HiJackThis Log

achalk · Dec 2, 2008

A friend's machine running XP SP3 has been infected that pops up random windows (and does heaven knows what else). Malwarebytes was on the machine and appears to have been sabotaged. I cannot remove its .exe file.

I was wondering how to proceed with a cleanup? Below is a log from HiJackThis. Please let me know of anything else you need.

Regards,

- A
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:27:01 AM, on 12/2/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\PremierOpinion\pmropn.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\taskmgr.exe
D:\Downloads\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O3 - Toolbar: MYPOINTS - {A057A204-BACC-4D26-CEC4-75A487FD6484} - C:\PROGRA~1\mypoints\mypoints.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [PremierOpinion] C:\Program Files\PremierOpinion\pmropn.exe -boot
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll
O9 - Extra button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra 'Tools' menuitem: Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5E92F538-B50B-46C5-9C5F-C6EECED3F6C6} - http://www.infospace.com/mypoints.main/tbar/mypointsSetup.exe
O20 - AppInit_DLLs: C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program Files\PremierOpinion\pmai.dll
O20 - Winlogon Notify: PremierOpinion - C:\Program Files\PremierOpinion\pmls.dll
O20 - Winlogon Notify: __c00BA506 - C:\WINDOWS\system32\__c00BA506.dat (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: GEARSecurity - Unknown owner - C:\WINDOWS\System32\GEARSec.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: SoundMovieServer - SoundMovieServer - C:\WINDOWS\system32\snmvtsvc.exe

--
End of file - 5388 bytes

pskelley · Dec 5, 2008

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
The junk can be tough to remove, so do not expect fast or easy.

Your friend has some real junk on the computer:
http://www.symantec.com/security_response/writeup.jsp?docid=2004-061817-4554-99
http://www.sophos.com/security/analyses/adware-and-puas/premieropinion.html
This: O20 - Winlogon Notify: __c00BA506 - C:\WINDOWS\system32\__c00BA506.dat
which if it is active is much worse malware. If you wish me to continue you will need to do this.

Can you update MBAM in case we want to scan with it?

1) Post the HijackThis logs from this point on in normal mode, last one was in Safe mode with network support
(unsafe going online like that also, should be used for an emergency only)

2) Read the "Before you Post" instructions, then properly position HijackThis, like this:
Download Trend Micro Hijack This™ to your Desktop
http://download.bleepingcomputer.com/hijackthis/HJTInstall.exe
Doubleclick the HJTInstall.exe to start it.
By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.
HijackThis will open after install. Press the Scan button below.
This will start the scan and open a log. <<< close HJT until needed after combofix is run.

3) Post an uninstall list: Open Hijackthis.
Click the "Open the Misc Tools" section Button.
Click the "Open Uninstall Manager" Button.
Click the "Save list..." Button.
Save it to your desktop. Copy and paste the contents into your reply.
Image: http://img.bleepingcomputer.com/tutorials/hijackthis/uninstall-man.jpg

4) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
See this Link for programs that need to be disabled and instruction on how to disable them.
Remember to re-enable them when we're done.
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a New Hijackthis log.

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

Tutorial if needed
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Thanks

achalk · Dec 9, 2008

Many thanks for looking at this. First, here is a HiJackThis log from normal mode. I am working on your other instructions now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:31:55 PM, on 12/8/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Susan Chew\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\Susan Chew\My Documents\LimeWire\LimeWire.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\PremierOpinion\pmropn.exe
D:\Downloads\hijackthis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PremierOpinion] C:\Program Files\PremierOpinion\pmropn.exe -boot
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SpyHunter Security Suite] "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Susan Chew\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Documents and Settings\Susan Chew\My Documents\LimeWire\LimeWire.exe
O9 - Extra button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra 'Tools' menuitem: Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5E92F538-B50B-46C5-9C5F-C6EECED3F6C6} - http://www.infospace.com/mypoints.main/tbar/mypointsSetup.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program Files\PremierOpinion\pmai.dll
O20 - Winlogon Notify: PremierOpinion - C:\Program Files\PremierOpinion\pmls.dll
O20 - Winlogon Notify: __c00BA506 - C:\WINDOWS\system32\__c00BA506.dat (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: GEARSecurity - Unknown owner - C:\WINDOWS\System32\GEARSec.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: SoundMovieServer - SoundMovieServer - C:\WINDOWS\system32\snmvtsvc.exe

--
End of file - 7632 bytes

achalk · Dec 9, 2008

Mbam

I cannot remove the old version of MBAM. The DLL is "being used by another process".

pskelley · Dec 9, 2008

Move on with the rest of the instructions than.

achalk · Dec 9, 2008

Combofix log - Part 1

Log was too large to upload as one attachment.

achalk · Dec 9, 2008

Combofix log -- Part 2

Continuation of part 1 (this should be appended to part 1

achalk · Dec 9, 2008

HiJack This log (Post ComboFix)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:22 PM, on 12/8/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Susan Chew\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\Susan Chew\My Documents\LimeWire\LimeWire.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
D:\Downloads\hijackthis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [PremierOpinion] C:\Program Files\PremierOpinion\pmropn.exe -boot
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SpyHunter Security Suite] "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Susan Chew\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: LimeWire On Startup.lnk = C:\Documents and Settings\Susan Chew\My Documents\LimeWire\LimeWire.exe
O9 - Extra button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra 'Tools' menuitem: Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\AllMusicConverter\YouTubeRipper.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5E92F538-B50B-46C5-9C5F-C6EECED3F6C6} - http://www.infospace.com/mypoints.main/tbar/mypointsSetup.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: GEARSecurity - Unknown owner - C:\WINDOWS\System32\GEARSec.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: SoundMovieServer - SoundMovieServer - C:\WINDOWS\system32\snmvtsvc.exe

--
End of file - 7193 bytes

pskelley · Dec 9, 2008

Listen up, I posted this information for a good reason:

Please make sure you have read this information so we are on the same page.

and this:

Make sure you read and follow the directions, anything else will slow the process and waste both of our time.

If you would read the directions as I asked, your would have read this:

All logs should be copy/pasted into topic and not attached unless requested by helper in that format.

Copy/paste all logs, use as many posts as you need to use in order to follow directions.

achalk · Dec 9, 2008

ComboFix.Txt (part 1 of 10)

ComboFix 08-12-07.04 - Susan Chew 2008-12-08 19:17:49.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.551 [GMT -6:00]
Running from: c:\documents and settings\Susan Chew\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\HotbarSA
c:\documents and settings\All Users\Application Data\HotbarSA\HotbarSA.dat
c:\documents and settings\All Users\Application Data\HotbarSA\HotbarSA_kyf.dat
c:\documents and settings\All Users\Application Data\HotbarSA\HotbarSAAbout.mht
c:\documents and settings\All Users\Application Data\HotbarSA\HotbarSAau.dat
c:\documents and settings\All Users\Application Data\HotbarSA\HotbarSAEULA.mht
c:\documents and settings\All Users\Start Menu\Programs\Hotbar
c:\documents and settings\All Users\Start Menu\Programs\Hotbar\About Hotbar.lnk
c:\documents and settings\All Users\Start Menu\Programs\Hotbar\Hotbar Customer Support Center.lnk
c:\documents and settings\All Users\Start Menu\Programs\Hotbar\Reset Cursor.lnk
c:\documents and settings\All Users\Start Menu\Programs\Hotbar\Uninstall Hotbar.lnk
c:\documents and settings\All Users\Start Menu\Programs\Hotbar\Weather.lnk
c:\documents and settings\Susan Chew\Application Data\Hotbar
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\030105_animi14_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\030105_animi14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay13_em.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay15_em.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay16_em.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay9_em.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\040108ay9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\060103babie007_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\060103babie007_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\070103bunny_e_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\070103bunny_e_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\auto__racing_finish_flag_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\auto__racing_finish_flag_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\babies_baby_cries_2_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\babies_baby_cries_2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\busine1_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\busine1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\clocks_plain_clock_2_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\clocks_plain_clock_2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\dogs__dalmatian_runs_2_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\dogs__dalmatian_runs_2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\FileManager.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\garfie_sleepy_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\garfie_sleepy_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\soccer_kicker_2_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\soccer_kicker_2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\sun___4_img.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\eskin\sun___4_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\fsh1.exe
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\edit_select.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-edit.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-temp_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\1\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\edit_select.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-edit.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-temp_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-premium-email-premium_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\2\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\avatar.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\business_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\buttondir.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\code.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\email-def.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\email-temp-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\images.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\layout.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\localcontent.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\more.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\progress.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOI\static\DownLoad\treexml.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\edit_select.gif

achalk · Dec 9, 2008

ComboFix.Txt (part 2 of 10)

c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-543450.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-548964.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-589306.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-591943.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-592579.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-598579.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-603763.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-9595.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511724-9696.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-new.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-new2.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-options.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\pro_hb_fo_word.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\sales_buttons.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\1\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\edit_select.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-543450.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-548964.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-589306.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-591943.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-592579.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-598579.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-603763.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-9595.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511724-9696.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-new.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-new2.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-options.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\pro_hb_fo_word.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\sales_buttons.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\2\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\avatar.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\business_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\buttondir.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\code.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\email-def.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\email-temp-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\images.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\layout.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\localcontent.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\more.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\pro_hb_fo_word.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\progress.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\sales_buttons.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostOL\static\DownLoad\treexml.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\edit_select.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-edit.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-temp_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-premium-email-premium_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\1\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte10_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte11_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte12_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte13_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte14_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte19_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030104_emte9_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\030203lib_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102angel_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102bigluf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102bigsmile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102birthday_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102cheers_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102flo_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102good_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102jump_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102king_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102lough_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102luf_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102smile_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102smiled_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102sor_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102thanx_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\033102uhu_1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\040103ahh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\040103wow_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\040104_emi2_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\042102_1134_112_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\050103big_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\050103gig_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\050103hm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\050103nomail_emoti_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\050103norm_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema15_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema16_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema17_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema18_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema19_prv.gif

achalk · Dec 9, 2008

ComboFix.Txt (part 3 of 10)

c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema20_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema21_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema24_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema25_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema26_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema30_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema33_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\060104_ema34_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\062802hippi_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\062802jumpie_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\080402argh_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\080402oops_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\080402ouch_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\082502no_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\082502yes_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_boring1_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_confused_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_crying_ugly_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_fantastic_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_feel_better_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_gimme_break_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_heehee_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_hlopaet_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_ign_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_lol_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_no_comment_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_peace_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_smashing_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\110103_talk2thehand_prv.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\avatar.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\block_sm.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\block_sm2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\block_smli.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\block_smli2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\blocked.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\blocked2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_add-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_back-but.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_left_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_left_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_left_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_middle_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_middle_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_right_cut_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_right_enabled_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\btn_right_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\business_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\buttondir.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\components.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\css_cattree.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\css_flashpreview.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\css2_main.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\css2_pagingmodule.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\css2_topbuttons.css
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\delete.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\edit_clear_sound.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\edit_fs.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\edit_select.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-511745-514279.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-backgrounds.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-bcards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-ecards.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-edit.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-emoticons.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-estationery.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-funny.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-help.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-images.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-info.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-more.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-my.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-people.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-photo.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-tell.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-temp.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-temp_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-text.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def-email-voice.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-def.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-premium-email-premium.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-premium-email-premium_OI.mnu
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-t1-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\email-temp-bg.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\estatationery.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\flashpatch.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\flashpreview.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\fs3.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\hotbar_promo.htm
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_checked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_close_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_close_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_edit_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_edit_send.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_flash_preview.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_recently_used.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_remove_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_remove_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_sand-clock2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_tell_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_tell_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_tree_null.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_unchecked_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\icon_unchecked_pressed_1.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\img_barlayout.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\img_barlayout2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\img_barlayout4.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\img_corner_left.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\img_local_logo.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_basetemplate.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_hbgroups.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_hbobject3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_hbobjectset3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_hotbarwrapper.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_iteratorsandreaders3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_pagingmoduleobj3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_texts3.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\js2_xmltree3nf.js
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\layout.cdf
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\linkpathlegal.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\more.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\n.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\nav_b_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\nav_bb_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\nav_f_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\nav_ff_2.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\progress.res
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\searchbtn.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\submit.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_bg.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_bga.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_bgia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_l.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_la.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_lia.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_r.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_ra.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tab_ria.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tree_dots.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tree_minus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\tree_plus.gif
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_animations.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_backgrounds.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_ecards.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_emoticons.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_notifiers.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\2\treedata_text.xml
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\avatar.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\business_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\buttondir.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\code.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\email-def.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\email-t1-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\email-temp-bg.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\hotbar_promo.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\images.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\layout.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\linkpathlegal.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\localcontent.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\more.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\progress.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\HostWD\static\DownLoad\treexml.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.txt
c:\documents and settings\Susan Chew\Application Data\Hotbar\v3.0\Hotbar\static\DownLoad\samplegroups2.xip
c:\documents and settings\Susan Chew\Application Data\Hotbar_Icons
c:\documents and settings\Susan Chew\Application Data\Hotbar_Icons\Software_Online_8.ico
c:\documents and settings\Susan Chew\Application Data\Install.dat
c:\documents and settings\Susan Chew\Application Data\WeatherDPA
c:\documents and settings\Susan Chew\Application Data\WeatherDPA\Weather\WeatherStartup.xml
c:\documents and settings\Susan Chew\nah_piyu.exe
c:\windows\BMd79e343b.txt
c:\windows\BMd79e343b.xml
c:\windows\IE4 Error Log.txt
c:\windows\system32\39B9300c__.ini
c:\windows\system32\9A97500c__.ini
c:\windows\system32\axsjexal.ini
c:\windows\system32\EAA3700c__.ini
c:\windows\system32\eiycyrap.ini
c:\windows\system32\fbwxgayx.ini
c:\windows\system32\gapatmkc.ini
c:\windows\system32\ijkmp.ini
c:\windows\system32\kpothixu.ini
c:\windows\system32\TDSSitpe.dat
c:\windows\system32\TDSSwgod.log
c:\windows\system32\tvvwa.ini
c:\windows\system32\vDLRYJlm.ini
c:\windows\system32\vDLRYJlm.ini2
C:\xcrashdump.dat

c:\windows\system32\winlogon.exe . . . is infected!!

