninstall$\nddeapi.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-04 07:56:54 4,096 -c----w c:\winnt\$NtServicePackUninstall$\nddeapir.exe
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\winnt\$NtServicePackUninstall$\nddenb32.dll
    - 2003-10-04 07:54:08 168,192 -c----w c:\winnt\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 06:14:28 182,912 -c----w c:\winnt\$NtServicePackUninstall$\ndis.sys
    - 2003-02-17 16:16:28 10,112 -c----w c:\winnt\$NtServicePackUninstall$\ndisip.sys
    + 2004-08-04 06:10:12 10,880 -c----w c:\winnt\$NtServicePackUninstall$\ndisip.sys
    - 2003-03-31 12:00:00 54,272 -c----w c:\winnt\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-04 07:56:44 57,344 -c----w c:\winnt\$NtServicePackUninstall$\ndisnpp.dll
    + 2003-03-31 12:00:00 9,600 -c----w c:\winnt\$NtServicePackUninstall$\ndistapi.sys
    - 2003-08-02 09:38:10 12,416 -c----w c:\winnt\$NtServicePackUninstall$\ndisuio.sys
    + 2004-08-04 06:03:12 12,928 -c----w c:\winnt\$NtServicePackUninstall$\ndisuio.sys
    - 2003-03-31 12:00:00 87,552 -c----w c:\winnt\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-04 06:14:31 91,776 -c----w c:\winnt\$NtServicePackUninstall$\ndiswan.sys
    + 2003-03-31 12:00:00 38,016 -c----w c:\winnt\$NtServicePackUninstall$\ndproxy.sys
    - 2003-03-31 12:00:00 39,424 -c----w c:\winnt\$NtServicePackUninstall$\net.exe
    + 2004-08-04 07:56:54 42,496 -c----w c:\winnt\$NtServicePackUninstall$\net.exe
    - 2003-03-31 12:00:00 115,200 -c----w c:\winnt\$NtServicePackUninstall$\net1.exe
    + 2004-08-04 07:56:54 124,928 -c----w c:\winnt\$NtServicePackUninstall$\net1.exe
    - 2004-06-08 22:02:21 306,688 -c----w c:\winnt\$NtServicePackUninstall$\netapi32.dll
    + 2006-08-17 12:28:27 332,288 -c----w c:\winnt\$NtServicePackUninstall$\netapi32.dll
    - 2003-03-31 12:00:00 33,152 -c----w c:\winnt\$NtServicePackUninstall$\netbios.sys
    + 2004-08-04 06:03:21 34,560 -c----w c:\winnt\$NtServicePackUninstall$\netbios.sys
    - 2003-07-09 00:48:54 149,248 -c----w c:\winnt\$NtServicePackUninstall$\netbt.sys
    + 2004-08-04 06:14:37 162,816 -c----w c:\winnt\$NtServicePackUninstall$\netbt.sys
    - 2003-03-31 12:00:00 584,192 -c----w c:\winnt\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-04 07:56:44 622,080 -c----w c:\winnt\$NtServicePackUninstall$\netcfgx.dll
    - 2003-03-31 12:00:00 105,984 -c----w c:\winnt\$NtServicePackUninstall$\netdde.exe
    + 2004-08-04 07:56:54 111,104 -c----w c:\winnt\$NtServicePackUninstall$\netdde.exe
    - 2003-03-31 12:00:00 134,656 -c----w c:\winnt\$NtServicePackUninstall$\netid.dll
    + 2004-08-04 07:56:44 139,264 -c----w c:\winnt\$NtServicePackUninstall$\netid.dll
    - 2003-03-31 12:00:00 399,360 -c----w c:\winnt\$NtServicePackUninstall$\netlogon.dll
    + 2004-08-04 07:56:44 407,040 -c----w c:\winnt\$NtServicePackUninstall$\netlogon.dll
    - 2003-03-31 12:00:00 154,112 -c----w c:\winnt\$NtServicePackUninstall$\netman.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\winnt\$NtServicePackUninstall$\netman.dll
    - 2003-03-31 12:00:00 71,168 -c----w c:\winnt\$NtServicePackUninstall$\netoc.dll
    + 2004-08-04 07:56:44 77,312 -c----w c:\winnt\$NtServicePackUninstall$\netoc.dll
    - 2003-03-31 12:00:00 857,600 -c----w c:\winnt\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-04 07:56:44 875,008 -c----w c:\winnt\$NtServicePackUninstall$\netplwiz.dll
    - 2003-03-31 12:00:00 10,752 -c----w c:\winnt\$NtServicePackUninstall$\netrap.dll
    + 2004-08-04 07:56:44 12,288 -c----w c:\winnt\$NtServicePackUninstall$\netrap.dll
    - 2003-03-31 12:00:00 326,656 -c----w c:\winnt\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-04 08:02:44 329,728 -c----w c:\winnt\$NtServicePackUninstall$\netsetup.exe
    - 2003-03-31 12:00:00 82,944 -c----w c:\winnt\$NtServicePackUninstall$\netsh.exe
    + 2004-08-04 07:56:54 86,016 -c----w c:\winnt\$NtServicePackUninstall$\netsh.exe
    - 2003-10-07 01:30:24 1,630,208 -c----w c:\winnt\$NtServicePackUninstall$\netshell.dll
    + 2004-08-04 07:56:44 1,708,032 -c----w c:\winnt\$NtServicePackUninstall$\netshell.dll
    - 2003-03-31 12:00:00 30,720 -c----w c:\winnt\$NtServicePackUninstall$\netstat.exe
    + 2004-08-04 07:56:54 36,864 -c----w c:\winnt\$NtServicePackUninstall$\netstat.exe
    - 2003-03-31 12:00:00 74,752 -c----w c:\winnt\$NtServicePackUninstall$\netui0.dll
    + 2004-08-04 07:56:44 80,896 -c----w c:\winnt\$NtServicePackUninstall$\netui0.dll
    - 2003-03-31 12:00:00 230,400 -c----w c:\winnt\$NtServicePackUninstall$\netui1.dll
    + 2004-08-04 07:56:44 245,760 -c----w c:\winnt\$NtServicePackUninstall$\netui1.dll
    - 2003-01-31 22:46:24 238,080 -c----w c:\winnt\$NtServicePackUninstall$\newdev.dll
    + 2004-08-04 07:56:44 248,832 -c----w c:\winnt\$NtServicePackUninstall$\newdev.dll
    - 2003-03-31 12:00:00 57,984 -c----w c:\winnt\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-04 05:58:29 61,824 -c----w c:\winnt\$NtServicePackUninstall$\nic1394.sys
    - 2003-03-31 12:00:00 95,744 -c----w c:\winnt\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-04 07:56:44 103,936 -c----w c:\winnt\$NtServicePackUninstall$\nlhtml.dll
    - 2003-03-31 12:00:00 217,088 -c----w c:\winnt\$NtServicePackUninstall$\nmas.dll
    + 2004-08-04 07:56:44 229,376 -c----w c:\winnt\$NtServicePackUninstall$\nmas.dll
    - 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-04 07:56:44 28,672 -c----w c:\winnt\$NtServicePackUninstall$\nmasnt.dll
    - 2003-03-31 12:00:00 77,824 -c----w c:\winnt\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-04 07:56:44 81,920 -c----w c:\winnt\$NtServicePackUninstall$\nmchat.dll
    - 2004-03-30 01:48:36 73,728 -c----w c:\winnt\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-04 07:56:44 77,824 -c----w c:\winnt\$NtServicePackUninstall$\nmcom.dll
    - 2003-03-31 12:00:00 143,360 -c----w c:\winnt\$NtServicePackUninstall$\nmft.dll
    + 2004-08-04 07:56:44 151,552 -c----w c:\winnt\$NtServicePackUninstall$\nmft.dll
    - 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-04 07:56:44 28,672 -c----w c:\winnt\$NtServicePackUninstall$\nmmkcert.dll
    - 2003-03-31 12:00:00 38,272 -c----w c:\winnt\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-04 05:59:50 40,320 -c----w c:\winnt\$NtServicePackUninstall$\nmnt.sys
    - 2003-03-31 12:00:00 163,840 -c----w c:\winnt\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-04 07:56:44 172,032 -c----w c:\winnt\$NtServicePackUninstall$\nmoldwb.dll
    - 2003-03-31 12:00:00 180,224 -c----w c:\winnt\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-04 07:56:44 188,416 -c----w c:\winnt\$NtServicePackUninstall$\nmwb.dll
    - 2003-03-31 12:00:00 66,048 -c----w c:\winnt\$NtServicePackUninstall$\notepad.exe
    + 2004-08-04 07:56:54 69,120 -c----w c:\winnt\$NtServicePackUninstall$\notepad.exe
    - 2002-12-12 02:09:24 217,600 -c----w c:\winnt\$NtServicePackUninstall$\npdrmv2.dll
    + 2004-08-04 07:57:01 226,816 -c----w c:\winnt\$NtServicePackUninstall$\npdrmv2.dll
    - 2003-03-31 12:00:00 364,544 -c----w c:\winnt\$NtServicePackUninstall$\npdsplay.dll
    + 2005-11-30 00:27:06 364,544 -c----w c:\winnt\$NtServicePackUninstall$\npdsplay.dll
    - 2003-03-31 12:00:00 29,568 -c----w c:\winnt\$NtServicePackUninstall$\npfs.sys
    + 2004-08-04 06:00:43 30,848 -c----w c:\winnt\$NtServicePackUninstall$\npfs.sys
    - 2003-03-31 12:00:00 13,824 -c----w c:\winnt\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-04 07:56:54 15,360 -c----w c:\winnt\$NtServicePackUninstall$\nppagent.exe
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\npptools.dll
    + 2004-08-04 07:56:44 54,784 -c----w c:\winnt\$NtServicePackUninstall$\npptools.dll
    - 2002-12-12 01:34:42 9,728 -c----w c:\winnt\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-04 07:56:44 10,240 -c----w c:\winnt\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-04 06:00:50 28,672 -c----w c:\winnt\$NtServicePackUninstall$\nscirda.sys
    - 2003-03-31 12:00:00 71,680 -c----w c:\winnt\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-04 07:56:54 76,800 -c----w c:\winnt\$NtServicePackUninstall$\nslookup.exe
    - 2003-05-01 22:56:12 654,336 -c----w c:\winnt\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-04 07:56:36 708,096 -c----w c:\winnt\$NtServicePackUninstall$\ntdll.dll
    - 2003-03-31 12:00:00 64,512 -c----w c:\winnt\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-04 07:56:44 67,072 -c----w c:\winnt\$NtServicePackUninstall$\ntdsapi.dll
    - 2003-03-31 12:00:00 203,264 -c----w c:\winnt\$NtServicePackUninstall$\ntevt.dll
    + 2004-08-04 07:56:44 212,992 -c----w c:\winnt\$NtServicePackUninstall$\ntevt.dll
    - 2003-03-31 12:00:00 561,920 -c----w c:\winnt\$NtServicePackUninstall$\ntfs.sys
    + 2007-02-09 11:10:35 574,464 -c----w c:\winnt\$NtServicePackUninstall$\ntfs.sys
    - 2003-04-24 14:57:52 1,892,864 -c----w c:\winnt\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\winnt\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\winnt\$NtServicePackUninstall$\ntkrnlmp.exe.001
    - 2003-04-24 14:57:58 1,921,536 -c----w c:\winnt\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\winnt\$NtServicePackUninstall$\ntkrnlpa.exe
    - 2003-04-24 14:57:58 1,921,536 -c----w c:\winnt\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\winnt\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\winnt\$NtServicePackUninstall$\ntkrpamp.exe.001
    - 2003-03-31 12:00:00 38,400 -c----w c:\winnt\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\winnt\$NtServicePackUninstall$\ntlanman.dll
    - 2003-03-31 12:00:00 6,656 -c----w c:\winnt\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-04 07:56:44 8,192 -c----w c:\winnt\$NtServicePackUninstall$\ntlsapi.dll
    - 2003-03-31 12:00:00 112,128 -c----w c:\winnt\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-04 07:56:44 118,784 -c----w c:\winnt\$NtServicePackUninstall$\ntmarta.dll
    - 2003-03-31 12:00:00 38,400 -c----w c:\winnt\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-04 07:56:44 40,960 -c----w c:\winnt\$NtServicePackUninstall$\ntmsapi.dll
    - 2003-03-31 12:00:00 165,888 -c----w c:\winnt\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-04 07:56:44 179,712 -c----w c:\winnt\$NtServicePackUninstall$\ntmsdba.dll
    - 2003-03-31 12:00:00 460,288 -c----w c:\winnt\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-04 07:56:44 488,448 -c----w c:\winnt\$NtServicePackUninstall$\ntmsmgr.dll
    - 2003-03-31 12:00:00 392,704 -c----w c:\winnt\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-04 07:56:44 435,200 -c----w c:\winnt\$NtServicePackUninstall$\ntmssvc.dll
    - 2003-03-31 12:00:00 61,440 -c----w c:\winnt\$NtServicePackUninstall$\ntoc.dll
    + 2004-08-04 07:56:44 62,976 -c----w c:\winnt\$NtServicePackUninstall$\ntoc.dll
    - 2003-04-24 14:57:52 1,892,864 -c----w c:\winnt\$NtServicePackUninstall$\ntoskrnl.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\winnt\$NtServicePackUninstall$\ntoskrnl.exe
    - 2003-03-31 12:00:00 80,896 -c----w c:\winnt\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-04 07:56:44 91,136 -c----w c:\winnt\$NtServicePackUninstall$\ntprint.dll
    - 2003-03-31 12:00:00 137,216 -c----w c:\winnt\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-04 07:56:44 143,872 -c----w c:\winnt\$NtServicePackUninstall$\ntshrui.dll
    - 2003-03-31 12:00:00 395,776 -c----w c:\winnt\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-04 07:56:54 419,840 -c----w c:\winnt\$NtServicePackUninstall$\ntvdm.exe
    + 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\ntvdmd.dll
    - 2002-08-29 09:41:10 3,494,303 -c----w c:\winnt\$NtServicePackUninstall$\nv4_disp.dll
    + 2004-08-04 07:56:44 4,274,816 -c----w c:\winnt\$NtServicePackUninstall$\nv4_disp.dll
    - 2003-03-31 12:00:00 84,864 -c----w c:\winnt\$NtServicePackUninstall$\nwlnkipx.sys
    + 2004-08-04 06:03:35 88,448 -c----w c:\winnt\$NtServicePackUninstall$\nwlnkipx.sys
    - 2003-03-31 12:00:00 133,632 -c----w c:\winnt\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 12:35:12 142,336 -c----w c:\winnt\$NtServicePackUninstall$\nwprovau.dll
    - 2003-03-31 12:00:00 328,704 -c----w c:\winnt\$NtServicePackUninstall$\oakley.dll
    + 2004-08-04 07:56:44 266,752 -c----w c:\winnt\$NtServicePackUninstall$\oakley.dll
    - 2003-03-31 12:00:00 271,360 -c----w c:\winnt\$NtServicePackUninstall$\objsel.dll
    + 2004-08-04 07:56:44 285,696 -c----w c:\winnt\$NtServicePackUninstall$\objsel.dll
    + 2004-08-04 07:56:22 405,504 -c----w c:\winnt\$NtServicePackUninstall$\obrb041b.dll
    + 2004-08-04 07:56:22 408,576 -c----w c:\winnt\$NtServicePackUninstall$\obrb0424.dll
    - 2003-03-31 12:00:00 87,552 -c----w c:\winnt\$NtServicePackUninstall$\occache.dll
    + 2004-08-04 07:56:44 96,256 -c----w c:\winnt\$NtServicePackUninstall$\occache.dll
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-04 07:56:44 15,872 -c----w c:\winnt\$NtServicePackUninstall$\ocgen.dll
    + 2003-03-31 12:00:00 60,928 -c----w c:\winnt\$NtServicePackUninstall$\ocmanage.dll
    - 2003-03-31 12:00:00 40,960 -c----w c:\winnt\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\winnt\$NtServicePackUninstall$\ocmsn.dll
    - 2003-10-28 04:09:44 204,800 -c----w c:\winnt\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-04 07:56:44 249,856 -c----w c:\winnt\$NtServicePackUninstall$\odbc32.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-04 07:56:44 16,384 -c----w c:\winnt\$NtServicePackUninstall$\odbc32gt.dll
    - 2003-03-31 12:00:00 32,768 -c----w c:\winnt\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-04 07:56:54 32,768 -c----w c:\winnt\$NtServicePackUninstall$\odbcad32.exe
    - 2003-10-28 04:13:16 24,576 -c----w c:\winnt\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-04 07:56:44 24,576 -c----w c:\winnt\$NtServicePackUninstall$\odbcbcp.dll
    - 2003-03-31 12:00:00 122,880 -c----w c:\winnt\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-04 07:56:44 135,168 -c----w c:\winnt\$NtServicePackUninstall$\odbcconf.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-04 07:56:54 69,632 -c----w c:\winnt\$NtServicePackUninstall$\odbcconf.exe
    - 2003-10-28 04:13:06 98,304 -c----w c:\winnt\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-04 07:56:44 106,496 -c----w c:\winnt\$NtServicePackUninstall$\odbccp32.dll
    - 2003-03-31 12:00:00 61,440 -c----w c:\winnt\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\winnt\$NtServicePackUninstall$\odbccr32.dll
    - 2003-03-31 12:00:00 61,440 -c----w c:\winnt\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\winnt\$NtServicePackUninstall$\odbccu32.dll
    - 2003-03-31 12:00:00 90,112 -c----w c:\winnt\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-04 07:56:22 94,208 -c----w c:\winnt\$NtServicePackUninstall$\odbcint.dll
    - 2003-03-31 12:00:00 53,279 -c----w c:\winnt\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-04 07:56:22 53,279 -c----w c:\winnt\$NtServicePackUninstall$\odbcji32.dll
    - 2003-03-31 12:00:00 270,365 -c----w c:\winnt\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-04 07:56:44 278,559 -c----w c:\winnt\$NtServicePackUninstall$\odbcjt32.dll
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-04 07:56:22 12,288 -c----w c:\winnt\$NtServicePackUninstall$\odbcp32r.dll
    - 2003-03-31 12:00:00 147,456 -c----w c:\winnt\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-04 07:56:44 147,456 -c----w c:\winnt\$NtServicePackUninstall$\odbctrac.dll
    - 2003-03-31 12:00:00 20,554 -c----w c:\winnt\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-04 07:56:44 20,511 -c----w c:\winnt\$NtServicePackUninstall$\oddbse32.dll
    - 2003-03-31 12:00:00 20,553 -c----w c:\winnt\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\winnt\$NtServicePackUninstall$\odexl32.dll
    - 2003-03-31 12:00:00 20,553 -c----w c:\winnt\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\winnt\$NtServicePackUninstall$\odfox32.dll
    - 2003-03-31 12:00:00 20,553 -c----w c:\winnt\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\winnt\$NtServicePackUninstall$\odpdx32.dll
    - 2003-03-31 12:00:00 20,554 -c----w c:\winnt\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-04 07:56:44 20,511 -c----w c:\winnt\$NtServicePackUninstall$\odtext32.dll
    - 2003-03-03 23:57:20 93,184 -c----w c:\winnt\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-04 07:56:44 104,448 -c----w c:\winnt\$NtServicePackUninstall$\oeimport.dll
    - 2003-03-03 23:57:18 55,808 -c----w c:\winnt\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-04 07:56:54 60,416 -c----w c:\winnt\$NtServicePackUninstall$\oemig50.exe
    - 2003-03-03 23:57:16 31,744 -c----w c:\winnt\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-04 07:56:44 35,328 -c----w c:\winnt\$NtServicePackUninstall$\oemiglib.dll
    - 2003-03-31 12:00:00 109,568 -c----w c:\winnt\$NtServicePackUninstall$\offfilt.dll
    + 2004-08-04 07:56:44 120,832 -c----w c:\winnt\$NtServicePackUninstall$\offfilt.dll
    - 2002-08-29 07:33:20 55,680 -c----w c:\winnt\$NtServicePackUninstall$\ohci1394.sys
    + 2004-08-04 06:10:08 61,056 -c----w c:\winnt\$NtServicePackUninstall$\ohci1394.sys
    - 2004-03-06 02:16:11 1,183,744 -c----w c:\winnt\$NtServicePackUninstall$\ole32.dll
    + 2005-07-26 04:39:48 1,285,120 -c----w c:\winnt\$NtServicePackUninstall$\ole32.dll
  5. 2009-03-24, 00:19 #15
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2003-03-31 12:00:00 569,344 -c----w c:\winnt\$NtServicePackUninstall$\oleaut32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\winnt\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 04:39:48 74,752 -c----w c:\winnt\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 04:39:49 37,888 -c----w c:\winnt\$NtServicePackUninstall$\olecnv32.dll
    - 2003-10-28 04:10:24 417,792 -c----w c:\winnt\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-04 07:56:44 487,424 -c----w c:\winnt\$NtServicePackUninstall$\oledb32.dll
    - 2003-03-31 12:00:00 65,536 -c----w c:\winnt\$NtServicePackUninstall$\oledb32r.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\winnt\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\winnt\$NtServicePackUninstall$\oledlg.dll
    - 2003-03-31 12:00:00 98,304 -c----w c:\winnt\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-04 07:56:44 107,008 -c----w c:\winnt\$NtServicePackUninstall$\oleprn.dll
    - 2003-03-31 12:00:00 106,496 -c----w c:\winnt\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-04 07:56:44 83,456 -c----w c:\winnt\$NtServicePackUninstall$\olepro32.dll
    - 2003-03-31 12:00:00 49,664 -c----w c:\winnt\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-04 07:56:54 51,200 -c----w c:\winnt\$NtServicePackUninstall$\oobebaln.exe
    - 2003-03-31 12:00:00 686,080 -c----w c:\winnt\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-04 07:56:44 713,728 -c----w c:\winnt\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-04 06:00:21 166,400 -c----w c:\winnt\$NtServicePackUninstall$\oschoice.exe
    - 2002-11-20 17:50:52 212,480 -c----w c:\winnt\$NtServicePackUninstall$\osk.exe
    + 2006-10-04 08:48:37 215,552 -c----w c:\winnt\$NtServicePackUninstall$\osk.exe
    + 2004-08-04 05:59:33 230,400 -c----w c:\winnt\$NtServicePackUninstall$\osloader.exe
    - 2003-03-31 12:00:00 61,952 -c----w c:\winnt\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-04 07:56:44 67,584 -c----w c:\winnt\$NtServicePackUninstall$\osuninst.dll
    + 2006-10-11 16:24:45 153,088 -c----w c:\winnt\$NtServicePackUninstall$\p2p.dll
    + 2006-10-11 16:24:45 104,960 -c----w c:\winnt\$NtServicePackUninstall$\p2pgasvc.dll
    + 2006-10-11 16:24:45 313,344 -c----w c:\winnt\$NtServicePackUninstall$\p2pgraph.dll
    + 2006-10-11 16:24:45 116,224 -c----w c:\winnt\$NtServicePackUninstall$\p2pnetsh.dll
    + 2006-10-11 16:24:45 553,984 -c----w c:\winnt\$NtServicePackUninstall$\p2psvc.dll
    - 2003-03-31 12:00:00 37,504 -c----w c:\winnt\$NtServicePackUninstall$\p3.sys
    + 2004-08-04 05:59:19 42,496 -c----w c:\winnt\$NtServicePackUninstall$\p3.sys
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\packager.exe
    + 2004-08-04 07:56:55 58,368 -c----w c:\winnt\$NtServicePackUninstall$\packager.exe
    + 2004-08-04 05:32:10 15,872 -c----w c:\winnt\$NtServicePackUninstall$\padrs404.dll
    + 2004-08-04 05:31:49 15,360 -c----w c:\winnt\$NtServicePackUninstall$\padrs804.dll
    - 2003-03-31 12:00:00 76,032 -c----w c:\winnt\$NtServicePackUninstall$\parport.sys
    + 2004-08-04 05:59:06 80,128 -c----w c:\winnt\$NtServicePackUninstall$\parport.sys
    + 2003-03-31 12:00:00 18,688 -c----w c:\winnt\$NtServicePackUninstall$\partmgr.sys
    - 2003-03-31 12:00:00 58,880 -c----w c:\winnt\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-04 07:56:44 62,976 -c----w c:\winnt\$NtServicePackUninstall$\pautoenr.dll
    - 2002-11-27 17:50:20 94,208 -c----w c:\winnt\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-04 07:56:44 102,400 -c----w c:\winnt\$NtServicePackUninstall$\pchshell.dll
    - 2003-03-31 12:00:00 29,696 -c----w c:\winnt\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-04 07:56:44 38,912 -c----w c:\winnt\$NtServicePackUninstall$\pchsvc.dll
    - 2002-08-29 07:09:12 62,976 -c----w c:\winnt\$NtServicePackUninstall$\pci.sys
    + 2004-08-04 06:07:46 68,224 -c----w c:\winnt\$NtServicePackUninstall$\pci.sys
    - 2003-01-31 21:43:30 23,680 -c----w c:\winnt\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-04 05:59:41 25,088 -c----w c:\winnt\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-04 07:56:23 676,864 -c----w c:\winnt\$NtServicePackUninstall$\pcl5eres.dll
    + 2004-08-04 07:56:23 169,472 -c----w c:\winnt\$NtServicePackUninstall$\pclxl.dll
    - 2003-03-31 12:00:00 115,712 -c----w c:\winnt\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-04 06:07:46 119,936 -c----w c:\winnt\$NtServicePackUninstall$\pcmcia.sys
    - 2003-03-31 12:00:00 254,976 -c----w c:\winnt\$NtServicePackUninstall$\pdh.dll
    + 2004-08-04 07:56:44 283,648 -c----w c:\winnt\$NtServicePackUninstall$\pdh.dll
    - 2003-03-31 12:00:00 37,376 -c----w c:\winnt\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-04 07:56:44 39,936 -c----w c:\winnt\$NtServicePackUninstall$\perfctrs.dll
    - 2003-03-31 12:00:00 23,552 -c----w c:\winnt\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-04 07:56:44 26,624 -c----w c:\winnt\$NtServicePackUninstall$\perfdisk.dll
    - 2003-03-31 12:00:00 14,336 -c----w c:\winnt\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-04 07:56:55 15,872 -c----w c:\winnt\$NtServicePackUninstall$\perfmon.exe
    + 2003-03-31 12:00:00 16,896 -c----w c:\winnt\$NtServicePackUninstall$\perfnet.dll
    - 2003-03-31 12:00:00 23,040 -c----w c:\winnt\$NtServicePackUninstall$\perfos.dll
    + 2004-08-04 07:56:44 25,088 -c----w c:\winnt\$NtServicePackUninstall$\perfos.dll
    - 2003-03-31 12:00:00 32,256 -c----w c:\winnt\$NtServicePackUninstall$\perfproc.dll
    + 2004-08-04 07:56:44 34,816 -c----w c:\winnt\$NtServicePackUninstall$\perfproc.dll
    + 2004-08-04 06:06:55 27,904 -c----w c:\winnt\$NtServicePackUninstall$\perm2.sys
    + 2004-08-04 07:56:23 211,712 -c----w c:\winnt\$NtServicePackUninstall$\perm2dll.dll
    + 2004-08-04 06:06:56 28,032 -c----w c:\winnt\$NtServicePackUninstall$\perm3.sys
    + 2004-08-04 07:56:23 259,328 -c----w c:\winnt\$NtServicePackUninstall$\perm3dd.dll
    + 2006-10-24 20:30:20 412,160 -c----w c:\winnt\$NtServicePackUninstall$\photometadatahandler.dll
    - 2003-03-31 12:00:00 166,912 -c----w c:\winnt\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-04 07:56:44 176,128 -c----w c:\winnt\$NtServicePackUninstall$\photowiz.dll
    - 2002-08-29 09:41:00 31,744 -c----w c:\winnt\$NtServicePackUninstall$\pid.dll
    + 2004-08-04 07:56:44 35,328 -c----w c:\winnt\$NtServicePackUninstall$\pid.dll
    - 2003-03-31 07:00:00 27,648 -c----w c:\winnt\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-04 06:04:41 24,064 -c----w c:\winnt\$NtServicePackUninstall$\pidgen.dll
    - 2003-03-31 12:00:00 272,896 -c----w c:\winnt\$NtServicePackUninstall$\pinball.exe
    + 2004-08-04 07:56:55 281,088 -c----w c:\winnt\$NtServicePackUninstall$\pinball.exe
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ping.exe
    + 2004-08-04 07:56:55 17,920 -c----w c:\winnt\$NtServicePackUninstall$\ping.exe
    + 2004-08-04 05:31:49 175,104 -c----w c:\winnt\$NtServicePackUninstall$\pintlcsa.dll
    + 2004-08-04 05:31:49 53,760 -c----w c:\winnt\$NtServicePackUninstall$\pintlcsd.dll
    + 2004-08-04 05:31:48 70,144 -c----w c:\winnt\$NtServicePackUninstall$\pintlphr.exe
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-04 07:56:44 15,360 -c----w c:\winnt\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-04 07:56:44 44,544 -c----w c:\winnt\$NtServicePackUninstall$\plotter.dll
    + 2004-08-04 07:56:44 52,736 -c----w c:\winnt\$NtServicePackUninstall$\plotui.dll
    + 2004-08-04 05:31:49 67,584 -c----w c:\winnt\$NtServicePackUninstall$\pmigrate.dll
    - 2003-03-31 12:00:00 34,304 -c----w c:\winnt\$NtServicePackUninstall$\pngfilt.dll
    + 2004-08-04 07:56:44 39,424 -c----w c:\winnt\$NtServicePackUninstall$\pngfilt.dll
    + 2006-10-11 16:24:45 58,880 -c----w c:\winnt\$NtServicePackUninstall$\pnrpnsp.dll
    - 2003-03-31 12:00:00 87,552 -c----w c:\winnt\$NtServicePackUninstall$\polstore.dll
    + 2004-08-04 07:56:44 105,472 -c----w c:\winnt\$NtServicePackUninstall$\polstore.dll
    - 2002-08-29 08:01:00 134,272 -c----w c:\winnt\$NtServicePackUninstall$\portcls.sys
    + 2004-08-04 06:15:49 145,792 -c----w c:\winnt\$NtServicePackUninstall$\portcls.sys
    + 2004-08-04 07:56:55 49,152 -c----w c:\winnt\$NtServicePackUninstall$\powercfg.exe
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\winnt\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-04 06:00:16 17,664 -c----w c:\winnt\$NtServicePackUninstall$\ppa3.sys
    - 2003-03-31 12:00:00 522,240 -c----w c:\winnt\$NtServicePackUninstall$\printui.dll
    + 2004-08-04 07:56:44 560,640 -c----w c:\winnt\$NtServicePackUninstall$\printui.dll
    - 2003-03-31 12:00:00 30,592 -c----w c:\winnt\$NtServicePackUninstall$\processr.sys
    + 2004-08-04 05:59:17 35,328 -c----w c:\winnt\$NtServicePackUninstall$\processr.sys
    - 2003-03-31 12:00:00 28,672 -c----w c:\winnt\$NtServicePackUninstall$\profmap.dll
    + 2004-08-04 07:56:44 27,648 -c----w c:\winnt\$NtServicePackUninstall$\profmap.dll
    - 2003-03-31 12:00:00 205,824 -c----w c:\winnt\$NtServicePackUninstall$\progman.exe
    + 2004-08-04 07:56:55 109,568 -c----w c:\winnt\$NtServicePackUninstall$\progman.exe
    - 2003-03-31 12:00:00 45,056 -c----w c:\winnt\$NtServicePackUninstall$\proquota.exe
    + 2004-08-04 07:56:55 50,176 -c----w c:\winnt\$NtServicePackUninstall$\proquota.exe
    - 2003-03-31 12:00:00 226,304 -c----w c:\winnt\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-04 07:56:44 237,056 -c----w c:\winnt\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-04 07:56:55 9,216 -c----w c:\winnt\$NtServicePackUninstall$\proxycfg.exe
    + 2001-08-18 06:36:28 129,024 -c----w c:\winnt\$NtServicePackUninstall$\ps5ui.dll
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\psapi.dll
    + 2004-08-04 07:56:44 23,040 -c----w c:\winnt\$NtServicePackUninstall$\psapi.dll
    - 2003-03-31 12:00:00 82,944 -c----w c:\winnt\$NtServicePackUninstall$\psbase.dll
    + 2004-08-04 07:56:44 96,768 -c----w c:\winnt\$NtServicePackUninstall$\psbase.dll
    - 2003-03-31 12:00:00 66,048 -c----w c:\winnt\$NtServicePackUninstall$\psched.sys
    + 2004-08-04 06:04:19 69,120 -c----w c:\winnt\$NtServicePackUninstall$\psched.sys
    + 2001-08-18 06:36:28 455,168 -c----w c:\winnt\$NtServicePackUninstall$\pscript5.dll
    - 2003-02-17 16:16:28 354,816 -c----w c:\winnt\$NtServicePackUninstall$\psisdecd.dll
    + 2004-08-04 07:56:44 363,520 -c----w c:\winnt\$NtServicePackUninstall$\psisdecd.dll
    - 2003-03-31 12:00:00 37,888 -c----w c:\winnt\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\winnt\$NtServicePackUninstall$\pstorec.dll
    - 2003-03-31 12:00:00 25,600 -c----w c:\winnt\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-04 07:56:44 34,304 -c----w c:\winnt\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-04 07:56:44 159,232 -c----w c:\winnt\$NtServicePackUninstall$\ptpusd.dll
    - 2002-12-12 01:34:40 241,664 -c----w c:\winnt\$NtServicePackUninstall$\qasf.dll
    + 2004-08-04 07:56:44 237,568 -c----w c:\winnt\$NtServicePackUninstall$\qasf.dll
    - 2002-12-12 06:14:32 257,024 -c----w c:\winnt\$NtServicePackUninstall$\qcap.dll
    + 2004-08-04 07:56:44 192,512 -c----w c:\winnt\$NtServicePackUninstall$\qcap.dll
    - 2002-12-12 06:14:32 311,808 -c----w c:\winnt\$NtServicePackUninstall$\qdv.dll
    + 2004-08-04 07:56:44 279,040 -c----w c:\winnt\$NtServicePackUninstall$\qdv.dll
    - 2003-05-30 15:00:02 449,024 -c----w c:\winnt\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-04 07:56:44 385,024 -c----w c:\winnt\$NtServicePackUninstall$\qdvd.dll
    - 2002-12-12 06:14:32 1,798,144 -c----w c:\winnt\$NtServicePackUninstall$\qedit.dll
    + 2004-08-04 07:56:44 562,176 -c----w c:\winnt\$NtServicePackUninstall$\qedit.dll
    - 2002-12-12 06:14:32 733,184 -c----w c:\winnt\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-04 07:56:24 733,696 -c----w c:\winnt\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-04 06:00:05 6,016 -c----w c:\winnt\$NtServicePackUninstall$\qic157.sys
    - 2004-07-01 22:08:18 361,984 -c----w c:\winnt\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-04 07:56:44 382,464 -c----w c:\winnt\$NtServicePackUninstall$\qmgr.dll
    - 2004-07-01 22:08:18 17,408 -c----w c:\winnt\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\winnt\$NtServicePackUninstall$\qmgrprxy.dll
    - 2003-03-31 12:00:00 18,432 -c----w c:\winnt\$NtServicePackUninstall$\qprocess.exe
    + 2004-08-04 07:56:55 20,480 -c----w c:\winnt\$NtServicePackUninstall$\qprocess.exe
    - 2003-05-30 15:00:02 1,962,496 -c----w c:\winnt\$NtServicePackUninstall$\quartz.dll
    + 2008-05-07 05:18:48 1,287,680 -c----w c:\winnt\$NtServicePackUninstall$\quartz.dll
    - 2003-03-31 12:00:00 1,349,120 -c----w c:\winnt\$NtServicePackUninstall$\query.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\winnt\$NtServicePackUninstall$\query.dll
    - 2003-03-31 12:00:00 33,280 -c----w c:\winnt\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\winnt\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-04 06:00:51 20,736 -c----w c:\winnt\$NtServicePackUninstall$\ramdisk.sys
    - 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\rasadhlp.dll
    + 2006-06-26 17:37:10 8,192 -c----w c:\winnt\$NtServicePackUninstall$\rasadhlp.dll
    - 2003-03-31 12:00:00 217,088 -c----w c:\winnt\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-04 07:56:44 236,544 -c----w c:\winnt\$NtServicePackUninstall$\rasapi32.dll
    - 2003-03-31 12:00:00 82,944 -c----w c:\winnt\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-04 07:56:44 89,088 -c----w c:\winnt\$NtServicePackUninstall$\rasauto.dll
    - 2003-03-31 12:00:00 57,856 -c----w c:\winnt\$NtServicePackUninstall$\raschap.dll
    + 2004-08-04 07:56:44 69,632 -c----w c:\winnt\$NtServicePackUninstall$\raschap.dll
    - 2003-03-31 12:00:00 631,808 -c----w c:\winnt\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-04 07:56:44 657,920 -c----w c:\winnt\$NtServicePackUninstall$\rasdlg.dll
    - 2003-03-31 12:00:00 48,384 -c----w c:\winnt\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-04 06:14:22 51,328 -c----w c:\winnt\$NtServicePackUninstall$\rasl2tp.sys
    - 2003-03-31 12:00:00 55,808 -c----w c:\winnt\$NtServicePackUninstall$\rasman.dll
    + 2004-08-04 07:56:44 61,440 -c----w c:\winnt\$NtServicePackUninstall$\rasman.dll
    - 2003-03-31 12:00:00 158,720 -c----w c:\winnt\$NtServicePackUninstall$\rasmans.dll
    + 2006-05-14 08:44:08 181,248 -c----w c:\winnt\$NtServicePackUninstall$\rasmans.dll
    - 2003-03-31 12:00:00 54,272 -c----w c:\winnt\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-04 07:56:55 56,832 -c----w c:\winnt\$NtServicePackUninstall$\rasphone.exe
    - 2003-03-31 12:00:00 193,536 -c----w c:\winnt\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-04 07:56:44 206,336 -c----w c:\winnt\$NtServicePackUninstall$\rasppp.dll
    - 2003-03-31 12:00:00 38,912 -c----w c:\winnt\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-04 06:05:07 41,472 -c----w c:\winnt\$NtServicePackUninstall$\raspppoe.sys
    - 2002-10-01 23:52:30 46,208 -c----w c:\winnt\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-04 06:14:26 48,384 -c----w c:\winnt\$NtServicePackUninstall$\raspptp.sys
    - 2003-03-31 12:00:00 13,824 -c----w c:\winnt\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-04 07:56:44 16,896 -c----w c:\winnt\$NtServicePackUninstall$\rassapi.dll
    - 2003-03-31 12:00:00 54,272 -c----w c:\winnt\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-04 07:56:44 58,880 -c----w c:\winnt\$NtServicePackUninstall$\rastapi.dll
    - 2003-03-31 12:00:00 91,136 -c----w c:\winnt\$NtServicePackUninstall$\rastls.dll
    + 2004-08-04 07:56:44 112,128 -c----w c:\winnt\$NtServicePackUninstall$\rastls.dll
    - 2003-03-31 12:00:00 96,256 -c----w c:\winnt\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-04 07:56:44 102,400 -c----w c:\winnt\$NtServicePackUninstall$\rcbdyctl.dll
    - 2003-03-31 12:00:00 34,304 -c----w c:\winnt\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-04 07:56:55 35,840 -c----w c:\winnt\$NtServicePackUninstall$\rcimlby.exe
    - 2003-03-31 12:00:00 19,968 -c----w c:\winnt\$NtServicePackUninstall$\rcp.exe
    + 2004-08-04 07:56:55 21,504 -c----w c:\winnt\$NtServicePackUninstall$\rcp.exe
    - 2003-03-31 12:00:00 163,328 -c----w c:\winnt\$NtServicePackUninstall$\rdbss.sys
    + 2006-05-05 09:47:57 174,592 -c----w c:\winnt\$NtServicePackUninstall$\rdbss.sys
    - 2003-03-31 12:00:00 135,680 -c----w c:\winnt\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-04 07:56:44 147,968 -c----w c:\winnt\$NtServicePackUninstall$\rdchost.dll
    - 2003-03-31 12:00:00 44,032 -c----w c:\winnt\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-04 07:56:55 62,464 -c----w c:\winnt\$NtServicePackUninstall$\rdpclip.exe
    - 2003-03-31 12:00:00 87,304 -c----w c:\winnt\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 08:01:07 92,168 -c----w c:\winnt\$NtServicePackUninstall$\rdpdd.dll
    - 2002-08-29 07:06:36 182,400 -c----w c:\winnt\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-04 06:01:15 196,864 -c----w c:\winnt\$NtServicePackUninstall$\rdpdr.sys
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\rdpsnd.dll
    + 2004-08-04 07:56:44 19,968 -c----w c:\winnt\$NtServicePackUninstall$\rdpsnd.dll
    - 2003-03-31 12:00:00 115,976 -c----w c:\winnt\$NtServicePackUninstall$\rdpwd.sys
    + 2005-06-10 04:09:46 139,528 -c----w c:\winnt\$NtServicePackUninstall$\rdpwd.sys
    - 2003-03-31 12:00:00 75,912 -c----w c:\winnt\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-04 08:01:08 87,176 -c----w c:\winnt\$NtServicePackUninstall$\rdpwsx.dll
    - 2003-03-31 12:00:00 12,288 -c----w c:\winnt\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-04 07:56:55 13,824 -c----w c:\winnt\$NtServicePackUninstall$\rdsaddin.exe
    - 2003-03-31 12:00:00 61,952 -c----w c:\winnt\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-04 07:56:55 67,072 -c----w c:\winnt\$NtServicePackUninstall$\rdshost.exe
    - 2002-08-29 07:27:46 56,576 -c----w c:\winnt\$NtServicePackUninstall$\redbook.sys
    + 2004-08-04 05:59:37 57,472 -c----w c:\winnt\$NtServicePackUninstall$\redbook.sys
    - 2003-03-31 12:00:00 48,128 -c----w c:\winnt\$NtServicePackUninstall$\reg.exe
    + 2004-08-04 07:56:55 50,176 -c----w c:\winnt\$NtServicePackUninstall$\reg.exe
    - 2003-03-31 12:00:00 44,032 -c----w c:\winnt\$NtServicePackUninstall$\regapi.dll
    + 2004-08-04 07:56:44 49,664 -c----w c:\winnt\$NtServicePackUninstall$\regapi.dll
    - 2003-03-31 12:00:00 134,144 -c----w c:\winnt\$NtServicePackUninstall$\regedit.exe
    + 2004-08-04 07:56:55 146,432 -c----w c:\winnt\$NtServicePackUninstall$\regedit.exe
    - 2003-03-31 12:00:00 51,712 -c----w c:\winnt\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-04 07:56:44 59,904 -c----w c:\winnt\$NtServicePackUninstall$\regsvc.dll
    - 2003-03-31 12:00:00 9,728 -c----w c:\winnt\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-04 07:56:55 11,776 -c----w c:\winnt\$NtServicePackUninstall$\regsvr32.exe
    - 2003-03-31 12:00:00 387,584 -c----w c:\winnt\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-04 07:56:44 397,824 -c----w c:\winnt\$NtServicePackUninstall$\regwizc.dll
    - 2003-03-31 12:00:00 56,320 -c----w c:\winnt\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-04 07:56:44 60,416 -c----w c:\winnt\$NtServicePackUninstall$\remotepg.dll
    - 2003-03-31 12:00:00 138,240 -c----w c:\winnt\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-04 07:56:44 177,152 -c----w c:\winnt\$NtServicePackUninstall$\repdrvfs.dll
    - 2003-03-31 12:00:00 54,784 -c----w c:\winnt\$NtServicePackUninstall$\resutils.dll
    + 2004-08-04 07:56:44 58,880 -c----w c:\winnt\$NtServicePackUninstall$\resutils.dll
    - 2003-03-31 12:00:00 11,776 -c----w c:\winnt\$NtServicePackUninstall$\rexec.exe
    + 2004-08-04 07:56:55 13,824 -c----w c:\winnt\$NtServicePackUninstall$\rexec.exe
    + 2004-08-04 06:10:39 59,648 -c----w c:\winnt\$NtServicePackUninstall$\rfcomm.sys
    + 2006-11-13 06:02:58 288,768 -c----w c:\winnt\$NtServicePackUninstall$\rhttpaa.dll
    + 2004-08-04 07:56:44 123,392 -c----w c:\winnt\$NtServicePackUninstall$\riafres.dll
    + 2004-08-04 07:56:44 11,776 -c----w c:\winnt\$NtServicePackUninstall$\riafui1.dll
    + 2004-08-04 07:56:44 11,776 -c----w c:\winnt\$NtServicePackUninstall$\riafui2.dll
    - 2003-03-31 12:00:00 423,424 -c----w c:\winnt\$NtServicePackUninstall$\riched20.dll
    + 2006-11-27 14:54:06 433,152 -c----w c:\winnt\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\winnt\$NtServicePackUninstall$\rmcast.sys
    - 2003-03-31 12:00:00 27,648 -c----w c:\winnt\$NtServicePackUninstall$\rndismp.sys
    + 2004-08-04 06:04:31 30,080 -c----w c:\winnt\$NtServicePackUninstall$\rndismp.sys
    + 2004-08-04 06:04:31 30,080 -c----w c:\winnt\$NtServicePackUninstall$\rndismpx.sys
    + 2004-08-04 05:59:10 79,104 -c----w c:\winnt\$NtServicePackUninstall$\rocket.sys
    - 2004-03-06 02:16:11 535,552 -c----w c:\winnt\$NtServicePackUninstall$\rpcrt4.dll
    + 2007-07-09 13:16:16 582,656 -c----w c:\winnt\$NtServicePackUninstall$\rpcrt4.dll
    - 2004-03-06 02:16:11 263,680 -c----w c:\winnt\$NtServicePackUninstall$\rpcss.dll
    + 2005-07-26 04:39:49 397,824 -c----w c:\winnt\$NtServicePackUninstall$\rpcss.dll
    - 2003-03-31 12:00:00 57,344 -c----w c:\winnt\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-04 07:56:44 61,440 -c----w c:\winnt\$NtServicePackUninstall$\rrcm.dll
    - 2003-03-31 12:00:00 133,632 -c----w c:\winnt\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-04 05:31:43 152,576 -c----w c:\winnt\$NtServicePackUninstall$\rsaenh.dll
    - 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\rsh.exe