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV.SYS
-------\Service_TDSSserv.sys

((((((((((((((((((((((((( Files Created from 2008-11-09 to 2008-12-09 )))))))))))))))))))))))))))))))
.

2008-12-03 09:37 . 2008-12-03 09:37 <DIR> d-------- c:\program files\Enigma Software Group
2008-12-03 00:05 . 2008-12-05 16:47 <DIR> d-------- c:\documents and settings\Susan Chew\Application Data\AVGTOOLBAR
2008-12-02 19:43 . 2008-12-05 13:49 <DIR> d--h----- C:\$AVG8.VAULT$
2008-12-02 19:16 . 2008-12-08 08:29 <DIR> d-------- c:\windows\system32\drivers\Avg
2008-12-02 19:16 . 2008-12-02 19:16 <DIR> d-------- c:\program files\AVG
2008-12-02 19:16 . 2008-12-03 00:04 <DIR> d-------- c:\documents and settings\Andrew Chalk\Application Data\AVGTOOLBAR
2008-12-02 19:16 . 2008-12-02 19:16 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg8
2008-12-02 19:16 . 2008-12-02 19:16 97,928 --a------ c:\windows\system32\drivers\avgldx86.sys
2008-12-02 19:16 . 2008-12-02 19:16 10,520 --a------ c:\windows\system32\avgrsstx.dll
2008-12-02 19:14 . 2008-12-02 19:14 410,984 --a------ c:\windows\system32\deploytk.dll
2008-12-02 12:07 . 2008-12-02 12:07 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware2
2008-12-02 12:07 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-30 18:50 . 2008-12-03 06:15 2,274 --a------ c:\windows\system32\TDSSqxgx.dll
2008-11-23 14:34 . 2008-11-23 14:34 <DIR> d-------- c:\program files\iTunes
2008-11-23 14:34 . 2008-11-23 14:34 <DIR> d-------- c:\program files\iPod
2008-11-23 14:34 . 2008-11-23 14:34 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-11-23 14:33 . 2008-11-23 14:33 <DIR> d-------- c:\program files\QuickTime
2008-11-11 20:53 . 2008-09-04 11:15 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
2008-11-11 20:53 . 2008-10-24 05:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-09 01:03 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2008-12-08 04:00 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2008-12-05 14:43 --------- d-----w c:\program files\mypoints
2008-12-03 02:00 --------- d-----w c:\program files\ezt
2008-12-03 01:14 --------- d-----w c:\program files\Java
2008-11-23 20:32 --------- d-----w c:\program files\Common Files\Apple
2008-11-23 20:21 --------- d-----w c:\program files\Safari
2008-11-04 04:10 --------- d-----w c:\documents and settings\Susan Chew\Application Data\dvdcss
2008-11-01 19:14 --------- d-----w c:\program files\Google
2008-10-29 00:06 --------- d-----w c:\program files\Quicken
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-22 22:10 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2008-10-19 20:22 --------- d-----w c:\documents and settings\Susan Chew\Application Data\ZoomBrowser EX
2008-10-19 16:31 --------- d-----w c:\documents and settings\Susan Chew\Application Data\CameraWindowDC
2006-05-06 16:42 7,260,160 ----a-w c:\program files\mozilla firefox\plugins\libvlc.dll
2004-08-04 07:56 4,096 --sha-w c:\windows\system32\1112.dat
.

------- Sigcheck -------

2004-08-04 01:56 295424 b60c877d16d9c880b952fda04adf16e6 c:\windows\$NtServicePackUninstall$\termsrv.dll
2008-04-13 18:12 295424 ff3477c03be7201c294c35f684b3479f c:\windows\ServicePackFiles\i386\termsrv.dll
2008-11-30 18:50 295424 63999d0abd8dabfd76a9c07f6e104868 c:\windows\system32\termsrv.dll
.
((((((((((((((((((((((((((((( snapshot@2008-05-17_23.27.00.81 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-02-26 11:48:44 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
+ 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
+ 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
+ 2008-05-02 13:30:08 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
+ 2008-05-02 14:01:49 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
+ 2008-05-02 13:42:10 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
+ 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
+ 2008-04-23 03:35:35 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
+ 2008-04-23 03:35:35 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
+ 2008-04-23 03:35:35 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
+ 2008-04-23 03:35:35 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
+ 2008-04-23 03:35:35 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
+ 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
+ 2008-04-23 03:35:35 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
+ 2008-04-23 03:35:35 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
+ 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
+ 2008-04-23 03:35:35 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
+ 2008-04-23 03:35:35 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
+ 2008-04-23 03:35:36 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
+ 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
+ 2008-04-23 03:35:36 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
+ 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
+ 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
+ 2008-04-23 03:35:36 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
+ 2008-04-23 03:35:36 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
+ 2008-04-23 03:35:36 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
+ 2008-04-23 03:35:36 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
+ 2008-04-23 03:35:36 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
+ 2008-04-23 03:35:36 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
+ 2008-04-23 03:35:36 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
+ 2008-04-23 03:35:36 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
+ 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
+ 2008-04-23 03:35:36 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
+ 2008-04-23 03:35:36 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
+ 2008-04-23 03:35:36 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
+ 2008-04-23 03:35:36 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
+ 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
+ 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
+ 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
+ 2008-07-07 20:06:43 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
+ 2008-07-07 20:26:58 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
+ 2008-07-07 20:23:18 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
+ 2008-04-11 18:39:39 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
+ 2008-04-11 19:04:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
+ 2008-04-12 05:22:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
+ 2007-12-03 15:25:31 755,576 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
+ 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
+ 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
+ 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
+ 2008-06-13 09:52:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
+ 2008-06-13 11:05:51 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
+ 2008-06-13 11:27:43 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
+ 2008-04-14 11:00:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys
+ 2008-04-14 12:30:49 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys
+ 2008-04-14 12:36:35 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll
+ 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
+ 2008-05-07 05:12:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
+ 2008-05-07 05:04:15 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
+ 2006-08-16 12:08:32 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:36:11 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:36:11 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:46:57 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:46:57 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
+ 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
+ 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
+ 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
+ 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
+ 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
+ 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
+ 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
+ 2008-05-01 15:04:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
+ 2008-05-01 14:33:02 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
+ 2008-05-01 14:38:05 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
+ 2008-06-24 16:28:00 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
+ 2008-06-24 16:43:16 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
+ 2008-06-24 16:53:10 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
+ 2008-06-23 16:01:38 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
+ 2008-06-23 16:01:38 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
+ 2008-06-23 16:01:39 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
+ 2008-06-23 16:01:39 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
+ 2008-06-23 16:01:39 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
+ 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
+ 2008-06-23 16:01:39 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
+ 2008-06-23 16:01:39 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
+ 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
+ 2008-06-23 16:01:40 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
+ 2008-06-23 16:01:40 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
+ 2008-06-23 16:01:43 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
+ 2008-06-23 16:01:43 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
+ 2008-06-23 16:01:44 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
+ 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
+ 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
+ 2008-06-23 16:01:46 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
+ 2008-06-23 16:01:46 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
+ 2008-06-23 16:01:46 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
+ 2008-06-23 16:01:49 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
+ 2008-06-23 16:01:49 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
+ 2008-06-23 16:01:49 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
+ 2008-06-23 16:01:50 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
+ 2008-06-23 16:01:50 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
+ 2008-06-23 16:01:50 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
+ 2008-06-23 16:01:50 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
+ 2008-06-23 16:01:51 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
+ 2008-06-23 16:01:51 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
+ 2008-06-23 16:01:51 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
+ 2008-09-10 01:10:56 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
+ 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
+ 2008-08-26 09:08:36 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
+ 2008-08-26 09:08:36 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
+ 2008-08-26 09:08:36 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
+ 2008-08-26 09:08:36 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
+ 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
+ 2008-08-26 09:08:36 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
+ 2008-08-26 09:08:36 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
+ 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:28:12 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
+ 2008-08-26 09:08:36 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
+ 2008-08-26 09:08:37 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-03 17:26:50 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
+ 2008-08-26 09:08:39 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
+ 2008-08-26 09:08:39 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
+ 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
+ 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
+ 2008-08-26 09:08:40 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
+ 2008-08-26 09:08:40 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
+ 2008-08-26 09:08:40 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
+ 2008-08-26 09:08:43 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
+ 2008-08-26 09:08:43 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
+ 2008-08-26 09:08:44 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
+ 2008-08-26 09:08:44 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
+ 2008-08-26 09:08:44 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
+ 2008-08-26 09:08:44 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
+ 2008-08-26 09:08:44 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
+ 2008-08-26 09:08:45 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
+ 2008-08-26 09:08:45 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
+ 2008-08-26 09:08:45 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
+ 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
+ 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
+ 2004-08-04 06:10:06 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
+ 2004-08-04 06:00:03 12,288 -c----w c:\windows\$NtServicePackUninstall$\4mmdat.sys
+ 2004-08-04 06:10:10 48,128 -c----w c:\windows\$NtServicePackUninstall$\61883.sys
- 2001-08-23 12:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
+ 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
+ 2006-11-13 06:02:58 116,736 -c----w c:\windows\$NtServicePackUninstall$\aaclient.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
- 2001-08-23 12:00:00 179,200 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
+ 2004-08-04 07:56:47 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
- 2001-08-23 12:00:00 1,229,312 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-04 07:56:41 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-04 07:56:41 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
- 2001-08-23 12:00:00 370,688 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-04 07:56:41 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-04 07:56:41 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
- 2001-08-23 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
+ 2004-08-04 07:56:41 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
+ 2004-08-04 07:56:41 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
- 2001-08-23 12:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
+ 2004-08-04 07:56:41 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
- 2001-08-23 12:00:00 179,200 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
+ 2004-08-04 06:07:38 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
- 2001-08-23 12:00:00 204,288 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-04 07:56:41 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-04 07:56:41 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
- 2001-08-23 12:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
+ 2004-08-04 07:56:41 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
+ 2004-08-04 07:56:47 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
- 2001-08-23 12:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
+ 2004-08-04 07:56:41 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
- 2001-08-23 12:00:00 105,472 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-04 07:56:41 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-04 07:56:41 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
- 2001-08-23 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\admexs.dll
+ 2004-08-04 07:56:41 29,696 -c----w c:\windows\$NtServicePackUninstall$\admexs.dll
- 2001-05-23 02:15:08 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
+ 2004-08-04 07:56:41 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
- 2001-05-23 02:15:08 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
+ 2004-08-04 07:56:47 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
- 2001-08-23 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\admparse.dll
+ 2004-08-04 07:56:41 61,440 -c----w c:\windows\$NtServicePackUninstall$\admparse.dll
- 2001-08-23 12:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\admwprox.dll

achalk · Dec 9, 2008

ComboFix.Txt (part 4 of 10)

All: c:\windows\$NtServicePackUninstall$\ items, edited out.

achalk · Dec 9, 2008

ComboFix.Txt (part 5 of 10)

All: c:\windows\$NtServicePackUninstall$\ items edited out.

achalk · Dec 9, 2008

ComboFix.Txt (part 6 of 10)

- 2001-08-23 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
+ 2004-08-04 07:56:42 150,528 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
+ 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
+ 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.001
- 2001-08-23 12:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
+ 2004-08-04 07:56:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
- 2001-08-23 12:00:00 134,144 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
+ 2004-08-04 06:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
- 2001-08-23 12:00:00 79,744 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
+ 2004-08-04 05:59:47 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
+ 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
+ 2004-08-04 05:59:32 34,688 -c----w c:\windows\$NtServicePackUninstall$\lbrtfdc.sys
- 2001-08-23 12:00:00 308,736 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
+ 2004-08-04 05:56:44 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
- 2001-08-23 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\licmgr10.dll
+ 2004-08-04 07:56:42 22,016 -c----w c:\windows\$NtServicePackUninstall$\licmgr10.dll
- 2001-08-23 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
+ 2004-08-04 07:56:42 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
- 2001-08-23 12:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
+ 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
- 2001-08-23 12:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
+ 2004-08-04 07:56:42 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
- 2001-08-23 12:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
+ 2004-08-04 07:56:42 33,792 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
- 2001-08-23 12:00:00 381,440 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
+ 2004-08-04 07:56:42 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
- 2001-08-23 12:00:00 91,648 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
+ 2004-08-04 07:56:42 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
- 2001-08-23 12:00:00 202,752 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
+ 2004-08-04 07:56:42 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
- 2001-08-23 12:00:00 292,352 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
+ 2004-08-04 07:56:42 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
- 2001-08-23 12:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
+ 2004-08-04 07:56:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
- 2002-12-03 23:55:20 68,608 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
+ 2004-08-04 07:56:50 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
- 2001-08-23 12:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\log.dll
+ 2005-04-28 19:16:29 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
- 2001-08-23 12:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
+ 2004-08-04 07:56:50 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
- 2001-08-23 12:00:00 219,648 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
+ 2004-08-04 07:56:57 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
- 2001-08-23 12:00:00 504,320 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
+ 2004-08-04 07:56:50 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
- 2001-08-23 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\lonsint.dll
+ 2004-08-04 07:56:42 13,312 -c----w c:\windows\$NtServicePackUninstall$\lonsint.dll
- 2001-08-23 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
+ 2004-08-04 07:56:42 22,528 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
- 2001-08-23 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
+ 2004-08-04 07:56:42 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
- 2001-08-23 12:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
+ 2004-08-04 07:56:42 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
- 2001-08-23 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
+ 2004-08-04 07:56:42 18,944 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
- 2004-03-29 22:25:44 648,192 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
+ 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
- 2001-08-23 12:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
+ 2004-08-04 07:56:50 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
+ 2004-08-04 06:00:06 7,040 -c----w c:\windows\$NtServicePackUninstall$\ltotape.sys
- 2001-08-23 12:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
+ 2006-10-04 08:48:36 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
- 2001-08-23 12:00:00 79,360 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
+ 2004-08-04 07:56:50 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
- 2001-08-23 12:00:00 12,800 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
+ 2004-08-04 07:56:42 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
- 2001-08-23 12:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
+ 2004-08-04 07:56:42 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
- 2001-08-23 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
+ 2004-08-04 07:56:42 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
- 2001-08-23 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
+ 2004-08-04 07:56:42 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
- 2001-08-23 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
+ 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
- 2001-08-23 12:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\md5filt.dll
+ 2004-08-04 07:56:42 37,888 -c----w c:\windows\$NtServicePackUninstall$\md5filt.dll
- 2001-08-23 12:00:00 108,544 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
+ 2004-08-04 07:56:42 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
+ 2004-08-04 07:56:42 86,016 -c----w c:\windows\$NtServicePackUninstall$\mdmxsdk.dll
+ 2004-08-04 07:56:42 16,896 -c----w c:\windows\$NtServicePackUninstall$\medctroc.dll
+ 2004-08-04 06:00:49 26,112 -c----w c:\windows\$NtServicePackUninstall$\memstpci.sys
- 2001-08-23 12:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\metada51.dll
+ 2004-08-04 07:56:42 85,504 -c----w c:\windows\$NtServicePackUninstall$\metada51.dll
- 2001-08-23 12:00:00 62,208 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
+ 2004-08-04 06:07:44 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
- 2004-03-30 01:25:44 36,864 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
+ 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
+ 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
- 2001-08-23 12:00:00 995,383 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
+ 2004-08-04 07:56:42 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
- 2001-08-23 12:00:00 995,384 -c----w c:\windows\$NtServicePackUninstall$\mfc42u.dll
+ 2004-08-04 07:56:42 1,024,000 -c----w c:\windows\$NtServicePackUninstall$\mfc42u.dll
- 2001-08-23 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
+ 2004-08-04 07:56:42 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
- 2001-08-23 12:00:00 12,800 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
+ 2004-08-04 07:56:42 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
- 2001-08-23 12:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
+ 2004-08-04 07:56:42 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
- 2001-08-23 12:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
+ 2005-04-28 19:16:29 274,432 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
+ 2005-04-28 17:16:30 261,120 -c----w c:\windows\$NtServicePackUninstall$\migisma.dll
- 2001-08-23 12:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
+ 2004-08-04 07:56:42 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
- 2001-08-23 12:00:00 98,816 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
+ 2005-04-28 00:12:58 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
- 2004-02-17 18:50:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
+ 2004-08-04 07:56:51 7,680 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
- 2001-08-23 12:00:00 230,400 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
+ 2005-04-28 00:12:57 245,248 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
+ 2005-04-28 00:12:57 241,152 -c----w c:\windows\$NtServicePackUninstall$\migwiza.exe
+ 2001-08-23 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
- 2001-08-23 12:00:00 577,024 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
+ 2004-08-04 07:56:42 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
- 2001-08-23 12:00:00 774,144 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
+ 2004-08-04 07:56:51 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
- 2001-08-23 12:00:00 66,560 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
+ 2004-08-04 07:56:42 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
- 2001-08-23 12:00:00 1,136,128 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
+ 2004-08-04 07:56:42 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
- 2001-08-23 12:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
+ 2004-08-04 07:56:42 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
+ 2004-08-04 07:56:42 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
- 2001-08-23 12:00:00 32,384 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
+ 2004-08-04 07:56:42 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
- 2001-08-23 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
+ 2004-08-04 07:56:51 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
- 2001-08-23 12:00:00 196,096 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
+ 2004-08-04 07:56:42 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
- 2001-08-23 12:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
+ 2004-08-04 07:56:51 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
- 2001-08-23 12:00:00 28,800 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
+ 2004-08-04 06:08:05 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
- 2001-08-23 12:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
+ 2004-08-04 07:56:42 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
- 2001-08-23 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
+ 2004-08-04 07:56:51 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
- 2001-08-23 12:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
+ 2004-08-04 07:56:42 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
+ 2001-08-23 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
- 2001-08-23 12:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
+ 2004-08-04 07:56:11 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
- 2001-08-23 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
+ 2004-08-04 05:58:32 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
- 2001-08-23 12:00:00 37,504 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
+ 2004-08-04 05:58:30 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
- 2001-08-23 12:00:00 806,978 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
+ 2004-08-04 07:56:52 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
+ 2004-08-04 06:10:12 15,360 -c----w c:\windows\$NtServicePackUninstall$\mpe.sys
- 2001-08-23 12:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
+ 2004-08-04 07:56:52 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
- 2001-08-23 12:00:00 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
+ 2004-08-04 07:56:52 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
- 2001-08-23 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
+ 2004-08-04 07:56:42 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
- 2001-08-23 12:00:00 79,360 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
+ 2004-08-04 07:56:42 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
+ 2001-08-23 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
- 2001-08-23 12:00:00 66,944 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
+ 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
- 2001-08-23 12:00:00 129,024 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
+ 2007-07-06 12:46:59 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
- 2001-08-23 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
+ 2004-08-04 07:56:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
- 2001-08-23 12:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
+ 2007-07-06 12:46:59 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
- 2001-08-23 12:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
+ 2007-07-06 12:46:59 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
- 2001-08-23 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
+ 2004-08-04 07:56:42 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
- 2001-08-23 12:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
+ 2004-08-04 07:56:42 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
- 2001-08-23 12:00:00 605,696 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
+ 2007-07-06 12:46:59 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
- 2001-08-23 12:00:00 164,864 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
+ 2007-07-06 12:46:59 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
- 2001-08-23 12:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
+ 2004-08-04 07:56:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
- 2001-08-23 12:00:00 88,576 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
+ 2007-07-06 12:46:59 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
- 2001-08-23 12:00:00 478,720 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
+ 2004-08-04 07:56:42 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
- 2001-08-23 12:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
+ 2004-08-04 07:56:53 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
- 2001-08-23 12:00:00 97,792 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
+ 2004-08-04 07:56:53 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
- 2001-08-23 12:00:00 164,352 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
+ 2004-08-04 07:56:42 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
- 2001-08-23 12:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
+ 2007-07-06 12:46:59 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
- 2001-08-23 12:00:00 467,456 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
+ 2007-07-06 12:46:59 471,552 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
- 2001-08-23 12:00:00 172,672 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
- 2002-11-18 16:17:00 391,936 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
+ 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
+ 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.001
- 2001-08-23 12:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
+ 2004-08-04 07:56:42 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
- 2001-08-23 12:00:00 307,200 -c----w c:\windows\$NtServicePackUninstall$\msadce.dll
+ 2004-08-04 07:56:42 331,776 -c----w c:\windows\$NtServicePackUninstall$\msadce.dll
- 2001-08-23 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
+ 2004-08-04 07:56:12 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
- 2001-08-23 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
+ 2004-08-04 07:56:42 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
+ 2004-08-04 07:56:12 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
- 2001-08-23 12:00:00 131,072 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
+ 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
+ 2004-08-04 07:56:12 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
- 2001-08-23 12:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
+ 2004-08-04 07:56:42 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
- 2001-08-23 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
+ 2004-08-04 07:56:42 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
- 2001-08-23 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
+ 2004-08-04 07:56:12 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
- 2001-08-23 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
+ 2004-08-04 07:56:12 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
- 2001-08-23 12:00:00 487,424 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
+ 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
- 2001-08-23 12:00:00 159,744 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
+ 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
- 2001-08-23 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
+ 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
- 2001-08-23 12:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
+ 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
- 2001-08-23 12:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
+ 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
- 2001-08-23 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
+ 2004-08-04 07:56:12 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
- 2001-08-23 12:00:00 80,128 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
+ 2004-08-04 07:56:42 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
- 2004-03-30 01:25:45 51,712 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
+ 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
- 2001-08-23 12:00:00 238,592 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
+ 2004-08-04 07:56:42 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
- 2001-08-23 12:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
+ 2008-06-24 16:23:05 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
- 2001-08-23 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
+ 2004-08-04 07:56:42 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
- 2001-08-23 12:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
+ 2004-08-04 07:56:53 158,208 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
+ 2004-08-04 05:12:03 73,728 -c----w c:\windows\$NtServicePackUninstall$\mscorie.dll
+ 2004-08-04 05:12:04 86,016 -c----w c:\windows\$NtServicePackUninstall$\mscorld.dll
+ 2004-07-20 01:54:07 1,998,848 -c----w c:\windows\$NtServicePackUninstall$\mscorlib.dll
+ 2004-07-20 01:54:10 2,265,088 -c----w c:\windows\$NtServicePackUninstall$\mscorsvr.dll
+ 2004-07-20 01:54:13 2,269,184 -c----w c:\windows\$NtServicePackUninstall$\mscorwks.dll
- 2001-08-23 12:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
+ 2004-08-04 07:56:12 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
- 2001-08-23 12:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
+ 2004-08-04 07:56:42 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
- 2001-08-23 12:00:00 293,888 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
+ 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
- 2001-08-23 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
+ 2004-08-04 07:56:42 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
+ 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
+ 2004-08-04 07:56:42 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
+ 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
+ 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
- 2001-04-06 02:59:30 573,440 -c----w c:\windows\$NtServicePackUninstall$\msdaipp.dll
+ 2004-08-04 07:56:43 532,480 -c----w c:\windows\$NtServicePackUninstall$\msdaipp.dll
- 2001-08-23 12:00:00 221,184 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
+ 2004-08-04 07:56:43 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
+ 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
- 2001-08-23 12:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
+ 2004-08-04 07:56:43 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
+ 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