    + 2004-08-04 07:56:55 14,848 -c----w c:\winnt\$NtServicePackUninstall$\rsh.exe
    - 2003-03-31 12:00:00 36,352 -c----w c:\winnt\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-04 07:56:44 39,936 -c----w c:\winnt\$NtServicePackUninstall$\rshx32.dll
    - 2003-03-31 12:00:00 18,432 -c----w c:\winnt\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\winnt\$NtServicePackUninstall$\rsmps.dll
    - 2003-03-31 12:00:00 370,688 -c----w c:\winnt\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-04 07:56:55 380,416 -c----w c:\winnt\$NtServicePackUninstall$\rstrui.exe
    + 2003-03-31 12:00:00 90,112 -c----w c:\winnt\$NtServicePackUninstall$\rsvpsp.dll
    - 2003-03-31 12:00:00 74,240 -c----w c:\winnt\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-04 07:56:55 77,312 -c----w c:\winnt\$NtServicePackUninstall$\rtcshare.exe
    - 2003-03-31 12:00:00 29,696 -c----w c:\winnt\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-04 07:56:44 31,744 -c----w c:\winnt\$NtServicePackUninstall$\rtipxmib.dll
    - 2003-03-31 12:00:00 39,936 -c----w c:\winnt\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-04 07:56:44 44,032 -c----w c:\winnt\$NtServicePackUninstall$\rtutils.dll
    - 2003-03-31 12:00:00 31,744 -c----w c:\winnt\$NtServicePackUninstall$\rundll32.exe
    + 2004-08-04 07:56:55 33,280 -c----w c:\winnt\$NtServicePackUninstall$\rundll32.exe
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\runonce.exe
    + 2004-08-04 07:56:55 14,336 -c----w c:\winnt\$NtServicePackUninstall$\runonce.exe
    + 2003-03-31 12:00:00 24,576 -c----w c:\winnt\$NtServicePackUninstall$\rw001ext.dll
    + 2003-03-31 12:00:00 26,624 -c----w c:\winnt\$NtServicePackUninstall$\rw330ext.dll
    + 2004-08-04 07:56:44 397,056 -c----w c:\winnt\$NtServicePackUninstall$\s3gnb.dll
    - 2003-03-31 12:00:00 39,424 -c----w c:\winnt\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\winnt\$NtServicePackUninstall$\safrcdlg.dll
    - 2003-03-31 12:00:00 26,624 -c----w c:\winnt\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-04 07:56:44 29,696 -c----w c:\winnt\$NtServicePackUninstall$\safrdm.dll
    - 2003-03-31 12:00:00 40,960 -c----w c:\winnt\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-04 07:56:44 45,568 -c----w c:\winnt\$NtServicePackUninstall$\safrslv.dll
    - 2003-03-31 12:00:00 54,784 -c----w c:\winnt\$NtServicePackUninstall$\samlib.dll
    + 2004-08-04 07:56:44 64,000 -c----w c:\winnt\$NtServicePackUninstall$\samlib.dll
    - 2003-03-31 12:00:00 411,136 -c----w c:\winnt\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-04 07:56:44 415,744 -c----w c:\winnt\$NtServicePackUninstall$\samsrv.dll
    - 2003-03-31 12:00:00 696,320 -c----w c:\winnt\$NtServicePackUninstall$\sapi.dll
    + 2004-08-04 07:56:44 741,376 -c----w c:\winnt\$NtServicePackUninstall$\sapi.dll
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\savedump.exe
    + 2004-08-04 07:56:55 13,312 -c----w c:\winnt\$NtServicePackUninstall$\savedump.exe
    - 2002-11-26 20:15:50 219,136 -c----w c:\winnt\$NtServicePackUninstall$\sbe.dll
    + 2004-08-04 07:56:44 270,848 -c----w c:\winnt\$NtServicePackUninstall$\sbe.dll
    - 2003-03-31 12:00:00 110,080 -c----w c:\winnt\$NtServicePackUninstall$\sbeio.dll
    + 2004-08-04 07:56:44 159,232 -c----w c:\winnt\$NtServicePackUninstall$\sbeio.dll
    + 2004-08-04 05:59:56 43,136 -c----w c:\winnt\$NtServicePackUninstall$\sbp2port.sys
    - 2003-03-31 12:00:00 66,560 -c----w c:\winnt\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-04 07:56:44 69,632 -c----w c:\winnt\$NtServicePackUninstall$\scarddlg.dll
    - 2003-03-31 12:00:00 93,184 -c----w c:\winnt\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-04 07:56:55 95,744 -c----w c:\winnt\$NtServicePackUninstall$\scardsvr.exe
    - 2003-03-31 12:00:00 171,008 -c----w c:\winnt\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-04 07:56:44 171,008 -c----w c:\winnt\$NtServicePackUninstall$\sccsccp.dll
    - 2003-03-31 12:00:00 174,592 -c----w c:\winnt\$NtServicePackUninstall$\scecli.dll
    + 2004-08-04 07:56:44 180,224 -c----w c:\winnt\$NtServicePackUninstall$\scecli.dll
    - 2003-03-31 12:00:00 297,984 -c----w c:\winnt\$NtServicePackUninstall$\scesrv.dll
    + 2004-08-04 07:56:44 313,856 -c----w c:\winnt\$NtServicePackUninstall$\scesrv.dll
    - 2004-03-30 01:48:36 136,704 -c----w c:\winnt\$NtServicePackUninstall$\schannel.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\winnt\$NtServicePackUninstall$\schannel.dll
    - 2004-06-08 22:02:21 172,544 -c----w c:\winnt\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-04 07:56:44 190,976 -c----w c:\winnt\$NtServicePackUninstall$\schedsvc.dll
    - 2003-03-31 12:00:00 18,432 -c----w c:\winnt\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-04 07:56:44 20,992 -c----w c:\winnt\$NtServicePackUninstall$\sclgntfy.dll
    - 2003-03-31 12:00:00 33,792 -c----w c:\winnt\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-04 07:56:55 36,864 -c----w c:\winnt\$NtServicePackUninstall$\scrcons.exe
    - 2003-03-31 12:00:00 173,056 -c----w c:\winnt\$NtServicePackUninstall$\script.dll
    + 2005-04-28 19:16:29 215,552 -c----w c:\winnt\$NtServicePackUninstall$\script.dll
    + 2005-04-28 19:16:29 199,680 -c----w c:\winnt\$NtServicePackUninstall$\scripta.dll
    - 2003-03-31 12:00:00 8,192 -c----w c:\winnt\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-04 07:56:57 9,216 -c----w c:\winnt\$NtServicePackUninstall$\scrnsave.scr
    - 2003-03-31 12:00:00 155,675 -c----w c:\winnt\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-04 07:56:44 159,744 -c----w c:\winnt\$NtServicePackUninstall$\scrobj.dll
    - 2003-03-31 12:00:00 147,483 -c----w c:\winnt\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-04 07:56:44 151,552 -c----w c:\winnt\$NtServicePackUninstall$\scrrun.dll
    - 2003-05-02 17:08:22 90,752 -c----w c:\winnt\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-04 05:59:41 96,256 -c----w c:\winnt\$NtServicePackUninstall$\scsiport.sys
    - 2003-03-31 12:00:00 71,168 -c----w c:\winnt\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-04 07:56:55 77,312 -c----w c:\winnt\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-04 06:07:47 67,584 -c----w c:\winnt\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-04 07:56:44 29,184 -c----w c:\winnt\$NtServicePackUninstall$\sdhcinst.dll
    - 2004-01-15 02:15:55 12,400 -c----w c:\winnt\$NtServicePackUninstall$\secdrv.sys
    + 2004-07-17 18:36:36 27,440 -c----w c:\winnt\$NtServicePackUninstall$\secdrv.sys
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\winnt\$NtServicePackUninstall$\seclogon.dll
    - 2003-03-31 12:00:00 52,224 -c----w c:\winnt\$NtServicePackUninstall$\secur32.dll
    + 2004-08-04 07:56:44 55,808 -c----w c:\winnt\$NtServicePackUninstall$\secur32.dll
    - 2003-03-31 12:00:00 5,632 -c----w c:\winnt\$NtServicePackUninstall$\security.dll
    + 2004-08-04 07:56:44 5,632 -c----w c:\winnt\$NtServicePackUninstall$\security.dll
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-04 07:56:44 29,184 -c----w c:\winnt\$NtServicePackUninstall$\sendcmsg.dll
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-04 07:56:44 55,296 -c----w c:\winnt\$NtServicePackUninstall$\sendmail.dll
    - 2003-03-31 12:00:00 36,352 -c----w c:\winnt\$NtServicePackUninstall$\sens.dll
    + 2004-08-04 07:56:44 38,912 -c----w c:\winnt\$NtServicePackUninstall$\sens.dll
    - 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\sensapi.dll
    + 2004-08-04 07:56:44 6,656 -c----w c:\winnt\$NtServicePackUninstall$\sensapi.dll
    - 2003-03-31 12:00:00 14,976 -c----w c:\winnt\$NtServicePackUninstall$\serenum.sys
    + 2004-08-04 05:59:07 15,488 -c----w c:\winnt\$NtServicePackUninstall$\serenum.sys
    - 2003-03-31 12:00:00 62,464 -c----w c:\winnt\$NtServicePackUninstall$\serial.sys
    + 2004-08-04 06:15:52 64,896 -c----w c:\winnt\$NtServicePackUninstall$\serial.sys
    - 2003-03-31 12:00:00 53,248 -c----w c:\winnt\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-04 07:56:44 56,320 -c----w c:\winnt\$NtServicePackUninstall$\servdeps.dll
    - 2003-03-31 12:00:00 101,376 -c----w c:\winnt\$NtServicePackUninstall$\services.exe
    + 2004-08-04 07:56:55 108,032 -c----w c:\winnt\$NtServicePackUninstall$\services.exe
    - 2003-03-31 12:00:00 129,024 -c----w c:\winnt\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-04 07:56:56 140,800 -c----w c:\winnt\$NtServicePackUninstall$\sessmgr.exe
    - 2003-03-31 12:00:00 28,672 -c----w c:\winnt\$NtServicePackUninstall$\sethc.exe
    + 2004-08-04 07:56:56 31,232 -c----w c:\winnt\$NtServicePackUninstall$\sethc.exe
    - 2003-03-31 12:00:00 20,992 -c----w c:\winnt\$NtServicePackUninstall$\setup.exe
    + 2004-08-04 07:56:56 23,040 -c----w c:\winnt\$NtServicePackUninstall$\setup.exe
    - 2003-03-31 12:00:00 67,584 -c----w c:\winnt\$NtServicePackUninstall$\setup50.exe
    + 2004-08-04 07:56:56 73,216 -c----w c:\winnt\$NtServicePackUninstall$\setup50.exe
    - 2003-03-31 12:00:00 932,864 -c----w c:\winnt\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-04 07:56:46 983,552 -c----w c:\winnt\$NtServicePackUninstall$\setupapi.dll
    - 2003-03-31 12:00:00 99,328 -c----w c:\winnt\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-04 07:56:44 101,376 -c----w c:\winnt\$NtServicePackUninstall$\setupqry.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\sfc.dll
    + 2004-08-04 07:56:44 5,120 -c----w c:\winnt\$NtServicePackUninstall$\sfc.dll
    - 2003-03-31 12:00:00 133,120 -c----w c:\winnt\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-04 07:56:44 140,288 -c----w c:\winnt\$NtServicePackUninstall$\sfc_os.dll
    - 2003-03-31 12:00:00 1,157,632 -c----w c:\winnt\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-04 07:56:45 1,580,544 -c----w c:\winnt\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-04 05:59:54 11,136 -c----w c:\winnt\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-04 05:59:54 10,240 -c----w c:\winnt\$NtServicePackUninstall$\sffp_sd.sys
    - 2003-03-31 12:00:00 10,496 -c----w c:\winnt\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-04 05:59:54 11,392 -c----w c:\winnt\$NtServicePackUninstall$\sfloppy.sys
    - 2003-03-31 12:00:00 548,864 -c----w c:\winnt\$NtServicePackUninstall$\shdoclc.dll
    + 2004-08-04 07:56:27 549,376 -c----w c:\winnt\$NtServicePackUninstall$\shdoclc.dll
    - 2004-01-22 00:15:50 1,339,904 -c----w c:\winnt\$NtServicePackUninstall$\shdocvw.dll
    + 2006-09-04 06:12:56 1,497,088 -c----w c:\winnt\$NtServicePackUninstall$\shdocvw.dll
    - 2004-06-10 19:51:27 8,350,720 -c----w c:\winnt\$NtServicePackUninstall$\shell32.dll
    + 2007-10-26 03:34:01 8,460,288 -c----w c:\winnt\$NtServicePackUninstall$\shell32.dll
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-04 07:56:45 25,088 -c----w c:\winnt\$NtServicePackUninstall$\shfolder.dll
    - 2003-03-31 12:00:00 62,976 -c----w c:\winnt\$NtServicePackUninstall$\shgina.dll
    + 2004-08-04 07:56:45 68,096 -c----w c:\winnt\$NtServicePackUninstall$\shgina.dll
    - 2003-03-31 12:00:00 60,416 -c----w c:\winnt\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-04 07:56:45 65,536 -c----w c:\winnt\$NtServicePackUninstall$\shimeng.dll
    - 2003-03-31 12:00:00 420,864 -c----w c:\winnt\$NtServicePackUninstall$\shimgvw.dll
    + 2004-08-04 07:56:45 438,272 -c----w c:\winnt\$NtServicePackUninstall$\shimgvw.dll
    - 2004-07-08 01:48:42 394,752 -c----w c:\winnt\$NtServicePackUninstall$\shlwapi.dll
    + 2006-09-23 20:12:50 474,112 -c----w c:\winnt\$NtServicePackUninstall$\shlwapi.dll
    - 2002-09-30 16:58:10 125,440 -c----w c:\winnt\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-04 07:56:45 151,552 -c----w c:\winnt\$NtServicePackUninstall$\shmedia.dll
    - 2003-05-12 05:13:52 33,792 -c----w c:\winnt\$NtServicePackUninstall$\shmgrate.exe
    + 2004-08-04 07:56:56 42,496 -c----w c:\winnt\$NtServicePackUninstall$\shmgrate.exe
    - 2003-03-31 12:00:00 69,632 -c----w c:\winnt\$NtServicePackUninstall$\shrpubw.exe
    + 2004-08-04 07:56:56 77,824 -c----w c:\winnt\$NtServicePackUninstall$\shrpubw.exe
    - 2003-03-31 12:00:00 23,040 -c----w c:\winnt\$NtServicePackUninstall$\shscrap.dll
    + 2004-08-04 07:56:45 27,648 -c----w c:\winnt\$NtServicePackUninstall$\shscrap.dll
    - 2003-03-31 12:00:00 116,224 -c----w c:\winnt\$NtServicePackUninstall$\shsvcs.dll
    + 2006-12-19 21:52:18 134,656 -c----w c:\winnt\$NtServicePackUninstall$\shsvcs.dll
    - 2002-05-14 18:08:54 20,536 -c----w c:\winnt\$NtServicePackUninstall$\shtml.dll
    + 2004-08-04 07:56:45 20,536 -c----w c:\winnt\$NtServicePackUninstall$\shtml.dll
    - 2002-05-14 18:08:54 16,437 -c----w c:\winnt\$NtServicePackUninstall$\shtml.exe
    + 2004-08-04 07:56:56 16,437 -c----w c:\winnt\$NtServicePackUninstall$\shtml.exe
    - 2003-03-31 12:00:00 17,920 -c----w c:\winnt\$NtServicePackUninstall$\shutdown.exe
    + 2004-08-04 07:56:56 19,456 -c----w c:\winnt\$NtServicePackUninstall$\shutdown.exe
    - 2003-03-31 12:00:00 11,776 -c----w c:\winnt\$NtServicePackUninstall$\sigtab.dll
    + 2004-08-04 07:56:45 13,312 -c----w c:\winnt\$NtServicePackUninstall$\sigtab.dll
    - 2003-03-31 12:00:00 66,048 -c----w c:\winnt\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-04 07:56:56 70,144 -c----w c:\winnt\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-04 07:56:45 3,901 -c----w c:\winnt\$NtServicePackUninstall$\siint5.dll
    + 2004-08-04 06:07:42 41,088 -c----w c:\winnt\$NtServicePackUninstall$\sisagp.sys
    - 2003-03-31 12:00:00 24,064 -c----w c:\winnt\$NtServicePackUninstall$\skeys.exe
    + 2004-08-04 07:56:56 26,112 -c----w c:\winnt\$NtServicePackUninstall$\skeys.exe
    - 2003-03-31 12:00:00 22,528 -c----w c:\winnt\$NtServicePackUninstall$\slayerxp.dll
    + 2004-08-04 07:56:45 25,088 -c----w c:\winnt\$NtServicePackUninstall$\slayerxp.dll
    - 2003-03-31 12:00:00 89,600 -c----w c:\winnt\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-04 07:56:45 98,304 -c----w c:\winnt\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-04 07:56:45 73,832 -c----w c:\winnt\$NtServicePackUninstall$\slcoinst.dll
    + 2004-08-04 07:56:45 286,792 -c----w c:\winnt\$NtServicePackUninstall$\slextspk.dll
    + 2004-08-04 07:56:45 188,508 -c----w c:\winnt\$NtServicePackUninstall$\slgen.dll
    - 2003-02-17 16:16:28 10,880 -c----w c:\winnt\$NtServicePackUninstall$\slip.sys
    + 2004-08-04 06:10:16 11,136 -c----w c:\winnt\$NtServicePackUninstall$\slip.sys
    + 2004-08-04 07:56:56 32,866 -c----w c:\winnt\$NtServicePackUninstall$\slrundll.exe
    + 2004-08-04 07:56:56 73,796 -c----w c:\winnt\$NtServicePackUninstall$\slserv.exe
    + 2004-08-04 06:07:36 6,016 -c----w c:\winnt\$NtServicePackUninstall$\smbali.sys
    + 2004-08-04 06:07:35 16,128 -c----w c:\winnt\$NtServicePackUninstall$\smbbatt.sys
    + 2004-08-04 06:07:35 6,912 -c----w c:\winnt\$NtServicePackUninstall$\smbclass.sys
    + 2004-08-04 07:56:56 8,192 -c----w c:\winnt\$NtServicePackUninstall$\smbinst.exe
    - 2003-03-31 12:00:00 226,304 -c----w c:\winnt\$NtServicePackUninstall$\smi2smir.exe
    + 2004-08-04 07:56:56 236,544 -c----w c:\winnt\$NtServicePackUninstall$\smi2smir.exe
    - 2003-03-31 12:00:00 334,848 -c----w c:\winnt\$NtServicePackUninstall$\smlogcfg.dll
    + 2004-08-04 07:56:45 363,008 -c----w c:\winnt\$NtServicePackUninstall$\smlogcfg.dll
    - 2003-03-31 12:00:00 82,944 -c----w c:\winnt\$NtServicePackUninstall$\smlogsvc.exe
    + 2004-08-04 07:56:56 89,600 -c----w c:\winnt\$NtServicePackUninstall$\smlogsvc.exe
    - 2003-03-31 12:00:00 45,568 -c----w c:\winnt\$NtServicePackUninstall$\smss.exe
    + 2004-08-04 07:56:56 50,688 -c----w c:\winnt\$NtServicePackUninstall$\smss.exe
    - 2003-03-31 12:00:00 431,616 -c----w c:\winnt\$NtServicePackUninstall$\smtpsvc.dll
    + 2004-08-04 07:56:45 456,704 -c----w c:\winnt\$NtServicePackUninstall$\smtpsvc.dll
    - 2003-03-31 12:00:00 124,416 -c----w c:\winnt\$NtServicePackUninstall$\sndrec32.exe
    + 2004-08-04 07:56:56 131,584 -c----w c:\winnt\$NtServicePackUninstall$\sndrec32.exe
    - 2003-03-31 12:00:00 32,256 -c----w c:\winnt\$NtServicePackUninstall$\sniffpol.dll
    + 2004-08-04 07:56:45 34,816 -c----w c:\winnt\$NtServicePackUninstall$\sniffpol.dll
    - 2003-03-31 12:00:00 29,696 -c----w c:\winnt\$NtServicePackUninstall$\snmp.exe
    + 2004-08-04 07:56:56 32,768 -c----w c:\winnt\$NtServicePackUninstall$\snmp.exe
    - 2003-03-31 12:00:00 16,896 -c----w c:\winnt\$NtServicePackUninstall$\snmpapi.dll
    + 2004-08-04 07:56:45 18,944 -c----w c:\winnt\$NtServicePackUninstall$\snmpapi.dll
    - 2003-03-31 12:00:00 246,784 -c----w c:\winnt\$NtServicePackUninstall$\snmpcl.dll
    + 2004-08-04 07:56:45 259,072 -c----w c:\winnt\$NtServicePackUninstall$\snmpcl.dll
    - 2003-03-31 12:00:00 345,600 -c----w c:\winnt\$NtServicePackUninstall$\snmpincl.dll
    + 2004-08-04 07:56:45 358,400 -c----w c:\winnt\$NtServicePackUninstall$\snmpincl.dll
    - 2003-03-31 12:00:00 5,120 -c----w c:\winnt\$NtServicePackUninstall$\snmpmib.dll
    + 2004-08-04 07:56:45 6,144 -c----w c:\winnt\$NtServicePackUninstall$\snmpmib.dll
    - 2003-03-31 12:00:00 182,784 -c----w c:\winnt\$NtServicePackUninstall$\snmpsmir.dll
    + 2004-08-04 07:56:45 188,416 -c----w c:\winnt\$NtServicePackUninstall$\snmpsmir.dll
    - 2003-03-31 12:00:00 172,032 -c----w c:\winnt\$NtServicePackUninstall$\snmpsnap.dll
    + 2004-08-04 07:56:45 182,272 -c----w c:\winnt\$NtServicePackUninstall$\snmpsnap.dll
    - 2003-03-31 12:00:00 36,864 -c----w c:\winnt\$NtServicePackUninstall$\snmpthrd.dll
    + 2004-08-04 07:56:45 40,448 -c----w c:\winnt\$NtServicePackUninstall$\snmpthrd.dll
    - 2003-03-31 12:00:00 8,192 -c----w c:\winnt\$NtServicePackUninstall$\snmptrap.exe
    + 2004-08-04 07:56:56 8,704 -c----w c:\winnt\$NtServicePackUninstall$\snmptrap.exe
    - 2003-03-31 12:00:00 121,344 -c----w c:\winnt\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-04 07:56:45 130,048 -c----w c:\winnt\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-04 06:00:05 7,552 -c----w c:\winnt\$NtServicePackUninstall$\sonyait.sys
    - 2003-03-31 12:00:00 24,448 -c----w c:\winnt\$NtServicePackUninstall$\sonydcam.sys
    + 2004-08-04 06:09:55 25,472 -c----w c:\winnt\$NtServicePackUninstall$\sonydcam.sys
    + 2003-03-31 12:00:00 23,552 -c----w c:\winnt\$NtServicePackUninstall$\sort.exe
    + 2004-08-04 07:56:56 8,192 -c----w c:\winnt\$NtServicePackUninstall$\spdwnwxp.exe
    - 2003-03-31 12:00:00 62,464 -c----w c:\winnt\$NtServicePackUninstall$\spgrmr.dll
    + 2004-08-04 07:56:29 62,976 -c----w c:\winnt\$NtServicePackUninstall$\spgrmr.dll
    - 2003-03-31 12:00:00 534,016 -c----w c:\winnt\$NtServicePackUninstall$\spider.exe
    + 2004-08-04 07:56:57 538,624 -c----w c:\winnt\$NtServicePackUninstall$\spider.exe
    - 2002-08-29 07:32:28 5,888 -c----w c:\winnt\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\winnt\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\winnt\$NtServicePackUninstall$\splitter.sys.001
    + 2004-08-04 07:56:58 11,776 -c----w c:\winnt\$NtServicePackUninstall$\spnpinst.exe
    - 2003-03-31 12:00:00 66,560 -c----w c:\winnt\$NtServicePackUninstall$\spoolss.dll
    + 2004-08-04 07:56:45 74,752 -c----w c:\winnt\$NtServicePackUninstall$\spoolss.dll
    - 2003-03-31 12:00:00 51,200 -c----w c:\winnt\$NtServicePackUninstall$\spoolsv.exe
    + 2005-06-10 23:53:32 57,856 -c----w c:\winnt\$NtServicePackUninstall$\spoolsv.exe
    + 2004-08-04 07:56:29 193,024 -c----w c:\winnt\$NtServicePackUninstall$\spra041b.dll
    + 2004-08-04 07:56:29 192,512 -c----w c:\winnt\$NtServicePackUninstall$\spra0424.dll
    + 2004-08-04 07:56:29 757,248 -c----w c:\winnt\$NtServicePackUninstall$\sprb041b.dll
    + 2004-08-04 07:56:30 732,160 -c----w c:\winnt\$NtServicePackUninstall$\sprb0424.dll
    - 2003-03-31 12:00:00 235,520 -c----w c:\winnt\$NtServicePackUninstall$\sptip.dll
    + 2004-08-04 07:56:45 250,880 -c----w c:\winnt\$NtServicePackUninstall$\sptip.dll
    + 2008-04-14 12:42:08 438,272 -c----w c:\winnt\$NtServicePackUninstall$\spuninst\spcompat.dll
    - 2004-08-04 05:42:32 170,496 -c----w c:\winnt\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 03:46:18 231,288 -c----w c:\winnt\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 03:46:28 382,840 -c----w c:\winnt\$NtServicePackUninstall$\spuninst\updspapi.dll
  6. 2009-03-24, 00:19 #16
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    + 2004-08-04 07:56:57 21,504 -c----w c:\winnt\$NtServicePackUninstall$\spupdwxp.exe
    + 2004-08-04 07:56:45 151,552 -c----w c:\winnt\$NtServicePackUninstall$\sqldb20.dll
    - 2003-10-28 04:12:44 471,040 -c----w c:\winnt\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-04 07:56:45 528,384 -c----w c:\winnt\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-04 07:56:45 462,848 -c----w c:\winnt\$NtServicePackUninstall$\sqlqp20.dll
    + 2004-08-04 07:56:45 110,592 -c----w c:\winnt\$NtServicePackUninstall$\sqlse20.dll
    - 2003-10-28 04:12:44 385,024 -c----w c:\winnt\$NtServicePackUninstall$\sqlsrv32.dll
    + 2004-08-04 07:56:45 442,368 -c----w c:\winnt\$NtServicePackUninstall$\sqlsrv32.dll
    - 2003-03-31 12:00:00 180,800 -c----w c:\winnt\$NtServicePackUninstall$\sqlunirl.dll
    + 2004-08-04 07:56:45 180,800 -c----w c:\winnt\$NtServicePackUninstall$\sqlunirl.dll
    - 2003-03-31 12:00:00 196,608 -c----w c:\winnt\$NtServicePackUninstall$\sqlxmlx.dll
    + 2004-08-04 07:56:45 217,088 -c----w c:\winnt\$NtServicePackUninstall$\sqlxmlx.dll
    - 2003-03-31 12:00:00 69,248 -c----w c:\winnt\$NtServicePackUninstall$\sr.sys
    + 2004-08-04 06:06:25 73,472 -c----w c:\winnt\$NtServicePackUninstall$\sr.sys
    - 2003-03-31 12:00:00 106,562 -c----w c:\winnt\$NtServicePackUninstall$\srchctls.dll
    + 2004-08-04 07:56:45 58,434 -c----w c:\winnt\$NtServicePackUninstall$\srchctls.dll
    - 2003-03-31 12:00:00 798,782 -c----w c:\winnt\$NtServicePackUninstall$\srchui.dll
    + 2004-08-04 07:56:45 725,566 -c----w c:\winnt\$NtServicePackUninstall$\srchui.dll
    - 2003-03-31 12:00:00 63,488 -c----w c:\winnt\$NtServicePackUninstall$\srclient.dll
    + 2004-08-04 07:56:45 67,584 -c----w c:\winnt\$NtServicePackUninstall$\srclient.dll
    - 2002-11-14 21:50:42 226,816 -c----w c:\winnt\$NtServicePackUninstall$\srrstr.dll
    + 2004-08-04 07:56:45 239,104 -c----w c:\winnt\$NtServicePackUninstall$\srrstr.dll
    - 2003-03-31 12:00:00 158,720 -c----w c:\winnt\$NtServicePackUninstall$\srsvc.dll
    + 2004-08-04 07:56:45 170,496 -c----w c:\winnt\$NtServicePackUninstall$\srsvc.dll
    - 2003-03-28 17:54:56 322,048 -c----w c:\winnt\$NtServicePackUninstall$\srv.sys
    + 2006-08-14 10:34:41 332,928 -c----w c:\winnt\$NtServicePackUninstall$\srv.sys
    - 2003-03-31 12:00:00 87,040 -c----w c:\winnt\$NtServicePackUninstall$\srvsvc.dll
    + 2004-12-07 19:32:34 96,768 -c----w c:\winnt\$NtServicePackUninstall$\srvsvc.dll
    - 2003-03-31 12:00:00 667,648 -c----w c:\winnt\$NtServicePackUninstall$\ss3dfo.scr
    + 2004-08-04 07:56:57 704,512 -c----w c:\winnt\$NtServicePackUninstall$\ss3dfo.scr
    - 2003-03-31 12:00:00 18,944 -c----w c:\winnt\$NtServicePackUninstall$\ssbezier.scr
    + 2004-08-04 07:56:57 19,968 -c----w c:\winnt\$NtServicePackUninstall$\ssbezier.scr
    - 2003-03-31 12:00:00 27,136 -c----w c:\winnt\$NtServicePackUninstall$\ssdpapi.dll
    + 2004-08-04 07:56:45 34,816 -c----w c:\winnt\$NtServicePackUninstall$\ssdpapi.dll
    - 2003-03-31 12:00:00 43,008 -c----w c:\winnt\$NtServicePackUninstall$\ssdpsrv.dll
    + 2004-08-04 07:56:45 71,680 -c----w c:\winnt\$NtServicePackUninstall$\ssdpsrv.dll
    - 2003-03-31 12:00:00 364,544 -c----w c:\winnt\$NtServicePackUninstall$\ssflwbox.scr
    + 2004-08-04 07:56:57 393,216 -c----w c:\winnt\$NtServicePackUninstall$\ssflwbox.scr
    - 2003-03-31 12:00:00 19,456 -c----w c:\winnt\$NtServicePackUninstall$\ssmarque.scr
    + 2004-08-04 07:56:57 20,992 -c----w c:\winnt\$NtServicePackUninstall$\ssmarque.scr
    - 2003-03-31 12:00:00 43,008 -c----w c:\winnt\$NtServicePackUninstall$\ssmypics.scr
    + 2004-08-04 07:56:57 47,104 -c----w c:\winnt\$NtServicePackUninstall$\ssmypics.scr
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\ssmyst.scr
    + 2004-08-04 07:56:57 18,944 -c----w c:\winnt\$NtServicePackUninstall$\ssmyst.scr
    - 2003-03-31 12:00:00 569,344 -c----w c:\winnt\$NtServicePackUninstall$\sspipes.scr
    + 2004-08-04 07:56:57 610,304 -c----w c:\winnt\$NtServicePackUninstall$\sspipes.scr
    - 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\ssstars.scr
    + 2004-08-04 07:56:57 14,336 -c----w c:\winnt\$NtServicePackUninstall$\ssstars.scr
    - 2003-03-31 12:00:00 638,976 -c----w c:\winnt\$NtServicePackUninstall$\sstext3d.scr
    + 2004-08-04 07:56:57 679,936 -c----w c:\winnt\$NtServicePackUninstall$\sstext3d.scr
    - 2003-03-31 12:00:00 30,720 -c----w c:\winnt\$NtServicePackUninstall$\sstub.dll
    + 2004-08-04 07:56:45 33,280 -c----w c:\winnt\$NtServicePackUninstall$\sstub.dll
    + 2004-08-04 07:56:45 22,016 -c----w c:\winnt\$NtServicePackUninstall$\startoc.dll
    + 2003-03-31 12:00:00 54,272 -c----w c:\winnt\$NtServicePackUninstall$\stclient.dll
    - 2003-03-31 12:00:00 80,896 -c----w c:\winnt\$NtServicePackUninstall$\stdprov.dll
    + 2004-08-04 07:56:45 86,528 -c----w c:\winnt\$NtServicePackUninstall$\stdprov.dll
    - 2003-03-31 12:00:00 61,952 -c----w c:\winnt\$NtServicePackUninstall$\sti.dll
    + 2004-08-04 07:56:45 67,584 -c----w c:\winnt\$NtServicePackUninstall$\sti.dll
    - 2003-03-31 12:00:00 130,560 -c----w c:\winnt\$NtServicePackUninstall$\sti_ci.dll
    + 2004-08-04 07:56:45 136,704 -c----w c:\winnt\$NtServicePackUninstall$\sti_ci.dll
    - 2003-03-31 12:00:00 20,480 -c----w c:\winnt\$NtServicePackUninstall$\stimon.exe
    + 2004-08-04 07:56:57 14,848 -c----w c:\winnt\$NtServicePackUninstall$\stimon.exe
    - 2003-03-31 12:00:00 117,760 -c----w c:\winnt\$NtServicePackUninstall$\stobject.dll
    + 2004-08-04 07:56:45 121,856 -c----w c:\winnt\$NtServicePackUninstall$\stobject.dll
    - 2002-08-29 09:41:18 71,168 -c----w c:\winnt\$NtServicePackUninstall$\storprop.dll
    + 2004-08-04 07:56:45 74,752 -c----w c:\winnt\$NtServicePackUninstall$\storprop.dll
    - 2002-12-12 06:14:32 45,696 -c----w c:\winnt\$NtServicePackUninstall$\stream.sys
    + 2004-08-04 06:08:02 48,640 -c----w c:\winnt\$NtServicePackUninstall$\stream.sys
    - 2003-02-17 16:16:28 14,976 -c----w c:\winnt\$NtServicePackUninstall$\streamip.sys
    + 2004-08-04 06:10:12 15,360 -c----w c:\winnt\$NtServicePackUninstall$\streamip.sys
    - 2003-03-31 12:00:00 251,904 -c----w c:\winnt\$NtServicePackUninstall$\strmdll.dll
    + 2006-08-21 17:52:08 246,814 -c----w c:\winnt\$NtServicePackUninstall$\strmdll.dll
    + 2004-08-04 07:56:45 75,776 -c----w c:\winnt\$NtServicePackUninstall$\strmfilt.dll
    + 2004-08-04 07:56:57 16,449 -c----w c:\winnt\$NtServicePackUninstall$\stub_fpsrvadm.exe
    + 2004-08-04 07:56:57 65,601 -c----w c:\winnt\$NtServicePackUninstall$\stub_fpsrvwin.exe
    - 2003-03-31 12:00:00 12,800 -c----w c:\winnt\$NtServicePackUninstall$\svchost.exe
    + 2004-08-04 07:56:57 14,336 -c----w c:\winnt\$NtServicePackUninstall$\svchost.exe
    - 2002-12-12 06:14:32 4,096 -c----w c:\winnt\$NtServicePackUninstall$\swenum.sys
    + 2004-08-04 05:58:41 4,352 -c----w c:\winnt\$NtServicePackUninstall$\swenum.sys
    + 2001-08-17 20:00:52 54,272 -c----w c:\winnt\$NtServicePackUninstall$\swmidi.sys
    - 2004-04-17 00:56:04 676,864 -c----w c:\winnt\$NtServicePackUninstall$\sxs.dll
    + 2006-10-19 13:56:32 713,216 -c----w c:\winnt\$NtServicePackUninstall$\sxs.dll
    - 2003-03-31 12:00:00 51,712 -c----w c:\winnt\$NtServicePackUninstall$\synceng.dll
    + 2004-08-04 07:56:46 57,856 -c----w c:\winnt\$NtServicePackUninstall$\synceng.dll
    - 2003-03-31 12:00:00 183,296 -c----w c:\winnt\$NtServicePackUninstall$\syncui.dll
    + 2004-08-04 07:56:46 191,488 -c----w c:\winnt\$NtServicePackUninstall$\syncui.dll
    - 2002-08-29 08:01:18 56,832 -c----w c:\winnt\$NtServicePackUninstall$\sysaudio.sys
    + 2004-08-04 06:15:55 60,800 -c----w c:\winnt\$NtServicePackUninstall$\sysaudio.sys
    - 2003-03-31 12:00:00 141,312 -c----w c:\winnt\$NtServicePackUninstall$\sysmod.dll
    + 2005-04-28 19:16:29 193,024 -c----w c:\winnt\$NtServicePackUninstall$\sysmod.dll
    + 2005-04-28 19:16:29 173,568 -c----w c:\winnt\$NtServicePackUninstall$\sysmoda.dll
    - 2003-03-31 12:00:00 103,936 -c----w c:\winnt\$NtServicePackUninstall$\sysocmgr.exe
    + 2004-08-04 07:56:57 105,984 -c----w c:\winnt\$NtServicePackUninstall$\sysocmgr.exe
    - 2003-03-03 20:45:10 940,032 -c----w c:\winnt\$NtServicePackUninstall$\syssetup.dll
    + 2004-08-04 07:56:46 984,576 -c----w c:\winnt\$NtServicePackUninstall$\syssetup.dll
    - 2003-03-31 12:00:00 198,656 -c----w c:\winnt\$NtServicePackUninstall$\t2embed.dll
    + 2005-10-17 21:14:46 118,272 -c----w c:\winnt\$NtServicePackUninstall$\t2embed.dll
    - 2003-03-31 12:00:00 13,824 -c----w c:\winnt\$NtServicePackUninstall$\tape.sys
    + 2004-08-04 05:59:59 14,976 -c----w c:\winnt\$NtServicePackUninstall$\tape.sys
    - 2003-03-31 12:00:00 829,952 -c----w c:\winnt\$NtServicePackUninstall$\tapi3.dll
    + 2004-08-04 07:56:46 858,624 -c----w c:\winnt\$NtServicePackUninstall$\tapi3.dll
    - 2003-03-31 12:00:00 165,376 -c----w c:\winnt\$NtServicePackUninstall$\tapi32.dll
    + 2004-08-04 07:56:46 181,760 -c----w c:\winnt\$NtServicePackUninstall$\tapi32.dll
    - 2003-03-31 12:00:00 233,984 -c----w c:\winnt\$NtServicePackUninstall$\tapisrv.dll
    + 2005-07-08 16:27:56 249,344 -c----w c:\winnt\$NtServicePackUninstall$\tapisrv.dll
    - 2003-03-31 12:00:00 128,512 -c----w c:\winnt\$NtServicePackUninstall$\taskmgr.exe
    + 2004-08-04 07:56:57 135,680 -c----w c:\winnt\$NtServicePackUninstall$\taskmgr.exe
    - 2003-03-31 12:00:00 332,928 -c----w c:\winnt\$NtServicePackUninstall$\tcpip.sys
    + 2008-06-20 10:45:13 360,320 -c----w c:\winnt\$NtServicePackUninstall$\tcpip.sys
    - 2003-03-31 12:00:00 196,288 -c----w c:\winnt\$NtServicePackUninstall$\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 -c----w c:\winnt\$NtServicePackUninstall$\tcpip6.sys
    - 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\tcpmib.dll
    + 2004-08-04 07:56:46 14,848 -c----w c:\winnt\$NtServicePackUninstall$\tcpmib.dll
    - 2003-03-31 12:00:00 40,448 -c----w c:\winnt\$NtServicePackUninstall$\tcpmon.dll
    + 2004-08-04 07:56:46 45,568 -c----w c:\winnt\$NtServicePackUninstall$\tcpmon.dll
    - 2003-03-31 12:00:00 40,960 -c----w c:\winnt\$NtServicePackUninstall$\tcpmonui.dll
    + 2004-08-04 07:56:46 45,568 -c----w c:\winnt\$NtServicePackUninstall$\tcpmonui.dll
    - 2002-05-14 18:08:54 32,827 -c----w c:\winnt\$NtServicePackUninstall$\tcptest.exe
    + 2004-08-04 07:56:57 32,827 -c----w c:\winnt\$NtServicePackUninstall$\tcptest.exe
    - 2002-05-14 18:08:56 16,384 -c----w c:\winnt\$NtServicePackUninstall$\tcptsat.dll
    + 2004-08-04 07:56:34 16,384 -c----w c:\winnt\$NtServicePackUninstall$\tcptsat.dll
    - 2003-03-31 12:00:00 16,256 -c----w c:\winnt\$NtServicePackUninstall$\tdi.sys
    + 2004-08-04 06:07:48 18,560 -c----w c:\winnt\$NtServicePackUninstall$\tdi.sys
    - 2003-03-31 12:00:00 11,144 -c----w c:\winnt\$NtServicePackUninstall$\tdpipe.sys
    + 2004-08-04 08:01:07 12,040 -c----w c:\winnt\$NtServicePackUninstall$\tdpipe.sys
    - 2003-03-31 12:00:00 20,232 -c----w c:\winnt\$NtServicePackUninstall$\tdtcp.sys
    + 2004-08-04 08:01:07 21,896 -c----w c:\winnt\$NtServicePackUninstall$\tdtcp.sys
    - 2003-03-31 12:00:00 71,168 -c----w c:\winnt\$NtServicePackUninstall$\telnet.exe
    + 2005-05-10 23:45:48 75,776 -c----w c:\winnt\$NtServicePackUninstall$\telnet.exe
    - 2002-08-29 09:46:42 38,024 -c----w c:\winnt\$NtServicePackUninstall$\termdd.sys
    + 2004-08-04 08:01:07 40,840 -c----w c:\winnt\$NtServicePackUninstall$\termdd.sys
    - 2003-03-31 12:00:00 343,552 -c----w c:\winnt\$NtServicePackUninstall$\termmgr.dll
    + 2004-08-04 07:56:46 358,400 -c----w c:\winnt\$NtServicePackUninstall$\termmgr.dll
    - 2003-03-31 12:00:00 200,192 -c----w c:\winnt\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-04 07:56:46 295,424 -c----w c:\winnt\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-04 06:00:04 149,376 -c----w c:\winnt\$NtServicePackUninstall$\tffsport.sys
    - 2003-03-31 12:00:00 384,000 -c----w c:\winnt\$NtServicePackUninstall$\themeui.dll
    + 2004-08-04 07:56:46 385,536 -c----w c:\winnt\$NtServicePackUninstall$\themeui.dll
    + 2004-08-04 05:32:13 10,240 -c----w c:\winnt\$NtServicePackUninstall$\tmigrate.dll
    - 2003-03-31 12:00:00 346,624 -c----w c:\winnt\$NtServicePackUninstall$\tourstart.exe
    + 2004-08-04 07:56:57 347,136 -c----w c:\winnt\$NtServicePackUninstall$\tourstart.exe
    - 2003-03-31 12:00:00 346,624 -c----w c:\winnt\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-04 07:56:57 347,136 -c----w c:\winnt\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-04 07:56:57 82,432 -c----w c:\winnt\$NtServicePackUninstall$\tp4mon.exe
    - 2003-03-31 12:00:00 10,752 -c----w c:\winnt\$NtServicePackUninstall$\tracert.exe
    + 2004-08-04 07:56:57 12,288 -c----w c:\winnt\$NtServicePackUninstall$\tracert.exe
    + 2003-03-31 12:00:00 11,264 -c----w c:\winnt\$NtServicePackUninstall$\tree.com
    - 2003-03-31 12:00:00 146,432 -c----w c:\winnt\$NtServicePackUninstall$\triedit.dll
    + 2004-08-04 07:56:46 153,088 -c----w c:\winnt\$NtServicePackUninstall$\triedit.dll
    - 2003-03-31 12:00:00 81,920 -c----w c:\winnt\$NtServicePackUninstall$\trkwks.dll
    + 2004-08-04 07:56:46 90,624 -c----w c:\winnt\$NtServicePackUninstall$\trkwks.dll
    - 2003-03-31 12:00:00 88,064 -c----w c:\winnt\$NtServicePackUninstall$\tscfgwmi.dll
    + 2004-08-04 07:56:46 93,696 -c----w c:\winnt\$NtServicePackUninstall$\tscfgwmi.dll
    + 2006-11-07 08:06:47 16,832 -c----w c:\winnt\$NtServicePackUninstall$\tscinst.vbs
    + 2006-11-07 08:06:47 12,451 -c----w c:\winnt\$NtServicePackUninstall$\tscuinst.vbs
    - 2003-03-31 12:00:00 8,456 -c----w c:\winnt\$NtServicePackUninstall$\tsddd.dll
    + 2004-08-04 08:01:07 12,168 -c----w c:\winnt\$NtServicePackUninstall$\tsddd.dll
    + 2006-11-13 06:02:58 36,352 -c----w c:\winnt\$NtServicePackUninstall$\tsgqec.dll
    - 2003-03-31 12:00:00 262,656 -c----w c:\winnt\$NtServicePackUninstall$\tshoot.dll
    + 2004-08-04 07:56:46 279,040 -c----w c:\winnt\$NtServicePackUninstall$\tshoot.dll
    - 2003-03-31 12:00:00 113,664 -c----w c:\winnt\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-04 07:56:46 121,856 -c----w c:\winnt\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-04 07:56:46 8,704 -c----w c:\winnt\$NtServicePackUninstall$\tty.dll
    + 2004-08-04 07:56:34 39,936 -c----w c:\winnt\$NtServicePackUninstall$\ttyres.dll
    + 2004-08-04 07:56:46 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ttyui.dll
    - 2003-03-31 12:00:00 9,856 -c----w c:\winnt\$NtServicePackUninstall$\tunmp.sys
    + 2004-08-04 06:03:17 12,416 -c----w c:\winnt\$NtServicePackUninstall$\tunmp.sys
    - 2003-03-31 12:00:00 46,592 -c----w c:\winnt\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-04 07:56:46 50,688 -c----w c:\winnt\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-04 07:56:46 44,032 -c----w c:\winnt\$NtServicePackUninstall$\twext.dll
    - 2004-03-06 02:16:10 97,280 -c----w c:\winnt\$NtServicePackUninstall$\txflog.dll
    + 2005-07-26 04:39:49 101,376 -c----w c:\winnt\$NtServicePackUninstall$\txflog.dll
    + 2008-07-14 11:09:18 62,976 -c----w c:\winnt\$NtServicePackUninstall$\tzchange.exe
    + 2004-08-04 06:07:43 44,672 -c----w c:\winnt\$NtServicePackUninstall$\uagp35.sys
    - 2003-03-31 12:00:00 64,000 -c----w c:\winnt\$NtServicePackUninstall$\udfs.sys
    + 2004-08-04 06:00:31 66,176 -c----w c:\winnt\$NtServicePackUninstall$\udfs.sys
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\udhisapi.dll
    + 2004-08-04 07:56:46 25,600 -c----w c:\winnt\$NtServicePackUninstall$\udhisapi.dll
    - 2003-03-31 12:00:00 268,800 -c----w c:\winnt\$NtServicePackUninstall$\ulib.dll
    + 2004-08-04 07:56:46 275,456 -c----w c:\winnt\$NtServicePackUninstall$\ulib.dll
    - 2003-03-31 12:00:00 32,256 -c----w c:\winnt\$NtServicePackUninstall$\umandlg.dll
    + 2006-10-04 13:33:38 35,840 -c----w c:\winnt\$NtServicePackUninstall$\umandlg.dll
    - 2003-03-31 12:00:00 107,008 -c----w c:\winnt\$NtServicePackUninstall$\umpnpmgr.dll
    + 2005-08-23 03:35:42 123,392 -c----w c:\winnt\$NtServicePackUninstall$\umpnpmgr.dll
    + 2007-03-23 04:24:06 376,832 -c----w c:\winnt\$NtServicePackUninstall$\unidrv.dll
    + 2007-03-23 05:03:54 749,568 -c----w c:\winnt\$NtServicePackUninstall$\unidrvui.dll
    + 2004-08-04 06:04:11 76,288 -c----w c:\winnt\$NtServicePackUninstall$\uniime.dll
    - 2003-03-31 12:00:00 69,120 -c----w c:\winnt\$NtServicePackUninstall$\unimdmat.dll
    + 2004-08-04 07:56:46 74,240 -c----w c:\winnt\$NtServicePackUninstall$\unimdmat.dll
    - 2003-03-31 12:00:00 13,824 -c----w c:\winnt\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 07:56:46 13,824 -c----w c:\winnt\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 07:56:34 619,520 -c----w c:\winnt\$NtServicePackUninstall$\unires.dll
    - 2003-03-31 12:00:00 302,080 -c----w c:\winnt\$NtServicePackUninstall$\untfs.dll
    + 2004-08-04 07:56:46 316,416 -c----w c:\winnt\$NtServicePackUninstall$\untfs.dll
    - 2003-03-31 12:00:00 137,088 -c----w c:\winnt\$NtServicePackUninstall$\update.sys
    + 2007-04-23 10:32:54 364,160 -c----w c:\winnt\$NtServicePackUninstall$\update.sys
    - 2003-03-31 12:00:00 138,752 -c----w c:\winnt\$NtServicePackUninstall$\uploadm.exe
    + 2004-08-04 07:56:57 150,528 -c----w c:\winnt\$NtServicePackUninstall$\uploadm.exe
    - 2003-03-31 12:00:00 120,320 -c----w c:\winnt\$NtServicePackUninstall$\upnp.dll
    + 2004-08-04 07:56:46 132,608 -c----w c:\winnt\$NtServicePackUninstall$\upnp.dll
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\upnpcont.exe
    + 2004-08-04 07:56:57 16,896 -c----w c:\winnt\$NtServicePackUninstall$\upnpcont.exe
    - 2003-03-31 12:00:00 164,864 -c----w c:\winnt\$NtServicePackUninstall$\upnphost.dll
    + 2007-02-05 20:17:02 185,344 -c----w c:\winnt\$NtServicePackUninstall$\upnphost.dll
    - 2003-03-31 12:00:00 231,424 -c----w c:\winnt\$NtServicePackUninstall$\upnpui.dll
    + 2004-08-04 07:56:46 239,616 -c----w c:\winnt\$NtServicePackUninstall$\upnpui.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\ups.exe
    + 2004-08-04 07:56:57 18,432 -c----w c:\winnt\$NtServicePackUninstall$\ups.exe
    - 2003-03-31 12:00:00 106,496 -c----w c:\winnt\$NtServicePackUninstall$\url.dll
    + 2004-08-04 07:56:46 37,888 -c----w c:\winnt\$NtServicePackUninstall$\url.dll
    - 2004-01-22 00:20:40 484,352 -c----w c:\winnt\$NtServicePackUninstall$\urlmon.dll
    + 2004-08-04 07:56:46 601,088 -c----w c:\winnt\$NtServicePackUninstall$\urlmon.dll
    - 2003-03-31 12:00:00 11,136 -c----w c:\winnt\$NtServicePackUninstall$\usb8023.sys
    + 2004-08-04 06:04:32 12,672 -c----w c:\winnt\$NtServicePackUninstall$\usb8023.sys
    + 2004-08-04 06:04:33 12,672 -c----w c:\winnt\$NtServicePackUninstall$\usb8023x.sys
    + 2004-08-04 06:07:56 59,264 -c----w c:\winnt\$NtServicePackUninstall$\usbaudio.sys