- 2001-08-23 12:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
+ 2004-08-04 07:56:43 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
- 2001-08-23 12:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
+ 2004-08-04 07:56:43 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
- 2001-08-23 12:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
+ 2004-08-04 07:56:43 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
+ 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
- 2001-08-23 12:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
+ 2004-08-04 07:56:43 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
+ 2004-08-04 07:56:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
- 2001-08-23 12:00:00 303,104 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
+ 2004-08-04 07:56:43 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
+ 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
- 2001-08-23 12:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
+ 2004-08-04 07:56:43 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
+ 2004-08-04 07:56:43 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
+ 2004-08-04 07:56:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
- 2001-08-23 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
+ 2004-08-04 07:56:43 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
- 2001-08-23 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
+ 2004-08-04 07:56:43 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
- 2001-08-23 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
+ 2004-08-04 07:56:53 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
- 2001-08-23 12:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
+ 2004-08-04 07:56:43 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
- 2004-03-06 02:05:06 365,568 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
+ 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
+ 2001-08-23 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
- 2004-03-06 02:05:07 977,920 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
+ 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
- 2004-03-06 02:05:08 150,528 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
+ 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
+ 2004-08-04 06:09:58 51,328 -c----w c:\windows\$NtServicePackUninstall$\msdv.sys
- 2001-08-23 12:00:00 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
+ 2004-08-04 07:56:13 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
- 2001-08-23 12:00:00 512,074 -c----w c:\windows\$NtServicePackUninstall$\msexch40.dll
+ 2004-08-04 07:56:43 512,029 -c----w c:\windows\$NtServicePackUninstall$\msexch40.dll
- 2001-08-23 12:00:00 319,562 -c----w c:\windows\$NtServicePackUninstall$\msexcl40.dll
+ 2004-08-04 07:56:43 319,517 -c----w c:\windows\$NtServicePackUninstall$\msexcl40.dll
- 2001-08-23 12:00:00 18,048 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
+ 2004-08-04 06:00:41 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
+ 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
- 2004-03-30 01:25:45 969,216 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
+ 2004-08-04 07:56:43 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
- 2001-08-23 12:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
+ 2004-08-04 06:04:12 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
- 2001-08-23 12:00:00 3,346,432 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
+ 2004-08-04 07:56:43 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
- 2001-08-23 12:00:00 24,606 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
+ 2004-08-04 07:56:43 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
- 2001-08-02 03:08:36 47,472 -c----w c:\windows\$NtServicePackUninstall$\msgsc.dll
+ 2004-08-04 07:56:43 82,944 -c----w c:\windows\$NtServicePackUninstall$\msgsc.dll
- 2001-08-02 02:58:12 147,487 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
+ 2004-08-04 07:56:13 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
- 2001-08-23 12:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
+ 2004-08-04 07:56:43 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
- 2001-08-23 12:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
+ 2004-08-04 07:56:57 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
- 2001-08-23 12:00:00 286,720 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
+ 2004-08-04 07:56:57 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
- 2001-08-23 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\mshta.exe
+ 2004-08-04 07:56:53 29,184 -c----w c:\windows\$NtServicePackUninstall$\mshta.exe
- 2001-08-23 12:00:00 2,793,984 -c----w c:\windows\$NtServicePackUninstall$\mshtml.dll
+ 2004-08-04 07:56:43 3,003,392 -c----w c:\windows\$NtServicePackUninstall$\mshtml.dll
- 2001-08-23 12:00:00 438,272 -c----w c:\windows\$NtServicePackUninstall$\mshtmled.dll
+ 2004-08-04 07:56:43 448,512 -c----w c:\windows\$NtServicePackUninstall$\mshtmled.dll
- 2001-08-23 12:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\mshtmler.dll
+ 2004-08-04 07:56:14 56,832 -c----w c:\windows\$NtServicePackUninstall$\mshtmler.dll
- 2001-08-23 12:00:00 2,044,928 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
+ 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
- 2001-08-23 12:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
+ 2004-08-04 07:56:43 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
- 2001-08-23 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
+ 2004-08-04 07:56:43 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
- 2001-08-23 12:00:00 232,448 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
+ 2004-08-04 07:56:43 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
- 2001-08-23 12:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
+ 2005-05-04 19:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
- 2001-08-23 12:00:00 304,640 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
+ 2005-05-04 19:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
- 2001-08-23 12:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
+ 2004-08-04 07:56:43 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
- 2001-08-23 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
+ 2004-08-04 07:56:53 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
- 2001-08-23 12:00:00 847,872 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
+ 2005-05-04 19:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
- 2001-08-23 12:00:00 156,672 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
+ 2004-08-04 07:56:43 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
- 2001-08-23 12:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
+ 2004-08-04 07:56:43 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
+ 2004-08-04 06:00:46 22,016 -c----w c:\windows\$NtServicePackUninstall$\msircomm.sys
- 2001-08-23 12:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
+ 2004-08-04 07:56:53 40,960 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
- 2001-08-23 12:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
+ 2005-05-04 19:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
- 2001-08-23 12:00:00 1,503,260 -c----w c:\windows\$NtServicePackUninstall$\msjet40.dll
+ 2004-08-04 07:56:43 1,507,356 -c----w c:\windows\$NtServicePackUninstall$\msjet40.dll
- 2001-08-23 12:00:00 348,238 -c----w c:\windows\$NtServicePackUninstall$\msjetol1.dll
+ 2004-07-17 18:34:46 358,976 -c----w c:\windows\$NtServicePackUninstall$\msjetol1.dll
- 2001-08-23 12:00:00 151,626 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
+ 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
- 2001-08-23 12:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
+ 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
- 2001-08-23 12:00:00 53,322 -c----w c:\windows\$NtServicePackUninstall$\msjter40.dll
+ 2004-08-04 07:56:43 53,279 -c----w c:\windows\$NtServicePackUninstall$\msjter40.dll
- 2001-08-23 12:00:00 241,695 -c----w c:\windows\$NtServicePackUninstall$\msjtes40.dll
+ 2004-08-04 07:56:43 241,693 -c----w c:\windows\$NtServicePackUninstall$\msjtes40.dll
+ 2004-08-04 05:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
- 2001-08-23 12:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
+ 2004-08-04 07:56:43 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
- 2001-08-23 12:00:00 213,066 -c----w c:\windows\$NtServicePackUninstall$\msltus40.dll
+ 2004-08-04 07:56:43 213,023 -c----w c:\windows\$NtServicePackUninstall$\msltus40.dll
- 2001-08-23 12:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
+ 2004-08-04 07:56:43 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
- 2001-08-23 12:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
+ 2004-08-04 07:56:43 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
- 2001-08-02 12:14:34 1,077,277 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
+ 2004-08-04 07:56:53 1,667,584 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
- 2001-08-23 12:00:00 116,272 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
+ 2004-08-04 07:56:43 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
- 2001-08-23 12:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
+ 2004-08-04 07:56:43 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
- 2001-08-23 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
+ 2004-08-04 07:56:43 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
- 2001-08-23 12:00:00 532,480 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
+ 2004-08-04 07:56:43 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
- 2001-08-23 12:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
+ 2004-08-04 07:56:43 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
- 2001-08-23 12:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
+ 2004-08-04 07:56:43 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
- 2001-08-23 12:00:00 1,174,528 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
+ 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
- 2001-08-23 12:00:00 228,864 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
+ 2004-08-04 07:56:43 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
- 2001-08-23 12:00:00 2,479,104 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
+ 2004-08-04 07:56:18 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
- 2001-08-23 12:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
+ 2004-08-04 07:56:43 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
+ 2001-08-23 12:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
- 2001-08-23 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
+ 2004-08-04 07:56:18 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
- 2001-08-23 12:00:00 131,072 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
+ 2004-08-04 07:56:43 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
- 2001-08-23 12:00:00 339,968 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
+ 2004-08-04 07:56:53 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
- 2001-08-23 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
+ 2004-08-04 07:56:43 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
- 2001-08-23 12:00:00 348,234 -c----w c:\windows\$NtServicePackUninstall$\mspbde40.dll
+ 2004-08-04 07:56:43 348,189 -c----w c:\windows\$NtServicePackUninstall$\mspbde40.dll
+ 2004-08-04 05:58:38 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
+ 2004-08-04 05:58:40 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
- 2001-08-23 12:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
+ 2004-08-04 07:56:18 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
- 2001-08-23 12:00:00 132,096 -c----w c:\windows\$NtServicePackUninstall$\msrating.dll
+ 2004-08-04 07:56:43 146,432 -c----w c:\windows\$NtServicePackUninstall$\msrating.dll
- 2001-08-23 12:00:00 421,962 -c----w c:\windows\$NtServicePackUninstall$\msrd2x40.dll
+ 2004-08-04 07:56:43 421,919 -c----w c:\windows\$NtServicePackUninstall$\msrd2x40.dll
- 2001-08-23 12:00:00 315,466 -c----w c:\windows\$NtServicePackUninstall$\msrd3x40.dll
+ 2004-08-04 07:56:43 315,423 -c----w c:\windows\$NtServicePackUninstall$\msrd3x40.dll
- 2001-08-23 12:00:00 553,034 -c----w c:\windows\$NtServicePackUninstall$\msrepl40.dll
+ 2004-08-04 07:56:43 552,989 -c----w c:\windows\$NtServicePackUninstall$\msrepl40.dll
- 2001-08-23 12:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
+ 2004-08-04 07:56:43 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
+ 2004-08-04 07:56:43 134,656 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
+ 2004-08-04 06:07:47 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
- 2004-03-30 01:25:46 253,952 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
+ 2004-08-04 07:56:43 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
- 2001-08-23 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
+ 2004-08-04 07:56:43 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
+ 2004-08-04 06:09:58 49,024 -c----w c:\windows\$NtServicePackUninstall$\mstape.sys
- 2001-08-23 12:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
+ 2004-08-04 07:56:43 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
+ 2004-08-04 05:58:38 5,504 -c----w c:\windows\$NtServicePackUninstall$\mstee.sys
- 2001-08-23 12:00:00 254,026 -c----w c:\windows\$NtServicePackUninstall$\mstext40.dll
+ 2004-08-04 07:56:43 258,077 -c----w c:\windows\$NtServicePackUninstall$\mstext40.dll
- 2001-08-23 12:00:00 497,152 -c----w c:\windows\$NtServicePackUninstall$\mstime.dll
+ 2004-08-04 07:56:43 530,432 -c----w c:\windows\$NtServicePackUninstall$\mstime.dll
- 2001-08-23 12:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
+ 2004-08-04 07:56:53 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
- 2001-08-23 12:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
+ 2004-08-04 07:56:43 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
- 2001-08-23 12:00:00 385,536 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
+ 2006-11-07 08:06:47 600,576 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
- 2001-08-23 12:00:00 503,296 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
+ 2006-11-13 06:02:58 1,866,240 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
- 2001-08-23 12:00:00 209,920 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
+ 2004-08-04 07:56:43 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
- 2001-08-23 12:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
+ 2004-08-04 07:56:43 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
- 2001-08-23 12:00:00 1,388,544 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
+ 2004-02-24 02:42:40 1,386,496 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
- 2001-08-23 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
+ 2004-08-04 07:56:43 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
- 2001-08-23 12:00:00 401,462 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
+ 2004-08-04 07:56:43 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
- 2001-08-23 12:00:00 322,560 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
+ 2004-08-04 07:56:43 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
- 2001-08-23 12:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
+ 2004-08-04 05:58:25 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
- 2001-08-23 12:00:00 113,152 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
+ 2004-08-04 07:56:43 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
- 2001-08-23 12:00:00 979,968 -c----w c:\windows\$NtServicePackUninstall$\msvidctl.dll
+ 2004-08-04 07:56:43 1,428,480 -c----w c:\windows\$NtServicePackUninstall$\msvidctl.dll
- 2001-08-23 12:00:00 66,048 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
+ 2004-08-04 07:56:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
- 2001-08-23 12:00:00 831,562 -c----w c:\windows\$NtServicePackUninstall$\mswdat10.dll
+ 2004-08-04 07:56:44 831,519 -c----w c:\windows\$NtServicePackUninstall$\mswdat10.dll
- 2001-08-23 12:00:00 243,712 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
+ 2004-08-04 07:56:44 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
- 2001-08-23 12:00:00 228,352 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
+ 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
- 2001-08-23 12:00:00 614,474 -c----w c:\windows\$NtServicePackUninstall$\mswstr10.dll
+ 2004-08-04 07:56:44 614,429 -c----w c:\windows\$NtServicePackUninstall$\mswstr10.dll
- 2001-08-23 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
+ 2004-08-04 07:56:44 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
- 2001-08-23 12:00:00 344,138 -c----w c:\windows\$NtServicePackUninstall$\msxbde40.dll
+ 2004-08-04 07:56:44 348,189 -c----w c:\windows\$NtServicePackUninstall$\msxbde40.dll
- 2001-08-23 12:00:00 495,376 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
+ 2004-08-04 07:56:44 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
- 2001-08-23 12:00:00 688,667 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
+ 2004-08-04 07:56:44 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
- 2001-08-23 12:00:00 1,118,720 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
+ 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
+ 2004-08-04 07:56:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
+ 2001-08-23 12:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\mtstocom.exe
- 2004-03-06 02:05:09 64,512 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
+ 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
+ 2001-08-23 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
+ 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
+ 2001-08-23 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
- 2004-03-06 02:05:09 82,432 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
+ 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
+ 2004-08-04 07:56:44 1,737,856 -c----w c:\windows\$NtServicePackUninstall$\mtxparhd.dll
- 2001-08-23 12:00:00 84,992 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
+ 2004-08-04 07:56:53 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
- 2001-08-23 12:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
+ 2004-08-04 06:15:20 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
+ 2004-08-04 06:04:51 12,672 -c----w c:\windows\$NtServicePackUninstall$\mutohpen.sys
- 2001-08-23 12:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
+ 2004-08-04 07:56:44 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
+ 2004-08-04 06:10:28 85,376 -c----w c:\windows\$NtServicePackUninstall$\nabtsfec.sys
- 2001-08-23 12:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
+ 2004-08-04 07:56:44 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
- 2001-08-23 12:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
+ 2006-10-04 08:48:36 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
- 2001-08-23 12:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
+ 2004-08-04 07:56:44 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
- 2001-08-23 12:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
+ 2004-08-04 07:56:44 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
+ 2004-08-04 07:56:44 9,728 -c----w c:\windows\$NtServicePackUninstall$\ncpsres.dll
- 2001-08-23 12:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
+ 2004-08-04 07:56:44 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
+ 2004-08-04 07:56:54 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
+ 2004-08-04 07:56:44 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
- 2001-08-23 12:00:00 161,536 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
+ 2004-08-04 06:14:28 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
+ 2004-08-04 06:10:12 10,880 -c----w c:\windows\$NtServicePackUninstall$\ndisip.sys
- 2001-08-23 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
+ 2004-08-04 07:56:44 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll

achalk · Dec 9, 2008

ComboFix.Txt (part 7 of 10)

All: c:\windows\$NtServicePackUninstall$\ items edited out.

achalk · Dec 9, 2008

ComboFix.Txt (part 8 of 10)

All: c:\windows\$NtServicePackUninstall$\ items edited out.

achalk · Dec 9, 2008

ComboFix.Txt (part 9 of 10)

- 2001-08-23 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\version.dll
+ 2004-08-04 07:56:46 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
+ 2004-08-04 07:56:46 53,760 -c----w c:\windows\$NtServicePackUninstall$\vfwwdm32.dll
- 2001-08-23 12:00:00 19,584 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
+ 2004-08-04 06:07:06 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
- 2001-08-23 12:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\vgx.dll
+ 2004-08-04 07:56:46 848,384 -c----w c:\windows\$NtServicePackUninstall$\vgx.dll
+ 2004-08-04 06:07:42 42,240 -c----w c:\windows\$NtServicePackUninstall$\viaagp.sys
+ 2004-08-04 05:59:42 5,376 -c----w c:\windows\$NtServicePackUninstall$\viaide.sys
- 2001-08-23 12:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
+ 2004-08-04 06:07:05 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
- 2001-08-23 12:00:00 125,952 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
+ 2004-08-04 07:56:46 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
- 2001-08-23 12:00:00 426,038 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
+ 2004-08-04 05:32:34 426,041 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
- 2001-08-23 12:00:00 86,070 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
+ 2004-08-04 05:32:35 86,073 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
- 2001-08-23 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
+ 2004-08-04 06:00:16 52,352 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
- 2001-08-23 12:00:00 409,088 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
+ 2004-08-04 07:56:46 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
- 2001-08-23 12:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
+ 2004-08-04 07:56:57 289,792 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
- 2001-08-23 12:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
+ 2004-08-04 07:56:46 174,592 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
+ 2004-08-04 07:56:46 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
- 2001-08-23 12:00:00 344,576 -c----w c:\windows\$NtServicePackUninstall$\w3svc.dll
+ 2004-08-04 07:56:46 363,520 -c----w c:\windows\$NtServicePackUninstall$\w3svc.dll
- 2001-08-23 12:00:00 442,880 -c----w c:\windows\$NtServicePackUninstall$\w95upgnt.dll
+ 2004-08-04 07:56:46 483,840 -c----w c:\windows\$NtServicePackUninstall$\w95upgnt.dll
- 2001-08-23 12:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
+ 2004-08-04 07:56:57 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
- 2001-08-23 12:00:00 459,776 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
+ 2007-05-16 15:12:12 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
- 2001-08-23 12:00:00 249,344 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
+ 2004-08-04 07:56:34 249,856 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
- 2001-08-23 12:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
+ 2004-08-04 07:56:46 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
- 2001-08-23 12:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
+ 2007-05-16 15:12:15 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
- 2001-08-23 12:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
+ 2004-08-04 07:56:57 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
+ 2004-08-04 06:04:52 13,568 -c----w c:\windows\$NtServicePackUninstall$\wacompen.sys
- 2001-08-23 12:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\wam51.dll
+ 2004-08-04 07:56:46 76,800 -c----w c:\windows\$NtServicePackUninstall$\wam51.dll
- 2001-08-23 12:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\wamreg51.dll
+ 2004-08-04 07:56:46 53,248 -c----w c:\windows\$NtServicePackUninstall$\wamreg51.dll
- 2001-08-23 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
+ 2004-08-04 06:04:57 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
- 2001-08-23 12:00:00 14,592 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
+ 2004-08-04 06:07:32 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
+ 2001-08-23 12:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
- 2001-08-23 12:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
+ 2004-08-04 07:56:46 196,608 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
- 2001-08-23 12:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
+ 2004-08-04 07:56:46 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
- 2001-08-23 12:00:00 66,048 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
+ 2004-08-04 07:56:46 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
- 2001-08-23 12:00:00 477,184 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
+ 2004-08-04 07:56:46 530,944 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
- 2001-08-23 12:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
+ 2004-08-04 07:56:46 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
- 2001-08-23 12:00:00 259,072 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
+ 2004-08-04 07:56:46 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
- 2001-08-23 12:00:00 38,400 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
+ 2004-08-04 07:56:46 43,008 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
- 2001-08-23 12:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
+ 2004-08-04 07:56:46 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
- 2001-08-23 12:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
+ 2004-08-04 07:56:46 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
- 2001-08-23 12:00:00 157,696 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
+ 2004-08-04 07:56:57 116,224 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
- 2001-08-23 12:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
+ 2004-08-04 07:56:46 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
+ 2004-08-04 06:08:46 31,744 -c----w c:\windows\$NtServicePackUninstall$\wceusbsh.sys
- 2001-08-23 12:00:00 46,592 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
+ 2006-03-24 04:37:50 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
- 2001-08-23 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
+ 2004-08-04 07:56:58 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
+ 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
+ 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.001
- 2001-08-23 12:00:00 258,560 -c----w c:\windows\$NtServicePackUninstall$\webcheck.dll
+ 2004-08-04 07:56:46 276,480 -c----w c:\windows\$NtServicePackUninstall$\webcheck.dll
- 2001-08-23 12:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
+ 2006-01-04 03:35:05 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
- 2001-08-23 12:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
+ 2004-08-04 07:56:46 135,680 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
- 2001-08-23 12:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
+ 2004-08-04 07:56:57 65,536 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
- 2001-08-23 12:00:00 414,720 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
+ 2004-08-04 07:56:57 433,664 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
- 2001-08-23 12:00:00 449,536 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
+ 2004-08-04 07:56:46 463,360 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
- 2001-08-23 12:00:00 118,272 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
+ 2004-08-04 07:56:46 124,416 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
- 2001-08-23 12:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
+ 2004-08-04 07:56:46 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
- 2001-08-23 12:00:00 314,368 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
+ 2006-12-19 18:16:47 333,824 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
- 2001-08-23 12:00:00 568,832 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
+ 2004-08-04 07:56:46 589,312 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
- 2001-08-23 12:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
+ 2004-08-04 07:56:46 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
- 2001-08-23 12:00:00 1,799,552 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
+ 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
- 2001-08-23 12:00:00 95,232 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
+ 2004-08-04 07:56:46 101,888 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
+ 2004-08-04 07:56:35 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
+ 2006-10-24 17:30:06 716,288 -c----w c:\windows\$NtServicePackUninstall$\windowscodecs.dll
+ 2006-10-24 17:29:50 352,256 -c----w c:\windows\$NtServicePackUninstall$\windowscodecsext.dll
- 2001-08-23 12:00:00 266,752 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
+ 2004-08-04 07:56:57 283,648 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
- 2004-07-01 22:08:18 331,776 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
+ 2004-08-04 07:56:46 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
- 2001-08-23 12:00:00 593,920 -c----w c:\windows\$NtServicePackUninstall$\wininet.dll
+ 2004-08-04 07:56:46 656,384 -c----w c:\windows\$NtServicePackUninstall$\wininet.dll
- 2001-08-23 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
+ 2004-08-04 07:56:46 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
- 2001-08-23 12:00:00 430,080 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
+ 2004-08-04 07:56:57 502,272 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
- 2001-08-23 12:00:00 170,496 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
+ 2004-08-04 07:56:46 176,128 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
- 2001-08-23 12:00:00 762,368 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
+ 2004-08-04 07:56:35 764,928 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
- 2001-08-23 12:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
+ 2004-08-04 07:56:46 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
- 2001-08-23 12:00:00 93,184 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
+ 2004-08-04 07:56:46 99,328 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
+ 2004-08-04 07:56:46 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
- 2001-08-23 12:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
+ 2004-08-04 07:56:57 146,432 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
- 2001-08-23 12:00:00 275,968 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
+ 2007-03-17 13:43:01 292,864 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
- 2001-08-23 12:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
+ 2004-08-04 07:56:46 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
- 2001-08-23 12:00:00 166,912 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
+ 2004-08-04 07:56:46 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
+ 2004-08-04 07:56:57 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
- 2001-08-23 12:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
+ 2006-08-17 12:28:27 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
- 2001-08-23 12:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
+ 2004-08-04 07:56:46 172,032 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
- 2001-08-23 12:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
+ 2004-08-04 07:56:46 92,672 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
- 2001-08-23 12:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
+ 2004-08-04 07:56:35 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
+ 2004-08-04 06:07:41 8,832 -c----w c:\windows\$NtServicePackUninstall$\wmiacpi.sys
- 2001-08-23 12:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
+ 2004-08-04 07:56:57 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
- 2001-08-23 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
+ 2004-08-04 07:56:35 6,656 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
- 2001-08-23 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
+ 2004-08-04 07:56:46 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
- 2001-08-23 12:00:00 117,248 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
+ 2004-08-04 07:56:57 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
- 2001-08-23 12:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
+ 2004-08-04 07:56:57 358,912 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
- 2001-08-23 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
+ 2004-08-04 07:56:46 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
- 2001-08-23 12:00:00 138,752 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
+ 2004-08-04 07:56:46 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
- 2001-08-23 12:00:00 149,504 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
+ 2004-08-04 07:56:46 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
- 2001-08-23 12:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
+ 2004-08-04 07:56:46 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
- 2001-08-23 12:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
+ 2004-08-04 07:56:46 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
- 2001-08-23 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
+ 2004-08-04 07:56:46 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
- 2001-08-23 12:00:00 122,368 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
+ 2004-08-04 07:56:46 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
- 2001-08-23 12:00:00 407,040 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
+ 2004-08-04 07:56:46 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
- 2001-08-23 12:00:00 203,264 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
+ 2004-08-04 07:56:57 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
- 2001-08-23 12:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
+ 2004-08-04 07:56:46 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
- 2001-08-23 12:00:00 100,864 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
+ 2004-08-04 07:56:46 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
- 2001-08-23 12:00:00 95,744 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
+ 2004-08-04 07:56:46 95,232 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
+ 2004-08-04 07:56:46 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
+ 2004-08-04 07:56:46 4,096 -c----w c:\windows\$NtServicePackUninstall$\wmm2eres.dll
+ 2004-08-04 07:56:46 7,680 -c----w c:\windows\$NtServicePackUninstall$\wmm2ext.dll
+ 2004-08-04 07:56:46 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
+ 2004-08-04 07:56:46 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
+ 2004-08-04 07:56:46 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
+ 2004-08-04 07:56:46 4,256,768 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
+ 2004-08-04 07:56:46 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
- 2001-08-23 12:00:00 253,952 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
+ 2004-08-04 07:56:46 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
- 2001-08-23 12:00:00 1,302,528 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
+ 2004-08-04 07:56:46 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
+ 2006-10-24 17:30:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\wmphoto.dll
- 2001-08-23 12:00:00 1,392,640 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
+ 2004-08-04 07:56:46 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
- 2001-08-23 12:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
+ 2004-08-04 07:56:46 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
- 2001-08-23 12:00:00 298,496 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
+ 2004-08-04 07:56:46 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
- 2001-08-23 12:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
+ 2004-08-04 07:56:57 214,528 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
- 2001-08-23 12:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
+ 2004-08-04 07:56:46 264,192 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
- 2001-08-23 12:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
+ 2004-08-04 07:56:57 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
- 2001-08-23 12:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
+ 2004-08-04 07:56:57 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
- 2001-08-23 12:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
+ 2004-08-04 07:56:46 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
- 2001-08-23 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
+ 2004-08-04 07:56:46 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
+ 2004-08-04 07:56:57 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
- 2001-08-23 12:00:00 118,834 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
+ 2004-08-04 07:56:57 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
+ 2004-08-04 07:56:46 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
- 2001-08-23 12:00:00 545,792 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
+ 2004-08-04 07:56:46 596,992 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
+ 2004-08-04 07:56:46 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
- 2001-08-23 12:00:00 28,721 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
+ 2004-08-04 07:56:46 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
- 2001-08-23 12:00:00 65,585 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
+ 2004-08-04 07:56:46 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
- 2001-08-23 12:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
+ 2004-08-04 07:56:46 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
+ 2004-08-04 07:56:46 8,192 -c----w c:\windows\$NtServicePackUninstall$\wshirda.dll
- 2001-08-23 12:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
+ 2004-08-04 07:56:46 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
- 2001-08-23 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
+ 2004-08-04 07:56:46 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
- 2001-08-23 12:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
+ 2004-08-04 07:56:46 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
- 2001-08-23 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
+ 2004-08-04 07:56:46 22,528 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
+ 2004-08-04 06:10:21 19,328 -c----w c:\windows\$NtServicePackUninstall$\wstcodec.sys
- 2001-08-23 12:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
+ 2004-08-04 07:56:46 50,688 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
- 2001-08-23 12:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
+ 2004-08-04 07:56:46 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
+ 2004-08-04 07:56:46 430,592 -c----w c:\windows\$NtServicePackUninstall$\wuapi.dll
+ 2004-08-04 07:56:57 111,104 -c----w c:\windows\$NtServicePackUninstall$\wuauclt.exe
+ 2004-08-04 07:56:57 165,888 -c----w c:\windows\$NtServicePackUninstall$\wuauclt1.exe
+ 2004-08-04 07:56:46 1,134,592 -c----w c:\windows\$NtServicePackUninstall$\wuaueng.dll
+ 2004-08-04 07:56:46 183,296 -c----w c:\windows\$NtServicePackUninstall$\wuaueng1.dll
- 2001-08-23 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
+ 2004-08-04 07:56:46 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
+ 2004-08-04 07:56:46 112,640 -c----w c:\windows\$NtServicePackUninstall$\wucltui.dll
+ 2004-08-04 07:56:46 36,864 -c----w c:\windows\$NtServicePackUninstall$\wups.dll
+ 2004-08-04 07:56:46 120,320 -c----w c:\windows\$NtServicePackUninstall$\wuweb.dll
- 2001-08-23 12:00:00 47,616 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
+ 2004-08-04 07:56:46 378,368 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
- 2001-08-23 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
+ 2004-08-04 07:56:46 51,712 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
- 2001-08-23 12:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
+ 2004-08-04 07:56:46 359,936 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
- 2001-08-23 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
+ 2004-08-04 07:56:46 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
- 2001-08-23 12:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
+ 2004-08-04 07:56:57 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
+ 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
+ 2004-08-04 07:56:46 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
+ 2004-08-04 07:56:46 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
- 2001-08-23 12:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
+ 2006-03-01 19:42:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
+ 2006-10-10 12:44:50 557,568 -c----w c:\windows\$NtServicePackUninstall$\xpnetdiag.exe
- 2004-06-30 23:59:25 158,720 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
+ 2004-08-04 07:56:36 438,784 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
+ 2004-08-04 07:56:36 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
+ 2004-08-04 07:56:36 2,897,920 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
+ 2007-10-29 10:04:03 350,720 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
+ 2004-08-04 07:56:46 116,224 -c----w c:\windows\$NtServicePackUninstall$\xrxwiadr.dll
- 2002-09-25 17:21:56 316,928 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
+ 2004-08-04 07:56:46 337,920 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
+ 2004-08-04 07:56:42 294,400 -c----w c:\windows\$NtUninstallKB932823-v3$\msctf.dll
+ 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\updspapi.dll
+ 2008-04-14 00:11:59 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll
+ 2004-08-04 07:56:43 82,944 -c----w c:\windows\$NtUninstallKB946648_0$\msgsc.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll
+ 2008-04-13 18:55:08 202,624 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762$\spuninst\updspapi.dll
+ 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
+ 2008-04-14 00:11:53 246,272 -c----w c:\windows\$NtUninstallKB950974$\es.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
+ 2005-07-26 04:39:45 243,200 -c----w c:\windows\$NtUninstallKB950974_0$\es.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\updspapi.dll
+ 2008-04-14 00:11:54 691,712 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
+ 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtUninstallKB951066_0$\inetcomm.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\updspapi.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
+ 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
+ 2008-04-14 12:30:49 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
+ 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
+ 2008-04-13 18:46:32 273,024 -c----w c:\windows\$NtUninstallKB951376$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376$\spuninst\updspapi.dll
+ 2004-08-04 06:10:37 274,304 -c----w c:\windows\$NtUninstallKB951376_0$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\updspapi.dll
+ 2008-04-14 00:12:03 1,288,192 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698$\spuninst\updspapi.dll
+ 2007-10-29 22:43:03 1,287,680 -c----w c:\windows\$NtUninstallKB951698_0$\quartz.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
+ 2008-04-13 19:19:23 138,112 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
+ 2008-04-14 00:11:52 147,968 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
+ 2008-04-14 00:12:01 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748$\spuninst\updspapi.dll
+ 2008-04-13 19:20:16 361,344 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
+ 2008-04-13 19:00:02 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
+ 2004-08-04 06:14:14 138,496 -c----w c:\windows\$NtUninstallKB951748_0$\afd.sys
+ 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748_0$\dnsapi.dll
+ 2004-08-04 07:56:44 245,248 -c----w c:\windows\$NtUninstallKB951748_0$\mswsock.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\updspapi.dll
+ 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip.sys
+ 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip6.sys
+ 2008-04-14 00:12:15 139,264 -c----w c:\windows\$NtUninstallKB951978$\cscript.exe
+ 2008-04-14 00:11:56 512,000 -c----w c:\windows\$NtUninstallKB951978$\jscript.dll
+ 2008-04-14 00:12:05 180,224 -c----w c:\windows\$NtUninstallKB951978$\scrobj.dll
+ 2008-04-14 00:12:05 172,032 -c----w c:\windows\$NtUninstallKB951978$\scrrun.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951978$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951978$\spuninst\updspapi.dll
+ 2008-04-14 00:12:08 434,176 -c----w c:\windows\$NtUninstallKB951978$\vbscript.dll
+ 2008-04-14 00:12:41 155,648 -c----w c:\windows\$NtUninstallKB951978$\wscript.exe
+ 2008-04-14 00:12:10 90,112 -c----w c:\windows\$NtUninstallKB951978$\wshext.dll
+ 2008-05-01 14:30:33 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
+ 2004-08-04 07:56:42 331,776 -c----w c:\windows\$NtUninstallKB952287_0$\msadce.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\updspapi.dll
+ 2008-04-14 00:11:58 73,728 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
+ 2005-06-29 01:46:00 74,240 -c----w c:\windows\$NtUninstallKB952954_0$\mscms.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
+ 2007-07-27 15:41:48 231,288 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
+ 2007-07-27 15:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
+ 2006-10-19 02:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
- 2006-10-04 14:05:26 39,424 ------w c:\windows\AppPatch\acadproc.dll
+ 2008-04-14 00:11:48 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
- 2004-08-04 07:56:41 1,852,416 ----a-w c:\windows\AppPatch\acgenral.dll
+ 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
- 2004-08-04 07:56:41 450,048 ----a-w c:\windows\AppPatch\aclayers.dll
+ 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
- 2004-08-04 07:56:41 137,728 ----a-w c:\windows\AppPatch\aclua.dll
+ 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll
- 2004-08-04 07:56:41 244,736 ----a-w c:\windows\AppPatch\acspecfc.dll
+ 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
- 2004-08-04 07:56:41 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
+ 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
- 2007-05-12 18:33:55 997,992 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2008-08-02 19:43:40 1,000,848 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
- 2007-05-12 18:33:56 1,100,392 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2008-08-02 19:44:06 1,103,248 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
- 2007-05-12 18:33:56 141,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2008-08-02 19:43:56 144,784 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
- 2007-05-12 18:52:08 88,776 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2008-08-02 19:44:20 91,488 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
- 2007-05-12 18:52:07 101,064 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2008-08-02 19:44:20 103,776 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
- 2007-05-12 18:33:57 408,176 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2008-08-02 19:44:10 411,024 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Outlook\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
- 2007-05-12 18:33:56 35,448 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2008-08-02 19:44:09 38,304 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
- 2007-05-12 18:33:56 461,416 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
+ 2008-08-02 19:44:03 464,272 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
- 2007-05-12 18:33:57 223,856 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2008-08-02 19:44:17 226,712 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
- 2007-05-12 18:33:57 211,568 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
+ 2008-08-02 19:44:18 214,424 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
- 2007-05-12 18:33:56 20,080 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2008-08-02 19:44:01 22,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
- 2007-05-12 18:33:57 662,120 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2008-08-02 19:44:14 664,968 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
- 2007-05-12 18:33:56 371,296 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2008-08-02 19:43:55 374,152 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
- 2007-05-12 18:33:57 64,088 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2008-08-02 19:43:52 66,936 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
- 2007-05-12 18:33:56 223,800 ----a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2008-08-02 19:43:48 226,656 ----a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
- 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
- 2007-02-28 09:08:48 2,136,064 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2007-02-28 08:38:55 2,057,600 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2007-02-28 08:38:57 2,015,744 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2007-02-28 09:10:57 2,180,352 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2005-10-21 01:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
+ 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
- 2005-10-21 01:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
+ 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
- 2007-06-13 10:23:07 1,033,216 ----a-w c:\windows\explorer.exe
+ 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\explorer.exe
- 2000-08-31 13:00:00 73,728 ----a-w c:\windows\fdsv.exe
+ 2000-08-31 14:00:00 89,504 ----a-w c:\windows\fdsv.exe
- 2000-08-31 13:00:00 80,412 ----a-w c:\windows\grep.exe
+ 2000-08-31 14:00:00 80,412 ----a-w c:\windows\grep.exe
- 2004-08-04 07:56:45 34,816 ----a-w c:\windows\Help\sniffpol.dll
+ 2008-04-14 00:12:06 34,816 ----a-w c:\windows\Help\sniffpol.dll
- 2004-08-04 07:56:45 33,280 ----a-w c:\windows\Help\sstub.dll
+ 2008-04-14 00:12:07 33,280 ----a-w c:\windows\Help\sstub.dll
- 2004-08-04 07:56:46 279,040 ----a-w c:\windows\Help\tshoot.dll
+ 2008-04-14 00:12:07 279,040 ----a-w c:\windows\Help\tshoot.dll
- 2005-05-26 23:22:01 10,752 ----a-w c:\windows\hh.exe
+ 2008-04-14 00:12:21 10,752 ----a-w c:\windows\hh.exe
+ 2008-03-01 13:06:20 124,928 -c----w c:\windows\ie7updates\KB950759-IE7\advpack.dll
+ 2008-03-01 13:06:21 347,136 -c----w c:\windows\ie7updates\KB950759-IE7\dxtmsft.dll
+ 2008-03-01 13:06:21 214,528 -c----w c:\windows\ie7updates\KB950759-IE7\dxtrans.dll
+ 2008-03-01 13:06:21 133,120 -c----w c:\windows\ie7updates\KB950759-IE7\extmgr.dll
+ 2008-03-01 13:06:21 63,488 -c----w c:\windows\ie7updates\KB950759-IE7\icardie.dll
+ 2008-02-29 08:55:23 70,656 -c----w c:\windows\ie7updates\KB950759-IE7\ie4uinit.exe
+ 2008-03-01 13:06:21 153,088 -c----w c:\windows\ie7updates\KB950759-IE7\ieakeng.dll
+ 2008-03-01 13:06:21 230,400 -c----w c:\windows\ie7updates\KB950759-IE7\ieaksie.dll
+ 2008-02-15 05:44:25 161,792 -c----w c:\windows\ie7updates\KB950759-IE7\ieakui.dll
+ 2008-03-01 13:06:22 383,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dll
+ 2008-03-01 13:06:22 384,512 -c----w c:\windows\ie7updates\KB950759-IE7\iedkcs32.dll
+ 2008-03-01 13:06:24 6,066,176 -c----w c:\windows\ie7updates\KB950759-IE7\ieframe.dll
+ 2008-03-01 13:06:24 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\iernonce.dll
+ 2008-03-01 13:06:25 267,776 -c----w c:\windows\ie7updates\KB950759-IE7\iertutil.dll
+ 2008-02-22 10:00:51 13,824 -c----w c:\windows\ie7updates\KB950759-IE7\ieudinit.exe
+ 2008-02-29 08:55:46 625,664 -c----w c:\windows\ie7updates\KB950759-IE7\iexplore.exe
+ 2008-03-01 13:06:25 27,648 -c----w c:\windows\ie7updates\KB950759-IE7\jsproxy.dll
+ 2008-03-01 13:06:26 459,264 -c----w c:\windows\ie7updates\KB950759-IE7\msfeeds.dll
+ 2008-03-01 13:06:26 52,224 -c----w c:\windows\ie7updates\KB950759-IE7\msfeedsbs.dll
+ 2008-03-01 23:36:30 3,591,680 -c----w c:\windows\ie7updates\KB950759-IE7\mshtml.dll
+ 2008-03-01 13:06:28 478,208 -c----w c:\windows\ie7updates\KB950759-IE7\mshtmled.dll
+ 2008-03-01 13:06:28 193,024 -c----w c:\windows\ie7updates\KB950759-IE7\msrating.dll
+ 2008-03-01 13:06:29 671,232 -c----w c:\windows\ie7updates\KB950759-IE7\mstime.dll
+ 2008-03-01 13:06:29 102,912 -c----w c:\windows\ie7updates\KB950759-IE7\occache.dll
+ 2008-03-01 13:06:29 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\updspapi.dll
+ 2008-03-01 13:06:29 105,984 -c----w c:\windows\ie7updates\KB950759-IE7\url.dll
+ 2008-03-01 13:06:30 1,159,680 -c----w c:\windows\ie7updates\KB950759-IE7\urlmon.dll
+ 2008-03-01 13:06:30 233,472 -c----w c:\windows\ie7updates\KB950759-IE7\webcheck.dll
+ 2008-03-01 13:06:31 826,368 -c----w c:\windows\ie7updates\KB950759-IE7\wininet.dll
+ 2008-04-23 04:16:28 124,928 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
+ 2008-04-23 04:16:28 347,136 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
+ 2008-04-23 04:16:28 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
+ 2008-04-23 04:16:28 133,120 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
+ 2008-04-23 04:16:28 63,488 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
+ 2008-04-22 07:39:58 70,656 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
+ 2008-04-23 04:16:28 153,088 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
+ 2008-04-23 04:16:28 230,400 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
+ 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
+ 2008-04-23 04:16:28 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
+ 2008-04-23 04:16:28 384,512 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
+ 2008-04-23 04:16:28 6,066,176 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
+ 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
+ 2008-04-23 04:16:28 267,776 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
+ 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
+ 2008-04-22 07:40:18 625,664 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
+ 2008-04-23 04:16:28 27,648 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
+ 2008-04-23 04:16:28 459,264 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
+ 2008-04-23 04:16:28 52,224 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
+ 2008-04-24 03:16:30 3,591,680 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
+ 2008-04-23 04:16:28 478,208 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
+ 2008-04-23 04:16:28 193,024 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
+ 2008-04-23 04:16:28 671,232 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
+ 2008-04-23 04:16:28 102,912 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
+ 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
+ 2008-04-23 04:16:28 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
+ 2008-04-23 04:16:29 1,159,680 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
+ 2008-04-23 04:16:29 233,472 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
+ 2008-04-23 04:16:29 826,368 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
+ 2008-06-23 16:57:27 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
+ 2008-06-23 16:57:27 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
+ 2008-06-23 16:57:27 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
+ 2008-06-23 16:57:27 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
+ 2008-06-23 16:57:28 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
+ 2008-06-23 09:20:25 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
+ 2008-06-23 16:57:29 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
+ 2008-06-23 16:57:29 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
+ 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
+ 2008-06-23 16:57:29 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
+ 2008-06-23 16:57:29 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
+ 2008-06-23 16:57:33 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
+ 2008-06-23 16:57:33 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
+ 2008-06-23 16:57:34 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
+ 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
+ 2008-06-23 09:20:52 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
+ 2008-06-23 16:57:35 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
+ 2008-06-23 16:57:36 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
+ 2008-06-23 16:57:36 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
+ 2008-06-24 15:57:40 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
+ 2008-06-23 16:57:39 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
+ 2008-06-23 16:57:39 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
+ 2008-06-23 16:57:40 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
+ 2008-06-23 16:57:40 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
+ 2008-06-23 16:57:40 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
+ 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
+ 2008-06-23 16:57:40 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
+ 2008-06-23 16:57:40 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
+ 2008-06-23 16:57:41 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
+ 2008-06-23 16:57:41 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
- 2004-08-04 07:56:42 220,160 ----a-w c:\windows\ime\mscandui.dll
+ 2008-04-14 00:11:58 220,160 ----a-w c:\windows\ime\mscandui.dll
- 2004-08-04 07:56:45 130,048 ----a-w c:\windows\ime\softkbd.dll
+ 2008-04-14 00:12:06 130,048 ----a-w c:\windows\ime\softkbd.dll
- 2004-08-04 07:56:29 62,976 ------w c:\windows\ime\spgrmr.dll
+ 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll
- 2004-08-04 07:56:45 250,880 ----a-w c:\windows\ime\sptip.dll