    + 2003-03-31 12:00:00 23,808 -c----w c:\winnt\$NtServicePackUninstall$\usbcamd.sys
    + 2003-03-31 12:00:00 23,936 -c----w c:\winnt\$NtServicePackUninstall$\usbcamd2.sys
    - 2003-07-03 23:53:26 28,160 -c----w c:\winnt\$NtServicePackUninstall$\usbccgp.sys
    + 2004-08-04 06:08:46 31,616 -c----w c:\winnt\$NtServicePackUninstall$\usbccgp.sys
    - 2003-07-03 23:50:46 25,216 -c----w c:\winnt\$NtServicePackUninstall$\usbehci.sys
    + 2004-08-04 06:08:37 26,624 -c----w c:\winnt\$NtServicePackUninstall$\usbehci.sys
    - 2003-07-03 23:52:58 53,120 -c----w c:\winnt\$NtServicePackUninstall$\usbhub.sys
    + 2004-08-04 06:08:42 57,600 -c----w c:\winnt\$NtServicePackUninstall$\usbhub.sys
    - 2003-03-31 12:00:00 15,232 -c----w c:\winnt\$NtServicePackUninstall$\usbintel.sys
    + 2004-08-04 06:08:57 16,000 -c----w c:\winnt\$NtServicePackUninstall$\usbintel.sys
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\usbmon.dll
    + 2004-08-04 07:56:46 16,896 -c----w c:\winnt\$NtServicePackUninstall$\usbmon.dll
    - 2003-07-03 23:51:16 16,000 -c----w c:\winnt\$NtServicePackUninstall$\usbohci.sys
    + 2004-08-04 06:08:36 17,024 -c----w c:\winnt\$NtServicePackUninstall$\usbohci.sys
    - 2003-07-03 23:49:30 138,752 -c----w c:\winnt\$NtServicePackUninstall$\usbport.sys
    + 2004-08-04 06:08:42 142,976 -c----w c:\winnt\$NtServicePackUninstall$\usbport.sys
    - 2002-08-29 09:50:02 24,960 -c----w c:\winnt\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 06:01:24 25,856 -c----w c:\winnt\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 06:58:46 15,104 -c----w c:\winnt\$NtServicePackUninstall$\usbscan.sys
    + 2004-08-04 06:08:42 25,600 -c----w c:\winnt\$NtServicePackUninstall$\usbser.sys
    - 2002-08-29 07:32:52 21,760 -c----w c:\winnt\$NtServicePackUninstall$\usbstor.sys
    + 2004-08-04 06:08:46 26,496 -c----w c:\winnt\$NtServicePackUninstall$\usbstor.sys
    - 2003-07-03 23:51:46 19,328 -c----w c:\winnt\$NtServicePackUninstall$\usbuhci.sys
    + 2004-08-04 06:08:37 20,480 -c----w c:\winnt\$NtServicePackUninstall$\usbuhci.sys
    - 2001-08-18 04:36:34 67,072 -c----w c:\winnt\$NtServicePackUninstall$\usbui.dll
    + 2004-08-04 07:56:46 74,240 -c----w c:\winnt\$NtServicePackUninstall$\usbui.dll
    + 2004-08-04 06:10:10 78,464 -c----w c:\winnt\$NtServicePackUninstall$\usbvideo.sys
    - 2003-09-25 16:49:02 560,128 -c----w c:\winnt\$NtServicePackUninstall$\user32.dll
    + 2007-03-08 15:36:28 577,536 -c----w c:\winnt\$NtServicePackUninstall$\user32.dll
    - 2003-03-31 12:00:00 667,136 -c----w c:\winnt\$NtServicePackUninstall$\userenv.dll
    + 2004-08-04 07:56:46 723,456 -c----w c:\winnt\$NtServicePackUninstall$\userenv.dll
    - 2003-03-31 12:00:00 22,016 -c----w c:\winnt\$NtServicePackUninstall$\userinit.exe
    + 2004-08-04 07:56:57 24,576 -c----w c:\winnt\$NtServicePackUninstall$\userinit.exe
    - 2003-03-31 12:00:00 339,456 -c----w c:\winnt\$NtServicePackUninstall$\usp10.dll
    + 2004-08-04 07:56:46 406,528 -c----w c:\winnt\$NtServicePackUninstall$\usp10.dll
    - 2003-03-31 12:00:00 47,616 -c----w c:\winnt\$NtServicePackUninstall$\utilman.exe
    + 2006-10-04 08:48:37 50,176 -c----w c:\winnt\$NtServicePackUninstall$\utilman.exe
    - 2003-03-31 12:00:00 203,264 -c----w c:\winnt\$NtServicePackUninstall$\uxtheme.dll
    + 2004-08-04 07:56:46 218,624 -c----w c:\winnt\$NtServicePackUninstall$\uxtheme.dll
    - 2003-05-12 02:35:32 30,749 -c----w c:\winnt\$NtServicePackUninstall$\vbajet32.dll
    + 2004-08-04 07:56:46 30,749 -c----w c:\winnt\$NtServicePackUninstall$\vbajet32.dll
    - 2003-03-31 12:00:00 479,261 -c----w c:\winnt\$NtServicePackUninstall$\vbscript.dll
    + 2006-10-17 20:33:40 413,696 -c----w c:\winnt\$NtServicePackUninstall$\vbscript.dll
    + 2004-08-04 07:56:46 11,325 -c----w c:\winnt\$NtServicePackUninstall$\vchnt5.dll
    - 2003-03-31 12:00:00 24,064 -c----w c:\winnt\$NtServicePackUninstall$\vdmdbg.dll
    + 2004-08-04 07:56:46 26,112 -c----w c:\winnt\$NtServicePackUninstall$\vdmdbg.dll
    - 2003-03-31 12:00:00 48,640 -c----w c:\winnt\$NtServicePackUninstall$\vdmredir.dll
    + 2004-08-04 07:56:46 51,712 -c----w c:\winnt\$NtServicePackUninstall$\vdmredir.dll
    + 2006-03-17 00:38:01 28,672 -c----w c:\winnt\$NtServicePackUninstall$\verclsid.exe
    + 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\verifier.dll
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\version.dll
    + 2004-08-04 07:56:46 18,944 -c----w c:\winnt\$NtServicePackUninstall$\version.dll
    + 2004-08-04 07:56:46 53,760 -c----w c:\winnt\$NtServicePackUninstall$\vfwwdm32.dll
    - 2003-03-31 12:00:00 19,712 -c----w c:\winnt\$NtServicePackUninstall$\vga.sys
    + 2004-08-04 06:07:06 20,992 -c----w c:\winnt\$NtServicePackUninstall$\vga.sys
    - 2003-03-31 12:00:00 802,304 -c----w c:\winnt\$NtServicePackUninstall$\vgx.dll
    + 2004-08-04 07:56:46 848,384 -c----w c:\winnt\$NtServicePackUninstall$\vgx.dll
    + 2004-08-04 06:07:42 42,240 -c----w c:\winnt\$NtServicePackUninstall$\viaagp.sys
    - 2002-08-29 07:27:50 4,864 -c----w c:\winnt\$NtServicePackUninstall$\viaide.sys
    + 2004-08-04 05:59:42 5,376 -c----w c:\winnt\$NtServicePackUninstall$\viaide.sys
    - 2003-03-31 12:00:00 70,912 -c----w c:\winnt\$NtServicePackUninstall$\videoprt.sys
    + 2004-08-04 06:07:05 79,744 -c----w c:\winnt\$NtServicePackUninstall$\videoprt.sys
    - 2003-03-31 12:00:00 125,952 -c----w c:\winnt\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-04 07:56:46 131,584 -c----w c:\winnt\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-04 05:32:34 426,041 -c----w c:\winnt\$NtServicePackUninstall$\voicepad.dll
    + 2004-08-04 05:32:35 86,073 -c----w c:\winnt\$NtServicePackUninstall$\voicesub.dll
    - 2003-03-31 12:00:00 49,152 -c----w c:\winnt\$NtServicePackUninstall$\volsnap.sys
    + 2004-08-04 06:00:16 52,352 -c----w c:\winnt\$NtServicePackUninstall$\volsnap.sys
    - 2003-03-31 12:00:00 409,088 -c----w c:\winnt\$NtServicePackUninstall$\vssapi.dll
    + 2004-08-04 07:56:46 430,592 -c----w c:\winnt\$NtServicePackUninstall$\vssapi.dll
    - 2003-03-31 12:00:00 275,456 -c----w c:\winnt\$NtServicePackUninstall$\vssvc.exe
    + 2004-08-04 07:56:57 289,792 -c----w c:\winnt\$NtServicePackUninstall$\vssvc.exe
    - 2003-03-31 12:00:00 165,376 -c----w c:\winnt\$NtServicePackUninstall$\w32time.dll
    + 2004-08-04 07:56:46 174,592 -c----w c:\winnt\$NtServicePackUninstall$\w32time.dll
    + 2004-08-04 07:56:46 15,872 -c----w c:\winnt\$NtServicePackUninstall$\w3ssl.dll
    - 2003-03-31 12:00:00 444,928 -c----w c:\winnt\$NtServicePackUninstall$\w95upgnt.dll
    + 2004-08-04 07:56:46 483,840 -c----w c:\winnt\$NtServicePackUninstall$\w95upgnt.dll
    - 2003-03-03 23:57:20 42,496 -c----w c:\winnt\$NtServicePackUninstall$\wab.exe
    + 2004-08-04 07:56:57 46,080 -c----w c:\winnt\$NtServicePackUninstall$\wab.exe
    - 2004-06-24 22:54:44 463,360 -c----w c:\winnt\$NtServicePackUninstall$\wab32.dll
    + 2007-05-16 15:12:12 510,976 -c----w c:\winnt\$NtServicePackUninstall$\wab32.dll
    - 2003-03-31 12:00:00 249,344 -c----w c:\winnt\$NtServicePackUninstall$\wab32res.dll
    + 2004-08-04 07:56:34 249,856 -c----w c:\winnt\$NtServicePackUninstall$\wab32res.dll
    - 2003-03-03 23:57:18 30,208 -c----w c:\winnt\$NtServicePackUninstall$\wabfind.dll
    + 2004-08-04 07:56:46 32,768 -c----w c:\winnt\$NtServicePackUninstall$\wabfind.dll
    - 2003-03-03 23:57:20 77,824 -c----w c:\winnt\$NtServicePackUninstall$\wabimp.dll
    + 2007-05-16 15:12:15 85,504 -c----w c:\winnt\$NtServicePackUninstall$\wabimp.dll
    - 2003-03-03 23:57:18 27,648 -c----w c:\winnt\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-04 07:56:57 30,208 -c----w c:\winnt\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-04 06:04:52 13,568 -c----w c:\winnt\$NtServicePackUninstall$\wacompen.sys
    - 2003-03-31 12:00:00 33,280 -c----w c:\winnt\$NtServicePackUninstall$\wanarp.sys
    + 2004-08-04 06:04:57 34,560 -c----w c:\winnt\$NtServicePackUninstall$\wanarp.sys
    - 2003-03-31 12:00:00 16,384 -c----w c:\winnt\$NtServicePackUninstall$\watchdog.sys
    + 2004-08-04 06:07:32 17,664 -c----w c:\winnt\$NtServicePackUninstall$\watchdog.sys
    + 2003-03-31 12:00:00 208,896 -c----w c:\winnt\$NtServicePackUninstall$\wavemsp.dll
    - 2003-03-31 12:00:00 183,808 -c----w c:\winnt\$NtServicePackUninstall$\wbemcntl.dll
    + 2004-08-04 07:56:46 196,608 -c----w c:\winnt\$NtServicePackUninstall$\wbemcntl.dll
    - 2003-03-31 12:00:00 215,040 -c----w c:\winnt\$NtServicePackUninstall$\wbemcomn.dll
    + 2004-08-04 07:56:46 214,528 -c----w c:\winnt\$NtServicePackUninstall$\wbemcomn.dll
    - 2003-03-31 12:00:00 66,048 -c----w c:\winnt\$NtServicePackUninstall$\wbemcons.dll
    + 2004-08-04 07:56:46 71,680 -c----w c:\winnt\$NtServicePackUninstall$\wbemcons.dll
    - 2003-03-31 12:00:00 480,256 -c----w c:\winnt\$NtServicePackUninstall$\wbemcore.dll
    + 2004-08-04 07:56:46 530,944 -c----w c:\winnt\$NtServicePackUninstall$\wbemcore.dll
    - 2003-03-31 12:00:00 167,936 -c----w c:\winnt\$NtServicePackUninstall$\wbemdisp.dll
    + 2004-08-04 07:56:46 178,176 -c----w c:\winnt\$NtServicePackUninstall$\wbemdisp.dll
    - 2003-03-31 12:00:00 259,072 -c----w c:\winnt\$NtServicePackUninstall$\wbemess.dll
    + 2004-08-04 07:56:46 273,920 -c----w c:\winnt\$NtServicePackUninstall$\wbemess.dll
    - 2003-03-31 12:00:00 38,400 -c----w c:\winnt\$NtServicePackUninstall$\wbemperf.dll
    + 2004-08-04 07:56:46 43,008 -c----w c:\winnt\$NtServicePackUninstall$\wbemperf.dll
    - 2003-03-31 12:00:00 28,160 -c----w c:\winnt\$NtServicePackUninstall$\wbemprox.dll
    + 2004-08-04 07:56:46 18,944 -c----w c:\winnt\$NtServicePackUninstall$\wbemprox.dll
    - 2003-03-31 12:00:00 48,128 -c----w c:\winnt\$NtServicePackUninstall$\wbemsvc.dll
    + 2004-08-04 07:56:46 43,520 -c----w c:\winnt\$NtServicePackUninstall$\wbemsvc.dll
    - 2003-03-31 12:00:00 157,696 -c----w c:\winnt\$NtServicePackUninstall$\wbemtest.exe
    + 2004-08-04 07:56:57 116,224 -c----w c:\winnt\$NtServicePackUninstall$\wbemtest.exe
    - 2003-03-31 12:00:00 111,104 -c----w c:\winnt\$NtServicePackUninstall$\wbemupgd.dll
    + 2004-08-04 07:56:46 197,120 -c----w c:\winnt\$NtServicePackUninstall$\wbemupgd.dll
    + 2004-08-04 06:08:46 31,744 -c----w c:\winnt\$NtServicePackUninstall$\wceusbsh.sys
    - 2003-03-31 12:00:00 46,592 -c----w c:\winnt\$NtServicePackUninstall$\wdigest.dll
    + 2006-03-24 04:37:50 49,152 -c----w c:\winnt\$NtServicePackUninstall$\wdigest.dll
    + 2004-08-04 07:56:57 23,552 -c----w c:\winnt\$NtServicePackUninstall$\wdmaud.drv
    - 2002-08-29 08:00:48 77,440 -c----w c:\winnt\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\winnt\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\winnt\$NtServicePackUninstall$\wdmaud.sys.001
    - 2003-03-31 12:00:00 258,048 -c----w c:\winnt\$NtServicePackUninstall$\webcheck.dll
    + 2004-08-04 07:56:46 276,480 -c----w c:\winnt\$NtServicePackUninstall$\webcheck.dll
    - 2003-03-31 12:00:00 61,952 -c----w c:\winnt\$NtServicePackUninstall$\webclnt.dll
    + 2006-01-04 03:35:05 68,096 -c----w c:\winnt\$NtServicePackUninstall$\webclnt.dll
    - 2003-03-31 12:00:00 124,928 -c----w c:\winnt\$NtServicePackUninstall$\webvw.dll
    + 2004-08-04 07:56:46 135,680 -c----w c:\winnt\$NtServicePackUninstall$\webvw.dll
    - 2003-03-31 12:00:00 60,416 -c----w c:\winnt\$NtServicePackUninstall$\wextract.exe
    + 2004-08-04 07:56:57 65,536 -c----w c:\winnt\$NtServicePackUninstall$\wextract.exe
    - 2003-03-31 12:00:00 414,720 -c----w c:\winnt\$NtServicePackUninstall$\wiaacmgr.exe
    + 2004-08-04 07:56:57 433,664 -c----w c:\winnt\$NtServicePackUninstall$\wiaacmgr.exe
    - 2003-03-31 12:00:00 449,536 -c----w c:\winnt\$NtServicePackUninstall$\wiadefui.dll
    + 2004-08-04 07:56:46 463,360 -c----w c:\winnt\$NtServicePackUninstall$\wiadefui.dll
    - 2003-03-31 12:00:00 119,808 -c----w c:\winnt\$NtServicePackUninstall$\wiadss.dll
    + 2004-08-04 07:56:46 124,416 -c----w c:\winnt\$NtServicePackUninstall$\wiadss.dll
    - 2003-03-31 12:00:00 70,656 -c----w c:\winnt\$NtServicePackUninstall$\wiascr.dll
    + 2004-08-04 07:56:46 75,776 -c----w c:\winnt\$NtServicePackUninstall$\wiascr.dll
    - 2003-03-31 12:00:00 316,416 -c----w c:\winnt\$NtServicePackUninstall$\wiaservc.dll
    + 2006-12-19 18:16:47 333,824 -c----w c:\winnt\$NtServicePackUninstall$\wiaservc.dll
    - 2003-03-31 12:00:00 568,832 -c----w c:\winnt\$NtServicePackUninstall$\wiashext.dll
    + 2004-08-04 07:56:46 589,312 -c----w c:\winnt\$NtServicePackUninstall$\wiashext.dll
    - 2003-03-31 12:00:00 104,448 -c----w c:\winnt\$NtServicePackUninstall$\wiavideo.dll
    + 2004-08-04 07:56:46 111,104 -c----w c:\winnt\$NtServicePackUninstall$\wiavideo.dll
    - 2003-09-25 16:35:48 1,796,864 -c----w c:\winnt\$NtServicePackUninstall$\win32k.sys
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\winnt\$NtServicePackUninstall$\win32k.sys
    - 2003-03-31 12:00:00 99,328 -c----w c:\winnt\$NtServicePackUninstall$\win32spl.dll
    + 2004-08-04 07:56:46 101,888 -c----w c:\winnt\$NtServicePackUninstall$\win32spl.dll
    - 2003-03-31 12:00:00 403,456 -c----w c:\winnt\$NtServicePackUninstall$\winbrand.dll
    + 2004-08-04 07:56:35 937,984 -c----w c:\winnt\$NtServicePackUninstall$\winbrand.dll
    + 2006-10-24 20:30:06 716,288 -c----w c:\winnt\$NtServicePackUninstall$\windowscodecs.dll
    + 2006-10-24 20:29:50 352,256 -c----w c:\winnt\$NtServicePackUninstall$\windowscodecsext.dll
    - 2003-03-31 12:00:00 266,752 -c----w c:\winnt\$NtServicePackUninstall$\winhlp32.exe
    + 2004-08-04 07:56:57 283,648 -c----w c:\winnt\$NtServicePackUninstall$\winhlp32.exe
    - 2004-07-01 22:08:18 331,776 -c----w c:\winnt\$NtServicePackUninstall$\winhttp.dll
    + 2004-08-04 07:56:46 351,232 -c----w c:\winnt\$NtServicePackUninstall$\winhttp.dll
    - 2004-02-07 01:05:06 588,288 -c----w c:\winnt\$NtServicePackUninstall$\wininet.dll
    + 2004-08-04 07:56:46 656,384 -c----w c:\winnt\$NtServicePackUninstall$\wininet.dll
    - 2003-03-31 12:00:00 25,600 -c----w c:\winnt\$NtServicePackUninstall$\winipsec.dll
    + 2004-08-04 07:56:46 32,768 -c----w c:\winnt\$NtServicePackUninstall$\winipsec.dll
    - 2003-03-03 17:01:22 518,144 -c----w c:\winnt\$NtServicePackUninstall$\winlogon.exe
    + 2004-08-04 07:56:57 502,272 -c----w c:\winnt\$NtServicePackUninstall$\winlogon.exe
    - 2003-03-31 12:00:00 171,520 -c----w c:\winnt\$NtServicePackUninstall$\winmm.dll
    + 2004-08-04 07:56:46 176,128 -c----w c:\winnt\$NtServicePackUninstall$\winmm.dll
    - 2003-03-31 12:00:00 762,368 -c----w c:\winnt\$NtServicePackUninstall$\winntbbu.dll
    + 2004-08-04 07:56:35 764,928 -c----w c:\winnt\$NtServicePackUninstall$\winntbbu.dll
    - 2003-03-31 12:00:00 14,848 -c----w c:\winnt\$NtServicePackUninstall$\winrnr.dll
    + 2004-08-04 07:56:46 16,896 -c----w c:\winnt\$NtServicePackUninstall$\winrnr.dll
    - 2003-03-31 12:00:00 93,184 -c----w c:\winnt\$NtServicePackUninstall$\winscard.dll
    + 2004-08-04 07:56:46 99,328 -c----w c:\winnt\$NtServicePackUninstall$\winscard.dll
    + 2004-08-04 07:56:46 17,408 -c----w c:\winnt\$NtServicePackUninstall$\winshfhc.dll
    + 2004-08-04 07:56:57 146,432 -c----w c:\winnt\$NtServicePackUninstall$\winspool.drv
    - 2002-11-01 21:26:44 272,896 -c----w c:\winnt\$NtServicePackUninstall$\winsrv.dll
    + 2007-03-17 13:43:01 292,864 -c----w c:\winnt\$NtServicePackUninstall$\winsrv.dll
    - 2003-03-31 12:00:00 48,128 -c----w c:\winnt\$NtServicePackUninstall$\winsta.dll
    + 2004-08-04 07:56:46 53,760 -c----w c:\winnt\$NtServicePackUninstall$\winsta.dll
    - 2003-03-31 12:00:00 166,912 -c----w c:\winnt\$NtServicePackUninstall$\wintrust.dll
    + 2004-08-04 07:56:46 176,640 -c----w c:\winnt\$NtServicePackUninstall$\wintrust.dll
    - 2003-03-31 12:00:00 4,096 -c----w c:\winnt\$NtServicePackUninstall$\winver.exe
    + 2004-08-04 07:56:57 5,632 -c----w c:\winnt\$NtServicePackUninstall$\winver.exe
    - 2003-10-21 23:06:41 119,808 -c----w c:\winnt\$NtServicePackUninstall$\wkssvc.dll
    + 2006-08-17 12:28:27 132,096 -c----w c:\winnt\$NtServicePackUninstall$\wkssvc.dll
    - 2003-03-31 12:00:00 168,448 -c----w c:\winnt\$NtServicePackUninstall$\wldap32.dll
    + 2004-08-04 07:56:46 172,032 -c----w c:\winnt\$NtServicePackUninstall$\wldap32.dll
    - 2003-03-31 12:00:00 86,528 -c----w c:\winnt\$NtServicePackUninstall$\wlnotify.dll
    + 2004-08-04 07:56:46 92,672 -c----w c:\winnt\$NtServicePackUninstall$\wlnotify.dll
    - 2003-03-31 12:00:00 5,632 -c----w c:\winnt\$NtServicePackUninstall$\wmi.dll
    + 2004-08-04 07:56:35 5,632 -c----w c:\winnt\$NtServicePackUninstall$\wmi.dll
    + 2004-08-04 06:07:41 8,832 -c----w c:\winnt\$NtServicePackUninstall$\wmiacpi.sys
    - 2003-03-31 12:00:00 183,808 -c----w c:\winnt\$NtServicePackUninstall$\wmiadap.exe
    + 2004-08-04 07:56:57 196,608 -c----w c:\winnt\$NtServicePackUninstall$\wmiadap.exe
    - 2003-03-31 12:00:00 6,144 -c----w c:\winnt\$NtServicePackUninstall$\wmiapres.dll
    + 2004-08-04 07:56:35 6,656 -c----w c:\winnt\$NtServicePackUninstall$\wmiapres.dll
    - 2003-03-31 12:00:00 82,432 -c----w c:\winnt\$NtServicePackUninstall$\wmiaprpl.dll
    + 2004-08-04 07:56:46 89,088 -c----w c:\winnt\$NtServicePackUninstall$\wmiaprpl.dll
    - 2003-03-31 12:00:00 117,248 -c----w c:\winnt\$NtServicePackUninstall$\wmiapsrv.exe
    + 2004-08-04 07:56:57 126,464 -c----w c:\winnt\$NtServicePackUninstall$\wmiapsrv.exe
    - 2003-03-31 12:00:00 55,808 -c----w c:\winnt\$NtServicePackUninstall$\wmicookr.dll
    + 2004-08-04 07:56:46 60,928 -c----w c:\winnt\$NtServicePackUninstall$\wmicookr.dll
    - 2003-03-31 12:00:00 138,752 -c----w c:\winnt\$NtServicePackUninstall$\wmidcprv.dll
    + 2004-08-04 07:56:46 140,800 -c----w c:\winnt\$NtServicePackUninstall$\wmidcprv.dll
    - 2003-03-31 12:00:00 149,504 -c----w c:\winnt\$NtServicePackUninstall$\wmipcima.dll
    + 2004-08-04 07:56:46 156,672 -c----w c:\winnt\$NtServicePackUninstall$\wmipcima.dll
    - 2003-03-31 12:00:00 124,928 -c----w c:\winnt\$NtServicePackUninstall$\wmipdskq.dll
    + 2004-08-04 07:56:46 132,096 -c----w c:\winnt\$NtServicePackUninstall$\wmipdskq.dll
    - 2003-03-31 12:00:00 58,880 -c----w c:\winnt\$NtServicePackUninstall$\wmipiprt.dll
    + 2004-08-04 07:56:46 62,464 -c----w c:\winnt\$NtServicePackUninstall$\wmipiprt.dll
    - 2003-03-31 12:00:00 59,904 -c----w c:\winnt\$NtServicePackUninstall$\wmipjobj.dll
    + 2004-08-04 07:56:46 62,976 -c----w c:\winnt\$NtServicePackUninstall$\wmipjobj.dll
    - 2003-03-31 12:00:00 122,368 -c----w c:\winnt\$NtServicePackUninstall$\wmiprov.dll
    + 2004-08-04 07:56:46 144,896 -c----w c:\winnt\$NtServicePackUninstall$\wmiprov.dll
    - 2003-03-31 12:00:00 408,576 -c----w c:\winnt\$NtServicePackUninstall$\wmiprvsd.dll
    + 2004-08-04 07:56:46 437,248 -c----w c:\winnt\$NtServicePackUninstall$\wmiprvsd.dll
    - 2003-03-31 12:00:00 203,776 -c----w c:\winnt\$NtServicePackUninstall$\wmiprvse.exe
    + 2004-08-04 07:56:57 218,112 -c----w c:\winnt\$NtServicePackUninstall$\wmiprvse.exe
    - 2003-03-31 12:00:00 38,912 -c----w c:\winnt\$NtServicePackUninstall$\wmipsess.dll
    + 2004-08-04 07:56:46 41,472 -c----w c:\winnt\$NtServicePackUninstall$\wmipsess.dll
    - 2003-03-31 12:00:00 101,376 -c----w c:\winnt\$NtServicePackUninstall$\wmisvc.dll
    + 2004-08-04 07:56:46 144,896 -c----w c:\winnt\$NtServicePackUninstall$\wmisvc.dll
    - 2003-03-31 12:00:00 96,256 -c----w c:\winnt\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-04 07:56:46 95,232 -c----w c:\winnt\$NtServicePackUninstall$\wmiutils.dll
    - 2002-12-20 19:04:58 217,600 -c----w c:\winnt\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-04 07:56:46 167,936 -c----w c:\winnt\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-04 07:56:46 4,096 -c----w c:\winnt\$NtServicePackUninstall$\wmm2eres.dll
    - 2002-12-20 19:05:04 7,168 -c----w c:\winnt\$NtServicePackUninstall$\wmm2ext.dll
    + 2004-08-04 07:56:46 7,680 -c----w c:\winnt\$NtServicePackUninstall$\wmm2ext.dll
    - 2002-12-20 19:04:58 382,464 -c----w c:\winnt\$NtServicePackUninstall$\wmm2filt.dll
    + 2004-08-04 07:56:46 402,432 -c----w c:\winnt\$NtServicePackUninstall$\wmm2filt.dll
    - 2002-12-20 19:05:00 489,984 -c----w c:\winnt\$NtServicePackUninstall$\wmm2fxa.dll
    + 2004-08-04 07:56:46 502,272 -c----w c:\winnt\$NtServicePackUninstall$\wmm2fxa.dll
    - 2003-01-15 17:08:10 318,464 -c----w c:\winnt\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-04 07:56:46 325,632 -c----w c:\winnt\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-04 07:56:46 4,256,768 -c----w c:\winnt\$NtServicePackUninstall$\wmm2res.dll
    + 2004-08-04 07:56:46 5,632 -c----w c:\winnt\$NtServicePackUninstall$\wmm2res2.dll
    + 2006-10-24 20:30:00 276,992 -c----w c:\winnt\$NtServicePackUninstall$\wmphoto.dll
    - 2003-03-31 12:00:00 118,784 -c----w c:\winnt\$NtServicePackUninstall$\wmsdmoe.dll
    + 2004-08-04 07:56:46 115,200 -c----w c:\winnt\$NtServicePackUninstall$\wmsdmoe.dll
    - 2003-03-31 12:00:00 296,448 -c----w c:\winnt\$NtServicePackUninstall$\wmstream.dll
    + 2004-08-04 07:56:46 303,616 -c----w c:\winnt\$NtServicePackUninstall$\wmstream.dll
    - 2003-03-31 12:00:00 200,704 -c----w c:\winnt\$NtServicePackUninstall$\wordpad.exe
    + 2004-08-04 07:56:57 214,528 -c----w c:\winnt\$NtServicePackUninstall$\wordpad.exe
    - 2003-03-31 12:00:00 247,808 -c----w c:\winnt\$NtServicePackUninstall$\wow32.dll
    + 2004-08-04 07:56:46 264,192 -c----w c:\winnt\$NtServicePackUninstall$\wow32.dll
    - 2003-03-31 12:00:00 31,232 -c----w c:\winnt\$NtServicePackUninstall$\wpabaln.exe
    + 2004-08-04 07:56:57 32,256 -c----w c:\winnt\$NtServicePackUninstall$\wpabaln.exe
    - 2003-03-31 12:00:00 29,184 -c----w c:\winnt\$NtServicePackUninstall$\wpnpinst.exe
    + 2004-08-04 07:56:57 32,256 -c----w c:\winnt\$NtServicePackUninstall$\wpnpinst.exe
    - 2003-03-31 12:00:00 75,264 -c----w c:\winnt\$NtServicePackUninstall$\ws2_32.dll
    + 2004-08-04 07:56:46 82,944 -c----w c:\winnt\$NtServicePackUninstall$\ws2_32.dll
    - 2003-03-31 12:00:00 18,944 -c----w c:\winnt\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-04 07:56:46 19,968 -c----w c:\winnt\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-04 07:56:57 13,824 -c----w c:\winnt\$NtServicePackUninstall$\wscntfy.exe
    - 2003-03-31 12:00:00 118,834 -c----w c:\winnt\$NtServicePackUninstall$\wscript.exe
    + 2004-08-04 07:56:57 114,688 -c----w c:\winnt\$NtServicePackUninstall$\wscript.exe
    + 2004-08-04 07:56:46 81,408 -c----w c:\winnt\$NtServicePackUninstall$\wscsvc.dll
    + 2004-08-04 07:56:46 108,032 -c----w c:\winnt\$NtServicePackUninstall$\wshbth.dll
    - 2003-03-31 12:00:00 28,721 -c----w c:\winnt\$NtServicePackUninstall$\wshcon.dll
    + 2004-08-04 07:56:46 28,672 -c----w c:\winnt\$NtServicePackUninstall$\wshcon.dll
    - 2003-03-31 12:00:00 65,585 -c----w c:\winnt\$NtServicePackUninstall$\wshext.dll
    + 2004-08-04 07:56:46 65,536 -c----w c:\winnt\$NtServicePackUninstall$\wshext.dll
    - 2003-03-31 12:00:00 13,312 -c----w c:\winnt\$NtServicePackUninstall$\wship6.dll
    + 2004-08-04 07:56:46 14,336 -c----w c:\winnt\$NtServicePackUninstall$\wship6.dll
    + 2004-08-04 07:56:46 8,192 -c----w c:\winnt\$NtServicePackUninstall$\wshirda.dll
    - 2003-03-31 12:00:00 10,240 -c----w c:\winnt\$NtServicePackUninstall$\wshrm.dll
    + 2004-08-04 07:56:46 11,776 -c----w c:\winnt\$NtServicePackUninstall$\wshrm.dll
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\wshtcpip.dll
    + 2004-08-04 07:56:46 19,968 -c----w c:\winnt\$NtServicePackUninstall$\wshtcpip.dll
    - 2003-03-31 12:00:00 38,912 -c----w c:\winnt\$NtServicePackUninstall$\wsnmp32.dll
    + 2004-08-04 07:56:46 42,496 -c----w c:\winnt\$NtServicePackUninstall$\wsnmp32.dll
    - 2003-03-31 12:00:00 21,504 -c----w c:\winnt\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-04 07:56:46 22,528 -c----w c:\winnt\$NtServicePackUninstall$\wsock32.dll
    - 2003-02-17 16:16:32 18,688 -c----w c:\winnt\$NtServicePackUninstall$\wstcodec.sys
    + 2004-08-04 06:10:21 19,328 -c----w c:\winnt\$NtServicePackUninstall$\wstcodec.sys
    - 2003-02-17 16:16:32 47,104 -c----w c:\winnt\$NtServicePackUninstall$\wstdecod.dll
    + 2004-08-04 07:56:46 50,688 -c----w c:\winnt\$NtServicePackUninstall$\wstdecod.dll
    - 2003-03-31 12:00:00 17,408 -c----w c:\winnt\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-04 07:56:46 18,432 -c----w c:\winnt\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-04 07:56:46 430,592 -c----w c:\winnt\$NtServicePackUninstall$\wuapi.dll
    + 2004-08-04 07:56:57 111,104 -c----w c:\winnt\$NtServicePackUninstall$\wuauclt.exe
    + 2004-08-04 07:56:57 165,888 -c----w c:\winnt\$NtServicePackUninstall$\wuauclt1.exe
    + 2004-08-04 07:56:46 1,134,592 -c----w c:\winnt\$NtServicePackUninstall$\wuaueng.dll
    + 2004-08-04 07:56:46 183,296 -c----w c:\winnt\$NtServicePackUninstall$\wuaueng1.dll
    - 2003-03-31 12:00:00 9,216 -c----w c:\winnt\$NtServicePackUninstall$\wuauserv.dll
    + 2004-08-04 07:56:46 6,656 -c----w c:\winnt\$NtServicePackUninstall$\wuauserv.dll
    + 2004-08-04 07:56:46 112,640 -c----w c:\winnt\$NtServicePackUninstall$\wucltui.dll
    + 2004-08-04 07:56:46 36,864 -c----w c:\winnt\$NtServicePackUninstall$\wups.dll
    + 2004-08-04 07:56:46 120,320 -c----w c:\winnt\$NtServicePackUninstall$\wuweb.dll
    - 2003-10-07 01:30:17 57,344 -c----w c:\winnt\$NtServicePackUninstall$\wzcdlg.dll
    + 2004-08-04 07:56:46 378,368 -c----w c:\winnt\$NtServicePackUninstall$\wzcdlg.dll
    - 2003-10-07 01:30:22 31,232 -c----w c:\winnt\$NtServicePackUninstall$\wzcsapi.dll
    + 2004-08-04 07:56:46 51,712 -c----w c:\winnt\$NtServicePackUninstall$\wzcsapi.dll
    - 2003-10-07 01:30:20 281,088 -c----w c:\winnt\$NtServicePackUninstall$\wzcsvc.dll
    + 2004-08-04 07:56:46 359,936 -c----w c:\winnt\$NtServicePackUninstall$\wzcsvc.dll
    - 2003-03-31 12:00:00 86,016 -c----w c:\winnt\$NtServicePackUninstall$\xactsrv.dll
    + 2004-08-04 07:56:46 91,648 -c----w c:\winnt\$NtServicePackUninstall$\xactsrv.dll
    - 2003-03-31 12:00:00 28,160 -c----w c:\winnt\$NtServicePackUninstall$\xcopy.exe
    + 2004-08-04 07:56:57 30,720 -c----w c:\winnt\$NtServicePackUninstall$\xcopy.exe
    + 2006-07-14 15:51:51 121,856 -c----w c:\winnt\$NtServicePackUninstall$\xmllite.dll
    + 2004-08-04 07:56:46 129,536 -c----w c:\winnt\$NtServicePackUninstall$\xmlprov.dll
    + 2004-08-04 07:56:46 50,176 -c----w c:\winnt\$NtServicePackUninstall$\xmlprovi.dll
    - 2003-03-31 12:00:00 9,728 -c----w c:\winnt\$NtServicePackUninstall$\xolehlp.dll
    + 2006-03-01 19:42:42 11,776 -c----w c:\winnt\$NtServicePackUninstall$\xolehlp.dll
    + 2006-10-10 12:44:50 557,568 -c----w c:\winnt\$NtServicePackUninstall$\xpnetdiag.exe
    - 2004-06-30 23:59:25 158,720 -c----w c:\winnt\$NtServicePackUninstall$\xpob2res.dll
    + 2004-08-04 07:56:36 438,784 -c----w c:\winnt\$NtServicePackUninstall$\xpob2res.dll
    - 2003-03-31 12:00:00 187,904 -c----w c:\winnt\$NtServicePackUninstall$\xpsp1res.dll
    + 2004-08-04 07:56:36 187,392 -c----w c:\winnt\$NtServicePackUninstall$\xpsp1res.dll
    - 2004-04-11 04:04:21 593,408 -c----w c:\winnt\$NtServicePackUninstall$\xpsp2res.dll
    + 2004-08-04 07:56:36 2,897,920 -c----w c:\winnt\$NtServicePackUninstall$\xpsp2res.dll
    + 2007-10-29 10:04:03 350,720 -c----w c:\winnt\$NtServicePackUninstall$\xpsp3res.dll
    + 2004-08-04 07:56:46 116,224 -c----w c:\winnt\$NtServicePackUninstall$\xrxwiadr.dll
    - 2002-09-25 21:18:58 316,928 -c----w c:\winnt\$NtServicePackUninstall$\zipfldr.dll
    + 2004-08-04 07:56:46 337,920 -c----w c:\winnt\$NtServicePackUninstall$\zipfldr.dll
    + 2005-10-22 01:11:02 209,632 -c----w c:\winnt\$NtUninstallbasecsp$\spuninst\spuninst.exe
    + 2005-10-22 01:11:02 371,936 -c----w c:\winnt\$NtUninstallbasecsp$\spuninst\updspapi.dll
    + 2004-02-19 07:14:48 1,531 -c--a-w c:\winnt\$NtUninstallKB820291$\spuninst\spuninst.bat
    + 2004-08-04 07:56:44 116,224 -c----w c:\winnt\$NtUninstallKB920342$\p2p.dll
    + 2004-08-04 07:56:44 86,016 -c----w c:\winnt\$NtUninstallKB920342$\p2pgasvc.dll
    + 2004-08-04 07:56:44 312,320 -c----w c:\winnt\$NtUninstallKB920342$\p2pgraph.dll
    + 2004-08-04 07:56:44 88,064 -c----w c:\winnt\$NtUninstallKB920342$\p2pnetsh.dll
    + 2004-08-04 07:56:44 526,848 -c----w c:\winnt\$NtUninstallKB920342$\p2psvc.dll
    + 2004-08-04 07:56:44 48,640 -c----w c:\winnt\$NtUninstallKB920342$\pnrpnsp.dll
    + 2005-10-12 23:12:26 213,216 -c----w c:\winnt\$NtUninstallKB920342$\spuninst\spuninst.exe
    + 2005-10-12 23:12:34 371,424 -c----w c:\winnt\$NtUninstallKB920342$\spuninst\updspapi.dll
    + 2004-08-04 07:56:50 72,704 -c----w c:\winnt\$NtUninstallKB925720$\magnify.exe
    + 2004-08-04 07:56:54 53,760 -c----w c:\winnt\$NtUninstallKB925720$\narrator.exe
    + 2004-08-04 07:56:55 215,552 -c----w c:\winnt\$NtUninstallKB925720$\osk.exe
    + 2005-10-12 23:16:49 213,216 -c----w c:\winnt\$NtUninstallKB925720$\spuninst\spuninst.exe
    + 2005-10-12 23:16:56 371,424 -c----w c:\winnt\$NtUninstallKB925720$\spuninst\updspapi.dll
    + 2004-08-04 07:56:46 35,840 -c----w c:\winnt\$NtUninstallKB925720$\umandlg.dll
    + 2004-08-04 07:56:57 50,176 -c----w c:\winnt\$NtUninstallKB925720$\utilman.exe
    + 2004-08-04 05:59:40 407,552 -c----w c:\winnt\$NtUninstallKB925876$\mstsc.exe
    + 2004-08-04 05:59:43 655,360 -c----w c:\winnt\$NtUninstallKB925876$\mstscax.dll
    + 2005-10-12 23:12:26 213,216 -c----w c:\winnt\$NtUninstallKB925876$\spuninst\spuninst.exe
    + 2005-10-12 23:12:33 371,424 -c----w c:\winnt\$NtUninstallKB925876$\spuninst\updspapi.dll
    + 2004-08-04 07:56:42 294,400 -c----w c:\winnt\$NtUninstallKB932823-v3$\msctf.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB938464$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB938464$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB938464_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB938464_0$\spuninst\updspapi.dll
    + 2005-08-30 03:54:26 1,287,168 -c----w c:\winnt\$NtUninstallKB941568$\quartz.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB941568$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB941568$\spuninst\updspapi.dll
    + 2007-10-28 00:39:36 213,216 -c----w c:\winnt\$NtUninstallKB941569$\spuninst\spuninst.exe
    + 2007-10-28 00:39:46 371,424 -c----w c:\winnt\$NtUninstallKB941569$\spuninst\updspapi.dll
    + 2006-10-19 05:47:18 222,208 -c----w c:\winnt\$NtUninstallKB941569$\wmasf.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB941644$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB941644$\spuninst\updspapi.dll
    + 2006-04-20 11:51:50 359,808 -c----w c:\winnt\$NtUninstallKB941644$\tcpip.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB941693$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB941693$\spuninst\updspapi.dll
    + 2007-03-08 13:47:48 1,843,584 -c----w c:\winnt\$NtUninstallKB941693$\win32k.sys
  7. 2009-03-24, 00:21 #17
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB942763$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB942763$\spuninst\updspapi.dll
    + 2007-07-18 12:42:22 60,416 -c----w c:\winnt\$NtUninstallKB942763$\tzchange.exe
    + 2007-05-17 11:28:05 549,376 -c----w c:\winnt\$NtUninstallKB943055$\oleaut32.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB943055$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB943055$\spuninst\updspapi.dll
    + 2006-08-17 12:28:27 721,920 -c----w c:\winnt\$NtUninstallKB943485$\lsasrv.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB943485$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB943485$\spuninst\updspapi.dll
    + 2005-05-30 23:17:44 12,400 -c----w c:\winnt\$NtUninstallKB944653$\secdrv.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB944653$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB944653$\spuninst\updspapi.dll
    + 2006-06-26 17:37:10 148,480 -c----w c:\winnt\$NtUninstallKB945553$\dnsapi.dll
    + 2004-08-04 07:56:42 45,568 -c----w c:\winnt\$NtUninstallKB945553$\dnsrslvr.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB945553$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB945553$\spuninst\updspapi.dll
    + 2004-08-04 06:00:56 181,248 -c----w c:\winnt\$NtUninstallKB946026$\mrxdav.sys
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB946026$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB946026$\spuninst\updspapi.dll
    + 2008-04-14 00:11:59 82,944 -c----w c:\winnt\$NtUninstallKB946648$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB946648$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB946648$\spuninst\updspapi.dll
    + 2004-08-04 07:56:43 82,944 -c----w c:\winnt\$NtUninstallKB946648_0$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB946648_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB946648_0$\spuninst\updspapi.dll
    + 2007-06-19 13:31:19 282,112 -c----w c:\winnt\$NtUninstallKB948590$\gdi32.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB948590$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB948590$\spuninst\updspapi.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\$NtUninstallKB948881$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\winnt\$NtUninstallKB948881$\spuninst\updspapi.dll
    + 2004-08-04 07:56:42 561,179 -c----w c:\winnt\$NtUninstallKB950749$\dao360.dll
    + 2004-08-04 07:56:43 512,029 -c----w c:\winnt\$NtUninstallKB950749$\msexch40.dll
    + 2004-08-04 07:56:43 319,517 -c----w c:\winnt\$NtUninstallKB950749$\msexcl40.dll
    + 2004-08-04 07:56:43 1,507,356 -c----w c:\winnt\$NtUninstallKB950749$\msjet40.dll
    + 2004-03-01 18:52:15 358,976 -c----w c:\winnt\$NtUninstallKB950749$\msjetol1.dll
    + 2004-03-01 18:52:15 358,976 -c----w c:\winnt\$NtUninstallKB950749$\msjetoledb40.dll
    + 2004-08-04 07:56:43 151,583 -c----w c:\winnt\$NtUninstallKB950749$\msjint40.dll
    + 2004-08-04 07:56:43 53,279 -c----w c:\winnt\$NtUninstallKB950749$\msjter40.dll
    + 2004-08-04 07:56:43 241,693 -c----w c:\winnt\$NtUninstallKB950749$\msjtes40.dll
    + 2004-08-04 07:56:43 213,023 -c----w c:\winnt\$NtUninstallKB950749$\msltus40.dll
    + 2004-08-04 07:56:43 348,189 -c----w c:\winnt\$NtUninstallKB950749$\mspbde40.dll
    + 2004-08-04 07:56:43 421,919 -c----w c:\winnt\$NtUninstallKB950749$\msrd2x40.dll
    + 2004-08-04 07:56:43 315,423 -c----w c:\winnt\$NtUninstallKB950749$\msrd3x40.dll
    + 2004-08-04 07:56:43 552,989 -c----w c:\winnt\$NtUninstallKB950749$\msrepl40.dll
    + 2004-08-04 07:56:43 258,077 -c----w c:\winnt\$NtUninstallKB950749$\mstext40.dll
    + 2004-08-04 07:56:44 831,519 -c----w c:\winnt\$NtUninstallKB950749$\mswdat10.dll
    + 2004-08-04 07:56:44 614,429 -c----w c:\winnt\$NtUninstallKB950749$\mswstr10.dll
    + 2004-08-04 07:56:44 348,189 -c----w c:\winnt\$NtUninstallKB950749$\msxbde40.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\$NtUninstallKB950749$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\$NtUninstallKB950749$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB950760$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB950760$\spuninst\updspapi.dll
    + 2008-04-13 18:55:08 202,624 -c----w c:\winnt\$NtUninstallKB950762$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB950762$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB950762$\spuninst\updspapi.dll
    + 2006-07-13 08:48:58 202,240 -c----w c:\winnt\$NtUninstallKB950762_0$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB950762_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB950762_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:53 246,272 -c----w c:\winnt\$NtUninstallKB950974$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB950974$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\winnt\$NtUninstallKB950974$\spuninst\updspapi.dll
    + 2005-07-26 04:39:45 243,200 -c----w c:\winnt\$NtUninstallKB950974_0$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB950974_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\winnt\$NtUninstallKB950974_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:54 691,712 -c----w c:\winnt\$NtUninstallKB951066$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB951066$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB951066$\spuninst\updspapi.dll
    + 2007-08-21 06:15:44 683,520 -c----w c:\winnt\$NtUninstallKB951066_0$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB951066_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB951066_0$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
    + 2007-11-13 11:31:11 60,416 -c----w c:\winnt\$NtUninstallKB951072-v2$\tzchange.exe
    + 2008-04-14 12:30:49 272,128 -c----w c:\winnt\$NtUninstallKB951376-v2$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
    + 2008-04-14 11:01:02 272,128 -c----w c:\winnt\$NtUninstallKB951376-v2_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
    + 2008-04-13 18:46:32 273,024 -c----w c:\winnt\$NtUninstallKB951376$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951376$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB951376$\spuninst\updspapi.dll
    + 2004-08-04 06:10:37 274,304 -c----w c:\winnt\$NtUninstallKB951376_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951376_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB951376_0$\spuninst\updspapi.dll
    + 2008-04-14 00:12:03 1,288,192 -c----w c:\winnt\$NtUninstallKB951698$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951698$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB951698$\spuninst\updspapi.dll
    + 2007-10-29 22:43:03 1,287,680 -c----w c:\winnt\$NtUninstallKB951698_0$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB951698_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB951698_0$\spuninst\updspapi.dll
    + 2008-04-13 19:19:23 138,112 -c----w c:\winnt\$NtUninstallKB951748$\afd.sys
    + 2008-04-14 00:11:52 147,968 -c----w c:\winnt\$NtUninstallKB951748$\dnsapi.dll
    + 2008-04-14 00:12:01 245,248 -c----w c:\winnt\$NtUninstallKB951748$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB951748$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\winnt\$NtUninstallKB951748$\spuninst\updspapi.dll
    + 2008-04-13 19:20:16 361,344 -c----w c:\winnt\$NtUninstallKB951748$\tcpip.sys
    + 2008-04-13 19:00:02 225,664 -c----w c:\winnt\$NtUninstallKB951748$\tcpip6.sys
    + 2004-08-04 06:14:14 138,496 -c----w c:\winnt\$NtUninstallKB951748_0$\afd.sys
    + 2008-02-20 05:32:43 148,992 -c----w c:\winnt\$NtUninstallKB951748_0$\dnsapi.dll
    + 2004-08-04 07:56:44 245,248 -c----w c:\winnt\$NtUninstallKB951748_0$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB951748_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\winnt\$NtUninstallKB951748_0$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w c:\winnt\$NtUninstallKB951748_0$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w c:\winnt\$NtUninstallKB951748_0$\tcpip6.sys
    + 2008-04-14 00:12:15 139,264 -c----w c:\winnt\$NtUninstallKB951978$\cscript.exe
    + 2008-04-14 00:11:56 512,000 -c----w c:\winnt\$NtUninstallKB951978$\jscript.dll
    + 2008-04-14 00:12:05 180,224 -c----w c:\winnt\$NtUninstallKB951978$\scrobj.dll
    + 2008-04-14 00:12:05 172,032 -c----w c:\winnt\$NtUninstallKB951978$\scrrun.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB951978$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\winnt\$NtUninstallKB951978$\spuninst\updspapi.dll
    + 2008-04-14 00:12:08 434,176 -c----w c:\winnt\$NtUninstallKB951978$\vbscript.dll
    + 2008-04-14 00:12:41 155,648 -c----w c:\winnt\$NtUninstallKB951978$\wscript.exe
    + 2008-04-14 00:12:10 90,112 -c----w c:\winnt\$NtUninstallKB951978$\wshext.dll
    + 2006-10-19 04:03:58 100,864 -c----w c:\winnt\$NtUninstallKB952069_WM9$\logagent.exe
    + 2007-07-27 17:41:48 231,288 -c----w c:\winnt\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe
    + 2007-07-27 17:41:48 382,840 -c----w c:\winnt\$NtUninstallKB952069_WM9$\spuninst\updspapi.dll
    + 2006-10-19 05:47:20 937,984 -c----w c:\winnt\$NtUninstallKB952069_WM9$\wmnetmgr.dll
    + 2006-10-19 05:47:22 2,450,944 -c----w c:\winnt\$NtUninstallKB952069_WM9$\wmvcore.dll
    + 2008-05-01 14:30:33 331,776 -c----w c:\winnt\$NtUninstallKB952287$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB952287$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB952287$\spuninst\updspapi.dll
    + 2004-08-04 07:56:42 331,776 -c----w c:\winnt\$NtUninstallKB952287_0$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB952287_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB952287_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:58 73,728 -c----w c:\winnt\$NtUninstallKB952954$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB952954$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB952954$\spuninst\updspapi.dll
    + 2005-06-29 01:46:00 74,240 -c----w c:\winnt\$NtUninstallKB952954_0$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB952954_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB952954_0$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB953839$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB953839$\spuninst\updspapi.dll
    + 2007-07-27 17:41:48 231,288 -c----w c:\winnt\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
    + 2007-07-27 17:41:48 382,840 -c----w c:\winnt\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
    + 2006-10-19 05:47:20 295,936 -c----w c:\winnt\$NtUninstallKB954154_WM11$\wmpeffects.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB954211$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB954211$\spuninst\updspapi.dll
    + 2008-04-13 19:30:10 1,845,632 -c----w c:\winnt\$NtUninstallKB954211$\win32k.sys
    + 2008-04-14 00:12:01 1,306,624 -c----w c:\winnt\$NtUninstallKB954459$\msxml6.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB954459$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB954459$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB954600$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB954600$\spuninst\updspapi.dll
    + 2008-04-14 00:12:07 246,814 -c----w c:\winnt\$NtUninstallKB954600$\strmdll.dll
    + 2008-04-14 00:12:01 1,104,896 -c----w c:\winnt\$NtUninstallKB955069$\msxml3.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB955069$\spuninst\spuninst.exe
    + 2008-07-09 21:08:38 382,840 -c----w c:\winnt\$NtUninstallKB955069$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB955839$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB955839$\spuninst\updspapi.dll
    + 2008-04-14 00:12:38 60,416 -c----w c:\winnt\$NtUninstallKB955839$\tzchange.exe
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB956391$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\winnt\$NtUninstallKB956391$\spuninst\updspapi.dll
    + 2008-04-14 00:11:54 285,184 -c----w c:\winnt\$NtUninstallKB956802$\gdi32.dll
    + 2008-07-08 13:02:02 231,288 -c----w c:\winnt\$NtUninstallKB956802$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\winnt\$NtUninstallKB956802$\spuninst\updspapi.dll
    + 2008-06-20 11:40:08 138,496 -c----w c:\winnt\$NtUninstallKB956803$\afd.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB956803$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB956803$\spuninst\updspapi.dll
    + 2008-04-13 18:31:21 2,023,936 -c----w c:\winnt\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2008-04-13 19:24:37 2,145,280 -c----w c:\winnt\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB956841$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\winnt\$NtUninstallKB956841$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB957095$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB957095$\spuninst\updspapi.dll
    + 2008-04-13 19:15:11 334,848 -c----w c:\winnt\$NtUninstallKB957095$\srv.sys
    + 2008-04-13 19:17:01 456,576 -c----w c:\winnt\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-07-08 13:02:02 231,288 -c----w c:\winnt\$NtUninstallKB957097$\spuninst\spuninst.exe
    + 2008-07-08 13:02:12 382,840 -c----w c:\winnt\$NtUninstallKB957097$\spuninst\updspapi.dll
    + 2008-04-14 00:12:01 337,408 -c----w c:\winnt\$NtUninstallKB958644$\netapi32.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\winnt\$NtUninstallKB958644$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB958644$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\winnt\$NtUninstallKB958687$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\winnt\$NtUninstallKB958687$\spuninst\updspapi.dll
    + 2008-09-08 10:41:42 333,824 -c----w c:\winnt\$NtUninstallKB958687$\srv.sys
    + 2008-07-09 07:38:25 231,288 -c----w c:\winnt\$NtUninstallKB960715$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\winnt\$NtUninstallKB960715$\spuninst\updspapi.dll
    + 2003-10-06 21:15:20 2,283 ----a-w c:\winnt\$NtUninstallQ810565$\spuninst\spuninst.bat
    + 2006-10-17 00:10:58 221,488 -c----w c:\winnt\$NtUninstallWIC$\spuninst\spuninst.exe
    + 2006-10-17 00:10:58 379,184 -c----w c:\winnt\$NtUninstallWIC$\spuninst\updspapi.dll
    - 2006-10-04 14:05:26 39,424 ------w c:\winnt\AppPatch\acadproc.dll
    + 2008-04-14 00:11:48 39,424 ----a-w c:\winnt\AppPatch\acadproc.dll
    - 2004-08-04 07:56:41 1,852,416 ----a-w c:\winnt\AppPatch\acgenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\winnt\AppPatch\acgenral.dll
    - 2004-08-04 07:56:41 450,048 ----a-w c:\winnt\AppPatch\aclayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\winnt\AppPatch\aclayers.dll
    - 2004-08-04 07:56:41 137,728 ----a-w c:\winnt\AppPatch\aclua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\winnt\AppPatch\aclua.dll
    - 2004-08-04 07:56:41 244,736 ----a-w c:\winnt\AppPatch\acspecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\winnt\AppPatch\acspecfc.dll
    - 2004-08-04 07:56:41 116,224 ----a-w c:\winnt\AppPatch\acxtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\winnt\AppPatch\acxtrnal.dll
    - 2007-07-11 08:02:09 68,608 ----a-w c:\winnt\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-01-02 08:32:56 69,120 ----a-w c:\winnt\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2007-07-11 08:02:44 72,192 ----a-w c:\winnt\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-01-02 08:33:05 72,192 ----a-w c:\winnt\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-02-16 23:04:54 151,552 ----a-w c:\winnt\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2007-07-11 08:02:45 4,308,992 ----a-w c:\winnt\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-01-02 08:32:29 4,444,160 ----a-w c:\winnt\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-02-16 23:05:07 4,174,336 ----a-w c:\winnt\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2007-07-11 08:02:49 482,304 ----a-w c:\winnt\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2008-01-02 08:33:08 483,840 ----a-w c:\winnt\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2007-07-11 08:02:35 2,902,016 ----a-w c:\winnt\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2008-01-02 08:32:45 3,036,160 ----a-w c:\winnt\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2007-07-11 08:01:51 258,048 ----a-w c:\winnt\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-01-02 08:33:12 258,048 ----a-w c:\winnt\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2007-07-11 08:01:51 114,176 ----a-w c:\winnt\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-01-02 08:33:12 113,664 ----a-w c:\winnt\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-02-16 23:05:05 346,624 ----a-w c:\winnt\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2007-07-11 08:02:59 260,096 ----a-w c:\winnt\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2008-01-02 08:33:06 261,120 ----a-w c:\winnt\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2007-07-11 08:02:18 5,156,864 ----a-w c:\winnt\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-01-02 08:32:42 5,431,296 ----a-w c:\winnt\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2007-07-11 08:02:07 10,752 ----a-w c:\winnt\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-01-02 08:32:53 10,752 ----a-w c:\winnt\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2007-07-11 08:01:50 507,904 ----a-w c:\winnt\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2008-01-02 08:32:43 507,904 ----a-w c:\winnt\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2007-07-11 08:01:57 13,312 ----a-w c:\winnt\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-01-02 08:32:56 13,312 ----a-w c:\winnt\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2007-07-11 08:02:41 8,192 ----a-w c:\winnt\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-01-02 08:33:00 8,192 ----a-w c:\winnt\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2007-07-11 08:02:42 36,864 ----a-w c:\winnt\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-01-02 08:33:01 77,824 ----a-w c:\winnt\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2007-07-11 08:02:43 5,632 ----a-w c:\winnt\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-01-02 08:33:02 6,656 ----a-w c:\winnt\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2007-07-11 08:02:01 413,696 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2008-01-02 08:33:14 348,160 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2007-07-11 08:02:02 36,864 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2008-01-02 08:33:15 36,864 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2007-07-11 08:02:05 647,168 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2008-01-02 08:33:16 655,360 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2007-07-11 08:02:06 73,728 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2008-01-02 08:33:17 77,824 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2007-07-11 08:01:59 749,568 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-01-02 08:33:03 749,568 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-02-16 23:04:54 397,312 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2007-07-11 08:03:03 110,592 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-01-02 08:33:01 110,592 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2007-07-11 08:03:02 372,736 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2008-01-02 08:32:59 372,736 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2007-07-11 08:01:47 28,672 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-01-02 08:33:09 28,672 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2007-07-11 08:03:01 667,648 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-01-02 08:32:58 671,744 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2007-07-11 08:03:04 5,632 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2008-01-02 08:32:37 5,632 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2007-07-11 08:01:49 12,800 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-01-02 08:33:10 12,800 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2007-07-11 08:01:48 32,768 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-01-02 08:32:58 32,768 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2007-07-11 08:01:48 7,168 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-01-02 08:32:57 7,168 ----a-w c:\winnt\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-02-16 23:04:48 602,112 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2008-02-16 23:05:07 32,768 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2008-02-16 23:05:02 184,320 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2008-02-16 23:05:02 131,072 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2008-02-16 23:05:02 376,832 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2008-02-16 23:05:02 151,552 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2008-02-16 23:05:02 5,210,112 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2008-02-16 23:05:01 897,024 ----a-w c:\winnt\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2008-02-16 23:05:06 528,384 ----a-w c:\winnt\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2008-02-16 23:04:54 102,400 ----a-w c:\winnt\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2007-07-11 08:02:53 110,592 ----a-w c:\winnt\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2008-01-02 08:33:04 110,592 ----a-w c:\winnt\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2007-07-11 08:02:09 81,920 ----a-w c:\winnt\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-01-02 08:33:04 81,920 ----a-w c:\winnt\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2007-07-11 08:02:54 413,696 ----a-w c:\winnt\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2008-01-02 08:32:44 425,984 ----a-w c:\winnt\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2007-07-11 08:02:50 716,800 ----a-w c:\winnt\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2008-01-02 08:32:47 741,376 ----a-w c:\winnt\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2007-07-11 08:01:55 888,832 ----a-w c:\winnt\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2008-01-02 08:32:48 933,888 ----a-w c:\winnt\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2007-07-11 08:02:40 5,001,216 ----a-w c:\winnt\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-01-02 08:33:18 5,070,848 ----a-w c:\winnt\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2007-07-11 08:02:12 188,416 ----a-w c:\winnt\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2008-01-02 08:33:15 188,416 ----a-w c:\winnt\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2007-07-11 08:02:10 397,312 ----a-w c:\winnt\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-01-02 08:32:53 401,408 ----a-w c:\winnt\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2007-07-11 08:02:13 81,920 ----a-w c:\winnt\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-01-02 08:33:10 81,920 ----a-w c:\winnt\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2007-07-11 08:02:57 577,536 ----a-w c:\winnt\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-01-02 08:32:38 630,784 ----a-w c:\winnt\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-02-16 23:05:10 126,976 ----a-w c:\winnt\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2008-02-16 23:05:10 430,080 ----a-w c:\winnt\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2008-02-16 23:04:54 131,072 ----a-w c:\winnt\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2007-07-11 08:02:51 372,736 ----a-w c:\winnt\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-01-02 08:33:11 372,736 ----a-w c:\winnt\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2007-07-11 08:02:58 258,048 ----a-w c:\winnt\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-01-02 08:33:09 258,048 ----a-w c:\winnt\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2007-07-11 08:02:52 299,008 ----a-w c:\winnt\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-01-02 08:33:07 299,008 ----a-w c:\winnt\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2007-07-11 08:02:52 131,072 ----a-w c:\winnt\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-01-02 08:33:06 131,072 ----a-w c:\winnt\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-02-16 23:04:53 929,792 ----a-w c:\winnt\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2007-07-11 08:02:08 258,048 ----a-w c:\winnt\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-01-02 08:32:39 258,048 ----a-w c:\winnt\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-02-16 23:04:49 159,744 ----a-w c:\winnt\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2008-02-16 23:04:49 32,768 ----a-w c:\winnt\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2008-02-16 23:04:52 5,971,968 ----a-w c:\winnt\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2007-07-11 08:02:14 114,688 ----a-w c:\winnt\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-01-02 08:32:40 114,688 ----a-w c:\winnt\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-02-16 23:04:48 688,128 ----a-w c:\winnt\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
    - 2007-07-11 08:03:00 835,584 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2008-01-02 08:32:51 884,736 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2007-07-11 08:02:19 86,016 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-01-02 08:32:52 90,112 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2007-07-11 08:02:21 823,296 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-01-02 08:32:50 839,680 ----a-w c:\winnt\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-07-11 08:02:24 5,152,768 ----a-w c:\winnt\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-01-02 08:32:54 5,013,504 ----a-w c:\winnt\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-02-16 23:05:09 1,152,040 ----a-w c:\winnt\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2008-02-16 23:05:08 1,635,376 ----a-w c:\winnt\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2008-02-16 23:05:09 578,592 ----a-w c:\winnt\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    - 2007-07-11 08:02:28 2,027,520 ----a-w c:\winnt\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2008-01-02 08:32:40 2,068,480 ----a-w c:\winnt\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2007-07-11 08:02:56 2,940,928 ----a-w c:\winnt\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-01-02 08:32:49 3,076,096 ----a-w c:\winnt\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-02-16 23:04:48 163,840 ----a-w c:\winnt\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2008-02-16 23:04:48 372,736 ----a-w c:\winnt\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2008-02-16 23:05:05 32,768 ----a-w c:\winnt\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2008-02-16 23:05:05 86,016 ----a-w c:\winnt\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2008-02-16 23:05:04 1,204,224 ----a-w c:\winnt\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2008-02-16 23:04:47 81,920 ----a-w c:\winnt\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2008-01-03 04:15:50 27,136 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
    + 2008-01-03 04:15:53 884,736 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
    + 2008-02-16 23:12:52 503,808 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\ComSvcConfig.ni.exe
    + 2008-01-03 04:17:35 237,568 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
    + 2008-01-03 04:15:54 15,360 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
    + 2008-01-03 04:17:38 876,544 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
    + 2008-01-03 04:17:38 81,920 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
    + 2008-01-03 04:17:42 1,695,744 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
    + 2008-01-03 04:17:43 167,936 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
    + 2008-02-16 23:12:56 1,232,896 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\Microsoft.Transactions.Bridge.ni.dll
    + 2008-02-16 23:12:58 401,408 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2008-01-03 04:17:46 1,740,800 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
    + 2008-01-03 04:16:17 17,920 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll
    + 2008-01-02 08:35:55 11,722,752 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
    + 2008-02-16 23:13:10 1,581,056 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\PresentationBuildTasks.ni.dll
    + 2008-02-16 23:09:33 40,960 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\PresentationCFFRasterizer.ni.dll
    + 2008-02-16 23:09:31 12,570,624 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll
    + 2008-02-16 23:08:10 48,640 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\PresentationFontCache.ni.exe
    + 2008-02-16 23:10:27 393,216 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\PresentationFramework.Aero.ni.dll
    + 2008-02-16 23:10:30 552,960 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll
    + 2008-02-16 23:10:09 15,036,416 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll
    + 2008-02-16 23:10:32 274,432 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\PresentationFramework.Royale.ni.dll
    + 2008-02-16 23:10:28 245,760 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\PresentationFramework.Classic.ni.dll
    + 2008-02-16 23:10:18 2,035,712 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll
    + 2008-02-16 23:10:23 2,416,640 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\ReachFramework.ni.dll
    + 2008-02-16 23:12:59 139,264 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\ServiceModelReg.ni.exe
    + 2008-02-16 23:13:00 299,008 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\SMDiagnostics.ni.dll
    + 2008-02-16 23:13:01 323,584 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\SMSvcHost.ni.exe
    + 2008-01-03 04:19:10 262,144 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\sysglobl\6a075eb8e0f13de87d1278aa8562d51e\sysglobl.ni.dll
    + 2008-01-03 04:16:12 163,840 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
    + 2008-01-03 04:16:03 1,011,712 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
    + 2008-01-03 04:17:30 1,183,744 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll
    + 2008-01-03 04:16:09 2,756,608 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
    + 2008-01-02 08:37:09 7,049,216 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
    + 2008-01-03 04:16:16 1,798,144 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
    + 2008-01-02 08:37:29 10,969,088 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
    + 2008-01-03 04:16:59 1,224,704 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
    + 2008-01-03 04:17:32 512,000 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
    + 2008-01-02 08:37:34 229,376 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
    + 2008-01-02 08:37:33 1,667,072 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
    + 2008-01-03 04:16:56 659,456 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
    + 2008-01-03 04:16:56 294,912 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
    + 2008-02-16 23:11:54 241,664 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\System.IdentityModel.Selectors.ni.dll
    + 2008-02-16 23:11:53 1,118,208 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\System.IdentityModel.ni.dll
    + 2008-02-16 23:11:56 417,792 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\System.IO.Log.ni.dll
    + 2008-01-03 04:19:59 655,360 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Messaging\00e3750e478bac4913ee7a6c3b7cd392\System.Messaging.ni.dll
    + 2008-02-16 23:10:26 1,134,592 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\System.Printing.ni.dll
    + 2008-01-03 04:17:01 815,104 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll
    + 2008-01-03 04:16:13 339,968 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2008-02-16 23:12:02 2,445,312 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\System.Runtime.Serialization.ni.dll
    + 2008-01-03 04:16:11 733,184 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
    + 2008-02-16 23:12:49 18,071,552 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\System.ServiceModel.ni.dll
    + 2008-01-03 04:16:01 233,472 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
    + 2008-02-16 23:13:21 2,039,808 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\System.Speech.ni.dll
    + 2008-01-03 04:16:54 679,936 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
    + 2008-01-03 04:19:15 2,342,912 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
    + 2008-01-03 04:17:31 237,568 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
    + 2008-01-03 04:17:27 1,986,560 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
    + 2008-01-03 04:17:23 12,509,184 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
    + 2008-01-02 08:37:57 13,193,216 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
    + 2008-02-16 23:13:53 3,084,288 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\System.Workflow.Activities.ni.dll
    + 2008-02-16 23:14:03 4,579,328 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\System.Workflow.ComponentModel.ni.dll
    + 2008-02-16 23:14:08 2,088,960 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\System.Workflow.Runtime.ni.dll
    + 2008-01-02 08:38:09 5,771,264 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
    + 2008-01-02 08:36:41 8,265,728 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
    + 2008-02-16 23:14:12 483,328 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\UIAutomationClient.ni.dll
    + 2008-02-16 23:14:15 1,118,208 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\UIAutomationClientsideProviders.ni.dll
    + 2008-02-16 23:09:32 50,688 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\UIAutomationProvider.ni.dll
    + 2008-02-16 23:09:32 196,608 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\UIAutomationTypes.ni.dll
    + 2008-02-16 23:08:47 3,395,584 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86\WindowsBase.ni.dll
    + 2008-02-16 23:14:18 270,336 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\WindowsFormsIntegration.ni.dll
    + 2008-02-16 23:13:03 380,928 ----a-w c:\winnt\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\WsatConfig.ni.exe
    + 2007-10-31 09:00:00 2,504 ----a-w c:\winnt\Downloaded Program Files\catalog.dat
    + 2007-10-31 09:00:00 1,957 ----a-w c:\winnt\Downloaded Program Files\tinfl.dat
    + 2008-06-13 11:05:51 272,128 ------w c:\winnt\Driver Cache\i386\bthport.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\winnt\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\winnt\Driver Cache\i386\mrxsmb.sys
    - 2007-02-28 09:08:48 2,136,064 ------w c:\winnt\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\winnt\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\winnt\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\winnt\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\winnt\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\winnt\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\winnt\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\winnt\Driver Cache\i386\ntoskrnl.exe
    + 2005-10-20 19:02:28 163,328 ----a-w c:\winnt\erdnt\3-20-2009\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\winnt\erdnt\AutoBackup\2009-03-22\ERDNT.EXE
    + 2009-03-22 23:05:30 16,740,352 ----a-w c:\winnt\erdnt\AutoBackup\2009-03-22\Users\00000001\ntuser.dat
    + 2009-03-22 23:05:32 274,432 ----a-w c:\winnt\erdnt\AutoBackup\2009-03-22\Users\00000002\UsrClass.dat
    + 2005-10-20 19:02:28 163,328 ----a-w c:\winnt\erdnt\AutoBackup\3-21-2009\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\winnt\erdnt\AutoBackup\3-22-2009\ERDNT.EXE
    + 2009-03-22 22:39:02 16,736,256 ----a-w c:\winnt\erdnt\AutoBackup\3-22-2009\Users\00000001\ntuser.dat
    + 2009-03-22 22:39:03 274,432 ----a-w c:\winnt\erdnt\AutoBackup\3-22-2009\Users\00000002\UsrClass.dat
    + 2005-10-21 03:02:28 163,328 ----a-w c:\winnt\erdnt\Hiv-backup\ERDNT.EXE
    - 2007-03-13 18:57:10 163,328 ----a-w c:\winnt\erdnt\subs\ERDNT.EXE
    + 2005-10-21 03:02:28 163,328 ----a-w c:\winnt\erdnt\subs\ERDNT.EXE
    - 2007-06-13 10:23:07 1,033,216 ----a-w c:\winnt\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ----a-w c:\winnt\explorer.exe
    + 2000-08-31 15:00:00 89,504 ----a-w c:\winnt\fdsv.exe
    + 2000-08-31 15:00:00 80,412 ----a-w c:\winnt\grep.exe
    - 2004-08-04 07:56:45 34,816 ----a-w c:\winnt\Help\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ----a-w c:\winnt\Help\sniffpol.dll
    - 2004-08-04 07:56:45 33,280 ----a-w c:\winnt\Help\sstub.dll
    + 2008-04-14 00:12:07 33,280 ----a-w c:\winnt\Help\sstub.dll
    - 2004-08-04 07:56:46 279,040 ----a-w c:\winnt\Help\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ----a-w c:\winnt\Help\tshoot.dll
    - 2005-05-26 23:22:01 10,752 ----a-w c:\winnt\hh.exe
    + 2008-04-14 00:12:21 10,752 ----a-w c:\winnt\hh.exe
    + 2007-08-20 10:04:34 124,928 -c----w c:\winnt\ie7updates\KB942615-IE7\advpack.dll
    + 2007-08-20 10:04:34 214,528 -c----w c:\winnt\ie7updates\KB942615-IE7\dxtrans.dll
    + 2007-08-20 10:04:34 132,608 -c----w c:\winnt\ie7updates\KB942615-IE7\extmgr.dll
    + 2007-08-20 10:04:34 63,488 -c----w c:\winnt\ie7updates\KB942615-IE7\icardie.dll
    + 2007-08-17 10:20:54 63,488 -c----w c:\winnt\ie7updates\KB942615-IE7\ie4uinit.exe
    + 2007-08-20 10:04:34 153,088 -c----w c:\winnt\ie7updates\KB942615-IE7\ieakeng.dll
    + 2007-08-20 10:04:35 230,400 -c----w c:\winnt\ie7updates\KB942615-IE7\ieaksie.dll
    + 2007-08-17 07:34:25 161,792 -c----w c:\winnt\ie7updates\KB942615-IE7\ieakui.dll
    + 2007-08-20 10:04:35 383,488 -c----w c:\winnt\ie7updates\KB942615-IE7\ieapfltr.dll
    + 2007-08-20 10:04:35 384,512 -c----w c:\winnt\ie7updates\KB942615-IE7\iedkcs32.dll
    + 2007-08-20 10:04:37 6,058,496 -c----w c:\winnt\ie7updates\KB942615-IE7\ieframe.dll
    + 2007-08-20 10:04:38 44,544 -c----w c:\winnt\ie7updates\KB942615-IE7\iernonce.dll
    + 2007-08-20 10:04:38 267,776 -c----w c:\winnt\ie7updates\KB942615-IE7\iertutil.dll
    + 2007-08-17 10:20:54 13,824 -c----w c:\winnt\ie7updates\KB942615-IE7\ieudinit.exe
    + 2007-08-17 10:21:21 625,152 -c----w c:\winnt\ie7updates\KB942615-IE7\iexplore.exe
    + 2007-08-20 10:04:39 27,648 -c----w c:\winnt\ie7updates\KB942615-IE7\jsproxy.dll
    + 2007-08-20 10:04:39 459,264 -c----w c:\winnt\ie7updates\KB942615-IE7\msfeeds.dll
    + 2007-08-20 10:04:39 52,224 -c----w c:\winnt\ie7updates\KB942615-IE7\msfeedsbs.dll
    + 2007-08-20 10:04:41 3,584,512 -c----w c:\winnt\ie7updates\KB942615-IE7\mshtml.dll
    + 2007-08-20 10:04:41 477,696 -c----w c:\winnt\ie7updates\KB942615-IE7\mshtmled.dll
    + 2007-08-20 10:04:41 193,024 -c----w c:\winnt\ie7updates\KB942615-IE7\msrating.dll
    + 2007-08-20 10:04:42 671,232 -c----w c:\winnt\ie7updates\KB942615-IE7\mstime.dll
    + 2007-08-20 10:04:42 102,400 -c----w c:\winnt\ie7updates\KB942615-IE7\occache.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\ie7updates\KB942615-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB942615-IE7\spuninst\updspapi.dll
    + 2007-08-20 10:04:42 105,984 -c----w c:\winnt\ie7updates\KB942615-IE7\url.dll
    + 2007-08-20 10:04:42 1,152,000 -c----w c:\winnt\ie7updates\KB942615-IE7\urlmon.dll
  8. 2009-03-24, 00:22 #18
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    + 2007-08-20 10:04:42 232,960 -c----w c:\winnt\ie7updates\KB942615-IE7\webcheck.dll
    + 2007-08-20 10:04:43 824,832 -c----w c:\winnt\ie7updates\KB942615-IE7\wininet.dll
    + 2007-10-10 23:55:51 124,928 -c----w c:\winnt\ie7updates\KB944533-IE7\advpack.dll
    + 2006-10-17 19:58:06 346,624 -c----w c:\winnt\ie7updates\KB944533-IE7\dxtmsft.dll
    + 2007-10-10 23:55:51 214,528 -c----w c:\winnt\ie7updates\KB944533-IE7\dxtrans.dll
    + 2007-10-10 23:55:51 132,608 -c----w c:\winnt\ie7updates\KB944533-IE7\extmgr.dll
    + 2007-10-10 23:55:51 63,488 -c----w c:\winnt\ie7updates\KB944533-IE7\icardie.dll
    + 2007-10-10 10:59:40 70,656 -c----w c:\winnt\ie7updates\KB944533-IE7\ie4uinit.exe
    + 2007-10-10 23:55:51 153,088 -c----w c:\winnt\ie7updates\KB944533-IE7\ieakeng.dll
    + 2007-10-10 23:55:51 230,400 -c----w c:\winnt\ie7updates\KB944533-IE7\ieaksie.dll
    + 2007-10-10 05:46:55 161,792 -c----w c:\winnt\ie7updates\KB944533-IE7\ieakui.dll
    + 2007-10-10 23:55:52 383,488 -c----w c:\winnt\ie7updates\KB944533-IE7\ieapfltr.dll
    + 2007-10-10 23:55:52 384,512 -c----w c:\winnt\ie7updates\KB944533-IE7\iedkcs32.dll
    + 2007-10-10 23:55:54 6,065,664 -c----w c:\winnt\ie7updates\KB944533-IE7\ieframe.dll
    + 2007-10-10 23:55:55 44,544 -c----w c:\winnt\ie7updates\KB944533-IE7\iernonce.dll
    + 2007-10-10 23:55:55 267,776 -c----w c:\winnt\ie7updates\KB944533-IE7\iertutil.dll
    + 2007-10-10 10:59:40 13,824 -c----w c:\winnt\ie7updates\KB944533-IE7\ieudinit.exe
    + 2007-10-10 10:59:52 625,152 -c----w c:\winnt\ie7updates\KB944533-IE7\iexplore.exe
    + 2007-10-10 23:55:56 27,648 -c----w c:\winnt\ie7updates\KB944533-IE7\jsproxy.dll
    + 2007-10-10 23:55:56 459,264 -c----w c:\winnt\ie7updates\KB944533-IE7\msfeeds.dll
    + 2007-10-10 23:55:56 52,224 -c----w c:\winnt\ie7updates\KB944533-IE7\msfeedsbs.dll
    + 2007-10-30 23:42:28 3,590,656 -c----w c:\winnt\ie7updates\KB944533-IE7\mshtml.dll
    + 2007-10-10 23:55:58 478,208 -c----w c:\winnt\ie7updates\KB944533-IE7\mshtmled.dll
    + 2007-10-10 23:55:58 193,024 -c----w c:\winnt\ie7updates\KB944533-IE7\msrating.dll
    + 2007-10-10 23:55:59 671,232 -c----w c:\winnt\ie7updates\KB944533-IE7\mstime.dll
    + 2007-10-10 23:55:59 102,400 -c----w c:\winnt\ie7updates\KB944533-IE7\occache.dll
    + 2006-10-17 19:58:08 44,544 -c----w c:\winnt\ie7updates\KB944533-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\ie7updates\KB944533-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB944533-IE7\spuninst\updspapi.dll
    + 2007-10-10 23:55:59 105,984 -c----w c:\winnt\ie7updates\KB944533-IE7\url.dll
    + 2007-10-10 23:56:00 1,159,680 -c----w c:\winnt\ie7updates\KB944533-IE7\urlmon.dll
    + 2007-10-10 23:56:00 232,960 -c----w c:\winnt\ie7updates\KB944533-IE7\webcheck.dll
    + 2007-10-10 23:56:00 824,832 -c----w c:\winnt\ie7updates\KB944533-IE7\wininet.dll
    + 2007-12-07 02:21:45 124,928 -c----w c:\winnt\ie7updates\KB947864-IE7\advpack.dll
    + 2007-12-19 23:01:06 347,136 -c----w c:\winnt\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-12-07 02:21:45 214,528 -c----w c:\winnt\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-12-07 02:21:45 133,120 -c----w c:\winnt\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-12-07 02:21:45 63,488 -c----w c:\winnt\ie7updates\KB947864-IE7\icardie.dll
    + 2007-12-06 11:00:57 70,656 -c----w c:\winnt\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-12-07 02:21:45 153,088 -c----w c:\winnt\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-12-07 02:21:45 230,400 -c----w c:\winnt\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-12-06 04:59:51 161,792 -c----w c:\winnt\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-12-07 02:21:45 383,488 -c----w c:\winnt\ie7updates\KB947864-IE7\ieapfltr.dll
    + 2007-12-07 02:21:45 384,512 -c----w c:\winnt\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-12-07 02:21:46 6,066,176 -c----w c:\winnt\ie7updates\KB947864-IE7\ieframe.dll
    + 2007-12-07 02:21:46 44,544 -c----w c:\winnt\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-12-07 02:21:46 267,776 -c----w c:\winnt\ie7updates\KB947864-IE7\iertutil.dll
    + 2007-12-06 11:00:58 13,824 -c----w c:\winnt\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-12-06 11:01:25 625,664 -c----w c:\winnt\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-12-07 02:21:47 27,648 -c----w c:\winnt\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-12-07 02:21:47 459,264 -c----w c:\winnt\ie7updates\KB947864-IE7\msfeeds.dll
    + 2007-12-07 02:21:47 52,224 -c----w c:\winnt\ie7updates\KB947864-IE7\msfeedsbs.dll
    + 2007-12-08 05:21:48 3,592,192 -c----w c:\winnt\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-12-07 02:21:47 478,208 -c----w c:\winnt\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-12-07 02:21:48 193,024 -c----w c:\winnt\ie7updates\KB947864-IE7\msrating.dll
    + 2007-12-07 02:21:48 671,232 -c----w c:\winnt\ie7updates\KB947864-IE7\mstime.dll
    + 2007-12-07 02:21:48 102,912 -c----w c:\winnt\ie7updates\KB947864-IE7\occache.dll
    + 2008-01-11 05:53:32 44,544 -c----w c:\winnt\ie7updates\KB947864-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\ie7updates\KB947864-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB947864-IE7\spuninst\updspapi.dll
    + 2007-12-07 02:21:48 105,984 -c----w c:\winnt\ie7updates\KB947864-IE7\url.dll
    + 2007-12-07 02:21:48 1,159,680 -c----w c:\winnt\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-12-07 02:21:48 233,472 -c----w c:\winnt\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-12-07 02:21:48 824,832 -c----w c:\winnt\ie7updates\KB947864-IE7\wininet.dll
    + 2008-03-01 13:06:20 124,928 -c----w c:\winnt\ie7updates\KB950759-IE7\advpack.dll
    + 2008-03-01 13:06:21 347,136 -c----w c:\winnt\ie7updates\KB950759-IE7\dxtmsft.dll
    + 2008-03-01 13:06:21 214,528 -c----w c:\winnt\ie7updates\KB950759-IE7\dxtrans.dll
    + 2008-03-01 13:06:21 133,120 -c----w c:\winnt\ie7updates\KB950759-IE7\extmgr.dll
    + 2008-03-01 13:06:21 63,488 -c----w c:\winnt\ie7updates\KB950759-IE7\icardie.dll
    + 2008-02-29 08:55:23 70,656 -c----w c:\winnt\ie7updates\KB950759-IE7\ie4uinit.exe
    + 2008-03-01 13:06:21 153,088 -c----w c:\winnt\ie7updates\KB950759-IE7\ieakeng.dll
    + 2008-03-01 13:06:21 230,400 -c----w c:\winnt\ie7updates\KB950759-IE7\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 -c----w c:\winnt\ie7updates\KB950759-IE7\ieakui.dll
    + 2008-03-01 13:06:22 383,488 -c----w c:\winnt\ie7updates\KB950759-IE7\ieapfltr.dll
    + 2008-03-01 13:06:22 384,512 -c----w c:\winnt\ie7updates\KB950759-IE7\iedkcs32.dll
    + 2008-03-01 13:06:24 6,066,176 -c----w c:\winnt\ie7updates\KB950759-IE7\ieframe.dll
    + 2008-03-01 13:06:24 44,544 -c----w c:\winnt\ie7updates\KB950759-IE7\iernonce.dll
    + 2008-03-01 13:06:25 267,776 -c----w c:\winnt\ie7updates\KB950759-IE7\iertutil.dll
    + 2008-02-22 10:00:51 13,824 -c----w c:\winnt\ie7updates\KB950759-IE7\ieudinit.exe
    + 2008-02-29 08:55:46 625,664 -c----w c:\winnt\ie7updates\KB950759-IE7\iexplore.exe
    + 2008-03-01 13:06:25 27,648 -c----w c:\winnt\ie7updates\KB950759-IE7\jsproxy.dll
    + 2008-03-01 13:06:26 459,264 -c----w c:\winnt\ie7updates\KB950759-IE7\msfeeds.dll
    + 2008-03-01 13:06:26 52,224 -c----w c:\winnt\ie7updates\KB950759-IE7\msfeedsbs.dll
    + 2008-03-02 01:36:30 3,591,680 -c----w c:\winnt\ie7updates\KB950759-IE7\mshtml.dll
    + 2008-03-01 13:06:28 478,208 -c----w c:\winnt\ie7updates\KB950759-IE7\mshtmled.dll
    + 2008-03-01 13:06:28 193,024 -c----w c:\winnt\ie7updates\KB950759-IE7\msrating.dll
    + 2008-03-01 13:06:29 671,232 -c----w c:\winnt\ie7updates\KB950759-IE7\mstime.dll
    + 2008-03-01 13:06:29 102,912 -c----w c:\winnt\ie7updates\KB950759-IE7\occache.dll
    + 2008-03-01 13:06:29 44,544 -c----w c:\winnt\ie7updates\KB950759-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\ie7updates\KB950759-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB950759-IE7\spuninst\updspapi.dll