achalk · Dec 9, 2008

ComboFix.Txt (part 10 of 10)

+ 2008-04-14 00:12:06 250,368 ----a-w c:\windows\ime\sptip.dll
+ 2006-10-27 01:12:56 396,592 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\MOC.EXE
+ 2007-05-08 16:10:18 16,874,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\MSO.DLL
+ 2007-03-21 23:56:50 8,425,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\OARTCONV.DLL
+ 2006-10-27 20:18:34 1,658,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\OGL.DLL
+ 2007-05-10 14:04:28 846,248 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\OICE.EXE
+ 2007-05-10 15:11:42 1,767,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\PPCNV.DLL
+ 2007-03-22 00:00:06 72,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\PXBCOM.EXE
+ 2007-03-21 23:58:40 4,145,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\WRD12CNV.DLL
+ 2007-03-21 23:58:46 24,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\WRD12EXE.EXE
+ 2007-05-10 15:25:40 14,677,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6021\XL12CNV.EXE
+ 2007-09-15 02:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6215\MSO.DLL
+ 2007-08-29 05:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6215\OGL.DLL
+ 2007-08-24 10:00:34 1,767,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6215\PPCNV.DLL
+ 2007-08-24 10:00:48 72,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6215\PXBCOM.EXE
+ 2007-10-03 01:00:06 14,708,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6215\XL12CNV.EXE
+ 2007-05-12 18:33:55 997,992 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ACCESS.DLL
+ 2003-07-15 03:57:34 38,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
+ 2003-07-15 03:53:06 94,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
+ 2003-07-15 03:53:22 46,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL
+ 2003-07-15 03:56:54 14,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
+ 2003-07-15 03:57:14 98,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
+ 2007-05-12 18:33:56 1,100,392 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\EXCELPIA.DLL
+ 2003-07-15 03:41:44 13,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
+ 2002-10-07 14:49:36 192,573 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FORM.DLL
+ 2007-05-12 18:33:56 371,296 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FORMSPIA.DLL
+ 2003-07-15 03:40:12 179,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
+ 2003-07-15 03:40:12 165,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPLACE.DLL
+ 2007-05-12 18:33:56 141,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\GRAPHPIA.DLL
+ 2003-07-15 03:45:14 58,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\INLAUNCH.DLL
+ 2003-06-18 22:31:10 252,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
+ 2003-07-15 03:57:14 124,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL
+ 2003-07-15 04:12:22 47,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL
+ 2003-07-15 03:56:14 40,504 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSE7.EXE
+ 2003-07-15 03:51:44 87,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
+ 2003-07-15 03:52:52 17,464 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
+ 2003-07-15 03:57:16 120,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
+ 2003-07-15 03:52:52 27,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
+ 2003-07-15 03:52:56 55,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
+ 2003-07-15 03:56:16 54,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOMSE.DLL
+ 2003-07-11 07:15:48 1,292,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
+ 2003-07-15 08:18:52 376,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
+ 2003-07-15 03:52:54 28,224 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
+ 2003-07-15 03:52:52 35,896 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
+ 2003-07-15 03:53:00 55,872 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSVABW.DLL
+ 2003-07-15 03:53:20 39,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
+ 2003-07-15 03:46:16 42,040 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
+ 2003-07-15 03:45:12 55,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
+ 2003-07-15 03:45:12 39,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
+ 2003-06-18 22:31:54 788,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPFILT.DLL
+ 2003-06-18 22:31:50 16,384 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
+ 2003-06-19 21:05:52 128,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPSCAN.EXE
+ 2003-06-19 21:05:50 364,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
+ 2003-07-15 04:02:42 637,496 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSQRY32.EXE
+ 2003-07-15 03:52:58 41,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
+ 2007-05-12 18:33:56 20,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSTAGPIA.DLL
+ 2003-07-15 04:00:54 145,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
+ 2003-07-15 03:57:10 56,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
+ 2003-07-15 03:56:52 13,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
+ 2003-06-18 22:31:58 6,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OCRPS.DLL
+ 2007-05-12 18:33:56 223,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
+ 2003-07-15 08:14:26 242,240 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
+ 2007-05-12 18:33:56 35,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OLCTLPIA.DLL
+ 2003-07-15 04:05:24 1,054,264 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
+ 2003-07-15 04:05:24 1,054,264 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL_0002
+ 2003-07-15 03:44:34 102,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
+ 2007-05-12 18:33:57 408,176 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLPIA.DLL
+ 2003-07-15 03:43:16 49,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
+ 2007-05-12 18:33:56 461,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OWC11PIA.DLL
+ 2003-07-15 08:18:44 93,752 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
+ 2007-05-12 18:33:57 223,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PPTPIA.DLL
+ 2002-10-07 15:11:00 167,997 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PSOM.DLL
+ 2007-05-12 18:33:57 211,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBPIA.DLL
+ 2003-07-15 03:40:16 51,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
+ 2003-05-09 02:54:00 77,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
+ 2003-07-15 03:57:08 40,512 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
+ 2002-10-07 14:49:42 81,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\REVERSE.DLL
+ 2003-07-21 16:46:38 390,712 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
+ 2003-07-15 03:57:18 349,248 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SELFCERT.EXE
+ 2003-07-15 03:44:16 66,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
+ 2003-07-15 03:57:08 58,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
+ 2003-07-15 03:53:14 11,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
+ 2002-10-07 14:53:04 106,561 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\THOCRAPI.DLL
+ 2002-10-07 14:50:44 241,729 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWCUTCHR.DLL
+ 2002-10-07 14:51:04 180,289 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWCUTLIN.DLL
+ 2002-10-07 14:51:14 147,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWLAY32.DLL
+ 2002-10-07 14:51:20 102,467 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWORIENT.DLL
+ 2002-10-07 14:50:04 118,847 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWRECE.DLL
+ 2002-10-07 14:49:56 81,983 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWRECS.DLL
+ 2002-10-07 14:51:44 221,252 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TWSTRUCT.DLL
+ 2003-07-15 03:57:40 59,960 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\UNBIND.EXE
+ 2007-05-12 18:33:57 64,088 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
+ 2007-05-12 18:33:57 662,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\WORDPIA.DLL
+ 2002-10-07 15:03:34 1,794,113 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XIMAGE3B.DLL
+ 2003-04-30 16:52:32 1,581,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XPAGE3C.DLL
+ 2003-01-17 19:03:34 59,466 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\XSCAN32.DAT
+ 2001-06-05 13:13:22 289,926 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\ENGDIC.DAT
+ 2001-06-05 13:13:22 34,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\ENGIDX.DAT
+ 2007-04-19 18:09:30 167,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
+ 2001-06-05 13:13:24 18,844 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\JFONT.DAT
+ 2001-06-05 13:13:26 65,536 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\LOOKUP.DAT
+ 2005-05-04 07:06:27 465,640 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSDMENG.DLL
+ 2005-05-04 07:06:30 1,411,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSDMINE.DLL
+ 2005-05-04 07:06:24 199,408 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\MSMDUN80.DLL
+ 2001-10-23 05:13:42 53,260 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\OCRHC.DAT
+ 2001-06-05 13:13:26 40,972 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\OCRVC.DAT
+ 2007-05-31 18:35:22 6,420,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ARPPRODUCTICON.exe
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
+ 2008-11-01 19:14:38 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\UNINST_Uninstall_G_408FFBEED62349E08B232864A94D2864.exe
+ 2008-12-06 16:36:43 102,400 ----a-r c:\windows\Installer\{318AB667-3230-41B5-A617-CB3BF748D371}\iTunesIco.exe
+ 2008-11-23 20:21:37 307,200 ----a-r c:\windows\Installer\{34F85A4D-03CC-428A-80A4-880228646518}\SafariIco.exe
+ 2008-05-21 04:15:16 295,606 ----a-r c:\windows\Installer\{3B0F52AC-EF5C-4831-B221-06C782E41280}\ARPPRODUCTICON.exe
+ 2008-05-21 04:15:16 295,606 ----a-r c:\windows\Installer\{3B0F52AC-EF5C-4831-B221-06C782E41280}\NewShortcut1_E715633012F6421883A4BCE59058C2A8.exe
+ 2008-05-21 04:15:16 40,960 ----a-r c:\windows\Installer\{3B0F52AC-EF5C-4831-B221-06C782E41280}\NewShortcut7_E715633012F6421883A4BCE59058C2A8.exe
+ 2008-05-21 04:15:16 40,960 ----a-r c:\windows\Installer\{3B0F52AC-EF5C-4831-B221-06C782E41280}\QuickenOLBackupLaunc_0D2E80C8087543EB962347118E2DFBCA.exe
+ 2008-08-27 11:49:32 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2008-09-12 01:05:36 86,016 ----a-r c:\windows\Installer\{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}\PrntWzrdIco.exe
- 2008-05-16 06:33:50 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2008-11-27 05:42:41 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-05-16 06:33:50 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2008-11-27 05:42:41 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-05-16 06:33:50 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2008-11-27 05:42:41 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2008-05-16 06:33:50 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2008-11-27 05:42:41 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-05-16 06:33:50 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2008-11-27 05:42:41 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2008-05-16 06:33:50 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2008-11-27 05:42:41 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2008-05-16 06:33:50 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2008-11-27 05:42:41 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-05-16 06:33:50 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2008-11-27 05:42:41 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2008-05-16 06:33:50 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2008-11-27 05:42:41 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2008-05-16 06:33:50 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2008-11-27 05:42:41 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2008-05-16 06:33:51 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2008-11-27 05:42:41 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2008-05-16 06:33:50 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2008-11-27 05:42:41 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2008-05-16 06:33:50 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2008-11-27 05:42:41 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2008-11-27 05:39:04 38,240 ----a-r c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
- 2006-11-07 08:06:47 16,832 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
+ 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
- 2006-11-07 08:06:47 12,451 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
+ 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
+ 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
- 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agentanm.dll
+ 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentanm.dll
- 2004-08-04 07:56:41 214,016 ----a-w c:\windows\msagent\agentctl.dll
+ 2008-04-14 00:11:48 214,016 ----a-w c:\windows\msagent\agentctl.dll
- 2006-10-12 14:02:52 42,496 ----a-w c:\windows\msagent\agentdp2.dll
+ 2008-04-14 00:11:48 42,496 ----a-w c:\windows\msagent\agentdp2.dll
- 2007-03-09 13:58:57 57,344 ----a-w c:\windows\msagent\agentdpv.dll
+ 2008-04-14 00:11:48 57,344 ----a-w c:\windows\msagent\agentdpv.dll
- 2004-08-04 07:56:41 49,152 ----a-w c:\windows\msagent\agentmpx.dll
+ 2008-04-14 00:11:48 49,152 ----a-w c:\windows\msagent\agentmpx.dll
- 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agentpsh.dll
+ 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentpsh.dll
- 2004-08-04 07:56:41 44,032 ----a-w c:\windows\msagent\agentsr.dll
+ 2008-04-14 00:11:48 44,032 ----a-w c:\windows\msagent\agentsr.dll
- 2006-10-12 11:09:53 256,512 ----a-w c:\windows\msagent\agentsvr.exe
+ 2008-04-14 00:12:12 256,512 ----a-w c:\windows\msagent\agentsvr.exe
- 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agtintl.dll
+ 2008-04-14 00:11:49 24,064 ----a-w c:\windows\msagent\agtintl.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
+ 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
+ 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
- 2001-08-23 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
+ 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
- 2001-08-23 12:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
+ 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
+ 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
+ 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
- 2001-08-23 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
+ 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
- 2001-08-23 12:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
+ 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
- 2001-08-23 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
+ 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
- 2001-08-23 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
+ 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
- 2001-08-23 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
+ 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
+ 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
- 2001-08-23 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
+ 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
- 2001-08-23 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
+ 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
- 2004-08-04 07:56:43 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
+ 2008-04-14 00:12:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
- 2006-06-03 11:40:49 33,792 ------w c:\windows\network diagnostic\custsat.dll
+ 2008-04-14 00:11:51 33,792 ------w c:\windows\network diagnostic\custsat.dll
- 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
+ 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe
- 2000-08-31 13:00:00 28,160 ----a-w c:\windows\Nircmd.exe
+ 2000-08-31 14:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
- 2004-08-04 07:56:54 69,120 ----a-w c:\windows\notepad.exe
+ 2008-04-14 00:12:29 69,120 ----a-w c:\windows\notepad.exe
- 2004-08-04 07:56:49 768,512 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\helpctr.exe
+ 2008-04-14 00:12:21 769,024 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\helpctr.exe
- 2004-08-04 07:56:50 743,936 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\helpsvc.exe
+ 2008-04-14 00:12:21 744,448 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\helpsvc.exe
- 2004-08-04 07:56:50 18,944 ------w c:\windows\PCHEALTH\HELPCTR\Binaries\hscupd.exe
+ 2008-04-14 00:12:21 18,432 ------w c:\windows\PCHEALTH\HELPCTR\Binaries\hscupd.exe
- 2004-08-04 07:56:53 158,208 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\msconfig.exe
+ 2008-04-14 00:12:27 169,984 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\msconfig.exe
- 2004-08-04 07:56:43 376,320 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\msinfo.dll
+ 2008-04-14 00:11:59 376,832 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\msinfo.dll
- 2004-08-04 07:56:44 102,400 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\pchshell.dll
+ 2008-04-14 00:12:02 102,912 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\pchshell.dll
- 2004-08-04 07:56:44 38,912 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\pchsvc.dll
+ 2008-04-14 00:12:02 38,400 ----a-w c:\windows\PCHEALTH\HELPCTR\Binaries\pchsvc.dll
- 2007-05-12 03:37:23 86,327 ----a-w c:\windows\PCHEALTH\HELPCTR\OfflineCache\index.dat
+ 2008-10-09 11:01:44 86,327 ----a-w c:\windows\PCHEALTH\HELPCTR\OfflineCache\index.dat
- 2007-05-12 03:37:23 2,722 ----a-w c:\windows\PCHEALTH\HELPCTR\PackageStore\SkuStore.bin
+ 2008-10-09 11:01:44 3,460 ----a-w c:\windows\PCHEALTH\HELPCTR\PackageStore\SkuStore.bin
- 2004-08-04 07:56:57 150,528 ----a-w c:\windows\PCHEALTH\UploadLB\Binaries\uploadm.exe
+ 2008-04-14 00:12:38 150,528 ----a-w c:\windows\PCHEALTH\UploadLB\Binaries\uploadm.exe
- 2004-08-04 07:56:45 151,552 ------w c:\windows\peernet\sqldb20.dll
+ 2008-04-14 00:12:06 151,552 ------w c:\windows\peernet\sqldb20.dll
- 2004-08-04 07:56:45 462,848 ------w c:\windows\peernet\sqlqp20.dll
+ 2008-04-14 00:12:06 462,848 ------w c:\windows\peernet\sqlqp20.dll
- 2004-08-04 07:56:45 110,592 ------w c:\windows\peernet\sqlse20.dll
+ 2008-04-14 00:12:06 110,592 ------w c:\windows\peernet\sqlse20.dll
- 2004-08-04 07:56:55 146,432 ----a-w c:\windows\regedit.exe
+ 2008-04-14 00:12:32 146,432 ----a-w c:\windows\regedit.exe
- 2000-08-31 13:00:00 98,816 ----a-w c:\windows\sed.exe
+ 2000-08-31 14:00:00 98,816 ----a-w c:\windows\sed.exe
- 2004-08-04 06:10:06 53,248 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
+ 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
- 2004-08-04 06:00:03 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
+ 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
- 2004-08-04 06:10:10 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
+ 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
- 2004-08-04 07:56:41 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
+ 2008-04-14 00:11:48 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
+ 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
+ 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
- 2004-08-04 07:56:47 183,808 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
+ 2008-04-14 00:12:11 184,320 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
- 2004-08-04 07:56:41 1,852,416 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
+ 2008-04-14 00:11:48 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
- 2004-08-04 07:56:41 450,048 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
+ 2008-04-14 00:11:48 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
- 2004-08-04 07:56:41 137,728 ------w c:\windows\ServicePackFiles\i386\aclua.dll
+ 2008-04-14 00:11:48 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll
- 2004-08-04 07:56:41 114,688 ------w c:\windows\ServicePackFiles\i386\aclui.dll
+ 2008-04-14 00:11:48 115,712 ------w c:\windows\ServicePackFiles\i386\aclui.dll
- 2004-08-04 06:07:38 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
+ 2008-04-13 18:36:35 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
- 2004-08-04 07:56:41 244,736 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
+ 2008-04-14 00:11:48 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
- 2004-08-04 07:56:41 194,048 ------w c:\windows\ServicePackFiles\i386\activeds.dll
+ 2008-04-14 00:11:48 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll
- 2004-08-04 07:56:47 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
+ 2008-04-14 00:12:12 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
- 2004-08-04 07:56:41 101,888 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
+ 2008-04-14 00:11:48 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
- 2004-08-04 07:56:41 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
+ 2008-04-14 00:11:48 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
- 2004-08-04 07:56:41 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
+ 2008-04-14 00:11:48 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
- 2004-08-04 07:56:41 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
+ 2008-04-14 00:11:48 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
- 2004-08-04 07:56:47 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
+ 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
- 2004-08-04 07:56:41 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
+ 2008-04-14 00:11:48 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
- 2004-08-04 07:56:41 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
+ 2008-04-14 00:11:48 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
- 2004-08-04 07:56:41 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
+ 2008-04-14 00:11:48 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
- 2004-08-04 07:56:41 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
+ 2008-04-14 00:11:48 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
- 2004-08-04 07:56:41 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
+ 2008-04-14 00:11:48 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
- 2004-08-04 07:56:41 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll

achalk · Dec 9, 2008

ComboFix.Txt (part 11 of 10)

All: c:\windows\$NtServicePackUninstall$\ items edited out.

HiJackThis Log

New member

In Memoriam -Always in our heart

New member

New member

In Memoriam -Always in our heart

New member

New member

New member

In Memoriam -Always in our heart

New member

New member

New member

New member

New member

New member

New member

New member

New member

New member

New member