    + 2008-03-01 13:06:29 105,984 -c----w c:\winnt\ie7updates\KB950759-IE7\url.dll
    + 2008-03-01 13:06:30 1,159,680 -c----w c:\winnt\ie7updates\KB950759-IE7\urlmon.dll
    + 2008-03-01 13:06:30 233,472 -c----w c:\winnt\ie7updates\KB950759-IE7\webcheck.dll
    + 2008-03-01 13:06:31 826,368 -c----w c:\winnt\ie7updates\KB950759-IE7\wininet.dll
    + 2008-04-23 04:16:28 124,928 -c----w c:\winnt\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:16:28 347,136 -c----w c:\winnt\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:16:28 214,528 -c----w c:\winnt\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:16:28 133,120 -c----w c:\winnt\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:16:28 63,488 -c----w c:\winnt\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:39:58 70,656 -c----w c:\winnt\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:16:28 153,088 -c----w c:\winnt\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:16:28 230,400 -c----w c:\winnt\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w c:\winnt\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:16:28 383,488 -c----w c:\winnt\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:16:28 384,512 -c----w c:\winnt\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:16:28 6,066,176 -c----w c:\winnt\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\winnt\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:16:28 267,776 -c----w c:\winnt\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w c:\winnt\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:40:18 625,664 -c----w c:\winnt\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:16:28 27,648 -c----w c:\winnt\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:16:28 459,264 -c----w c:\winnt\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:16:28 52,224 -c----w c:\winnt\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-24 05:16:30 3,591,680 -c----w c:\winnt\ie7updates\KB953838-IE7\mshtml.dll
    + 2008-04-23 04:16:28 478,208 -c----w c:\winnt\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:16:28 193,024 -c----w c:\winnt\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:16:28 671,232 -c----w c:\winnt\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:16:28 102,912 -c----w c:\winnt\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\winnt\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:16:28 105,984 -c----w c:\winnt\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:16:29 1,159,680 -c----w c:\winnt\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:16:29 233,472 -c----w c:\winnt\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:16:29 826,368 -c----w c:\winnt\ie7updates\KB953838-IE7\wininet.dll
    + 2008-06-23 16:57:27 124,928 -c----w c:\winnt\ie7updates\KB956390-IE7\advpack.dll
    + 2008-06-23 16:57:27 347,136 -c----w c:\winnt\ie7updates\KB956390-IE7\dxtmsft.dll
    + 2008-06-23 16:57:27 214,528 -c----w c:\winnt\ie7updates\KB956390-IE7\dxtrans.dll
    + 2008-06-23 16:57:27 133,120 -c----w c:\winnt\ie7updates\KB956390-IE7\extmgr.dll
    + 2008-06-23 16:57:28 63,488 -c----w c:\winnt\ie7updates\KB956390-IE7\icardie.dll
    + 2008-06-23 09:20:25 70,656 -c----w c:\winnt\ie7updates\KB956390-IE7\ie4uinit.exe
    + 2008-06-23 16:57:29 153,088 -c----w c:\winnt\ie7updates\KB956390-IE7\ieakeng.dll
    + 2008-06-23 16:57:29 230,400 -c----w c:\winnt\ie7updates\KB956390-IE7\ieaksie.dll
    + 2008-06-21 05:23:54 161,792 -c----w c:\winnt\ie7updates\KB956390-IE7\ieakui.dll
    + 2008-06-23 16:57:29 383,488 -c----w c:\winnt\ie7updates\KB956390-IE7\ieapfltr.dll
    + 2008-06-23 16:57:29 384,512 -c----w c:\winnt\ie7updates\KB956390-IE7\iedkcs32.dll
    + 2008-06-23 16:57:33 6,066,176 -c----w c:\winnt\ie7updates\KB956390-IE7\ieframe.dll
    + 2008-06-23 16:57:33 44,544 -c----w c:\winnt\ie7updates\KB956390-IE7\iernonce.dll
    + 2008-06-23 16:57:34 267,776 -c----w c:\winnt\ie7updates\KB956390-IE7\iertutil.dll
    + 2008-06-23 09:20:26 13,824 -c----w c:\winnt\ie7updates\KB956390-IE7\ieudinit.exe
    + 2008-06-23 09:20:52 625,664 -c----w c:\winnt\ie7updates\KB956390-IE7\iexplore.exe
    + 2008-06-23 16:57:35 27,648 -c----w c:\winnt\ie7updates\KB956390-IE7\jsproxy.dll
    + 2008-06-23 16:57:36 459,264 -c----w c:\winnt\ie7updates\KB956390-IE7\msfeeds.dll
    + 2008-06-23 16:57:36 52,224 -c----w c:\winnt\ie7updates\KB956390-IE7\msfeedsbs.dll
    + 2008-06-24 17:57:40 3,592,192 -c----w c:\winnt\ie7updates\KB956390-IE7\mshtml.dll
    + 2008-06-23 16:57:39 477,696 -c----w c:\winnt\ie7updates\KB956390-IE7\mshtmled.dll
    + 2008-06-23 16:57:39 193,024 -c----w c:\winnt\ie7updates\KB956390-IE7\msrating.dll
    + 2008-06-23 16:57:40 671,232 -c----w c:\winnt\ie7updates\KB956390-IE7\mstime.dll
    + 2008-06-23 16:57:40 102,912 -c----w c:\winnt\ie7updates\KB956390-IE7\occache.dll
    + 2008-06-23 16:57:40 44,544 -c----w c:\winnt\ie7updates\KB956390-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\ie7updates\KB956390-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB956390-IE7\spuninst\updspapi.dll
    + 2008-06-23 16:57:40 105,984 -c----w c:\winnt\ie7updates\KB956390-IE7\url.dll
    + 2008-06-23 16:57:40 1,159,680 -c----w c:\winnt\ie7updates\KB956390-IE7\urlmon.dll
    + 2008-06-23 16:57:41 233,472 -c----w c:\winnt\ie7updates\KB956390-IE7\webcheck.dll
    + 2008-06-23 16:57:41 826,368 -c----w c:\winnt\ie7updates\KB956390-IE7\wininet.dll
    + 2008-08-26 07:24:28 124,928 -c----w c:\winnt\ie7updates\KB958215-IE7\advpack.dll
    + 2008-08-26 07:24:28 347,136 -c----w c:\winnt\ie7updates\KB958215-IE7\dxtmsft.dll
    + 2008-08-26 07:24:28 214,528 -c----w c:\winnt\ie7updates\KB958215-IE7\dxtrans.dll
    + 2008-08-26 07:24:28 133,120 -c----w c:\winnt\ie7updates\KB958215-IE7\extmgr.dll
    + 2008-08-26 07:24:28 63,488 -c----w c:\winnt\ie7updates\KB958215-IE7\icardie.dll
    + 2008-08-25 08:37:59 70,656 -c----w c:\winnt\ie7updates\KB958215-IE7\ie4uinit.exe
    + 2008-08-26 07:24:28 153,088 -c----w c:\winnt\ie7updates\KB958215-IE7\ieakeng.dll
    + 2008-08-26 07:24:28 230,400 -c----w c:\winnt\ie7updates\KB958215-IE7\ieaksie.dll
    + 2008-08-23 05:54:51 161,792 -c----w c:\winnt\ie7updates\KB958215-IE7\ieakui.dll
    + 2008-08-26 07:24:28 383,488 -c----w c:\winnt\ie7updates\KB958215-IE7\ieapfltr.dll
    + 2008-08-26 07:24:29 384,512 -c----w c:\winnt\ie7updates\KB958215-IE7\iedkcs32.dll
    + 2008-10-03 17:41:15 6,066,176 -c----w c:\winnt\ie7updates\KB958215-IE7\ieframe.dll
    + 2008-08-26 07:24:29 44,544 -c----w c:\winnt\ie7updates\KB958215-IE7\iernonce.dll
    + 2008-08-26 07:24:29 267,776 -c----w c:\winnt\ie7updates\KB958215-IE7\iertutil.dll
    + 2008-08-25 08:38:00 13,824 -c----w c:\winnt\ie7updates\KB958215-IE7\ieudinit.exe
    + 2008-08-23 05:56:15 635,848 -c----w c:\winnt\ie7updates\KB958215-IE7\iexplore.exe
    + 2008-08-26 07:24:30 27,648 -c----w c:\winnt\ie7updates\KB958215-IE7\jsproxy.dll
    + 2008-08-26 07:24:30 459,264 -c----w c:\winnt\ie7updates\KB958215-IE7\msfeeds.dll
    + 2008-08-26 07:24:30 52,224 -c----w c:\winnt\ie7updates\KB958215-IE7\msfeedsbs.dll
    + 2008-08-27 08:24:32 3,593,216 -c----w c:\winnt\ie7updates\KB958215-IE7\mshtml.dll
    + 2008-08-26 07:24:30 477,696 -c----w c:\winnt\ie7updates\KB958215-IE7\mshtmled.dll
    + 2008-08-26 07:24:30 193,024 -c----w c:\winnt\ie7updates\KB958215-IE7\msrating.dll
    + 2008-08-26 07:24:30 671,232 -c----w c:\winnt\ie7updates\KB958215-IE7\mstime.dll
    + 2008-08-26 07:24:30 102,912 -c----w c:\winnt\ie7updates\KB958215-IE7\occache.dll
    + 2008-08-26 07:24:30 44,544 -c----w c:\winnt\ie7updates\KB958215-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\ie7updates\KB958215-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB958215-IE7\spuninst\updspapi.dll
    + 2008-08-26 07:24:30 105,984 -c----w c:\winnt\ie7updates\KB958215-IE7\url.dll
    + 2008-08-26 07:24:31 1,159,680 -c----w c:\winnt\ie7updates\KB958215-IE7\urlmon.dll
    + 2008-08-26 07:24:31 233,472 -c----w c:\winnt\ie7updates\KB958215-IE7\webcheck.dll
    + 2008-08-26 07:24:31 826,368 -c----w c:\winnt\ie7updates\KB958215-IE7\wininet.dll
    + 2008-10-17 10:08:40 3,593,216 -c----w c:\winnt\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\winnt\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\winnt\ie7updates\KB960714-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:34 124,928 -c----w c:\winnt\ie7updates\KB961260-IE7\advpack.dll
    + 2008-10-16 20:38:34 347,136 -c----w c:\winnt\ie7updates\KB961260-IE7\dxtmsft.dll
    + 2008-10-16 20:38:34 214,528 -c----w c:\winnt\ie7updates\KB961260-IE7\dxtrans.dll
    + 2008-10-16 20:38:35 133,120 -c----w c:\winnt\ie7updates\KB961260-IE7\extmgr.dll
    + 2008-10-16 20:38:35 63,488 -c----w c:\winnt\ie7updates\KB961260-IE7\icardie.dll
    + 2008-10-16 13:11:09 70,656 -c----w c:\winnt\ie7updates\KB961260-IE7\ie4uinit.exe
    + 2008-10-16 20:38:35 153,088 -c----w c:\winnt\ie7updates\KB961260-IE7\ieakeng.dll
    + 2008-10-16 20:38:35 230,400 -c----w c:\winnt\ie7updates\KB961260-IE7\ieaksie.dll
    + 2008-10-15 07:04:53 161,792 -c----w c:\winnt\ie7updates\KB961260-IE7\ieakui.dll
    + 2008-10-16 20:38:35 383,488 -c----w c:\winnt\ie7updates\KB961260-IE7\ieapfltr.dll
    + 2008-10-16 20:38:35 384,512 -c----w c:\winnt\ie7updates\KB961260-IE7\iedkcs32.dll
    + 2008-10-16 20:38:37 6,066,176 -c----w c:\winnt\ie7updates\KB961260-IE7\ieframe.dll
    + 2008-10-16 20:38:37 44,544 -c----w c:\winnt\ie7updates\KB961260-IE7\iernonce.dll
    + 2008-10-16 20:38:37 267,776 -c----w c:\winnt\ie7updates\KB961260-IE7\iertutil.dll
    + 2008-10-16 13:11:09 13,824 -c----w c:\winnt\ie7updates\KB961260-IE7\ieudinit.exe
    + 2008-10-15 07:06:26 633,632 -c----w c:\winnt\ie7updates\KB961260-IE7\iexplore.exe
    + 2008-10-16 20:38:37 27,648 -c----w c:\winnt\ie7updates\KB961260-IE7\jsproxy.dll
    + 2008-10-16 20:38:37 459,264 -c----w c:\winnt\ie7updates\KB961260-IE7\msfeeds.dll
    + 2008-10-16 20:38:37 52,224 -c----w c:\winnt\ie7updates\KB961260-IE7\msfeedsbs.dll
    + 2008-12-13 06:40:02 3,593,216 -c----w c:\winnt\ie7updates\KB961260-IE7\mshtml.dll
    + 2008-10-16 20:38:38 477,696 -c----w c:\winnt\ie7updates\KB961260-IE7\mshtmled.dll
    + 2008-10-16 20:38:38 193,024 -c----w c:\winnt\ie7updates\KB961260-IE7\msrating.dll
    + 2008-10-16 20:38:39 671,232 -c----w c:\winnt\ie7updates\KB961260-IE7\mstime.dll
    + 2008-10-16 20:38:39 102,912 -c----w c:\winnt\ie7updates\KB961260-IE7\occache.dll
    + 2008-10-16 20:38:39 44,544 -c----w c:\winnt\ie7updates\KB961260-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\winnt\ie7updates\KB961260-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\winnt\ie7updates\KB961260-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:39 105,984 -c----w c:\winnt\ie7updates\KB961260-IE7\url.dll
    + 2008-10-16 20:38:39 1,160,192 -c----w c:\winnt\ie7updates\KB961260-IE7\urlmon.dll
    + 2008-10-16 20:38:39 233,472 -c----w c:\winnt\ie7updates\KB961260-IE7\webcheck.dll
    + 2008-10-16 20:38:40 826,368 -c----w c:\winnt\ie7updates\KB961260-IE7\wininet.dll
    - 2004-08-04 07:56:42 220,160 ----a-w c:\winnt\ime\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ----a-w c:\winnt\ime\mscandui.dll
    - 2004-08-04 07:56:45 130,048 ----a-w c:\winnt\ime\softkbd.dll
    + 2008-04-14 00:12:06 130,048 ----a-w c:\winnt\ime\softkbd.dll
    - 2004-08-04 07:56:29 62,976 ----a-w c:\winnt\ime\spgrmr.dll
    + 2008-04-13 16:43:18 62,976 ----a-w c:\winnt\ime\spgrmr.dll
    - 2004-08-04 07:56:45 250,880 ----a-w c:\winnt\ime\sptip.dll
    + 2008-04-14 00:12:06 250,368 ----a-w c:\winnt\ime\sptip.dll
    + 2007-09-19 20:05:24 40,960 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\ConnectDetect.dll
    + 2007-09-19 20:05:14 32,768 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\EncryptionAPI.dll
    + 2007-09-19 20:05:28 196,608 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\FPKMain.exe
    + 2007-09-19 20:04:48 188,416 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\FPKPM.dll
    + 2007-09-19 20:04:40 1,941,504 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\FPKPMSV.exe
    + 2007-09-19 20:05:16 20,480 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\fpkuc.dll
    + 2007-09-19 20:04:56 135,168 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\InstallUtils.exe
    + 2007-09-19 20:04:14 1,523,712 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\JAWSCOM.dll
    + 2007-09-19 20:04:58 6,656 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\JAWSCOMWrapper.dll
    + 2007-09-19 20:05:14 20,480 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\Kinkos.Encryption.dll
    + 2007-09-19 20:05:28 483,328 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\kinkos.jupiter.gui.queue.exe
    + 2007-09-19 20:05:22 204,800 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\Kinkos.Jupiter.Mapping.dll
    + 2007-09-19 20:03:14 28,672 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\PublisherPlugIn.dll
    + 2007-09-19 20:05:34 83,208 ----a-r c:\winnt\Installer\$PatchCache$\Managed\3DF1BD491E01F2C418AFFAEDD90CB65F\2.0.1784\PublisherPlugInShim.dll
    + 2008-11-28 04:40:42 102,400 ----a-r c:\winnt\Installer\{318AB667-3230-41B5-A617-CB3BF748D371}\iTunesIco.exe
    + 2008-09-13 17:54:14 27,136 ----a-r c:\winnt\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2008-05-15 00:24:50 405,504 ----a-r c:\winnt\Installer\{7210BCFE-ED8D-4261-8537-81B5A4BDFA2A}\ARPPRODUCTICON.exe
    + 2008-05-15 00:24:51 405,504 ----a-r c:\winnt\Installer\{7210BCFE-ED8D-4261-8537-81B5A4BDFA2A}\NewShortcut1_7210BCFEED8D4261853781B5A4BDFA2A.exe
    + 2008-05-15 00:24:51 65,536 ----a-r c:\winnt\Installer\{7210BCFE-ED8D-4261-8537-81B5A4BDFA2A}\RS_WebsiteShortcut_7210BCFEED8D4261853781B5A4BDFA2A.exe
    + 2008-09-13 17:49:53 86,016 ----a-r c:\winnt\Installer\{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}\PrntWzrdIco.exe
    - 2007-10-02 05:55:27 7,278 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\ARPPRODUCTICON.exe
    + 2008-02-26 18:50:31 7,278 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\ARPPRODUCTICON.exe
    + 2008-02-26 18:50:31 7,278 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\NewShortcut21_94DB1FD310E14C2F81FAAFDE9DC06BF5.exe
    - 2007-10-02 05:55:26 65,536 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe
    + 2008-02-26 18:50:31 65,536 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\Shortcut0.C3A146F5_4B48_11D5_A819_00B0D0428C0C.exe
    - 2007-10-02 05:55:27 8,854 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\Uninstall_File__Prin_5722ACFA182A487188F967978109D5D1.exe
    + 2008-02-26 18:50:31 8,854 ----a-r c:\winnt\Installer\{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}\Uninstall_File__Prin_5722ACFA182A487188F967978109D5D1.exe
    + 2008-02-15 00:38:53 295,606 ----a-r c:\winnt\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
    + 2008-09-26 02:07:19 25,214 ----a-r c:\winnt\Installer\{D6F2C4FD-149A-4BA0-A95D-2A80F10EE751}\_18be6784.exe
    + 2008-09-26 02:07:19 25,214 ----a-r c:\winnt\Installer\{D6F2C4FD-149A-4BA0-A95D-2A80F10EE751}\_294823.exe
    + 2008-09-26 02:07:19 25,214 ----a-r c:\winnt\Installer\{D6F2C4FD-149A-4BA0-A95D-2A80F10EE751}\_2cd672ae.exe
    + 2008-09-26 02:07:19 25,214 ----a-r c:\winnt\Installer\{D6F2C4FD-149A-4BA0-A95D-2A80F10EE751}\_4ae13d6c.exe
    + 2008-01-18 15:13:09 2,247 ------w c:\winnt\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w c:\winnt\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\winnt\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\winnt\Installer\tsclientmsitrans\tscupdc.dll
    - 2005-09-23 15:28:52 72,704 ----a-w c:\winnt\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2007-10-24 09:47:38 82,944 ----a-w c:\winnt\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2005-09-23 15:28:52 7,680 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp10.dll
    + 2007-10-24 09:47:38 16,896 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp10.dll
    - 2005-09-23 15:28:56 7,680 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2007-10-24 09:47:40 16,896 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2005-09-23 15:28:58 7,680 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2007-10-24 09:47:42 16,896 ----a-w c:\winnt\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    - 2005-09-23 15:28:56 7,680 ----a-w c:\winnt\Microsoft.NET\Framework\SharedReg12.dll
    + 2007-10-24 09:47:40 16,896 ----a-w c:\winnt\Microsoft.NET\Framework\SharedReg12.dll
    - 2005-09-23 15:28:52 86,528 ----a-w c:\winnt\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2007-10-24 09:47:38 97,280 ----a-w c:\winnt\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    - 2005-09-23 15:28:36 18,944 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2007-10-24 09:47:26 28,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    - 2005-09-23 15:28:42 136,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2007-10-24 09:47:30 145,408 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    - 2005-09-23 15:28:44 4,608 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2007-10-24 09:47:32 13,824 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    - 2005-09-23 15:29:04 183,808 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2007-10-24 09:47:48 193,016 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    - 2005-09-23 15:28:28 208,896 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2007-10-24 09:47:20 218,112 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2005-09-23 15:28:56 10,752 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2007-10-24 09:47:40 10,752 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2005-09-23 15:28:58 138,240 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2007-10-24 09:47:42 147,968 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    - 2005-09-23 15:28:36 87,552 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2007-10-24 09:47:26 99,320 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\alink.dll
    - 2007-04-13 10:21:18 58,712 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2007-10-24 09:47:42 59,392 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    - 2005-09-23 15:28:32 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2007-10-24 09:47:22 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2007-04-13 10:20:52 10,752 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2007-10-24 09:47:22 22,024 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    - 2007-04-13 10:20:52 8,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2007-10-24 09:47:22 17,928 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2007-04-13 10:20:52 23,552 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2007-10-24 09:47:22 33,288 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2007-04-13 10:20:50 75,264 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2007-10-24 09:47:22 84,480 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    - 2005-09-23 15:28:32 13,824 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2007-10-24 09:47:22 24,576 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2007-04-13 10:20:52 32,608 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2007-10-24 09:47:22 32,776 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    - 2005-09-23 15:28:32 106,496 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2007-10-24 09:47:22 106,496 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2007-04-13 10:20:52 33,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-10-24 09:47:22 33,800 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    - 2007-04-13 10:20:52 32,600 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2007-10-24 09:47:22 33,280 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    - 2007-04-13 10:20:52 507,904 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2007-10-24 09:47:22 507,904 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2005-09-23 15:28:56 106,496 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2007-10-24 09:47:40 106,496 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    - 2007-04-13 10:21:16 88,576 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2007-10-24 09:47:40 101,896 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    - 2005-09-23 15:28:42 76,984 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2007-10-24 09:47:30 80,376 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\csc.exe
    - 2005-09-23 15:28:42 1,144,832 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2007-10-24 09:47:30 1,162,744 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    - 2005-09-23 15:28:42 13,312 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2007-10-24 09:47:30 13,312 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    - 2005-09-23 15:28:58 17,920 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2007-10-24 09:47:42 27,136 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    - 2005-09-23 15:28:56 68,608 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2007-10-24 09:47:40 69,120 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2005-09-23 15:28:44 31,936 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2007-10-24 09:47:30 35,320 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    - 2005-09-23 15:28:38 52,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2007-10-24 09:47:28 66,552 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    - 2007-04-13 10:20:58 5,120 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-10-24 09:47:28 5,120 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2005-09-23 15:29:12 547,840 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2007-10-24 09:47:54 572,936 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    - 2005-09-23 15:28:56 788,992 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2007-10-24 09:47:40 798,224 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    - 2005-09-23 15:28:50 9,216 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2007-10-24 09:47:36 18,936 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    - 2007-04-13 10:21:16 9,728 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-10-24 09:47:40 9,728 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2005-09-23 15:28:56 8,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2007-10-24 09:47:40 8,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    - 2005-09-23 15:28:56 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2007-10-24 09:47:40 77,824 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2005-09-23 15:28:56 5,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2007-10-24 09:47:40 6,656 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    - 2007-04-13 10:21:16 228,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2007-10-24 09:47:40 230,904 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2007-04-13 10:21:16 28,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-10-24 09:47:40 28,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2005-09-23 15:28:56 55,296 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2007-10-24 09:47:40 65,032 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2005-09-23 15:28:56 72,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2007-10-24 09:47:40 72,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    - 2005-09-23 15:28:48 40,960 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2007-10-24 09:47:34 40,960 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2007-04-13 10:21:10 413,696 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2007-10-24 09:47:36 348,160 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    - 2005-09-23 15:28:48 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2007-10-24 09:47:36 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    - 2007-04-13 10:21:10 647,168 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2007-10-24 09:47:36 655,360 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2005-09-23 15:28:48 73,728 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2007-10-24 09:47:36 77,824 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2007-04-13 10:21:08 749,568 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2007-10-24 09:47:34 749,568 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2005-09-23 15:29:10 110,592 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2007-10-24 09:47:52 110,592 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2005-09-23 15:29:10 372,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2007-10-24 09:47:52 372,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    - 2005-09-23 15:29:08 667,648 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2007-10-24 09:47:50 671,744 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    - 2005-09-23 15:28:30 28,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2007-10-24 09:47:20 28,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2005-09-23 15:29:10 5,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2007-10-24 09:47:52 5,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    - 2005-09-23 15:28:30 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2007-10-24 09:47:20 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2005-09-23 15:28:30 12,800 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2007-10-24 09:47:20 12,800 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-09-23 15:28:30 7,168 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2007-10-24 09:47:20 7,168 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    - 2007-04-13 10:20:52 87,040 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2007-10-24 09:47:22 97,792 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2005-09-23 15:28:48 69,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2007-10-24 09:47:36 69,632 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2007-04-13 10:21:18 802,304 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2007-10-24 09:47:40 822,280 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2005-09-23 15:28:56 73,216 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2007-10-24 09:47:40 83,456 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    - 2005-09-23 15:28:56 288,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2007-10-24 09:47:40 308,224 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    - 2007-04-13 10:21:16 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2007-10-24 09:47:40 47,104 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2007-04-13 10:21:16 326,656 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2007-10-24 09:47:40 348,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2005-09-23 15:28:56 81,408 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2007-10-24 09:47:40 94,208 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    - 2007-04-13 10:21:16 4,308,992 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2007-10-24 09:47:40 4,444,160 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2007-04-13 10:21:16 102,912 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2007-10-24 09:47:40 114,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    - 2005-09-23 15:29:00 330,752 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2007-10-24 09:47:44 340,992 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    - 2005-09-23 15:28:56 67,072 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2007-10-24 09:47:40 77,312 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    - 2005-09-23 15:28:50 9,216 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2007-10-24 09:47:36 18,944 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    - 2007-04-13 10:21:18 227,328 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2007-10-24 09:47:40 242,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    - 2007-04-13 10:21:18 68,952 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2007-10-24 09:47:40 70,144 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    - 2005-09-23 15:28:56 10,240 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2007-10-24 09:47:40 19,456 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    - 2007-04-13 10:21:12 5,634,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2007-10-24 09:47:36 5,814,784 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2005-09-23 15:29:00 22,528 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2007-10-24 09:47:44 31,744 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    - 2007-04-13 10:21:16 99,152 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2007-10-24 09:47:40 101,880 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    - 2007-04-13 10:21:18 15,360 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2007-10-24 09:47:40 24,584 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2005-09-23 15:28:56 78,336 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2007-10-24 09:47:40 89,096 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    - 2007-04-13 10:21:12 136,192 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2007-10-24 09:47:36 144,896 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    - 2005-09-23 15:28:56 53,248 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2007-10-24 09:47:40 53,248 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    - 2005-09-23 15:28:56 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2007-10-24 09:47:40 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2005-09-23 15:29:02 59,072 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2007-10-24 09:47:46 61,952 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    - 2005-09-23 15:28:58 7,680 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2007-10-24 09:47:42 16,896 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    - 2005-09-23 15:28:56 107,520 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2007-10-24 09:47:40 119,296 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    - 2005-09-23 15:29:00 85,504 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2007-10-24 09:47:44 95,232 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    - 2007-04-13 10:21:18 382,464 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2007-10-24 09:47:40 392,696 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2007-04-13 10:21:18 110,592 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2007-10-24 09:47:40 110,592 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    - 2007-04-13 10:21:18 413,696 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2007-10-24 09:47:42 425,984 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2005-09-23 15:28:56 81,920 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2007-10-24 09:47:40 81,920 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2007-04-13 10:21:16 2,902,016 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-10-24 09:47:40 3,036,160 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    - 2007-04-13 10:21:18 482,304 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2007-10-24 09:47:40 483,840 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    - 2007-04-13 10:21:18 716,800 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2007-10-24 09:47:40 741,376 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    - 2007-04-13 10:20:58 888,832 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2007-10-24 09:47:28 933,888 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    - 2007-04-13 10:21:16 5,001,216 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2007-10-24 09:47:40 5,070,848 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    - 2005-09-23 15:28:56 397,312 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2007-10-24 09:47:40 401,408 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    - 2007-04-13 10:21:18 188,416 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2007-10-24 09:47:40 188,416 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2007-04-13 10:21:16 2,940,928 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2007-10-24 09:47:40 3,076,096 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2005-09-23 15:28:56 81,920 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2007-10-24 09:47:40 81,920 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    - 2007-04-13 10:21:16 577,536 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2007-10-24 09:47:40 630,784 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2007-04-13 10:21:16 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2007-10-24 09:47:40 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    - 2007-04-13 10:21:18 47,616 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2007-10-24 09:47:40 57,392 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2007-04-13 10:21:18 114,176 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2007-10-24 09:47:40 113,664 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2007-04-13 10:21:16 372,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2007-10-24 09:47:40 372,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2005-09-23 15:28:56 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2007-10-24 09:47:40 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    - 2007-04-13 10:21:16 299,008 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2007-10-24 09:47:40 299,008 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    - 2005-09-23 15:28:56 131,072 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2007-10-24 09:47:40 131,072 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-09-23 15:28:56 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2007-10-24 09:47:40 258,048 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2005-09-23 15:28:56 114,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2007-10-24 09:47:40 114,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2007-04-13 10:21:18 260,096 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2007-10-24 09:47:40 261,120 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    - 2007-04-13 10:21:16 5,156,864 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2007-10-24 09:47:40 5,431,296 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2005-09-23 15:28:56 835,584 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2007-10-24 09:47:40 884,736 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    - 2005-09-23 15:28:56 86,016 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2007-10-24 09:47:40 90,112 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    - 2005-09-23 15:28:56 823,296 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2007-10-24 09:47:40 839,680 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    - 2007-04-13 10:21:16 5,152,768 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2007-10-24 09:47:40 5,013,504 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2007-04-13 10:21:16 2,027,520 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2007-10-24 09:47:40 2,068,480 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    - 2005-09-23 15:28:56 71,680 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2007-10-24 09:47:40 81,400 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    - 2007-04-13 10:21:28 1,166,672 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2007-10-24 09:47:48 1,172,472 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    - 2007-04-13 10:20:50 1,330,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2007-10-24 09:47:20 1,344,000 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
  9. 2009-03-24, 00:22 #19
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2007-04-13 10:20:52 406,016 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2007-10-24 09:47:22 434,688 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2005-09-23 15:28:56 28,160 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2007-10-24 09:47:40 37,896 ----a-w c:\winnt\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2007-10-11 17:55:14 159,744 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
    + 2007-10-11 17:55:10 864,256 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
    + 2007-10-11 17:55:12 397,312 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
    + 2007-10-11 17:55:12 151,552 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
    + 2007-10-11 17:55:14 2,560 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    + 2007-10-11 17:55:14 61,440 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
    + 2007-10-11 17:55:14 11,264 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2007-10-11 17:55:14 102,400 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll
    + 2007-10-11 17:55:14 122,880 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
    + 2007-10-11 17:55:14 929,792 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    + 2007-10-11 17:55:14 5,971,968 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2007-10-11 17:55:14 159,744 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2007-10-11 17:55:14 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2007-10-11 17:55:14 143,360 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
    + 2007-10-06 11:18:12 16,936 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2006-10-21 00:08:52 797,696 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
    + 2006-10-21 00:09:02 4,874,240 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
    + 2006-10-20 22:03:40 2,628,608 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
    + 2007-10-09 21:03:00 76,312 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2007-10-09 20:58:12 32,768 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2007-10-09 20:58:12 36,864 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2007-10-09 21:03:08 121,368 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2007-10-09 20:58:14 897,024 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
    + 2007-10-09 20:58:20 14,848 ----a-w c:\winnt\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
    + 2008-10-15 22:54:00 48,640 ----a-w c:\winnt\mmfs.dll
    + 2007-11-19 01:37:06 1,821 ----a-w c:\winnt\mozver.dat
    - 2004-08-04 07:56:41 24,064 ----a-w c:\winnt\msagent\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\winnt\msagent\agentanm.dll
    - 2004-08-04 07:56:41 214,016 ----a-w c:\winnt\msagent\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ----a-w c:\winnt\msagent\agentctl.dll
    - 2006-10-12 13:54:18 42,496 ----a-w c:\winnt\msagent\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ----a-w c:\winnt\msagent\agentdp2.dll
    - 2007-03-09 13:58:57 57,344 ----a-w c:\winnt\msagent\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\winnt\msagent\agentdpv.dll
    - 2004-08-04 07:56:41 49,152 ----a-w c:\winnt\msagent\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ----a-w c:\winnt\msagent\agentmpx.dll
    - 2004-08-04 07:56:41 24,064 ----a-w c:\winnt\msagent\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\winnt\msagent\agentpsh.dll
    - 2004-08-04 07:56:41 44,032 ----a-w c:\winnt\msagent\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ----a-w c:\winnt\msagent\agentsr.dll
    - 2006-10-12 11:54:07 256,512 ----a-w c:\winnt\msagent\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ----a-w c:\winnt\msagent\agentsvr.exe
    - 2004-08-04 07:56:41 24,064 ----a-w c:\winnt\msagent\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ----a-w c:\winnt\msagent\agtintl.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\winnt\msagent\intl\agt0405.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\winnt\msagent\intl\agt0406.dll
    - 2003-03-31 12:00:00 21,504 ----a-w c:\winnt\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\winnt\msagent\intl\agt0407.dll
    - 2003-03-31 12:00:00 22,016 ----a-w c:\winnt\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ----a-w c:\winnt\msagent\intl\agt0408.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ----a-w c:\winnt\msagent\intl\agt0409.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ----a-w c:\winnt\msagent\intl\agt040b.dll
    - 2003-03-31 12:00:00 21,504 ----a-w c:\winnt\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\winnt\msagent\intl\agt040c.dll
    - 2003-03-31 12:00:00 19,968 ----a-w c:\winnt\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ----a-w c:\winnt\msagent\intl\agt040e.dll
    - 2003-03-31 12:00:00 20,992 ----a-w c:\winnt\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ----a-w c:\winnt\msagent\intl\agt0410.dll
    - 2003-03-31 12:00:00 20,992 ----a-w c:\winnt\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ----a-w c:\winnt\msagent\intl\agt0413.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\winnt\msagent\intl\agt0414.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\winnt\msagent\intl\agt0415.dll
    - 2003-03-31 12:00:00 20,480 ----a-w c:\winnt\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ----a-w c:\winnt\msagent\intl\agt0416.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\winnt\msagent\intl\agt0419.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\winnt\msagent\intl\agt041d.dll
    - 2003-03-31 12:00:00 19,456 ----a-w c:\winnt\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\winnt\msagent\intl\agt041f.dll
    - 2003-03-31 12:00:00 20,992 ----a-w c:\winnt\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ----a-w c:\winnt\msagent\intl\agt0816.dll
    - 2003-03-31 12:00:00 20,480 ----a-w c:\winnt\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ----a-w c:\winnt\msagent\intl\agt0c0a.dll
    - 2004-08-04 07:56:43 39,936 ----a-w c:\winnt\msagent\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ----a-w c:\winnt\msagent\mslwvtts.dll
    - 2006-06-03 11:40:49 33,792 ------w c:\winnt\network diagnostic\custsat.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\winnt\network diagnostic\custsat.dll
    - 2006-07-06 08:49:52 557,568 ------w c:\winnt\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 558,080 ------w c:\winnt\network diagnostic\xpnetdiag.exe
    - 2007-06-17 08:11:58 51,200 ----a-w c:\winnt\NirCmd.exe
    + 2000-08-31 15:00:00 29,696 ----a-w c:\winnt\NirCmd.exe
    - 2004-08-04 07:56:54 69,120 ----a-w c:\winnt\notepad.exe
    + 2008-04-14 00:12:29 69,120 ----a-w c:\winnt\notepad.exe
    - 2004-08-04 07:56:49 768,512 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\helpctr.exe
    + 2008-04-14 00:12:21 769,024 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\helpctr.exe
    - 2004-08-04 07:56:50 743,936 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\helpsvc.exe
    + 2008-04-14 00:12:21 744,448 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\helpsvc.exe
    - 2004-08-04 07:56:50 18,944 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\hscupd.exe
    + 2008-04-14 00:12:21 18,432 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\hscupd.exe
    - 2004-08-04 07:56:53 158,208 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\msconfig.exe
    - 2004-08-04 07:56:43 376,320 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\msinfo.dll
    - 2004-08-04 07:56:44 102,400 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\pchshell.dll
    - 2004-08-04 07:56:44 38,912 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\winnt\PCHealth\HelpCtr\Binaries\pchsvc.dll
    - 2004-09-06 00:34:12 76,475 ----a-w c:\winnt\PCHealth\HelpCtr\OfflineCache\index.dat
    + 2008-09-28 02:16:10 76,475 ----a-w c:\winnt\PCHealth\HelpCtr\OfflineCache\index.dat
    - 2004-09-06 00:34:12 15,822 ----a-w c:\winnt\PCHealth\HelpCtr\PackageStore\SkuStore.bin
    + 2008-09-28 02:16:10 16,192 ----a-w c:\winnt\PCHealth\HelpCtr\PackageStore\SkuStore.bin
    - 2004-08-04 07:56:57 150,528 ----a-w c:\winnt\PCHealth\UploadLB\Binaries\uploadm.exe
    + 2008-04-14 00:12:38 150,528 ----a-w c:\winnt\PCHealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-04 07:56:45 151,552 ------w c:\winnt\peernet\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ------w c:\winnt\peernet\sqldb20.dll
    - 2004-08-04 07:56:45 462,848 ------w c:\winnt\peernet\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ------w c:\winnt\peernet\sqlqp20.dll
    - 2004-08-04 07:56:45 110,592 ------w c:\winnt\peernet\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ------w c:\winnt\peernet\sqlse20.dll
    - 2004-08-04 07:56:55 146,432 ----a-w c:\winnt\regedit.exe
    + 2008-04-14 00:12:32 146,432 ----a-w c:\winnt\regedit.exe
    + 2008-10-15 22:54:00 2,560 ----a-w c:\winnt\Runservice.exe
    + 2000-08-31 15:00:00 98,816 ----a-w c:\winnt\sed.exe
    - 2004-08-04 06:10:06 53,248 ------w c:\winnt\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:46:18 53,376 ------w c:\winnt\ServicePackFiles\i386\1394bus.sys
    - 2004-08-04 06:00:03 12,288 ------w c:\winnt\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:40:50 12,288 ------w c:\winnt\ServicePackFiles\i386\4mmdat.sys
    - 2004-08-04 06:10:10 48,128 ------w c:\winnt\ServicePackFiles\i386\61883.sys
    + 2008-04-13 18:46:20 48,128 ------w c:\winnt\ServicePackFiles\i386\61883.sys
    - 2004-08-04 07:56:41 100,352 ------w c:\winnt\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ------w c:\winnt\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\winnt\ServicePackFiles\i386\aaclient.dll
    + 2008-04-14 00:11:48 39,424 ------w c:\winnt\ServicePackFiles\i386\acadproc.dll
    - 2004-08-04 07:56:47 183,808 ------w c:\winnt\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 00:12:11 184,320 ------w c:\winnt\ServicePackFiles\i386\accwiz.exe
    - 2004-08-04 07:56:41 1,852,416 ------w c:\winnt\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 00:11:48 1,852,928 ------w c:\winnt\ServicePackFiles\i386\acgenral.dll
    - 2004-08-04 07:56:41 450,048 ------w c:\winnt\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 00:11:48 451,072 ------w c:\winnt\ServicePackFiles\i386\aclayers.dll
    - 2004-08-04 07:56:41 137,728 ------w c:\winnt\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 00:11:48 141,312 ------w c:\winnt\ServicePackFiles\i386\aclua.dll
    - 2004-08-04 07:56:41 114,688 ------w c:\winnt\ServicePackFiles\i386\aclui.dll
    + 2008-04-14 00:11:48 115,712 ------w c:\winnt\ServicePackFiles\i386\aclui.dll
    - 2004-08-04 06:07:38 187,776 ------w c:\winnt\ServicePackFiles\i386\acpi.sys
    + 2008-04-13 18:36:35 187,776 ------w c:\winnt\ServicePackFiles\i386\acpi.sys
    - 2004-08-04 07:56:41 244,736 ------w c:\winnt\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 00:11:48 245,248 ------w c:\winnt\ServicePackFiles\i386\acspecfc.dll
    - 2004-08-04 07:56:41 194,048 ------w c:\winnt\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 00:11:48 193,536 ------w c:\winnt\ServicePackFiles\i386\activeds.dll
    - 2004-08-04 07:56:47 4,096 ------w c:\winnt\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 00:12:12 4,096 ------w c:\winnt\ServicePackFiles\i386\actmovie.exe
    - 2004-08-04 07:56:41 101,888 ------w c:\winnt\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ------w c:\winnt\ServicePackFiles\i386\actxprxy.dll
    - 2004-08-04 07:56:41 116,224 ------w c:\winnt\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 00:11:48 116,224 ------w c:\winnt\ServicePackFiles\i386\acxtrnal.dll
    - 2004-08-04 07:56:41 20,540 ------w c:\winnt\ServicePackFiles\i386\admin.dll
    + 2008-04-14 00:11:48 20,540 ------w c:\winnt\ServicePackFiles\i386\admin.dll
    - 2004-08-04 07:56:47 16,439 ------w c:\winnt\ServicePackFiles\i386\admin.exe
    + 2008-04-14 00:12:12 16,439 ------w c:\winnt\ServicePackFiles\i386\admin.exe
    - 2004-08-04 07:56:41 61,440 ------w c:\winnt\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 00:11:48 61,440 ------w c:\winnt\ServicePackFiles\i386\admparse.dll
    - 2004-08-04 07:56:41 175,616 ------w c:\winnt\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ------w c:\winnt\ServicePackFiles\i386\adsldp.dll
    - 2004-08-04 07:56:41 143,360 ------w c:\winnt\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ------w c:\winnt\ServicePackFiles\i386\adsldpc.dll
    - 2004-08-04 07:56:41 68,096 ------w c:\winnt\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ------w c:\winnt\ServicePackFiles\i386\adsmsext.dll
    - 2004-08-04 07:56:41 263,680 ------w c:\winnt\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ------w c:\winnt\ServicePackFiles\i386\adsnt.dll
    - 2004-08-04 07:56:41 4,255 ------w c:\winnt\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 00:11:48 4,255 ------w c:\winnt\ServicePackFiles\i386\adv01nt5.dll
    - 2004-08-04 07:56:41 3,967 ------w c:\winnt\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\winnt\ServicePackFiles\i386\adv02nt5.dll
    - 2004-08-04 07:56:41 3,615 ------w c:\winnt\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\winnt\ServicePackFiles\i386\adv05nt5.dll
    - 2004-08-04 07:56:41 3,647 ------w c:\winnt\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\winnt\ServicePackFiles\i386\adv07nt5.dll
    - 2004-08-04 07:56:41 3,135 ------w c:\winnt\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\winnt\ServicePackFiles\i386\adv08nt5.dll
    - 2004-08-04 07:56:41 3,711 ------w c:\winnt\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\winnt\ServicePackFiles\i386\adv09nt5.dll
    - 2004-08-04 07:56:41 3,775 ------w c:\winnt\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\winnt\ServicePackFiles\i386\adv11nt5.dll
    - 2004-08-04 07:56:41 616,960 ------w c:\winnt\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ------w c:\winnt\ServicePackFiles\i386\advapi32.dll
    - 2004-08-04 07:56:41 99,840 ------w c:\winnt\ServicePackFiles\i386\advpack.dll
    + 2008-04-14 00:11:48 99,840 ------w c:\winnt\ServicePackFiles\i386\advpack.dll
    - 2004-08-04 05:39:36 142,464 ------w c:\winnt\ServicePackFiles\i386\aec.sys
    + 2008-04-13 16:39:23 142,592 ------w c:\winnt\ServicePackFiles\i386\aec.sys
    - 2004-08-04 06:14:14 138,496 ------w c:\winnt\ServicePackFiles\i386\afd.sys
    + 2008-04-13 19:19:23 138,112 ------w c:\winnt\ServicePackFiles\i386\afd.sys
    - 2004-08-04 07:56:41 24,064 ------w c:\winnt\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\winnt\ServicePackFiles\i386\agentanm.dll
    - 2004-08-04 07:56:41 214,016 ------w c:\winnt\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ------w c:\winnt\ServicePackFiles\i386\agentctl.dll
    - 2004-08-04 07:56:41 41,984 ------w c:\winnt\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ------w c:\winnt\ServicePackFiles\i386\agentdp2.dll
    - 2004-08-04 07:56:41 58,880 ------w c:\winnt\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ------w c:\winnt\ServicePackFiles\i386\agentdpv.dll
    - 2004-08-04 07:56:41 49,152 ------w c:\winnt\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ------w c:\winnt\ServicePackFiles\i386\agentmpx.dll
    - 2004-08-04 07:56:41 24,064 ------w c:\winnt\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\winnt\ServicePackFiles\i386\agentpsh.dll
    - 2004-08-04 07:56:41 44,032 ------w c:\winnt\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ------w c:\winnt\ServicePackFiles\i386\agentsr.dll
    - 2004-08-04 07:56:47 256,512 ------w c:\winnt\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ------w c:\winnt\ServicePackFiles\i386\agentsvr.exe
    - 2004-08-04 06:07:41 42,368 ------w c:\winnt\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:38 42,368 ------w c:\winnt\ServicePackFiles\i386\agp440.sys
    - 2004-08-04 06:07:42 44,928 ------w c:\winnt\ServicePackFiles\i386\agpcpq.sys
    + 2008-04-13 18:36:39 44,928 ------w c:\winnt\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\winnt\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\winnt\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\winnt\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\winnt\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\winnt\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\winnt\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\winnt\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\winnt\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\winnt\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\winnt\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\winnt\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\winnt\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w c:\winnt\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\winnt\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\winnt\ServicePackFiles\i386\agt0c0a.dll
    - 2004-08-04 07:56:41 24,064 ------w c:\winnt\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ------w c:\winnt\ServicePackFiles\i386\agtintl.dll
    - 2004-08-04 07:56:47 98,304 ------w c:\winnt\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 00:12:12 98,304 ------w c:\winnt\ServicePackFiles\i386\ahui.exe
    - 2004-08-04 07:56:47 44,544 ------w c:\winnt\ServicePackFiles\i386\alg.exe
    + 2008-04-14 00:12:12 44,544 ------w c:\winnt\ServicePackFiles\i386\alg.exe
    - 2004-08-04 06:07:41 42,752 ------w c:\winnt\ServicePackFiles\i386\alim1541.sys
    + 2008-04-13 18:36:38 42,752 ------w c:\winnt\ServicePackFiles\i386\alim1541.sys
    - 2004-08-04 07:56:41 17,408 ------w c:\winnt\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ------w c:\winnt\ServicePackFiles\i386\alrsvc.dll
    - 2004-08-04 06:07:42 43,008 ------w c:\winnt\ServicePackFiles\i386\amdagp.sys
    + 2008-04-13 18:36:39 43,008 ------w c:\winnt\ServicePackFiles\i386\amdagp.sys
    - 2004-08-04 05:59:19 36,992 ------w c:\winnt\ServicePackFiles\i386\amdk6.sys
    + 2008-04-13 18:31:32 37,376 ------w c:\winnt\ServicePackFiles\i386\amdk6.sys
    - 2004-08-04 05:59:20 37,376 ------w c:\winnt\ServicePackFiles\i386\amdk7.sys
    + 2008-04-13 18:31:33 37,760 ------w c:\winnt\ServicePackFiles\i386\amdk7.sys
    - 2004-08-04 07:56:41 70,656 ------w c:\winnt\ServicePackFiles\i386\amstream.dll
    + 2008-04-14 00:11:49 70,656 ------w c:\winnt\ServicePackFiles\i386\amstream.dll
    - 2004-08-04 07:56:41 126,976 ------w c:\winnt\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ------w c:\winnt\ServicePackFiles\i386\apphelp.dll
    - 2004-08-04 07:56:41 331,264 ------w c:\winnt\ServicePackFiles\i386\aqueue.dll
    + 2008-04-14 00:11:49 331,264 ------w c:\winnt\ServicePackFiles\i386\aqueue.dll
    - 2004-08-04 05:58:29 60,800 ------w c:\winnt\ServicePackFiles\i386\arp1394.sys
    + 2008-04-13 18:51:25 60,800 ------w c:\winnt\ServicePackFiles\i386\arp1394.sys
    - 2004-08-04 07:56:41 65,024 ------w c:\winnt\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ------w c:\winnt\ServicePackFiles\i386\asycfilt.dll
    - 2004-08-04 06:05:03 14,336 ------w c:\winnt\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-13 18:57:27 14,336 ------w c:\winnt\ServicePackFiles\i386\asyncmac.sys
    - 2004-08-04 07:56:47 25,088 ------w c:\winnt\ServicePackFiles\i386\at.exe
    + 2008-04-14 00:12:12 25,088 ------w c:\winnt\ServicePackFiles\i386\at.exe
    - 2004-08-04 05:59:42 95,360 ------w c:\winnt\ServicePackFiles\i386\atapi.sys
    + 2008-04-13 18:40:30 96,512 ------w c:\winnt\ServicePackFiles\i386\atapi.sys
    - 2004-08-04 07:56:41 229,376 ------w c:\winnt\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 00:11:49 229,376 ------w c:\winnt\ServicePackFiles\i386\ati2cqag.dll
    - 2004-08-04 07:56:41 377,984 ------w c:\winnt\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\winnt\ServicePackFiles\i386\ati2dvaa.dll
    - 2004-08-04 07:56:41 201,728 ------w c:\winnt\ServicePackFiles\i386\ati2dvag.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\winnt\ServicePackFiles\i386\ati2dvag.dll
    - 2004-08-04 07:56:41 870,784 ------w c:\winnt\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 00:11:49 870,784 ------w c:\winnt\ServicePackFiles\i386\ati3d1ag.dll
    - 2004-08-04 07:56:41 1,057,760 ------w c:\winnt\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 00:11:49 1,057,760 ------w c:\winnt\ServicePackFiles\i386\ati3d2ag.dll
    - 2004-08-04 07:56:41 1,888,992 ------w c:\winnt\ServicePackFiles\i386\ati3duag.dll
    + 2008-04-14 00:11:50 1,888,992 ------w c:\winnt\ServicePackFiles\i386\ati3duag.dll
    - 2004-08-04 07:56:41 32,768 ------w c:\winnt\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 00:11:50 32,768 ------w c:\winnt\ServicePackFiles\i386\ativtmxx.dll
    - 2004-08-04 07:56:41 516,768 ------w c:\winnt\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\winnt\ServicePackFiles\i386\ativvaxx.dll
    - 2004-08-04 07:56:41 58,880 ------w c:\winnt\ServicePackFiles\i386\atl.dll
    + 2008-04-14 00:11:50 58,880 ------w c:\winnt\ServicePackFiles\i386\atl.dll
    - 2004-08-04 07:56:47 11,264 ------w c:\winnt\ServicePackFiles\i386\atmadm.exe
    + 2008-04-14 00:12:12 11,264 ------w c:\winnt\ServicePackFiles\i386\atmadm.exe
    - 2004-08-04 05:58:30 59,904 ------w c:\winnt\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-13 18:51:25 59,904 ------w c:\winnt\ServicePackFiles\i386\atmarpc.sys
    - 2004-08-04 07:55:59 285,696 ------w c:\winnt\ServicePackFiles\i386\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ------w c:\winnt\ServicePackFiles\i386\atmfd.dll
    - 2004-08-04 05:58:34 55,936 ------w c:\winnt\ServicePackFiles\i386\atmlane.sys
    + 2008-04-13 18:51:30 55,808 ------w c:\winnt\ServicePackFiles\i386\atmlane.sys
    - 2004-08-04 07:56:41 30,208 ------w c:\winnt\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ------w c:\winnt\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:12:12 12,288 ------w c:\winnt\ServicePackFiles\i386\attrib.exe
    - 2004-08-04 07:56:41 21,183 ------w c:\winnt\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 00:11:50 21,183 ------w c:\winnt\ServicePackFiles\i386\atv01nt5.dll
    - 2004-08-04 07:56:41 11,359 ------w c:\winnt\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\winnt\ServicePackFiles\i386\atv02nt5.dll
    - 2004-08-04 07:56:41 25,471 ------w c:\winnt\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\winnt\ServicePackFiles\i386\atv04nt5.dll
    - 2004-08-04 07:56:41 14,143 ------w c:\winnt\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\winnt\ServicePackFiles\i386\atv06nt5.dll
    - 2004-08-04 07:56:41 17,279 ------w c:\winnt\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\winnt\ServicePackFiles\i386\atv10nt5.dll
    - 2004-08-04 07:56:41 42,496 ------w c:\winnt\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ------w c:\winnt\ServicePackFiles\i386\audiosrv.dll
    - 2004-08-04 07:56:47 14,336 ------w c:\winnt\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 00:12:12 14,336 ------w c:\winnt\ServicePackFiles\i386\auditusr.exe
    - 2004-08-04 07:56:41 20,540 ------w c:\winnt\ServicePackFiles\i386\author.dll
    + 2008-04-14 00:11:50 20,540 ------w c:\winnt\ServicePackFiles\i386\author.dll
    - 2004-08-04 07:56:47 16,439 ------w c:\winnt\ServicePackFiles\i386\author.exe
    + 2008-04-14 00:12:12 16,439 ------w c:\winnt\ServicePackFiles\i386\author.exe
    - 2004-08-04 07:56:41 56,832 ------w c:\winnt\ServicePackFiles\i386\authz.dll
    + 2008-04-14 00:11:50 62,464 ------w c:\winnt\ServicePackFiles\i386\authz.dll
    - 2004-08-04 07:56:47 588,800 ------w c:\winnt\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 00:12:12 588,800 ------w c:\winnt\ServicePackFiles\i386\autochk.exe
    - 2004-08-04 07:56:47 602,624 ------w c:\winnt\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ------w c:\winnt\ServicePackFiles\i386\autoconv.exe
    - 2004-08-04 07:56:47 580,608 ------w c:\winnt\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ------w c:\winnt\ServicePackFiles\i386\autofmt.exe
    - 2004-08-04 07:56:47 11,264 ------w c:\winnt\ServicePackFiles\i386\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ------w c:\winnt\ServicePackFiles\i386\autolfn.exe
    - 2004-08-04 06:10:10 38,912 ------w c:\winnt\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:20 38,912 ------w c:\winnt\ServicePackFiles\i386\avc.sys
    - 2004-08-04 06:09:58 13,696 ------w c:\winnt\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-13 18:46:07 13,696 ------w c:\winnt\ServicePackFiles\i386\avcstrm.sys
    - 2004-08-04 07:56:41 84,992 ------w c:\winnt\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ------w c:\winnt\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\winnt\ServicePackFiles\i386\azroles.dll
    - 2004-08-04 07:56:41 52,736 ------w c:\winnt\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ------w c:\winnt\ServicePackFiles\i386\basesrv.dll
    - 2004-08-04 07:56:41 28,672 ------w c:\winnt\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ------w c:\winnt\ServicePackFiles\i386\batmeter.dll
    - 2004-08-04 07:56:41 8,704 ------w c:\winnt\ServicePackFiles\i386\batt.dll
    + 2008-04-14 00:11:50 8,704 ------w c:\winnt\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w c:\winnt\ServicePackFiles\i386\battc.sys
    - 2004-08-04 06:10:12 11,776 ------w c:\winnt\ServicePackFiles\i386\bdasup.sys
    + 2008-04-13 18:46:21 11,776 ------w c:\winnt\ServicePackFiles\i386\bdasup.sys
    - 2004-08-04 07:56:41 17,408 ------w c:\winnt\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ------w c:\winnt\ServicePackFiles\i386\bidispl.dll
    - 2004-08-04 07:56:41 8,192 ------w c:\winnt\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ------w c:\winnt\ServicePackFiles\i386\bitsprx2.dll
    - 2004-08-04 07:56:41 7,168 ------w c:\winnt\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\winnt\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\winnt\ServicePackFiles\i386\bitsprx4.dll
    - 2004-08-04 07:56:47 71,680 ------w c:\winnt\ServicePackFiles\i386\blastcln.exe
    + 2008-04-14 00:12:13 71,680 ------w c:\winnt\ServicePackFiles\i386\blastcln.exe
    - 2004-08-04 05:59:57 71,552 ------w c:\winnt\ServicePackFiles\i386\bridge.sys
    + 2008-04-13 18:53:23 71,552 ------w c:\winnt\ServicePackFiles\i386\bridge.sys
    - 2004-08-04 07:55:59 63,488 ------w c:\winnt\ServicePackFiles\i386\browselc.dll
    + 2008-04-13 17:03:24 63,488 ------w c:\winnt\ServicePackFiles\i386\browselc.dll
    - 2004-08-04 07:56:41 77,312 ------w c:\winnt\ServicePackFiles\i386\browser.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\winnt\ServicePackFiles\i386\browser.dll
    - 2004-08-04 07:56:41 1,016,832 ------w c:\winnt\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ------w c:\winnt\ServicePackFiles\i386\browseui.dll
    - 2004-08-04 07:56:41 78,336 ------w c:\winnt\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ------w c:\winnt\ServicePackFiles\i386\browsewm.dll
    - 2004-08-04 07:56:41 20,992 ------w c:\winnt\ServicePackFiles\i386\bthci.dll
    + 2008-04-14 00:11:50 20,992 ------w c:\winnt\ServicePackFiles\i386\bthci.dll
    - 2004-08-04 06:10:38 17,024 ------w c:\winnt\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 17,024 ------w c:\winnt\ServicePackFiles\i386\bthenum.sys
    - 2004-08-04 06:10:38 38,016 ------w c:\winnt\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\winnt\ServicePackFiles\i386\bthmodem.sys
    - 2004-08-04 05:58:38 100,992 ------w c:\winnt\ServicePackFiles\i386\bthpan.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\winnt\ServicePackFiles\i386\bthpan.sys
    - 2004-08-04 06:10:37 274,304 ------w c:\winnt\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:32 273,024 ------w c:\winnt\ServicePackFiles\i386\bthport.sys
    - 2004-08-04 06:10:37 35,456 ------w c:\winnt\ServicePackFiles\i386\bthprint.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\winnt\ServicePackFiles\i386\bthprint.sys
    - 2004-08-04 07:56:41 30,208 ------w c:\winnt\ServicePackFiles\i386\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ------w c:\winnt\ServicePackFiles\i386\bthserv.dll
    - 2004-08-04 06:10:34 18,944 ------w c:\winnt\ServicePackFiles\i386\bthusb.sys
    + 2008-04-13 18:46:29 18,944 ------w c:\winnt\ServicePackFiles\i386\bthusb.sys
    - 2004-08-04 07:56:41 50,688 ------w c:\winnt\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\winnt\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 218,112 ------w c:\winnt\ServicePackFiles\i386\c_g18030.dll
    - 2004-08-04 07:56:41 59,904 ------w c:\winnt\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ------w c:\winnt\ServicePackFiles\i386\cabinet.dll
    - 2004-08-04 07:56:41 84,480 ------w c:\winnt\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:11:50 84,480 ------w c:\winnt\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:12:13 19,968 ------w c:\winnt\ServicePackFiles\i386\cacls.exe
    - 2004-08-04 07:56:41 385,024 ------w c:\winnt\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 385,024 ------w c:\winnt\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 121,856 ------w c:\winnt\ServicePackFiles\i386\camext30.dll
    - 2004-08-04 07:56:41 50,688 ------w c:\winnt\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\winnt\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\winnt\ServicePackFiles\i386\capesnpn.dll
    - 2004-08-04 07:56:41 229,888 ------w c:\winnt\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ------w c:\winnt\ServicePackFiles\i386\catsrv.dll
    - 2004-08-04 07:56:41 85,504 ------w c:\winnt\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ------w c:\winnt\ServicePackFiles\i386\catsrvps.dll
    - 2004-08-04 07:56:41 628,224 ------w c:\winnt\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ------w c:\winnt\ServicePackFiles\i386\catsrvut.dll
    - 2004-08-04 06:10:16 17,024 ------w c:\winnt\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 18:46:23 17,024 ------w c:\winnt\ServicePackFiles\i386\ccdecode.sys
    - 2004-08-04 06:14:10 63,744 ------w c:\winnt\ServicePackFiles\i386\cdfs.sys
    + 2008-04-13 19:14:21 63,744 ------w c:\winnt\ServicePackFiles\i386\cdfs.sys
    - 2004-08-04 07:56:41 150,528 ------w c:\winnt\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ------w c:\winnt\ServicePackFiles\i386\cdfview.dll
    - 2004-08-04 07:56:41 66,560 ------w c:\winnt\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 00:11:50 66,560 ------w c:\winnt\ServicePackFiles\i386\cdm.dll
    - 2004-08-04 07:56:41 2,067,968 ------w c:\winnt\ServicePackFiles\i386\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ------w c:\winnt\ServicePackFiles\i386\cdosys.dll
    - 2004-08-04 05:59:52 49,536 ------w c:\winnt\ServicePackFiles\i386\cdrom.sys
    + 2008-04-13 18:40:46 62,976 ------w c:\winnt\ServicePackFiles\i386\cdrom.sys
    - 2004-08-04 07:56:41 194,560 ------w c:\winnt\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 00:11:50 194,560 ------w c:\winnt\ServicePackFiles\i386\certcli.dll
    - 2004-08-04 07:56:41 457,728 ------w c:\winnt\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ------w c:\winnt\ServicePackFiles\i386\certmgr.dll
    - 2004-08-04 07:56:41 38,912 ------w c:\winnt\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ------w c:\winnt\ServicePackFiles\i386\cfgbkend.dll
    - 2004-08-04 07:56:00 16,896 ------w c:\winnt\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ------w c:\winnt\ServicePackFiles\i386\cfgmgr32.dll
    - 2004-08-04 07:56:47 188,480 ------w c:\winnt\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 00:12:14 188,480 ------w c:\winnt\ServicePackFiles\i386\cfgwiz.exe
    - 2004-08-04 07:56:41 15,423 ------w c:\winnt\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-14 00:11:50 15,423 ------w c:\winnt\ServicePackFiles\i386\ch7xxnt5.dll
    - 2004-08-04 06:00:12 8,192 ------w c:\winnt\ServicePackFiles\i386\changer.sys
    + 2008-04-13 18:40:58 8,192 ------w c:\winnt\ServicePackFiles\i386\changer.sys
    + 2008-04-14 00:11:50 148,480 ------w c:\winnt\ServicePackFiles\i386\cic.dll
    - 2004-08-04 07:56:41 1,352,192 ------w c:\winnt\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 1,358,848 ------w c:\winnt\ServicePackFiles\i386\cimwin32.dll
    - 2004-08-04 07:56:41 69,120 ------w c:\winnt\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\winnt\ServicePackFiles\i386\ciodm.dll
    - 2004-08-04 07:56:47 5,632 ------w c:\winnt\ServicePackFiles\i386\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\winnt\ServicePackFiles\i386\cisvc.exe
    - 2004-08-04 06:14:26 49,664 ------w c:\winnt\ServicePackFiles\i386\classpnp.sys
    + 2008-04-13 19:16:22 49,536 ------w c:\winnt\ServicePackFiles\i386\classpnp.sys
    - 2004-08-04 07:56:41 110,080 ------w c:\winnt\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ------w c:\winnt\ServicePackFiles\i386\clbcatex.dll
    - 2004-08-04 07:56:41 501,248 ------w c:\winnt\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\winnt\ServicePackFiles\i386\clbcatq.dll
    - 2004-08-04 07:56:47 64,000 ------w c:\winnt\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:12:14 64,000 ------w c:\winnt\ServicePackFiles\i386\cleanmgr.exe
    - 2004-08-04 07:56:41 77,824 ------w c:\winnt\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\winnt\ServicePackFiles\i386\cliconfg.dll
    - 2004-08-04 07:56:47 20,480 ------w c:\winnt\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ------w c:\winnt\ServicePackFiles\i386\cliconfg.exe
    - 2004-08-04 07:56:47 102,912 ------w c:\winnt\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\winnt\ServicePackFiles\i386\clipbrd.exe
    - 2004-08-04 07:56:47 33,280 ------w c:\winnt\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\winnt\ServicePackFiles\i386\clipsrv.exe
    - 2004-08-04 07:56:41 57,856 ------w c:\winnt\ServicePackFiles\i386\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ------w c:\winnt\ServicePackFiles\i386\clusapi.dll
    - 2004-08-04 06:07:39 14,080 ------w c:\winnt\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-13 18:36:37 13,952 ------w c:\winnt\ServicePackFiles\i386\cmbatt.sys
    - 2004-08-04 07:56:41 15,872 ------w c:\winnt\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ------w c:\winnt\ServicePackFiles\i386\cmcfg32.dll
    - 2004-08-04 07:56:48 388,608 ------w c:\winnt\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:12:14 389,120 ------w c:\winnt\ServicePackFiles\i386\cmd.exe
    - 2004-08-04 07:56:41 343,040 ------w c:\winnt\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ------w c:\winnt\ServicePackFiles\i386\cmdial32.dll
    - 2004-08-04 07:56:48 47,104 ------w c:\winnt\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ------w c:\winnt\ServicePackFiles\i386\cmdl32.exe
    - 2004-08-04 07:56:48 39,936 ------w c:\winnt\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\winnt\ServicePackFiles\i386\cmmon32.exe
    - 2004-08-04 07:56:41 185,344 ------w c:\winnt\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ------w c:\winnt\ServicePackFiles\i386\cmprops.dll
    - 2004-08-04 07:56:41 13,824 ------w c:\winnt\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\winnt\ServicePackFiles\i386\cmsetacl.dll
    - 2004-08-04 07:56:48 63,488 ------w c:\winnt\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ------w c:\winnt\ServicePackFiles\i386\cmstp.exe
    - 2004-08-04 07:56:41 39,936 ------w c:\winnt\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ------w c:\winnt\ServicePackFiles\i386\cmutil.dll
    - 2004-08-04 07:56:41 47,104 ------w c:\winnt\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\winnt\ServicePackFiles\i386\cnbjmon.dll
    - 2004-08-04 07:56:41 79,360 ------w c:\winnt\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\winnt\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\winnt\ServicePackFiles\i386\cobramsg.dll
    - 2004-08-04 07:56:41 62,464 ------w c:\winnt\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 60,416 ------w c:\winnt\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\winnt\ServicePackFiles\i386\comaddin.dll
    - 2004-08-04 07:56:41 195,584 ------w c:\winnt\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ------w c:\winnt\ServicePackFiles\i386\comadmin.dll
    - 2004-08-04 07:56:41 611,328 ------w c:\winnt\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ------w c:\winnt\ServicePackFiles\i386\comctl32.dll
    - 2004-08-04 07:56:41 276,992 ------w c:\winnt\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ------w c:\winnt\ServicePackFiles\i386\comdlg32.dll
    - 2004-08-04 07:56:41 252,928 ------w c:\winnt\ServicePackFiles\i386\compatui.dll
    + 2008-04-14 00:11:51 252,928 ------w c:\winnt\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w c:\winnt\ServicePackFiles\i386\compbatt.sys
    - 2004-08-04 07:56:41 229,376 ------w c:\winnt\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 229,376 ------w c:\winnt\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\winnt\ServicePackFiles\i386\comrepl.dll
    - 2004-08-04 07:56:48 9,728 ------w c:\winnt\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 9,728 ------w c:\winnt\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\winnt\ServicePackFiles\i386\comrereg.exe
    - 2004-08-04 07:56:41 792,064 ------w c:\winnt\ServicePackFiles\i386\comres.dll
    + 2008-04-14 00:11:51 792,064 ------w c:\winnt\ServicePackFiles\i386\comres.dll
    + 2008-04-14 00:11:51 274,944 ------w c:\winnt\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\winnt\ServicePackFiles\i386\comsnap.dll
    - 2004-08-04 07:56:41 1,251,840 ------w c:\winnt\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ------w c:\winnt\ServicePackFiles\i386\comsvcs.dll
    - 2004-08-04 07:56:41 540,160 ------w c:\winnt\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 00:11:51 539,648 ------w c:\winnt\ServicePackFiles\i386\comuid.dll
    - 2004-08-04 07:56:48 1,032,192 ------w c:\winnt\ServicePackFiles\i386\conf.exe
    + 2008-04-14 00:12:15 1,032,192 ------w c:\winnt\ServicePackFiles\i386\conf.exe
    - 2004-08-04 07:56:41 45,056 ------w c:\winnt\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 45,056 ------w c:\winnt\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\winnt\ServicePackFiles\i386\confmsp.dll
    - 2004-08-04 07:56:48 27,648 ------w c:\winnt\ServicePackFiles\i386\conime.exe
    + 2008-04-14 00:12:15 27,648 ------w c:\winnt\ServicePackFiles\i386\conime.exe
    - 2004-08-04 07:56:41 35,328 ------w c:\winnt\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 35,328 ------w c:\winnt\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\winnt\ServicePackFiles\i386\credssp.dll
    - 2004-08-04 07:56:41 163,840 ------w c:\winnt\ServicePackFiles\i386\credui.dll
    + 2008-04-14 00:11:51 163,840 ------w c:\winnt\ServicePackFiles\i386\credui.dll
    - 2004-08-04 05:59:20 36,480 ------w c:\winnt\ServicePackFiles\i386\crusoe.sys
    + 2008-04-13 18:31:32 36,736 ------w c:\winnt\ServicePackFiles\i386\crusoe.sys
    - 2004-08-04 07:56:41 597,504 ------w c:\winnt\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 00:11:51 599,040 ------w c:\winnt\ServicePackFiles\i386\crypt32.dll
    - 2004-08-04 07:56:41 74,752 ------w c:\winnt\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 00:11:51 74,752 ------w c:\winnt\ServicePackFiles\i386\cryptdlg.dll
    - 2004-08-04 07:56:41 33,280 ------w c:\winnt\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 00:11:51 33,280 ------w c:\winnt\ServicePackFiles\i386\cryptdll.dll
    - 2004-08-04 07:56:41 53,760 ------w c:\winnt\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 00:11:51 53,760 ------w c:\winnt\ServicePackFiles\i386\cryptext.dll
    - 2004-08-04 07:56:41 63,488 ------w c:\winnt\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 00:11:51 64,512 ------w c:\winnt\ServicePackFiles\i386\cryptnet.dll
    - 2004-08-04 07:56:41 60,416 ------w c:\winnt\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 00:11:51 62,464 ------w c:\winnt\ServicePackFiles\i386\cryptsvc.dll
    - 2004-08-04 07:56:41 512,512 ------w c:\winnt\ServicePackFiles\i386\cryptui.dll
    + 2008-04-14 00:11:51 512,512 ------w c:\winnt\ServicePackFiles\i386\cryptui.dll
    - 2004-08-04 07:56:41 101,888 ------w c:\winnt\ServicePackFiles\i386\cscdll.dll
    + 2008-04-14 00:11:51 101,888 ------w c:\winnt\ServicePackFiles\i386\cscdll.dll
    - 2004-08-04 07:56:48 98,304 ------w c:\winnt\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 00:12:15 139,264 ------w c:\winnt\ServicePackFiles\i386\cscript.exe
    - 2004-08-04 07:56:41 326,656 ------w c:\winnt\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 00:11:51 326,656 ------w c:\winnt\ServicePackFiles\i386\cscui.dll
    - 2004-08-04 07:56:41 32,768 ------w c:\winnt\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 00:11:51 32,256 ------w c:\winnt\ServicePackFiles\i386\csrsrv.dll
    - 2004-08-04 07:56:48 6,144 ------w c:\winnt\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\winnt\ServicePackFiles\i386\csrss.exe
    - 2004-08-04 07:56:48 15,360 ------w c:\winnt\ServicePackFiles\i386\ctfmon.exe
    + 2008-04-14 00:12:16 15,360 ------w c:\winnt\ServicePackFiles\i386\ctfmon.exe
    - 2004-08-04 07:56:41 249,856 ------w c:\winnt\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 00:11:51 249,856 ------w c:\winnt\ServicePackFiles\i386\ctmasetp.dll
    - 2004-08-04 07:56:41 28,672 ------w c:\winnt\ServicePackFiles\i386\custsat.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\winnt\ServicePackFiles\i386\custsat.dll
    - 2004-08-04 07:56:41 1,179,648 ------w c:\winnt\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 00:11:51 1,179,648 ------w c:\winnt\ServicePackFiles\i386\d3d8.dll
    - 2004-08-04 07:56:41 8,192 ------w c:\winnt\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 00:11:51 8,192 ------w c:\winnt\ServicePackFiles\i386\d3d8thk.dll
    - 2004-08-04 07:56:41 1,689,088 ------w c:\winnt\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 00:11:51 1,689,088 ------w c:\winnt\ServicePackFiles\i386\d3d9.dll
    - 2004-08-04 07:56:41 825,344 ------w c:\winnt\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 00:11:51 824,320 ------w c:\winnt\ServicePackFiles\i386\d3dim700.dll
    - 2004-08-04 07:56:41 1,053,696 ------w c:\winnt\ServicePackFiles\i386\danim.dll
    + 2008-04-14 00:11:51 1,054,208 ------w c:\winnt\ServicePackFiles\i386\danim.dll
  10. 2009-03-24, 00:23 #20
    RallyReal
    RallyReal is offline
    Member
    Join Date
    Nov 2007
    Posts
    58

    Default Combofix Cont.

    - 2004-08-04 07:56:42 561,179 ------w c:\winnt\ServicePackFiles\i386\dao360.dll
    + 2008-03-25 04:50:25 554,008 ------w c:\winnt\ServicePackFiles\i386\dao360.dll
    - 2004-08-04 07:56:42 54,272 ------w c:\winnt\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 54,272 ------w c:\winnt\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\winnt\ServicePackFiles\i386\datime.dll
    - 2004-08-04 07:56:42 24,576 ------w c:\winnt\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 00:11:51 25,088 ------w c:\winnt\ServicePackFiles\i386\davclnt.dll
    - 2004-08-04 07:56:42 640,000 ------w c:\winnt\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 00:11:51 640,000 ------w c:\winnt\ServicePackFiles\i386\dbghelp.dll
    - 2004-08-04 07:56:42 24,576 ------w c:\winnt\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 00:11:51 24,576 ------w c:\winnt\ServicePackFiles\i386\dbmsrpcn.dll
    - 2004-08-04 07:56:42 110,592 ------w c:\winnt\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 00:11:51 110,592 ------w c:\winnt\ServicePackFiles\i386\dbnetlib.dll
    - 2004-08-04 07:56:42 28,672 ------w c:\winnt\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\winnt\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:25:26 1,804 ------w c:\winnt\ServicePackFiles\i386\dcache.bin
    - 2004-08-04 07:56:42 40,960 ------w c:\winnt\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 00:11:51 40,960 ------w c:\winnt\ServicePackFiles\i386\dcap32.dll
    - 2004-08-04 07:56:42 8,704 ------w c:\winnt\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:11:51 8,704 ------w c:\winnt\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:12:16 6,144 ------w c:\winnt\ServicePackFiles\i386\dcomcnfg.exe
    - 2004-08-04 07:56:48 30,208 ------w c:\winnt\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 00:12:16 30,208 ------w c:\winnt\ServicePackFiles\i386\ddeshare.exe
    - 2004-08-04 07:56:42 266,240 ------w c:\winnt\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 00:11:51 279,552 ------w c:\winnt\ServicePackFiles\i386\ddraw.dll
    - 2004-08-04 07:56:42 27,136 ------w c:\winnt\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 00:11:51 27,136 ------w c:\winnt\ServicePackFiles\i386\ddrawex.dll
    - 2004-08-04 07:56:48 25,088 ------w c:\winnt\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 00:12:16 25,088 ------w c:\winnt\ServicePackFiles\i386\defrag.exe
    - 2004-08-04 07:56:42 59,904 ------w c:\winnt\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 00:11:51 59,904 ------w c:\winnt\ServicePackFiles\i386\devenum.dll
    - 2004-08-04 07:56:42 282,624 ------w c:\winnt\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 00:11:51 282,624 ------w c:\winnt\ServicePackFiles\i386\devmgr.dll
    - 2004-08-04 07:56:48 82,432 ------w c:\winnt\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 00:12:16 82,944 ------w c:\winnt\ServicePackFiles\i386\dfrgfat.exe
    - 2004-08-04 07:56:48 104,960 ------w c:\winnt\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 00:12:16 105,472 ------w c:\winnt\ServicePackFiles\i386\dfrgntfs.exe
    - 2004-08-04 07:56:42 38,912 ------w c:\winnt\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 00:11:51 39,424 ------w c:\winnt\ServicePackFiles\i386\dfrgsnap.dll
    - 2004-08-04 07:56:42 123,904 ------w c:\winnt\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 00:11:51 124,416 ------w c:\winnt\ServicePackFiles\i386\dfrgui.dll
    - 2004-08-04 07:56:42 28,672 ------w c:\winnt\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\winnt\ServicePackFiles\i386\dfsshlex.dll
    - 2004-08-04 07:56:42 111,104 ------w c:\winnt\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 00:11:51 111,104 ------w c:\winnt\ServicePackFiles\i386\dgnet.dll
    - 2004-08-04 07:56:42 111,104 ------w c:\winnt\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:51 126,976 ------w c:\winnt\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\winnt\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\winnt\ServicePackFiles\i386\dhcpqec.dll
    - 2004-08-04 07:56:48 539,136 ------w c:\winnt\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 00:12:17 539,136 ------w c:\winnt\ServicePackFiles\i386\dialer.exe
    - 2004-08-04 07:56:48 85,504 ------w c:\winnt\ServicePackFiles\i386\diantz.exe
    + 2008-04-14 00:12:17 87,040 ------w c:\winnt\ServicePackFiles\i386\diantz.exe
    + 2007-04-02 18:34:11 884,712 ------w c:\winnt\ServicePackFiles\i386\digcore.exe
    - 2004-08-04 07:56:42 68,608 ------w c:\winnt\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 68,608 ------w c:\winnt\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\winnt\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\winnt\ServicePackFiles\i386\dimsroam.dll
    - 2004-08-04 07:56:42 159,232 ------w c:\winnt\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 00:11:52 158,720 ------w c:\winnt\ServicePackFiles\i386\dinput.dll
    - 2004-08-04 07:56:42 181,760 ------w c:\winnt\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 00:11:52 181,760 ------w c:\winnt\ServicePackFiles\i386\dinput8.dll
    - 2004-08-04 07:56:42 81,408 ------w c:\winnt\ServicePackFiles\i386\directdb.dll
    + 2008-04-14 00:11:52 86,528 ------w c:\winnt\ServicePackFiles\i386\directdb.dll
    - 2004-08-04 05:59:54 36,352 ------w c:\winnt\ServicePackFiles\i386\disk.sys
    + 2008-04-13 18:40:47 36,352 ------w c:\winnt\ServicePackFiles\i386\disk.sys
    + 2008-04-14 00:11:52 1,504,256 ------w c:\winnt\ServicePackFiles\i386\diskcopy.dll
    - 2004-08-04 05:59:52 14,208 ------w c:\winnt\ServicePackFiles\i386\diskdump.sys
    + 2008-04-13 18:40:44 14,208 ------w c:\winnt\ServicePackFiles\i386\diskdump.sys
    - 2004-08-04 07:56:48 163,840 ------w c:\winnt\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:12:17 163,840 ------w c:\winnt\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:11:52 32,768 ------w c:\winnt\ServicePackFiles\i386\dispex.dll
    - 2004-08-04 07:56:48 5,120 ------w c:\winnt\ServicePackFiles\i386\dllhost.exe
    + 2008-04-14 00:12:17 5,120 ------w c:\winnt\ServicePackFiles\i386\dllhost.exe
    - 2004-08-04 06:00:04 8,320 ------w c:\winnt\ServicePackFiles\i386\dlttape.sys
    + 2008-04-13 18:40:51 8,320 ------w c:\winnt\ServicePackFiles\i386\dlttape.sys
    - 2004-08-04 07:56:48 224,768 ------w c:\winnt\ServicePackFiles\i386\dmadmin.exe
    + 2008-04-14 00:12:17 224,768 ------w c:\winnt\ServicePackFiles\i386\dmadmin.exe
    - 2004-08-04 07:56:42 28,672 ------w c:\winnt\ServicePackFiles\i386\dmband.dll
    + 2008-04-14 00:11:52 28,672 ------w c:\winnt\ServicePackFiles\i386\dmband.dll
    - 2004-08-04 06:07:17 799,744 ------w c:\winnt\ServicePackFiles\i386\dmboot.sys
    + 2008-04-13 18:44:48 799,744 ------w c:\winnt\ServicePackFiles\i386\dmboot.sys
    - 2004-08-04 07:56:42 61,440 ------w c:\winnt\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 61,440 ------w c:\winnt\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\winnt\ServicePackFiles\i386\dmdlgs.dll
    - 2004-08-04 07:56:42 200,704 ------w c:\winnt\ServicePackFiles\i386\dmdskmgr.dll
    + 2008-04-14 00:11:52 200,704 ------w c:\winnt\ServicePackFiles\i386\dmdskmgr.dll
    - 2004-08-04 07:56:42 181,248 ------w c:\winnt\ServicePackFiles\i386\dmime.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\winnt\ServicePackFiles\i386\dmime.dll
    - 2004-08-04 06:07:16 153,344 ------w c:\winnt\ServicePackFiles\i386\dmio.sys
    + 2008-04-13 18:44:46 153,344 ------w c:\winnt\ServicePackFiles\i386\dmio.sys
    - 2004-08-04 07:56:42 35,840 ------w c:\winnt\ServicePackFiles\i386\dmloader.dll
    + 2008-04-14 00:11:52 35,840 ------w c:\winnt\ServicePackFiles\i386\dmloader.dll
    - 2004-08-04 07:56:48 15,872 ------w c:\winnt\ServicePackFiles\i386\dmremote.exe
    + 2008-04-14 00:12:17 15,872 ------w c:\winnt\ServicePackFiles\i386\dmremote.exe
    - 2004-08-04 07:56:42 82,432 ------w c:\winnt\ServicePackFiles\i386\dmscript.dll
    + 2008-04-14 00:11:52 82,432 ------w c:\winnt\ServicePackFiles\i386\dmscript.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\winnt\ServicePackFiles\i386\dmserver.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\winnt\ServicePackFiles\i386\dmserver.dll
    - 2004-08-04 07:56:42 105,984 ------w c:\winnt\ServicePackFiles\i386\dmstyle.dll
    + 2008-04-14 00:11:52 105,984 ------w c:\winnt\ServicePackFiles\i386\dmstyle.dll
    - 2004-08-04 07:56:42 103,424 ------w c:\winnt\ServicePackFiles\i386\dmsynth.dll
    + 2008-04-14 00:11:52 103,424 ------w c:\winnt\ServicePackFiles\i386\dmsynth.dll
    - 2004-08-04 07:56:42 104,448 ------w c:\winnt\ServicePackFiles\i386\dmusic.dll
    + 2008-04-14 00:11:52 104,448 ------w c:\winnt\ServicePackFiles\i386\dmusic.dll
    - 2004-08-04 06:07:38 52,864 ------w c:\winnt\ServicePackFiles\i386\dmusic.sys
    + 2008-04-13 18:45:01 52,864 ------w c:\winnt\ServicePackFiles\i386\dmusic.sys
    - 2004-08-04 07:56:42 52,224 ------w c:\winnt\ServicePackFiles\i386\dmutil.dll
    + 2008-04-14 00:11:52 52,224 ------w c:\winnt\ServicePackFiles\i386\dmutil.dll
    - 2004-08-04 07:56:42 148,480 ------w c:\winnt\ServicePackFiles\i386\dnsapi.dll
    + 2008-04-14 00:11:52 147,968 ------w c:\winnt\ServicePackFiles\i386\dnsapi.dll
    - 2004-08-04 07:56:42 45,568 ------w c:\winnt\ServicePackFiles\i386\dnsrslvr.dll
    + 2008-04-14 00:11:52 45,568 ------w c:\winnt\ServicePackFiles\i386\dnsrslvr.dll
    - 2004-08-04 07:56:42 48,128 ------w c:\winnt\ServicePackFiles\i386\docprop2.dll
    + 2008-04-14 00:11:52 48,128 ------w c:\winnt\ServicePackFiles\i386\docprop2.dll
    + 2008-04-14 00:11:52 26,112 ------w c:\winnt\ServicePackFiles\i386\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\winnt\ServicePackFiles\i386\dot3cfg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\winnt\ServicePackFiles\i386\dot3clnt.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\winnt\ServicePackFiles\i386\dot3dlg.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\winnt\ServicePackFiles\i386\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\winnt\ServicePackFiles\i386\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\winnt\ServicePackFiles\i386\dot3ui.dll
    - 2004-08-04 05:58:29 207,360 ------w c:\winnt\ServicePackFiles\i386\dot4.sys
    + 2008-04-13 18:39:46 206,976 ------w c:\winnt\ServicePackFiles\i386\dot4.sys
    - 2004-08-04 06:13:53 97,280 ------w c:\winnt\ServicePackFiles\i386\dpcdll.dll
    + 2008-04-13 21:00:49 103,424 ------w c:\winnt\ServicePackFiles\i386\dpcdll.dll
    - 2004-08-04 07:56:48 30,208 ------w c:\winnt\ServicePackFiles\i386\dplaysvr.exe
    + 2008-04-14 00:12:17 29,696 ------w c:\winnt\ServicePackFiles\i386\dplaysvr.exe
    - 2004-08-04 07:56:42 229,888 ------w c:\winnt\ServicePackFiles\i386\dplayx.dll
    + 2008-04-14 00:11:52 229,888 ------w c:\winnt\ServicePackFiles\i386\dplayx.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\winnt\ServicePackFiles\i386\dpmodemx.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\winnt\ServicePackFiles\i386\dpmodemx.dll
    - 2004-08-04 07:56:03 3,584 ------w c:\winnt\ServicePackFiles\i386\dpnaddr.dll
    + 2008-04-14 00:09:19 3,072 ------w c:\winnt\ServicePackFiles\i386\dpnaddr.dll
    - 2004-08-04 07:56:42 375,296 ------w c:\winnt\ServicePackFiles\i386\dpnet.dll
    + 2008-04-14 00:11:52 375,296 ------w c:\winnt\ServicePackFiles\i386\dpnet.dll
    - 2004-08-04 07:56:42 35,328 ------w c:\winnt\ServicePackFiles\i386\dpnhpast.dll
    + 2008-04-14 00:11:52 35,328 ------w c:\winnt\ServicePackFiles\i386\dpnhpast.dll
    - 2004-08-04 07:56:42 60,928 ------w c:\winnt\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-04-14 00:11:52 60,928 ------w c:\winnt\ServicePackFiles\i386\dpnhupnp.dll
    - 2004-08-04 07:56:03 3,584 ------w c:\winnt\ServicePackFiles\i386\dpnlobby.dll
    + 2008-04-14 00:09:20 3,072 ------w c:\winnt\ServicePackFiles\i386\dpnlobby.dll
    - 2004-08-04 07:56:48 18,432 ------w c:\winnt\ServicePackFiles\i386\dpnsvr.exe
    + 2008-04-14 00:12:17 17,920 ------w c:\winnt\ServicePackFiles\i386\dpnsvr.exe
    - 2004-08-04 07:56:42 21,504 ------w c:\winnt\ServicePackFiles\i386\dpvacm.dll
    + 2008-04-14 00:11:52 21,504 ------w c:\winnt\ServicePackFiles\i386\dpvacm.dll
    - 2004-08-04 07:56:42 212,480 ------w c:\winnt\ServicePackFiles\i386\dpvoice.dll
    + 2008-04-14 00:11:52 212,480 ------w c:\winnt\ServicePackFiles\i386\dpvoice.dll
    - 2004-08-04 07:56:48 83,456 ------w c:\winnt\ServicePackFiles\i386\dpvsetup.exe
    + 2008-04-14 00:12:18 83,456 ------w c:\winnt\ServicePackFiles\i386\dpvsetup.exe
    - 2004-08-04 07:56:42 116,736 ------w c:\winnt\ServicePackFiles\i386\dpvvox.dll
    + 2008-04-14 00:11:52 116,736 ------w c:\winnt\ServicePackFiles\i386\dpvvox.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\winnt\ServicePackFiles\i386\dpwsockx.dll
    + 2008-04-14 00:11:52 57,344 ------w c:\winnt\ServicePackFiles\i386\dpwsockx.dll
    - 2004-08-04 06:07:58 60,288 ------w c:\winnt\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:14 60,160 ------w c:\winnt\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:13 2,944 ------w c:\winnt\ServicePackFiles\i386\drmkaud.sys
    - 2004-08-04 07:56:42 14,336 ------w c:\winnt\ServicePackFiles\i386\drprov.dll
    + 2008-04-14 00:11:52 14,336 ------w c:\winnt\ServicePackFiles\i386\drprov.dll
    - 2004-08-04 07:56:42 16,384 ------w c:\winnt\ServicePackFiles\i386\ds32gt.dll
    + 2008-04-14 00:11:52 16,384 ------w c:\winnt\ServicePackFiles\i386\ds32gt.dll
    - 2004-08-04 07:56:42 181,760 ------w c:\winnt\ServicePackFiles\i386\dsdmo.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\winnt\ServicePackFiles\i386\dsdmo.dll
    - 2004-08-04 07:56:42 71,680 ------w c:\winnt\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-04-14 00:11:52 71,680 ------w c:\winnt\ServicePackFiles\i386\dsdmoprp.dll
    - 2004-08-04 07:56:42 92,672 ------w c:\winnt\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 92,672 ------w c:\winnt\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\winnt\ServicePackFiles\i386\dskquoui.dll
    - 2004-08-04 07:56:42 367,616 ------w c:\winnt\ServicePackFiles\i386\dsound.dll
    + 2008-04-14 00:11:52 367,616 ------w c:\winnt\ServicePackFiles\i386\dsound.dll
    - 2004-08-04 07:56:42 1,294,336 ------w c:\winnt\ServicePackFiles\i386\dsound3d.dll
    + 2008-04-14 00:11:52 1,293,824 ------w c:\winnt\ServicePackFiles\i386\dsound3d.dll
    - 2004-08-04 07:56:42 142,336 ------w c:\winnt\ServicePackFiles\i386\dsprop.dll
    + 2008-04-14 00:11:52 142,848 ------w c:\winnt\ServicePackFiles\i386\dsprop.dll
    - 2004-08-04 07:56:04 4,096 ------w c:\winnt\ServicePackFiles\i386\dsprpres.dll
    + 2008-04-13 17:09:30 4,096 ------w c:\winnt\ServicePackFiles\i386\dsprpres.dll
    - 2004-08-04 07:56:42 239,104 ------w c:\winnt\ServicePackFiles\i386\dsquery.dll
    + 2008-04-14 00:11:52 239,104 ------w c:\winnt\ServicePackFiles\i386\dsquery.dll
    - 2004-08-04 07:56:42 51,200 ------w c:\winnt\ServicePackFiles\i386\dssec.dll
    + 2008-04-14 00:11:52 51,200 ------w c:\winnt\ServicePackFiles\i386\dssec.dll
    - 2004-08-04 05:31:43 137,216 ------w c:\winnt\ServicePackFiles\i386\dssenh.dll
    + 2008-04-13 17:37:57 138,752 ------w c:\winnt\ServicePackFiles\i386\dssenh.dll
    - 2004-08-04 07:56:42 113,152 ------w c:\winnt\ServicePackFiles\i386\dsuiext.dll
    + 2008-04-14 00:11:52 113,152 ------w c:\winnt\ServicePackFiles\i386\dsuiext.dll
    - 2004-08-04 07:56:42 19,456 ------w c:\winnt\ServicePackFiles\i386\dswave.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\winnt\ServicePackFiles\i386\dswave.dll
    - 2004-08-04 07:56:48 10,752 ------w c:\winnt\ServicePackFiles\i386\dumprep.exe
    + 2008-04-14 00:12:18 10,752 ------w c:\winnt\ServicePackFiles\i386\dumprep.exe
    - 2004-08-04 07:56:42 304,128 ------w c:\winnt\ServicePackFiles\i386\duser.dll
    + 2008-04-14 00:11:52 304,128 ------w c:\winnt\ServicePackFiles\i386\duser.dll
    - 2004-08-04 07:56:48 17,920 ------w c:\winnt\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-04-14 00:12:18 17,920 ------w c:\winnt\ServicePackFiles\i386\dvdupgrd.exe
    - 2004-08-04 07:56:48 180,224 ------w c:\winnt\ServicePackFiles\i386\dwwin.exe
    + 2008-04-14 00:12:18 180,224 ------w c:\winnt\ServicePackFiles\i386\dwwin.exe
    - 2004-08-04 07:56:42 619,008 ------w c:\winnt\ServicePackFiles\i386\dx7vb.dll
    + 2008-04-14 00:11:52 619,008 ------w c:\winnt\ServicePackFiles\i386\dx7vb.dll
    - 2004-08-04 07:56:42 1,227,264 ------w c:\winnt\ServicePackFiles\i386\dx8vb.dll
    + 2008-04-14 00:11:52 1,227,264 ------w c:\winnt\ServicePackFiles\i386\dx8vb.dll
    - 2004-08-04 07:56:48 1,298,432 ------w c:\winnt\ServicePackFiles\i386\dxdiag.exe
    + 2008-04-14 00:12:18 1,298,432 ------w c:\winnt\ServicePackFiles\i386\dxdiag.exe
    - 2004-08-04 07:56:42 2,113,536 ------w c:\winnt\ServicePackFiles\i386\dxdiagn.dll
    + 2008-04-14 00:11:52 2,113,536 ------w c:\winnt\ServicePackFiles\i386\dxdiagn.dll
    - 2004-08-04 06:00:54 71,040 ------w c:\winnt\ServicePackFiles\i386\dxg.sys
    + 2008-04-13 18:38:29 71,168 ------w c:\winnt\ServicePackFiles\i386\dxg.sys
    - 2004-08-04 07:56:42 357,888 ------w c:\winnt\ServicePackFiles\i386\dxtmsft.dll
    + 2008-04-14 00:11:52 357,888 ------w c:\winnt\ServicePackFiles\i386\dxtmsft.dll
    - 2004-08-04 07:56:42 201,728 ------w c:\winnt\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 205,312 ------w c:\winnt\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\winnt\ServicePackFiles\i386\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\winnt\ServicePackFiles\i386\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\winnt\ServicePackFiles\i386\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\winnt\ServicePackFiles\i386\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\winnt\ServicePackFiles\i386\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\winnt\ServicePackFiles\i386\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\winnt\ServicePackFiles\i386\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\winnt\ServicePackFiles\i386\eapsvc.dll
    + 2008-04-14 00:11:52 175,616 ------w c:\winnt\ServicePackFiles\i386\ediskeer.dll
    - 2004-08-04 07:56:42 183,296 ------w c:\winnt\ServicePackFiles\i386\els.dll
    + 2008-04-14 00:11:53 183,296 ------w c:\winnt\ServicePackFiles\i386\els.dll
    - 2004-08-04 07:56:42 20,480 ------w c:\winnt\ServicePackFiles\i386\encapi.dll
    + 2008-04-14 00:11:53 20,480 ------w c:\winnt\ServicePackFiles\i386\encapi.dll
    - 2004-08-04 07:56:42 186,368 ------w c:\winnt\ServicePackFiles\i386\encdec.dll
    + 2008-04-14 00:11:53 186,880 ------w c:\winnt\ServicePackFiles\i386\encdec.dll
    - 2004-08-04 07:56:05 40,960 ------w c:\winnt\ServicePackFiles\i386\ep9res.dll
    + 2008-04-13 16:26:02 40,960 ------w c:\winnt\ServicePackFiles\i386\ep9res.dll
    - 2004-08-04 07:56:42 23,040 ------w c:\winnt\ServicePackFiles\i386\ersvc.dll
    + 2008-04-14 00:11:53 23,040 ------w c:\winnt\ServicePackFiles\i386\ersvc.dll
    - 2004-08-04 07:56:42 243,200 ------w c:\winnt\ServicePackFiles\i386\es.dll
    + 2008-04-14 00:11:53 246,272 ------w c:\winnt\ServicePackFiles\i386\es.dll
    - 2004-08-04 07:56:42 1,082,368 ------w c:\winnt\ServicePackFiles\i386\esent.dll
    + 2008-04-14 00:11:53 1,082,368 ------w c:\winnt\ServicePackFiles\i386\esent.dll
    - 2004-08-04 07:56:42 247,808 ------w c:\winnt\ServicePackFiles\i386\esscli.dll
    + 2008-04-14 00:11:53 247,808 ------w c:\winnt\ServicePackFiles\i386\esscli.dll
    - 2004-08-04 07:56:49 193,024 ------w c:\winnt\ServicePackFiles\i386\eudcedit.exe
    + 2008-04-14 00:12:19 193,024 ------w c:\winnt\ServicePackFiles\i386\eudcedit.exe
    - 2004-08-04 07:56:42 55,808 ------w c:\winnt\ServicePackFiles\i386\eventlog.dll
    + 2008-04-14 00:11:53 56,320 ------w c:\winnt\ServicePackFiles\i386\eventlog.dll
    - 2004-08-04 07:56:42 101,888 ------w c:\winnt\ServicePackFiles\i386\evntagnt.dll
    + 2008-04-14 00:11:53 101,888 ------w c:\winnt\ServicePackFiles\i386\evntagnt.dll
    - 2004-08-04 07:56:49 24,064 ------w c:\winnt\ServicePackFiles\i386\evntcmd.exe
    + 2008-04-14 00:12:19 24,064 ------w c:\winnt\ServicePackFiles\i386\evntcmd.exe
    - 2004-08-04 07:56:42 22,016 ------w c:\winnt\ServicePackFiles\i386\evntrprv.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\winnt\ServicePackFiles\i386\evntrprv.dll
    - 2004-08-04 07:56:49 92,160 ------w c:\winnt\ServicePackFiles\i386\evntwin.exe
    + 2008-04-14 00:12:19 92,160 ------w c:\winnt\ServicePackFiles\i386\evntwin.exe
    - 2004-08-04 07:56:49 1,032,192 ------w c:\winnt\ServicePackFiles\i386\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ------w c:\winnt\ServicePackFiles\i386\explorer.exe
    - 2004-08-04 07:56:42 380,957 ------w c:\winnt\ServicePackFiles\i386\expsrv.dll
    + 2008-04-14 00:11:53 380,445 ------w c:\winnt\ServicePackFiles\i386\expsrv.dll
    - 2004-08-04 07:56:42 55,808 ------w c:\winnt\ServicePackFiles\i386\extmgr.dll
    + 2008-04-14 00:11:53 55,808 ------w c:\winnt\ServicePackFiles\i386\extmgr.dll
    - 2004-08-04 07:56:49 45,568 ------w c:\winnt\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:12:19 24,064 ------w c:\winnt\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:11:53 125,952 ------w c:\winnt\ServicePackFiles\i386\exts.dll
    + 2008-04-14 00:09:30 7,168 ------w c:\winnt\ServicePackFiles\i386\f3ahvoas.dll
    - 2004-08-04 06:14:16 143,360 ------w c:\winnt\ServicePackFiles\i386\fastfat.sys
    + 2008-04-13 19:14:29 143,744 ------w c:\winnt\ServicePackFiles\i386\fastfat.sys
    - 2004-08-04 07:56:42 472,064 ------w c:\winnt\ServicePackFiles\i386\fastprox.dll
    + 2008-04-14 00:11:53 472,064 ------w c:\winnt\ServicePackFiles\i386\fastprox.dll
    - 2004-08-04 07:56:42 80,384 ------w c:\winnt\ServicePackFiles\i386\faultrep.dll
    + 2008-04-14 00:11:53 80,384 ------w c:\winnt\ServicePackFiles\i386\faultrep.dll
    - 2004-08-04 07:56:49 20,992 ------w c:\winnt\ServicePackFiles\i386\faxpatch.exe
    + 2008-04-14 00:12:20 20,992 ------w c:\winnt\ServicePackFiles\i386\faxpatch.exe
    - 2004-08-04 05:59:27 27,392 ------w c:\winnt\ServicePackFiles\i386\fdc.sys
    + 2008-04-13 18:40:25 27,392 ------w c:\winnt\ServicePackFiles\i386\fdc.sys
    - 2004-08-04 07:56:42 21,504 ------w c:\winnt\ServicePackFiles\i386\feclient.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\winnt\ServicePackFiles\i386\feclient.dll
    - 2004-08-04 07:56:42 337,920 ------w c:\winnt\ServicePackFiles\i386\filemgmt.dll
    + 2008-04-14 00:11:53 337,920 ------w c:\winnt\ServicePackFiles\i386\filemgmt.dll
    - 2004-08-04 07:56:49 27,136 ------w c:\winnt\ServicePackFiles\i386\findstr.exe
    + 2008-04-14 00:12:20 27,136 ------w c:\winnt\ServicePackFiles\i386\findstr.exe
    + 2008-04-13 18:33:28 44,544 ------w c:\winnt\ServicePackFiles\i386\fips.sys
    - 2004-08-04 07:56:42 87,552 ------w c:\winnt\ServicePackFiles\i386\fldrclnr.dll
    + 2008-04-14 00:11:53 87,552 ------w c:\winnt\ServicePackFiles\i386\fldrclnr.dll
    - 2004-08-04 05:59:27 20,480 ------w c:\winnt\ServicePackFiles\i386\flpydisk.sys
    + 2008-04-13 18:40:25 20,480 ------w c:\winnt\ServicePackFiles\i386\flpydisk.sys
    - 2004-08-04 07:56:42 16,896 ------w c:\winnt\ServicePackFiles\i386\fltlib.dll
    + 2008-04-14 00:11:53 16,896 ------w c:\winnt\ServicePackFiles\i386\fltlib.dll
    - 2004-08-04 07:56:49 22,528 ------w c:\winnt\ServicePackFiles\i386\fltmc.exe
    + 2008-04-14 00:12:20 23,040 ------w c:\winnt\ServicePackFiles\i386\fltmc.exe
    - 2004-08-04 06:01:19 124,800 ------w c:\winnt\ServicePackFiles\i386\fltmgr.sys
    + 2008-04-13 18:32:59 129,792 ------w c:\winnt\ServicePackFiles\i386\fltmgr.sys
    - 2004-08-04 07:56:42 382,976 ------w c:\winnt\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 382,976 ------w c:\winnt\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\winnt\ServicePackFiles\i386\fontsub.dll
    - 2004-08-04 07:56:49 20,992 ------w c:\winnt\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 20,992 ------w c:\winnt\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\winnt\ServicePackFiles\i386\forcedos.exe
    + 2008-04-14 00:12:42 29,696 ------w c:\winnt\ServicePackFiles\i386\format.com
    - 2004-08-04 07:56:42 32,828 ------w c:\winnt\ServicePackFiles\i386\fp40ext.dll
    + 2008-04-14 00:11:53 32,828 ------w c:\winnt\ServicePackFiles\i386\fp40ext.dll
    - 2004-08-04 07:56:42 184,435 ------w c:\winnt\ServicePackFiles\i386\fp4amsft.dll
    + 2008-04-14 00:11:53 184,435 ------w c:\winnt\ServicePackFiles\i386\fp4amsft.dll
    - 2004-08-04 07:56:42 82,035 ------w c:\winnt\ServicePackFiles\i386\fp4anscp.dll
    + 2008-04-14 00:11:53 82,035 ------w c:\winnt\ServicePackFiles\i386\fp4anscp.dll
    - 2004-08-04 07:56:42 147,513 ------w c:\winnt\ServicePackFiles\i386\fp4apws.dll
    + 2008-04-14 00:11:53 147,513 ------w c:\winnt\ServicePackFiles\i386\fp4apws.dll
    - 2004-08-04 07:56:42 49,210 ------w c:\winnt\ServicePackFiles\i386\fp4areg.dll
    + 2008-04-14 00:11:53 49,210 ------w c:\winnt\ServicePackFiles\i386\fp4areg.dll
    - 2004-08-04 07:56:42 102,509 ------w c:\winnt\ServicePackFiles\i386\fp4atxt.dll
    + 2008-04-14 00:11:53 102,509 ------w c:\winnt\ServicePackFiles\i386\fp4atxt.dll
    - 2004-08-04 07:56:42 618,605 ------w c:\winnt\ServicePackFiles\i386\fp4autl.dll
    + 2008-04-14 00:11:53 618,605 ------w c:\winnt\ServicePackFiles\i386\fp4autl.dll
    - 2004-08-04 07:56:42 41,020 ------w c:\winnt\ServicePackFiles\i386\fp4avnb.dll
    + 2008-04-14 00:11:53 41,020 ------w c:\winnt\ServicePackFiles\i386\fp4avnb.dll
    - 2004-08-04 07:56:42 32,826 ------w c:\winnt\ServicePackFiles\i386\fp4avss.dll
    + 2008-04-14 00:11:53 32,826 ------w c:\winnt\ServicePackFiles\i386\fp4avss.dll
    - 2004-08-04 07:56:42 49,212 ------w c:\winnt\ServicePackFiles\i386\fp4awebs.dll
    + 2008-04-14 00:11:53 49,212 ------w c:\winnt\ServicePackFiles\i386\fp4awebs.dll
    - 2004-08-04 07:56:42 876,653 ------w c:\winnt\ServicePackFiles\i386\fp4awel.dll
    + 2008-04-14 00:11:53 876,653 ------w c:\winnt\ServicePackFiles\i386\fp4awel.dll
    - 2004-08-04 07:56:49 15,120 ------w c:\winnt\ServicePackFiles\i386\fp98sadm.exe
    + 2008-04-14 00:12:20 15,120 ------w c:\winnt\ServicePackFiles\i386\fp98sadm.exe
    - 2004-08-04 07:56:49 109,840 ------w c:\winnt\ServicePackFiles\i386\fp98swin.exe
    + 2008-04-14 00:12:20 109,840 ------w c:\winnt\ServicePackFiles\i386\fp98swin.exe
    - 2004-08-04 07:56:49 24,632 ------w c:\winnt\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-04-14 00:12:20 24,632 ------w c:\winnt\ServicePackFiles\i386\fpadmcgi.exe
    - 2004-08-04 07:56:42 20,541 ------w c:\winnt\ServicePackFiles\i386\fpadmdll.dll
    + 2008-04-14 00:11:53 20,541 ------w c:\winnt\ServicePackFiles\i386\fpadmdll.dll
    - 2004-08-04 07:56:49 188,494 ------w c:\winnt\ServicePackFiles\i386\fpcount.exe
    + 2008-04-14 00:12:20 188,494 ------w c:\winnt\ServicePackFiles\i386\fpcount.exe
    - 2004-08-04 07:56:42 94,208 ------w c:\winnt\ServicePackFiles\i386\fpencode.dll
    + 2008-04-14 00:11:53 94,208 ------w c:\winnt\ServicePackFiles\i386\fpencode.dll
    - 2004-08-04 07:56:42 20,541 ------w c:\winnt\ServicePackFiles\i386\fpexedll.dll
    + 2008-04-14 00:11:53 20,541 ------w c:\winnt\ServicePackFiles\i386\fpexedll.dll
    - 2004-08-04 07:56:42 598,071 ------w c:\winnt\ServicePackFiles\i386\fpmmc.dll
    + 2008-04-14 00:11:53 598,071 ------w c:\winnt\ServicePackFiles\i386\fpmmc.dll
    - 2004-08-04 07:56:06 208,896 ------w c:\winnt\ServicePackFiles\i386\fpmmcsat.dll
    + 2007-04-02 16:36:04 208,896 ------w c:\winnt\ServicePackFiles\i386\fpmmcsat.dll
    - 2004-08-04 07:56:49 20,538 ------w c:\winnt\ServicePackFiles\i386\fpremadm.exe
    + 2008-04-14 00:12:20 20,538 ------w c:\winnt\ServicePackFiles\i386\fpremadm.exe
    - 2004-08-04 07:56:49 28,728 ------w c:\winnt\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-04-14 00:12:20 28,728 ------w c:\winnt\ServicePackFiles\i386\fpsrvadm.exe
    - 2004-08-04 07:56:06 9,344 ------w c:\winnt\ServicePackFiles\i386\framebuf.dll
    + 2008-04-14 00:09:33 9,344 ------w c:\winnt\ServicePackFiles\i386\framebuf.dll
    - 2004-08-04 07:56:42 185,856 ------w c:\winnt\ServicePackFiles\i386\framedyn.dll
    + 2008-04-14 00:11:53 185,344 ------w c:\winnt\ServicePackFiles\i386\framedyn.dll
    - 2004-08-04 07:56:49 193,024 ------w c:\winnt\ServicePackFiles\i386\fsquirt.exe
    + 2008-04-14 00:12:20 193,024 ------w c:\winnt\ServicePackFiles\i386\fsquirt.exe
    - 2004-08-04 07:56:49 42,496 ------w c:\winnt\ServicePackFiles\i386\ftp.exe
    + 2008-04-14 00:12:20 42,496 ------w c:\winnt\ServicePackFiles\i386\ftp.exe
    - 2004-08-04 07:56:42 60,416 ------w c:\winnt\ServicePackFiles\i386\fwcfg.dll
    + 2008-04-14 00:11:53 60,416 ------w c:\winnt\ServicePackFiles\i386\fwcfg.dll
    - 2004-08-04 07:56:42 452,096 ------w c:\winnt\ServicePackFiles\i386\fxsapi.dll
    + 2008-04-14 00:11:53 451,584 ------w c:\winnt\ServicePackFiles\i386\fxsapi.dll
    - 2004-08-04 07:56:49 143,360 ------w c:\winnt\ServicePackFiles\i386\fxsclnt.exe
    + 2008-04-14 00:12:21 142,848 ------w c:\winnt\ServicePackFiles\i386\fxsclnt.exe
    - 2004-08-04 07:56:42 72,192 ------w c:\winnt\ServicePackFiles\i386\fxscom.dll
    + 2008-04-14 00:11:54 72,192 ------w c:\winnt\ServicePackFiles\i386\fxscom.dll
    - 2004-08-04 07:56:42 285,184 ------w c:\winnt\ServicePackFiles\i386\fxscomex.dll
    + 2008-04-14 00:11:54 285,184 ------w c:\winnt\ServicePackFiles\i386\fxscomex.dll
    - 2004-08-04 07:56:49 229,376 ------w c:\winnt\ServicePackFiles\i386\fxscover.exe
    + 2008-04-14 00:12:21 229,376 ------w c:\winnt\ServicePackFiles\i386\fxscover.exe
    - 2004-08-04 07:56:42 27,136 ------w c:\winnt\ServicePackFiles\i386\fxsdrv.dll
    + 2008-04-14 00:11:54 26,624 ------w c:\winnt\ServicePackFiles\i386\fxsdrv.dll
    - 2004-08-04 07:56:42 55,296 ------w c:\winnt\ServicePackFiles\i386\fxsevent.dll
    + 2008-04-14 00:11:54 55,296 ------w c:\winnt\ServicePackFiles\i386\fxsevent.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\winnt\ServicePackFiles\i386\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\winnt\ServicePackFiles\i386\fxsext32.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\winnt\ServicePackFiles\i386\fxsmon.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\winnt\ServicePackFiles\i386\fxsmon.dll
    - 2004-08-04 07:56:42 132,608 ------w c:\winnt\ServicePackFiles\i386\fxsocm.dll
    + 2008-04-14 00:11:54 132,608 ------w c:\winnt\ServicePackFiles\i386\fxsocm.dll
    - 2004-08-04 07:56:42 8,704 ------w c:\winnt\ServicePackFiles\i386\fxsperf.dll
    + 2008-04-14 00:11:54 8,704 ------w c:\winnt\ServicePackFiles\i386\fxsperf.dll
    - 2004-08-04 07:56:06 6,656 ------w c:\winnt\ServicePackFiles\i386\fxsres.dll
    + 2008-04-14 00:09:33 6,656 ------w c:\winnt\ServicePackFiles\i386\fxsres.dll
    - 2004-08-04 07:56:42 562,176 ------w c:\winnt\ServicePackFiles\i386\fxsst.dll
    + 2008-04-14 00:11:54 562,176 ------w c:\winnt\ServicePackFiles\i386\fxsst.dll
    - 2004-08-04 07:56:49 267,776 ------w c:\winnt\ServicePackFiles\i386\fxssvc.exe
    + 2008-04-14 00:12:21 267,776 ------w c:\winnt\ServicePackFiles\i386\fxssvc.exe
    - 2004-08-04 07:56:42 246,272 ------w c:\winnt\ServicePackFiles\i386\fxst30.dll
    + 2008-04-14 00:11:54 246,272 ------w c:\winnt\ServicePackFiles\i386\fxst30.dll
    - 2004-08-04 07:56:42 397,312 ------w c:\winnt\ServicePackFiles\i386\fxstiff.dll
    + 2008-04-14 00:11:54 397,312 ------w c:\winnt\ServicePackFiles\i386\fxstiff.dll
    - 2004-08-04 07:56:42 154,112 ------w c:\winnt\ServicePackFiles\i386\fxsui.dll
    + 2008-04-14 00:11:54 154,112 ------w c:\winnt\ServicePackFiles\i386\fxsui.dll
    - 2004-08-04 07:56:42 192,512 ------w c:\winnt\ServicePackFiles\i386\fxswzrd.dll
    + 2008-04-14 00:11:54 192,512 ------w c:\winnt\ServicePackFiles\i386\fxswzrd.dll
    - 2004-08-04 07:56:42 400,384 ------w c:\winnt\ServicePackFiles\i386\fxsxp32.dll
    + 2008-04-14 00:11:54 400,384 ------w c:\winnt\ServicePackFiles\i386\fxsxp32.dll
    - 2004-08-04 06:07:43 46,464 ------w c:\winnt\ServicePackFiles\i386\gagp30kx.sys
    + 2008-04-13 18:36:40 46,464 ------w c:\winnt\ServicePackFiles\i386\gagp30kx.sys
    - 2004-08-04 06:08:21 10,624 ------w c:\winnt\ServicePackFiles\i386\gameenum.sys
    + 2008-04-13 18:45:29 10,624 ------w c:\winnt\ServicePackFiles\i386\gameenum.sys
    - 2004-08-04 06:08:29 59,136 ------w c:\winnt\ServicePackFiles\i386\gckernel.sys
    + 2008-04-13 18:45:32 59,136 ------w c:\winnt\ServicePackFiles\i386\gckernel.sys
    - 2004-08-04 07:56:42 278,016 ------w c:\winnt\ServicePackFiles\i386\gdi32.dll
    + 2008-04-14 00:11:54 285,184 ------w c:\winnt\ServicePackFiles\i386\gdi32.dll
    - 2004-08-04 07:56:42 122,880 ------w c:\winnt\ServicePackFiles\i386\glu32.dll
    + 2008-04-14 00:11:54 122,880 ------w c:\winnt\ServicePackFiles\i386\glu32.dll
    - 2004-08-04 07:56:07 9,728 ------w c:\winnt\ServicePackFiles\i386\gpkrsrc.dll
    + 2006-12-31 01:26:44 9,728 ------w c:\winnt\ServicePackFiles\i386\gpkrsrc.dll
    - 2004-08-04 07:56:49 39,424 ------w c:\winnt\ServicePackFiles\i386\grpconv.exe
    + 2008-04-14 00:12:21 39,424 ------w c:\winnt\ServicePackFiles\i386\grpconv.exe
    - 2004-08-04 05:59:19 28,288 ------w c:\winnt\ServicePackFiles\i386\grserial.sys
    + 2008-04-13 18:40:21 28,288 ------w c:\winnt\ServicePackFiles\i386\grserial.sys
    - 2004-08-04 07:56:42 123,904 ------w c:\winnt\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 133,120 ------w c:\winnt\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\winnt\ServicePackFiles\i386\guitrna.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\winnt\ServicePackFiles\i386\h323cc.dll
    + 2008-04-14 00:11:54 57,344 ------w c:\winnt\ServicePackFiles\i386\h323cc.dll
    - 2004-08-04 07:56:42 614,912 ------w c:\winnt\ServicePackFiles\i386\h323msp.dll
    + 2008-04-14 00:11:54 614,912 ------w c:\winnt\ServicePackFiles\i386\h323msp.dll
    - 2004-08-04 05:59:19 105,472 ------w c:\winnt\ServicePackFiles\i386\hal.dll
    + 2008-04-13 18:31:32 105,344 ------w c:\winnt\ServicePackFiles\i386\hal.dll
    - 2004-08-04 05:59:09 131,968 ------w c:\winnt\ServicePackFiles\i386\halaacpi.dll
    + 2008-04-13 18:31:28 131,840 ------w c:\winnt\ServicePackFiles\i386\halaacpi.dll
    - 2004-08-04 05:59:06 81,280 ------w c:\winnt\ServicePackFiles\i386\halacpi.dll
    + 2008-04-13 18:31:27 81,152 ------w c:\winnt\ServicePackFiles\i386\halacpi.dll
    - 2004-08-04 05:59:13 150,656 ------w c:\winnt\ServicePackFiles\i386\halapic.dll
    + 2008-04-13 18:31:28 150,528 ------w c:\winnt\ServicePackFiles\i386\halapic.dll
    - 2004-08-04 05:59:12 134,400 ------w c:\winnt\ServicePackFiles\i386\halmacpi.dll
    + 2008-04-13 18:31:28 134,400 ------w c:\winnt\ServicePackFiles\i386\halmacpi.dll
    - 2004-08-04 05:59:18 152,704 ------w c:\winnt\ServicePackFiles\i386\halmps.dll
    + 2008-04-13 18:31:32 152,576 ------w c:\winnt\ServicePackFiles\i386\halmps.dll
    - 2004-08-04 05:59:19 77,696 ------w c:\winnt\ServicePackFiles\i386\halsp.dll
    + 2008-04-13 18:31:31 77,696 ------w c:\winnt\ServicePackFiles\i386\halsp.dll
    - 2004-08-04 07:56:42 7,168 ------w c:\winnt\ServicePackFiles\i386\hccoin.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\winnt\ServicePackFiles\i386\hccoin.dll
    + 2008-04-13 16:36:05 144,384 ------w c:\winnt\ServicePackFiles\i386\hdaudbus.sys
    + 2008-04-14 00:12:21 15,872 ------w c:\winnt\ServicePackFiles\i386\help.exe
    - 2004-08-04 07:56:49 768,512 ------w c:\winnt\ServicePackFiles\i386\helpctr.exe
    + 2008-04-14 00:12:21 769,024 ------w c:\winnt\ServicePackFiles\i386\helpctr.exe
    - 2004-08-04 07:56:50 743,936 ------w c:\winnt\ServicePackFiles\i386\helpsvc.exe
    + 2008-04-14 00:12:21 744,448 ------w c:\winnt\ServicePackFiles\i386\helpsvc.exe
    - 2004-08-04 07:56:50 10,752 ------w c:\winnt\ServicePackFiles\i386\hh.exe
    + 2008-04-14 00:12:21 10,752 ------w c:\winnt\ServicePackFiles\i386\hh.exe
    - 2004-08-04 07:56:42 38,912 ------w c:\winnt\ServicePackFiles\i386\hhsetup.dll
    + 2008-04-14 00:11:54 41,472 ------w c:\winnt\ServicePackFiles\i386\hhsetup.dll
    - 2004-08-04 07:56:42 20,992 ------w c:\winnt\ServicePackFiles\i386\hid.dll
    + 2008-04-14 00:11:54 20,992 ------w c:\winnt\ServicePackFiles\i386\hid.dll
    + 2008-04-13 18:36:38 20,352 ------w c:\winnt\ServicePackFiles\i386\hidbatt.sys
    - 2004-08-04 06:10:36 25,600 ------w c:\winnt\ServicePackFiles\i386\hidbth.sys
    + 2008-04-13 18:46:30 25,600 ------w c:\winnt\ServicePackFiles\i386\hidbth.sys
    - 2004-08-04 06:08:19 36,224 ------w c:\winnt\ServicePackFiles\i386\hidclass.sys
    + 2008-04-13 18:45:26 36,864 ------w c:\winnt\ServicePackFiles\i386\hidclass.sys
    - 2004-08-04 06:08:18 15,104 ------w c:\winnt\ServicePackFiles\i386\hidir.sys
    + 2008-04-13 18:45:26 19,200 ------w c:\winnt\ServicePackFiles\i386\hidir.sys
    - 2004-08-04 06:08:16 24,960 ------w c:\winnt\ServicePackFiles\i386\hidparse.sys
    + 2008-04-13 18:45:22 24,960 ------w c:\winnt\ServicePackFiles\i386\hidparse.sys
    - 2004-08-04 07:56:42 21,504 ------w c:\winnt\ServicePackFiles\i386\hidserv.dll
    + 2008-04-14 00:11:54 21,504 ------w c:\winnt\ServicePackFiles\i386\hidserv.dll
    + 2008-04-13 18:45:27 10,368 ------w c:\winnt\ServicePackFiles\i386\hidusb.sys
    + 2008-04-14 00:11:54 72,704 ------w c:\winnt\ServicePackFiles\i386\hlink.dll
    - 2004-08-04 07:56:42 38,912 ------w c:\winnt\ServicePackFiles\i386\hmmapi.dll
    + 2008-04-14 00:11:54 38,912 ------w c:\winnt\ServicePackFiles\i386\hmmapi.dll
    - 2004-08-04 07:56:42 344,064 ------w c:\winnt\ServicePackFiles\i386\hnetcfg.dll
    + 2008-04-14 00:11:54 344,064 ------w c:\winnt\ServicePackFiles\i386\hnetcfg.dll
    - 2004-08-04 07:56:42 330,752 ------w c:\winnt\ServicePackFiles\i386\hnetwiz.dll
    + 2008-04-14 00:11:54 330,752 ------w c:\winnt\ServicePackFiles\i386\hnetwiz.dll
    - 2004-08-04 07:56:42 39,936 ------w c:\winnt\ServicePackFiles\i386\hostmib.dll
    + 2008-04-14 00:11:54 39,936 ------w c:\winnt\ServicePackFiles\i386\hostmib.dll
    - 2004-08-04 07:56:42 144,896 ------w c:\winnt\ServicePackFiles\i386\hotplug.dll
    + 2008-04-14 00:11:54 144,896 ------w c:\winnt\ServicePackFiles\i386\hotplug.dll
    - 2004-08-04 07:56:42 10,752 ------w c:\winnt\ServicePackFiles\i386\hpcjrr.dll
    + 2008-04-14 00:11:54 10,752 ------w c:\winnt\ServicePackFiles\i386\hpcjrr.dll
    - 2004-08-04 07:56:42 10,240 ------w c:\winnt\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-04-14 00:11:54 10,240 ------w c:\winnt\ServicePackFiles\i386\hpcjrrps.dll
    - 2004-08-04 07:56:42 87,552 ------w c:\winnt\ServicePackFiles\i386\hpfud50.dll
    + 2008-04-14 00:11:54 87,552 ------w c:\winnt\ServicePackFiles\i386\hpfud50.dll
    - 2004-08-04 07:56:50 18,944 ------w c:\winnt\ServicePackFiles\i386\hscupd.exe
    + 2008-04-14 00:12:21 18,432 ------w c:\winnt\ServicePackFiles\i386\hscupd.exe
    - 2004-08-04 07:56:42 32,285 ------w c:\winnt\ServicePackFiles\i386\hsfcisp2.dll
    + 2008-04-14 00:11:54 32,285 ------w c:\winnt\ServicePackFiles\i386\hsfcisp2.dll
    - 2004-08-04 06:00:13 263,040 ------w c:\winnt\ServicePackFiles\i386\http.sys
    + 2008-04-13 18:53:53 264,832 ------w c:\winnt\ServicePackFiles\i386\http.sys
    - 2004-08-04 07:56:42 24,576 ------w c:\winnt\ServicePackFiles\i386\httpapi.dll
    + 2008-04-14 00:11:54 24,576 ------w c:\winnt\ServicePackFiles\i386\httpapi.dll
    - 2004-08-04 07:56:42 41,984 ------w c:\winnt\ServicePackFiles\i386\htui.dll
    + 2008-04-14 00:11:54 41,984 ------w c:\winnt\ServicePackFiles\i386\htui.dll
    - 2004-08-04 07:56:42 345,088 ------w c:\winnt\ServicePackFiles\i386\hypertrm.dll
    + 2008-04-14 00:11:54 347,136 ------w c:\winnt\ServicePackFiles\i386\hypertrm.dll
    - 2004-08-04 06:00:50 8,192 ------w c:\winnt\ServicePackFiles\i386\i2omgmt.sys
    + 2008-04-13 18:41:22 8,576 ------w c:\winnt\ServicePackFiles\i386\i2omgmt.sys
    - 2004-08-04 06:00:50 18,560 ------w c:\winnt\ServicePackFiles\i386\i2omp.sys
    + 2008-04-13 18:41:22 18,560 ------w c:\winnt\ServicePackFiles\i386\i2omp.sys
    - 2004-08-04 06:14:36 52,736 ------w c:\winnt\ServicePackFiles\i386\i8042prt.sys
    + 2008-04-13 19:18:00 52,480 ------w c:\winnt\ServicePackFiles\i386\i8042prt.sys
    - 2004-08-04 07:56:42 702,845 ------w c:\winnt\ServicePackFiles\i386\i81xdnt5.dll
    + 2008-04-14 00:11:54 702,845 ------w c:\winnt\ServicePackFiles\i386\i81xdnt5.dll
    - 2004-08-04 07:56:42 119,808 ------w c:\winnt\ServicePackFiles\i386\iasrad.dll
    + 2008-04-14 00:11:54 119,808 ------w c:\winnt\ServicePackFiles\i386\iasrad.dll
    - 2004-08-04 07:56:42 11,264 ------w c:\winnt\ServicePackFiles\i386\icaapi.dll
    + 2008-04-14 00:11:54 11,264 ------w c:\winnt\ServicePackFiles\i386\icaapi.dll
    - 2004-08-04 07:56:42 80,384 ------w c:\winnt\ServicePackFiles\i386\iccvid.dll
    + 2008-04-14 00:11:54 80,384 ------w c:\winnt\ServicePackFiles\i386\iccvid.dll
    - 2004-08-04 07:56:42 253,952 ------w c:\winnt\ServicePackFiles\i386\icm32.dll
    + 2008-04-14 00:11:54 254,976 ------w c:\winnt\ServicePackFiles\i386\icm32.dll
    - 2004-08-04 07:56:07 3,584 ------w c:\winnt\ServicePackFiles\i386\icmp.dll
    + 2008-04-14 00:09:40 3,584 ------w c:\winnt\ServicePackFiles\i386\icmp.dll
    - 2004-08-04 07:56:42 4,096 ------w c:\winnt\ServicePackFiles\i386\iconlib.dll
    + 2008-04-13 16:44:29 2,560 ------w c:\winnt\ServicePackFiles\i386\iconlib.dll
    - 2004-08-04 07:56:42 61,440 ------w c:\winnt\ServicePackFiles\i386\icwconn.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\winnt\ServicePackFiles\i386\icwconn.dll
    - 2004-08-04 07:56:50 214,528 ------w c:\winnt\ServicePackFiles\i386\icwconn1.exe
    + 2008-04-14 00:12:22 214,528 ------w c:\winnt\ServicePackFiles\i386\icwconn1.exe
    - 2004-08-04 07:56:50 86,016 ------w c:\winnt\ServicePackFiles\i386\icwconn2.exe
    + 2008-04-14 00:12:22 86,016 ------w c:\winnt\ServicePackFiles\i386\icwconn2.exe
    - 2004-08-04 07:56:42 73,728 ------w c:\winnt\ServicePackFiles\i386\icwdial.dll
    + 2008-04-14 00:11:54 73,728 ------w c:\winnt\ServicePackFiles\i386\icwdial.dll
    - 2004-08-04 07:56:42 32,768 ------w c:\winnt\ServicePackFiles\i386\icwdl.dll
    + 2008-04-14 00:11:54 32,768 ------w c:\winnt\ServicePackFiles\i386\icwdl.dll
    - 2004-08-04 07:56:42 172,032 ------w c:\winnt\ServicePackFiles\i386\icwhelp.dll
    + 2008-04-14 00:11:54 172,032 ------w c:\winnt\ServicePackFiles\i386\icwhelp.dll
    - 2004-08-04 07:56:42 65,536 ------w c:\winnt\ServicePackFiles\i386\icwphbk.dll
    + 2008-04-14 00:11:54 65,536 ------w c:\winnt\ServicePackFiles\i386\icwphbk.dll
    - 2004-08-04 07:56:50 24,576 ------w c:\winnt\ServicePackFiles\i386\icwrmind.exe
    + 2008-04-14 00:12:22 24,576 ------w c:\winnt\ServicePackFiles\i386\icwrmind.exe
    - 2004-08-04 07:56:42 49,152 ------w c:\winnt\ServicePackFiles\i386\icwutil.dll
    + 2008-04-14 00:11:54 49,152 ------w c:\winnt\ServicePackFiles\i386\icwutil.dll
    - 2004-08-04 07:56:42 120,832 ------w c:\winnt\ServicePackFiles\i386\idq.dll
    + 2008-04-14 00:11:54 120,832 ------w c:\winnt\ServicePackFiles\i386\idq.dll
    - 2004-08-04 07:56:50 34,304 ------w c:\winnt\ServicePackFiles\i386\ie4uinit.exe
    + 2008-04-14 00:12:22 34,304 ------w c:\winnt\ServicePackFiles\i386\ie4uinit.exe
    - 2004-08-04 07:56:42 139,264 ------w c:\winnt\ServicePackFiles\i386\ieakeng.dll
    + 2008-04-14 00:11:54 143,360 ------w c:\winnt\ServicePackFiles\i386\ieakeng.dll
    - 2004-08-04 07:56:42 216,576 ------w c:\winnt\ServicePackFiles\i386\ieaksie.dll
    + 2008-04-14 00:11:54 216,576 ------w c:\winnt\ServicePackFiles\i386\ieaksie.dll
    - 2004-08-04 07:56:42 323,584 ------w c:\winnt\ServicePackFiles\i386\iedkcs32.dll
    + 2008-04-14 00:11:54 323,584 ------w c:\winnt\ServicePackFiles\i386\iedkcs32.dll
    - 2004-08-04 07:56:50 18,432 ------w c:\winnt\ServicePackFiles\i386\iedw.exe
    + 2008-04-14 00:12:22 18,432 ------w c:\winnt\ServicePackFiles\i386\iedw.exe
    - 2004-08-04 07:56:42 81,920 ------w c:\winnt\ServicePackFiles\i386\ieencode.dll
    + 2008-04-14 00:11:54 81,920 ------w c:\winnt\ServicePackFiles\i386\ieencode.dll
    - 2004-08-04 07:56:42 249,344 ------w c:\winnt\ServicePackFiles\i386\iepeers.dll
    + 2008-04-14 00:11:54 251,904 ------w c:\winnt\ServicePackFiles\i386\iepeers.dll
    - 2004-08-04 07:56:42 48,640 ------w c:\winnt\ServicePackFiles\i386\iernonce.dll
    + 2008-04-14 00:11:54 48,640 ------w c:\winnt\ServicePackFiles\i386\iernonce.dll
    - 2004-08-04 07:56:42 62,976 ------w c:\winnt\ServicePackFiles\i386\iesetup.dll
    + 2008-04-14 00:11:54 62,976 ------w c:\winnt\ServicePackFiles\i386\iesetup.dll
    - 2004-08-04 07:56:50 93,184 ------w c:\winnt\ServicePackFiles\i386\iexplore.exe
    + 2008-04-14 00:12:22 93,184 ------w c:\winnt\ServicePackFiles\i386\iexplore.exe
    - 2004-08-04 07:56:50 114,688 ------w c:\winnt\ServicePackFiles\i386\iexpress.exe
    + 2008-04-14 00:12:22 114,688 ------w c:\winnt\ServicePackFiles\i386\iexpress.exe
    - 2004-08-04 07:56:42 135,680 ------w c:\winnt\ServicePackFiles\i386\ifmon.dll
    + 2008-04-14 00:11:54 135,680 ------w c:\winnt\ServicePackFiles\i386\ifmon.dll
    - 2004-08-04 07:56:42 8,192 ------w c:\winnt\ServicePackFiles\i386\igmpagnt.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\winnt\ServicePackFiles\i386\igmpagnt.dll
    - 2004-08-04 07:56:42 505,344 ------w c:\winnt\ServicePackFiles\i386\iis.dll
    + 2008-04-14 00:11:54 505,344 ------w c:\winnt\ServicePackFiles\i386\iis.dll
    - 2004-08-04 07:56:42 81,920 ------w c:\winnt\ServicePackFiles\i386\ils.dll
    + 2008-04-14 00:11:54 81,920 ------w c:\winnt\ServicePackFiles\i386\ils.dll
    - 2004-08-04 07:56:42 144,384 ------w c:\winnt\ServicePackFiles\i386\imagehlp.dll
    + 2008-04-14 00:11:54 144,384 ------w c:\winnt\ServicePackFiles\i386\imagehlp.dll
    - 2004-08-04 07:56:50 150,016 ------w c:\winnt\ServicePackFiles\i386\imapi.exe
    + 2008-04-14 00:12:22 150,528 ------w c:\winnt\ServicePackFiles\i386\imapi.exe
    - 2004-08-04 06:00:15 41,856 ------w c:\winnt\ServicePackFiles\i386\imapi.sys
    + 2008-04-13 18:40:58 42,112 ------w c:\winnt\ServicePackFiles\i386\imapi.sys
    - 2004-08-04 07:56:42 36,921 ------w c:\winnt\ServicePackFiles\i386\imeshare.dll
    + 2008-04-14 00:11:54 36,921 ------w c:\winnt\ServicePackFiles\i386\imeshare.dll
    - 2004-08-04 07:56:42 35,840 ------w c:\winnt\ServicePackFiles\i386\imgutil.dll
    + 2008-04-14 00:11:54 35,840 ------w c:\winnt\ServicePackFiles\i386\imgutil.dll
    - 2004-08-04 07:56:42 110,080 ------w c:\winnt\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 110,080 ------w c:\winnt\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 123,392 ------w c:\winnt\ServicePackFiles\i386\imsinsnt.dll
    - 2004-08-04 07:56:42 274,432 ------w c:\winnt\ServicePackFiles\i386\inetcfg.dll
    + 2008-04-14 00:11:54 274,432 ------w c:\winnt\ServicePackFiles\i386\inetcfg.dll
    - 2004-08-04 07:56:42 678,400 ------w c:\winnt\ServicePackFiles\i386\inetcomm.dll
    + 2008-04-14 00:11:54 691,712 ------w c:\winnt\ServicePackFiles\i386\inetcomm.dll
    - 2004-08-04 07:56:42 33,280 ------w c:\winnt\ServicePackFiles\i386\inetmib1.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\winnt\ServicePackFiles\i386\inetmib1.dll
    - 2004-08-04 07:56:42 75,264 ------w c:\winnt\ServicePackFiles\i386\inetpp.dll
    + 2008-04-14 00:11:55 75,264 ------w c:\winnt\ServicePackFiles\i386\inetpp.dll
    - 2004-08-04 07:56:42 15,872 ------w c:\winnt\ServicePackFiles\i386\inetppui.dll
    + 2008-04-14 00:11:55 15,872 ------w c:\winnt\ServicePackFiles\i386\inetppui.dll
    - 2004-08-04 07:56:08 48,128 ------w c:\winnt\ServicePackFiles\i386\inetres.dll
    + 2008-04-13 16:22:12 48,128 ------w c:\winnt\ServicePackFiles\i386\inetres.dll
    - 2004-08-04 07:56:50 20,480 ------w c:\winnt\ServicePackFiles\i386\inetwiz.exe
    + 2008-04-14 00:12:22 20,480 ------w c:\winnt\ServicePackFiles\i386\inetwiz.exe
    - 2004-08-04 07:56:42 147,456 ------w c:\winnt\ServicePackFiles\i386\initpki.dll
    + 2008-04-14 00:11:55 147,456 ------w c:\winnt\ServicePackFiles\i386\initpki.dll
    - 2004-08-04 07:56:42 123,392 ------w c:\winnt\ServicePackFiles\i386\input.dll
    + 2008-04-14 00:11:55 123,392 ------w c:\winnt\ServicePackFiles\i386\input.dll
    - 2004-08-04 07:56:42 96,256 ------w c:\winnt\ServicePackFiles\i386\inseng.dll
    + 2008-04-14 00:11:55 96,256 ------w c:\winnt\ServicePackFiles\i386\inseng.dll
    - 2004-08-04 05:59:41 5,504 ------w c:\winnt\ServicePackFiles\i386\intelide.sys
    + 2008-04-13 18:40:29 5,504 ------w c:\winnt\ServicePackFiles\i386\intelide.sys
    - 2004-08-04 05:59:19 36,096 ------w c:\winnt\ServicePackFiles\i386\intelppm.sys
    + 2008-04-13 18:31:32 36,352 ------w c:\winnt\ServicePackFiles\i386\intelppm.sys
    - 2004-08-04 06:00:06 29,056 ------w c:\winnt\ServicePackFiles\i386\ip6fw.sys
    + 2008-04-13 18:53:34 36,608 ------w c:\winnt\ServicePackFiles\i386\ip6fw.sys
    - 2004-08-04 07:56:50 55,808 ------w c:\winnt\ServicePackFiles\i386\ipconfig.exe
    + 2008-04-14 00:12:22 55,808 ------w c:\winnt\ServicePackFiles\i386\ipconfig.exe
    - 2004-08-04 07:56:05 97,280 ------w c:\winnt\ServicePackFiles\i386\ipevldpc.dll
    + 2008-04-14 00:09:30 103,424 ------w c:\winnt\ServicePackFiles\i386\ipevldpc.dll
    - 2004-08-04 07:56:04 24,064 ------w c:\winnt\ServicePackFiles\i386\ipevlpid.dll
    + 2008-04-14 00:09:23 24,064 ------w c:\winnt\ServicePackFiles\i386\ipevlpid.dll
    - 2004-08-04 07:56:42 94,720 ------w c:\winnt\ServicePackFiles\i386\iphlpapi.dll
    + 2008-04-14 00:11:55 94,720 ------w c:\winnt\ServicePackFiles\i386\iphlpapi.dll
    - 2004-08-04 06:04:45 20,992 ------w c:\winnt\ServicePackFiles\i386\ipinip.sys
    + 2008-04-13 18:57:07 20,864 ------w c:\winnt\ServicePackFiles\i386\ipinip.sys
    + 2008-04-14 00:11:55 161,280 ------w c:\winnt\ServicePackFiles\i386\ipmontr.dll
    - 2004-08-04 06:04:50 134,912 ------w c:\winnt\ServicePackFiles\i386\ipnat.sys
    + 2008-04-13 18:57:15 152,832 ------w c:\winnt\ServicePackFiles\i386\ipnat.sys
    - 2004-08-04 07:56:42 331,264 ------w c:\winnt\ServicePackFiles\i386\ipnathlp.dll
    + 2008-04-14 00:11:55 331,264 ------w c:\winnt\ServicePackFiles\i386\ipnathlp.dll
    - 2004-08-04 07:56:42 330,752 ------w c:\winnt\ServicePackFiles\i386\ippromon.dll
    + 2008-04-14 00:11:55 330,752 ------w c:\winnt\ServicePackFiles\i386\ippromon.dll
    - 2004-08-04 07:56:42 35,328 ------w c:\winnt\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 35,328 ------w c:\winnt\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\winnt\ServicePackFiles\i386\iprtrmgr.dll
    - 2004-08-04 06:14:28 74,752 ------w c:\winnt\ServicePackFiles\i386\ipsec.sys
    + 2008-04-13 19:19:42 75,264 ------w c:\winnt\ServicePackFiles\i386\ipsec.sys
    - 2004-08-04 07:56:42 349,696 ------w c:\winnt\ServicePackFiles\i386\ipsecsnp.dll
    + 2008-04-14 00:11:55 349,696 ------w c:\winnt\ServicePackFiles\i386\ipsecsnp.dll
    - 2004-08-04 07:56:42 182,784 ------w c:\winnt\ServicePackFiles\i386\ipsecsvc.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\winnt\ServicePackFiles\i386\ipsecsvc.dll
    - 2004-08-04 07:56:26 96,768 ------w c:\winnt\ServicePackFiles\i386\ipseldpc.dll
    + 2008-04-14 00:10:45 102,912 ------w c:\winnt\ServicePackFiles\i386\ipseldpc.dll
    - 2004-08-04 07:56:04 24,064 ------w c:\winnt\ServicePackFiles\i386\ipselpid.dll
    + 2008-04-14 00:09:24 24,064 ------w c:\winnt\ServicePackFiles\i386\ipselpid.dll
    - 2004-08-04 07:56:42 384,000 ------w c:\winnt\ServicePackFiles\i386\ipsmsnap.dll
    + 2008-04-14 00:11:55 384,000 ------w c:\winnt\ServicePackFiles\i386\ipsmsnap.dll
    - 2004-08-04 07:56:50 53,248 ------w c:\winnt\ServicePackFiles\i386\ipv6.exe
    + 2008-04-14 00:12:23 53,248 ------w c:\winnt\ServicePackFiles\i386\ipv6.exe
    - 2004-08-04 07:56:42 59,904 ------w c:\winnt\ServicePackFiles\i386\ipv6mon.dll
    + 2008-04-14 00:11:55 59,904 ------w c:\winnt\ServicePackFiles\i386\ipv6mon.dll
    - 2004-08-04 07:56:50 23,552 ------w c:\winnt\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:12:23 23,552 ------w c:\winnt\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:11:55 22,016 ------w c:\winnt\ServicePackFiles\i386\ipxwan.dll
    - 2004-08-04 07:56:42 120,320 ------w c:\winnt\ServicePackFiles\i386\ir41_qc.dll
    + 2008-04-14 00:11:55 120,320 ------w c:\winnt\ServicePackFiles\i386\ir41_qc.dll
    - 2004-08-04 07:56:42 338,432 ------w c:\winnt\ServicePackFiles\i386\ir41_qcx.dll
    + 2008-04-14 00:11:55 338,432 ------w c:\winnt\ServicePackFiles\i386\ir41_qcx.dll
    - 2004-08-04 07:56:42 755,200 ------w c:\winnt\ServicePackFiles\i386\ir50_32.dll
    + 2008-04-14 00:11:55 755,200 ------w c:\winnt\ServicePackFiles\i386\ir50_32.dll
    - 2004-08-04 07:56:42 200,192 ------w c:\winnt\ServicePackFiles\i386\ir50_qc.dll
    + 2008-04-14 00:11:55 200,192 ------w c:\winnt\ServicePackFiles\i386\ir50_qc.dll
    - 2004-08-04 07:56:42 183,808 ------w c:\winnt\ServicePackFiles\i386\ir50_qcx.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\winnt\ServicePackFiles\i386\ir50_qcx.dll
    - 2004-08-04 06:00:53 87,424 ------w c:\winnt\ServicePackFiles\i386\irda.sys
    + 2008-04-13 18:54:36 88,192 ------w c:\winnt\ServicePackFiles\i386\irda.sys
    - 2004-08-04 06:00:46 11,264 ------w c:\winnt\ServicePackFiles\i386\irenum.sys
    + 2008-04-13 18:54:28 11,264 ------w c:\winnt\ServicePackFiles\i386\irenum.sys
    - 2004-08-04 07:56:50 152,576 ------w c:\winnt\ServicePackFiles\i386\irftp.exe
    + 2008-04-14 00:12:23 151,552 ------w c:\winnt\ServicePackFiles\i386\irftp.exe
    - 2004-08-04 07:56:42 27,136 ------w c:\winnt\ServicePackFiles\i386\irmon.dll
    + 2008-04-14 00:11:55 28,160 ------w c:\winnt\ServicePackFiles\i386\irmon.dll
    + 2008-04-13 18:36:41 37,248 ------w c:\winnt\ServicePackFiles\i386\isapnp.sys
    + 2008-04-14 00:10:32 105,984 ------w c:\winnt\ServicePackFiles\i386\isdpc.dll
    + 2008-04-14 00:10:55 105,984 ------w c:\winnt\ServicePackFiles\i386\isendpc.dll
    + 2008-04-14 00:10:55 24,064 ------w c:\winnt\ServicePackFiles\i386\isenpid.dll
    - 2004-08-04 07:56:42 81,920 ------w c:\winnt\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:11:55 81,920 ------w c:\winnt\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:10:32 24,064 ------w c:\winnt\ServicePackFiles\i386\ispid.dll
    - 2004-08-04 07:56:42 32,768 ------w c:\winnt\ServicePackFiles\i386\isrdbg32.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\winnt\ServicePackFiles\i386\isrdbg32.dll
    - 2004-08-04 07:56:42 143,872 ------w c:\winnt\ServicePackFiles\i386\itircl.dll
    + 2008-04-14 00:11:55 155,136 ------w c:\winnt\ServicePackFiles\i386\itircl.dll
    - 2004-08-04 07:56:42 134,144 ------w c:\winnt\ServicePackFiles\i386\itss.dll
    + 2008-04-14 00:11:55 138,240 ------w c:\winnt\ServicePackFiles\i386\itss.dll
    - 2004-08-04 07:56:42 192,000 ------w c:\winnt\ServicePackFiles\i386\iuengine.dll
    + 2008-04-14 00:11:55 191,488 ------w c:\winnt\ServicePackFiles\i386\iuengine.dll
    - 2004-08-04 07:56:42 54,272 ------w c:\winnt\ServicePackFiles\i386\ixsso.dll
    + 2008-04-14 00:11:55 54,272 ------w c:\winnt\ServicePackFiles\i386\ixsso.dll
    - 2004-08-04 07:56:42 47,616 ------w c:\winnt\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 47,616 ------w c:\winnt\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\winnt\ServicePackFiles\i386\jgdw400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\winnt\ServicePackFiles\i386\jgpl400.dll
    - 2004-08-04 07:56:42 450,560 ------w c:\winnt\ServicePackFiles\i386\jscript.dll
    + 2008-04-14 00:11:56 512,000 ------w c:\winnt\ServicePackFiles\i386\jscript.dll
    - 2004-08-04 07:56:42 15,872 ------w c:\winnt\ServicePackFiles\i386\jsproxy.dll
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules