Redirect virus

PatriceB82 · Jun 27, 2010

I had one of those malware viruses that forced you to buy anti-virus software before you can get your computer back to normal. Once I had the virus removed, a redirect virus popped up. It redirects my webpages everytime I try to click on search links on top of the random pop up windows.

Thank you for the assistance.

DDS (Ver_10-03-17.01) - NTFSx86
Run by Patrice at 21:03:13.23 on Sat 06/26/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.40 [GMT -7:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\WINDOWS\system32\java.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe
C:\WINDOWS\System32\alg.exe
c:\program files\clearwire\connection manager\Location Finder\mylocal.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Patrice\Desktop\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://gateway.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = https://register.hp.com/servlet/Web...YEAR=2006&gwCountry=US&language=EN&prodOS=011
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {577EBCA9-8ED3-45FC-A514-55B3817D4BCF} - No File
TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
uRun: [CTSyncU.exe] "c:\program files\creative\sync manager unicode\CTSyncU.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
StartupFolder: c:\docume~1\patrice\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
IE: &Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - file:///c:\program files\yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - file:///c:\program files\yahoo!\Common/ycsms.htm
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: adultfanfiction.net\www
Trusted Zone: freefm.com\adam
Trusted Zone: livejournal.com\www
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
Hosts: 127.0.0.1 www.spywareinfo.com

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\patrice\applic~1\mozilla\firefox\profiles\mtak9zax.default\
FF - prefs.js: browser.search.selectedEngine - AOL Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US

fficial
FF - prefs.js: keyword.URL - hxxp://aolsearch.aol.com/aol/search?invocationType=client_searchbox&query=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\real\realarcade\plugins\mozilla\npracplug.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.07c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 10);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-6-5 218592]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-2-5 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-2-5 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-2-5 242896]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-2-4 93872]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-3-12 308064]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\spyware doctor\bdt\BDTUpdateService.exe [2010-6-5 112592]
R2 LinksysUpdater;Linksys Updater;c:\program files\linksys\linksys updater\bin\LinksysUpdater.exe [2008-1-15 204800]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2010-6-5 366840]
R2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2010-6-5 1142224]
R2 SMSI Device Launch Service;Clearwire Device Launch Service;c:\program files\clearwire\connection manager\DeviceLaunchSvc.exe [2009-11-9 107856]
R3 bcm;WiMAX Network Adapter;c:\windows\system32\drivers\drxvi314.sys [2010-1-24 282112]
R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\drivers\BcmBusCtr.sys [2010-1-24 51712]
R3 CLEARWIRERcAppSvc;Clearwire RcAppSvc;c:\program files\clearwire\connection manager\RcAppSvc.exe [2009-11-9 120144]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [2005-8-22 231424]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 MusCDriverV32;MusCDriverV32;c:\windows\system32\drivers\MusCDriverV32.sys [2007-9-19 513152]

=============== Created Last 30 ================

2010-06-24 06:22:04 0 d-----w- c:\docume~1\alluse~1\applic~1\McAfee Security Scan
2010-06-24 06:21:40 0 d-----w- c:\program files\McAfee Security Scan
2010-06-06 01:37:51 882 ----a-w- c:\windows\RegSDImport.xml
2010-06-06 01:37:51 879 ----a-w- c:\windows\RegISSImport.xml
2010-06-06 01:37:51 767952 ----a-w- c:\windows\BDTSupport.dll.old
2010-06-06 01:37:51 763832 ----a-w- c:\windows\BDTSupport.dll
2010-06-06 01:37:51 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-06-06 01:37:51 131 ----a-w- c:\windows\IDB.zip
2010-06-06 01:37:51 1152444 ----a-w- c:\windows\UDB.zip
2010-06-06 01:37:50 165840 ----a-w- c:\windows\PCTBDRes.dll
2010-06-06 01:37:50 1652688 ----a-w- c:\windows\PCTBDCore.dll.old
2010-06-06 01:37:50 1652664 ----a-w- c:\windows\PCTBDCore.dll
2010-06-06 01:30:08 7387 ----a-w- c:\windows\system32\drivers\pctgntdi.cat
2010-06-06 01:30:08 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-06-06 01:29:44 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-06-06 01:29:44 7412 ----a-w- c:\windows\system32\drivers\PCTAppEvent.cat
2010-06-06 01:29:44 7383 ----a-w- c:\windows\system32\drivers\pctcore.cat
2010-06-06 01:29:44 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-06-06 01:29:26 7383 ----a-w- c:\windows\system32\drivers\pctplsg.cat
2010-06-06 01:29:26 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-06-06 01:29:17 0 d-----w- c:\program files\Spyware Doctor
2010-06-06 01:29:17 0 d-----w- c:\program files\common files\PC Tools
2010-06-06 01:29:17 0 d-----w- c:\docume~1\patrice\applic~1\PC Tools
2010-06-02 00:17:59 0 d-sha-r- C:\cmdcons
2010-06-02 00:14:14 98816 ----a-w- c:\windows\sed.exe
2010-06-02 00:14:14 77312 ----a-w- c:\windows\MBR.exe
2010-06-02 00:14:14 256512 ----a-w- c:\windows\PEV.exe
2010-06-02 00:14:14 161792 ----a-w- c:\windows\SWREG.exe
2010-06-02 00:07:25 0 d-----w- c:\program files\Trend Micro
2010-06-02 00:01:36 0 d-----w- C:\SDfix

==================== Find3M ====================

2010-06-02 17:27:19 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-04-29 22:39:38 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 22:39:26 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2007-10-06 22:00:10 774144 ----a-w- c:\program files\RngInterstitial.dll
2008-08-22 03:18:14 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008082120080822\index.dat

============= FINISH: 21:07:03.10 ===============

km2357 · Jun 29, 2010

Hello and welcome to Safer Networking.

My name is km2357 and I will be helping you to remove any infection(s) that you may have.

I will be giving you a series of instructions that need to be followed in the order in which I give them to you.

If for any reason you do not understand an instruction or are just unsure then please do not guess, simply post back with your questions/concerns and we will go through it again.

Please do not start another thread or topic, I will assist you at this thread until we solve your problems.

Lastly the fix may take several attempts and my replies may take some time but I will stick with it if you do the same.

Sorry for the delay in replying, the forum is very busy. If you still need help, please do the following:

1. Run DDS and post back both DDS.txt and Attach.txt. Do not attach attach.txt, post it normally.

2. Download and Run Gmer

Please download gmer.zip from Gmer and save it to your desktop.

***Please close any open programs ***

Double-click gmer.exe. The program will begin to run.

**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<--- ROOTKIT" entries unless advised by a trained Security Analyst

If possible rootkit activity is found, you will be asked if you would like to perform a full scan. Click No.

If you do not receive notice about possible rootkit activity remain on the Rootkit/Malware tab & make sure that the 'Sections' button is ticked and the 'Show All' button is unticked.

Click the Scan button and let the program do its work. GMER will produce a log.
Once the scan is complete, you may receive another notice about rootkit activity.
Click OK.
GMER will produce a log. Click on the Save button, and save the log as gmer.txt somewhere you can easily find it, such as your desktop.

DO NOT touch the PC at ALL for Whatever reason/s until it has 100% completed its scan, or attempted scan in case of some error etc !

Please post the results from the GMER scan in your reply.

PatriceB82 · Jun 30, 2010

DDS (Ver_10-03-17.01) - NTFSx86
Run by Patrice at 22:37:06.96 on Tue 06/29/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.32 [GMT -7:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\WINDOWS\system32\java.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\Clearwire\Connection Manager\ClearwireCM.exe
C:\Program Files\Clearwire\Connection Manager\RcAppSvc.exe
C:\Program Files\internet explorer\iexplore.exe
c:\program files\clearwire\connection manager\Location Finder\mylocal.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Patrice\Desktop\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://gateway.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = https://register.hp.com/servlet/Web...YEAR=2006&gwCountry=US&language=EN&prodOS=011
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {577EBCA9-8ED3-45FC-A514-55B3817D4BCF} - No File
TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
uRun: [CTSyncU.exe] "c:\program files\creative\sync manager unicode\CTSyncU.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
StartupFolder: c:\docume~1\patrice\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
IE: &Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - file:///c:\program files\yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - file:///c:\program files\yahoo!\Common/ycsms.htm
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: adultfanfiction.net\www
Trusted Zone: freefm.com\adam
Trusted Zone: livejournal.com\www
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
Hosts: 127.0.0.1 www.spywareinfo.com

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\patrice\applic~1\mozilla\firefox\profiles\mtak9zax.default\
FF - prefs.js: browser.search.selectedEngine - AOL Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US

fficial
FF - prefs.js: keyword.URL - hxxp://aolsearch.aol.com/aol/search?invocationType=client_searchbox&query=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\real\realarcade\plugins\mozilla\npracplug.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.07c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-6-5 218592]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-2-5 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-2-5 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-2-5 242896]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-2-4 93872]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-3-12 308064]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\spyware doctor\bdt\BDTUpdateService.exe [2010-6-5 112592]
R3 bcm;WiMAX Network Adapter;c:\windows\system32\drivers\drxvi314.sys [2010-1-24 282112]
R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\drivers\BcmBusCtr.sys [2010-1-24 51712]
R3 CLEARWIRERcAppSvc;Clearwire RcAppSvc;c:\program files\clearwire\connection manager\RcAppSvc.exe [2009-11-9 120144]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [2005-8-22 231424]
S3 MusCDriverV32;MusCDriverV32;c:\windows\system32\drivers\MusCDriverV32.sys [2007-9-19 513152]

=============== Created Last 30 ================

2010-06-24 06:22:04 0 d-----w- c:\docume~1\alluse~1\applic~1\McAfee Security Scan
2010-06-24 06:21:40 0 d-----w- c:\program files\McAfee Security Scan
2010-06-06 01:37:51 882 ----a-w- c:\windows\RegSDImport.xml
2010-06-06 01:37:51 879 ----a-w- c:\windows\RegISSImport.xml
2010-06-06 01:37:51 767952 ----a-w- c:\windows\BDTSupport.dll.old
2010-06-06 01:37:51 763832 ----a-w- c:\windows\BDTSupport.dll
2010-06-06 01:37:51 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-06-06 01:37:51 131 ----a-w- c:\windows\IDB.zip
2010-06-06 01:37:51 1152444 ----a-w- c:\windows\UDB.zip
2010-06-06 01:37:50 165840 ----a-w- c:\windows\PCTBDRes.dll
2010-06-06 01:37:50 1652688 ----a-w- c:\windows\PCTBDCore.dll.old
2010-06-06 01:37:50 1652664 ----a-w- c:\windows\PCTBDCore.dll
2010-06-06 01:30:08 7387 ----a-w- c:\windows\system32\drivers\pctgntdi.cat
2010-06-06 01:30:08 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-06-06 01:29:44 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-06-06 01:29:44 7412 ----a-w- c:\windows\system32\drivers\PCTAppEvent.cat
2010-06-06 01:29:44 7383 ----a-w- c:\windows\system32\drivers\pctcore.cat
2010-06-06 01:29:44 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-06-06 01:29:26 7383 ----a-w- c:\windows\system32\drivers\pctplsg.cat
2010-06-06 01:29:26 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-06-06 01:29:17 0 d-----w- c:\program files\Spyware Doctor
2010-06-06 01:29:17 0 d-----w- c:\program files\common files\PC Tools
2010-06-06 01:29:17 0 d-----w- c:\docume~1\patrice\applic~1\PC Tools
2010-06-02 00:17:59 0 d-sha-r- C:\cmdcons
2010-06-02 00:14:14 98816 ----a-w- c:\windows\sed.exe
2010-06-02 00:14:14 77312 ----a-w- c:\windows\MBR.exe
2010-06-02 00:14:14 256512 ----a-w- c:\windows\PEV.exe
2010-06-02 00:14:14 161792 ----a-w- c:\windows\SWREG.exe
2010-06-02 00:07:25 0 d-----w- c:\program files\Trend Micro
2010-06-02 00:01:36 0 d-----w- C:\SDfix

==================== Find3M ====================

2010-06-02 17:27:19 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2007-10-06 22:00:10 774144 ----a-w- c:\program files\RngInterstitial.dll
2008-08-22 03:18:14 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008082120080822\index.dat

============= FINISH: 22:41:54.95 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 9/19/2006 1:37:58 AM
System Uptime: 6/29/2010 9:50:55 PM (1 hours ago)

Motherboard: Hewlett-Packard | | 30AE
Processor: Mobile AMD Sempron(tm) Processor 3100+ | U23 | 789/mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 140 GiB total, 108.487 GiB free.
D: is FIXED (FAT32) - 8 GiB total, 0.802 GiB free.
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP966: 3/31/2010 11:08:05 AM - System Checkpoint
RP967: 4/1/2010 1:18:55 AM - Software Distribution Service 3.0
RP968: 4/1/2010 12:21:41 PM - Avg Update
RP969: 4/1/2010 12:23:41 PM - Avg Update
RP970: 4/2/2010 9:48:43 PM - System Checkpoint
RP971: 4/4/2010 6:03:35 PM - System Checkpoint
RP972: 4/5/2010 6:28:32 PM - System Checkpoint
RP973: 4/7/2010 8:59:07 AM - Avg Update
RP974: 4/8/2010 9:56:35 AM - System Checkpoint
RP975: 4/9/2010 4:31:44 PM - System Checkpoint
RP976: 4/10/2010 5:24:48 PM - System Checkpoint
RP977: 4/12/2010 10:34:22 PM - System Checkpoint
RP978: 4/15/2010 6:48:19 AM - Software Distribution Service 3.0
RP979: 4/16/2010 2:11:39 PM - System Checkpoint
RP980: 4/17/2010 9:46:17 PM - System Checkpoint
RP981: 4/19/2010 8:25:03 AM - System Checkpoint
RP982: 4/20/2010 2:36:09 PM - System Checkpoint
RP983: 4/20/2010 3:19:21 PM - Avg Update
RP984: 4/20/2010 3:21:33 PM - Avg Update
RP985: 4/21/2010 8:28:40 PM - System Checkpoint
RP986: 4/23/2010 1:59:23 PM - System Checkpoint
RP987: 4/24/2010 2:08:45 PM - System Checkpoint
RP988: 4/26/2010 6:36:16 PM - System Checkpoint
RP989: 4/27/2010 8:43:12 PM - System Checkpoint
RP990: 4/30/2010 8:24:40 AM - System Checkpoint
RP991: 5/1/2010 9:46:24 AM - System Checkpoint
RP992: 5/2/2010 10:04:05 AM - System Checkpoint
RP993: 5/3/2010 5:47:42 PM - System Checkpoint
RP994: 5/5/2010 1:41:10 PM - Avg Update
RP995: 5/6/2010 9:43:01 PM - System Checkpoint
RP996: 5/8/2010 2:13:08 PM - System Checkpoint
RP997: 5/9/2010 2:47:06 PM - System Checkpoint
RP998: 5/11/2010 10:45:30 AM - System Checkpoint
RP999: 5/12/2010 7:24:50 PM - System Checkpoint
RP1000: 5/13/2010 6:31:23 AM - Software Distribution Service 3.0
RP1001: 5/14/2010 7:39:54 AM - System Checkpoint
RP1002: 5/15/2010 10:18:38 AM - System Checkpoint
RP1003: 5/17/2010 12:12:00 AM - System Checkpoint
RP1004: 5/18/2010 6:17:58 AM - System Checkpoint
RP1005: 5/18/2010 9:23:16 AM - Removed Clear Connection Manager.
RP1006: 5/18/2010 4:47:29 PM - Installed CLEAR Connection Manager.
RP1007: 5/20/2010 9:13:18 AM - Removed CLEAR Connection Manager.
RP1008: 5/20/2010 9:14:16 AM - Installed CLEAR Connection Manager.
RP1009: 5/23/2010 5:33:05 PM - System Checkpoint
RP1010: 5/24/2010 5:40:35 PM - System Checkpoint
RP1011: 5/26/2010 12:55:43 PM - System Checkpoint
RP1012: 5/26/2010 11:46:41 PM - Software Distribution Service 3.0
RP1013: 5/28/2010 12:37:20 AM - System Checkpoint
RP1014: 6/1/2010 6:02:17 PM - Software Distribution Service 3.0
RP1015: 6/2/2010 10:27:41 AM - Avg Update
RP1016: 6/3/2010 11:15:07 PM - Software Distribution Service 3.0
RP1017: 6/5/2010 3:29:41 PM - System Checkpoint
RP1018: 6/6/2010 7:21:05 PM - System Checkpoint
RP1019: 6/8/2010 10:44:08 AM - System Checkpoint
RP1020: 6/10/2010 10:16:28 PM - System Checkpoint
RP1021: 6/11/2010 11:01:46 PM - System Checkpoint
RP1022: 6/14/2010 11:20:36 AM - System Checkpoint
RP1023: 6/15/2010 11:28:25 AM - System Checkpoint
RP1024: 6/16/2010 9:54:14 PM - System Checkpoint
RP1025: 6/18/2010 12:23:13 PM - System Checkpoint
RP1026: 6/19/2010 4:52:43 PM - System Checkpoint
RP1027: 6/21/2010 5:26:40 PM - System Checkpoint
RP1028: 6/22/2010 9:16:10 PM - System Checkpoint
RP1029: 6/25/2010 11:00:49 AM - System Checkpoint
RP1030: 6/25/2010 9:58:47 PM - Avg Update
RP1031: 6/28/2010 10:00:09 AM - System Checkpoint
RP1032: 6/29/2010 10:07:30 PM - System Checkpoint

==== Installed Programs ======================

Sansa Media Converter
Adobe Flash Player 10 ActiveX
Adobe Reader 9.3.2
Adobe Shockwave Player
AOL Coach Version 2.0(Build:20041026.5 en)
AOL Uninstaller (Choose which Products to Remove)
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Athlon 64 Processor Driver
ATI Control Panel
ATI Display Driver
AVG Free 9.0
Blasterball 2 from Hewlett-Packard Laptops (remove only)
bodybugg® Software
Boggle Supreme from Hewlett-Packard Laptops (remove only)
Bonjour
Bookworm Deluxe from Hewlett-Packard Laptops (remove only)
Bounce Symphony from Hewlett-Packard Laptops (remove only)
Broadcom 802.11 Wireless LAN Adapter
Browser Defender 2.0.6.15
BufferChm
Chuzzle Deluxe from Hewlett-Packard Laptops (remove only)
Ciao Bella
CLEAR Connection Manager
Compatibility Pack for the 2007 Office system
Conexant AC-Link Audio
CP_AtenaShokunin1Config
CP_CalendarTemplates1
cp_LightScribeConfig
cp_OnlineProjectsConfig
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
cp_PosterPrintConfig
cp_UpdateProjectsConfig
Critical Update for Windows Media Player 11 (KB959772)
Crystal Maze from Hewlett-Packard Laptops (remove only)
CueTour
Customer Experience Enhancement
Destinations
DeviceManagementQFolder
Easy Internet Sign-up
ERUNT 1.1j
Final Drive Nitro from Hewlett-Packard Laptops (remove only)
Flip Words from Hewlett-Packard Laptops (remove only)
FullDPAppQFolder
GMATPrep(TM)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Game Console and games
HP Help and Support
HP Imaging Device Functions 6.0
HP Photosmart Premier Software 6.0
HP QuickPlay 2.0
HP Update
HP User Guides--System Recovery
HP User Guides 0025
HP Wireless Assistant
HpSdpAppCoreApp
Insaniquarium Deluxe from Hewlett-Packard Laptops (remove only)
InstantShareDevices
iTunes
J2SE Runtime Environment 5.0 Update 11
Java Auto Updater
Java(TM) 6 Update 18
Java(TM) SE Runtime Environment 6 Update 1
Jewel Quest from Hewlett-Packard Laptops (remove only)
Lemonade Tycoon 2 from Hewlett-Packard Laptops (remove only)
Lexibox Deluxe from Hewlett-Packard Laptops (remove only)
LightScribe 1.4.56.1
Linksys Updater
Loki ActiveX Control
Malwarebytes' Anti-Malware
McAfee Security Scan Plus
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Move Networks Media Player for Internet Explorer
Mozilla Firefox (3.6.6)
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee autoProducer 4.5
Oasis from Hewlett-Packard Laptops (remove only)
Office 2003 Trial Assistant
OptionalContentQFolder
PhotoGallery
Polar Bowler from Hewlett-Packard Laptops (remove only)
Polar Golfer from Hewlett-Packard Laptops (remove only)
Puzzle Express from Hewlett-Packard Laptops (remove only)
Quick Launch Buttons 5.20 G1
RandMap
RCA easyRip 2.1.7.0
REALTEK Gigabit and Fast Ethernet NIC Driver
Rhapsody Player Engine
Sansa Connect Device Recovery
Sansa Media Converter
Sansa Updater
SCRABBLE from Hewlett-Packard Laptops (remove only)
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980232)
SkinsHP1
Slingo Deluxe from Hewlett-Packard Laptops (remove only)
Slyder from Hewlett-Packard Laptops (remove only)
Soft Data Fax Modem with SmartCP
Sonic Audio Module
Sonic Copy Module
Sonic Data Module
Sonic Express Labeler
Sonic MyDVD Plus
Sonic Update Manager
Sonic_PrimoSDK
Spybot - Search & Destroy
Spyware Doctor 7.0
Super Granny from Hewlett-Packard Laptops (remove only)
Synaptics Pointing Device Driver
Texas Instruments PCIxx21/x515/xx12 drivers.
TIPCI
TourSetup
Tradewinds from Hewlett-Packard Laptops (remove only)
Unload
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Viewpoint Media Player
VoiceOver Kit
Walmart MP3 Music Downloads
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
Wireless Home Network Setup
XviD & MP3 Codec Pack (remove only)
Yahoo! Browser Services
Yahoo! Messenger
ZENcast Organizer
Zuma Deluxe from Hewlett-Packard Laptops (remove only)

==== Event Viewer Messages From Past Week ========

6/29/2010 7:33:15 AM, error: WPDMTPDriver [15300] - MTP WPD Driver has failed to start. Error 0x8007001f.
6/28/2010 8:06:35 PM, error: PSched [14103] - QoS [Adapter {8E43AE84-3926-45B7-9FF7-C0E4048D0636}]: The netcard driver failed the query for OID_GEN_LINK_SPEED.
6/27/2010 7:34:58 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
6/27/2010 7:34:55 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
6/26/2010 8:40:46 PM, error: Service Control Manager [7016] - The BrSplService service has reported an invalid current state 0.
6/22/2010 7:48:29 AM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
6/22/2010 7:48:29 AM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
6/22/2010 7:12:22 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Dnscache service.

==== End Of File ===========================

Thanks for the help

PatriceB82 · Jun 30, 2010

The GMER was to big when I tried to post it so I've broken it up in to parts.
Here is part 1:

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-29 22:58:12
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Patrice\LOCALS~1\Temp\agxiyaog.sys

---- System - GMER 1.0.15 ----

SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateKey [0xF73BE112]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcess [0xF739D2D6]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcessEx [0xF739D4C8]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwDeleteKey [0xF73BE900]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwDeleteValueKey [0xF73BEBB4]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwOpenKey [0xF73BCE12]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwRenameKey [0xF73BF020]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwSetValueKey [0xF73BE3D2]
SSDT\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwTerminateProcess [0xF739CF44]

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwCallbackReturn + 2468 80501CA0 4 Bytes JMP 2D2B13E0
.rsrc C:\WINDOWS\system32\drivers\ftdisk.sys entry point in ".rsrc" section [0xF7411314]

---- User code sections - GMER 1.0.15 ----

C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [83, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [98, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8C, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A4, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9E, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9B, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtSetInformationFile + 47C90DC62 2 Bytes [8F, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A1, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [89, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [95, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [92, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] ntdll.dll!NtWriteVirtualMemory + 47C90DFB2 2 Bytes [86, 71]
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe[180] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00BE0001
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[244] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[244] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006F0001
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [7F, 71] {JG 0x73}
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [94, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [88, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A0, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9A, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [97, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8B, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9D, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [85, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [91, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8E, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Java\jre6\bin\jqs.exe[324] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [82, 71]
C:\Program Files\Java\jre6\bin\jqs.exe[324] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 014E0001
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\Common Files\LightScribe\LSSrvc.exe[368] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00690001
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [7E, 71] {JLE 0x73}
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [93, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [87, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [9F, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [99, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [96, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8A, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtSetValueKey + 47C90DDD2 2 Bytes [9C, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [84, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [90, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteFileGather7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8D, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [81, 71]
C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe[420] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 01230001
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\AVG\AVG9\avgnsx.exe[464] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 01080001
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\Spyware Doctor\pctsAuxs.exe[592] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00780001
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [7F, 71] {JG 0x73}
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [94, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [88, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A0, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9A, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [97, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8B, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtSetValueKey7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9D, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [85, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [91, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8E, 71]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\java.exe[604] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [82, 71]
C:\WINDOWS\system32\java.exe[604] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 0D870001
C:\Program Files\Spyware Doctor\pctsSvc.exe[644] kernel32.dll!CreateThread + 1A 7C8106F1 4 Bytes CALL 0044BC05 C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools Security Service/PC Tools)
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateFile7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateFile7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\csrss.exe[936] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\WINDOWS\system32\csrss.exe[936] KERNEL32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 02F30001
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\winlogon.exe[964] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\winlogon.exe[964] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 014C0001
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\services.exe[1012] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\services.exe[1012] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00BD0001
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtClose + 47C90CFF2 2 Bytes [7F, 71] {JG 0x73}
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [94, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateKey7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [88, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtDeleteKey7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A0, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9A, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtRenameKey7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [97, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8B, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9D, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [85, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteFile7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [91, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8E, 71]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\lsass.exe[1024] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [82, 71]
C:\WINDOWS\system32\lsass.exe[1024] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00D30001
C:\WINDOWS\Explorer.EXE[1136] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00F4000A
C:\WINDOWS\Explorer.EXE[1136] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00F5000A
C:\WINDOWS\Explorer.EXE[1136] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00F3000C
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[1176] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\WINDOWS\system32\Ati2evxx.exe[1176] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 013D0001
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1196] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[1196] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006E0001
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [7F, 71] {JG 0x73}
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [94, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [88, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A0, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9A, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [97, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8B, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9D, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [85, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [91, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8E, 71]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [82, 71]
C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00FF0001
C:\WINDOWS\System32\svchost.exe[1320] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 006E000A
C:\WINDOWS\System32\svchost.exe[1320] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 006F000A
C:\WINDOWS\System32\svchost.exe[1320] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 006D000C
C:\WINDOWS\System32\svchost.exe[1320] USER32.dll!GetCursorPos 7E42974E 5 Bytes JMP 0068000A
C:\WINDOWS\System32\svchost.exe[1320] ole32.dll!CoCreateInstance 7750057E 5 Bytes JMP 0098000A
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1452] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[1452] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00930001
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\AVG\AVG9\avgchsvx.exe[1548] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 01260001

PatriceB82 · Jun 30, 2010

Part 2:

C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1552] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[1552] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006F0001
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\AVG\AVG9\avgrsx.exe[1560] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 02A60001
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1652] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[1652] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006E0001
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\Program Files\AVG\AVG9\avgcsrvx.exe[1780] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 07B90001
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\Program Files\Clearwire\Connection Manager\DeviceLaunchSvc.exe[1808] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00F50001
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [87, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9C, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [90, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A8, 71] {TEST AL, 0x71}
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A2, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9F, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [93, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A5, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8D, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [99, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [96, 71]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\brss01a.exe[1912] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8A, 71]
C:\WINDOWS\system32\brss01a.exe[1912] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00F50001
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [80, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [95, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [89, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A1, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9B, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [98, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8C, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9E, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [86, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [92, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [8F, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\spoolsv.exe[1920] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [83, 71]
C:\WINDOWS\system32\spoolsv.exe[1920] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00E40001
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\svchost.exe[1996] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\WINDOWS\system32\svchost.exe[1996] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006F0001
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 018A0001
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [84, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [99, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8D, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A5, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9F, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [9C, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [90, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A2, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8A, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [96, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [93, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [87, 71]
C:\Program Files\AVG\AVG9\avgwdsvc.exe[2044] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 01500001
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [95, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [98, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8C, 71]
C:\WINDOWS\system32\Ati2evxx.exe[2432] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 003F0001
C:\WINDOWS\system32\Ati2evxx.exe[2432] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\WINDOWS\system32\Ati2evxx.exe[2432] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\WINDOWS\system32\Ati2evxx.exe[2432] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\Ati2evxx.exe[2432] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\WINDOWS\system32\Ati2evxx.exe[2432] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\Program Files\Spyware Doctor\pctsTray.exe[2828] kernel32.dll!CreateThread + 1A 7C8106F1 4 Bytes CALL 0044B8D9 C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools Tray Application/PC Tools)
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [81, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [96, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8A, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A2, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9C, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [99, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8D, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetValueKey7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9F, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [87, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [93, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [90, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [84, 71]
C:\WINDOWS\System32\alg.exe[2900] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006A0001
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetWindowPos7E4299F3 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A

PatriceB82 · Jun 30, 2010

Part 3:
C:\Program Files\Spyware Doctor\pctsTray.exe[2828] kernel32.dll!CreateThread + 1A 7C8106F1 4 Bytes CALL 0044B8D9 C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools Tray Application/PC Tools)
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [81, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [96, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [8A, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [A2, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [9C, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [99, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [8D, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetValueKey7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [9F, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [87, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [93, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [90, 71]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [84, 71]
C:\WINDOWS\System32\alg.exe[2900] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 006A0001
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetWindowPos7E4299F3 3 Bytes [FF, 25, 1E]
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\WINDOWS\System32\alg.exe[2900] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [95, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteFileGather + 47C90DF92 2 Bytes [98, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8C, 71]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00C60001
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe[3440] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [95, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [98, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8C, 71]
C:\WINDOWS\system32\ctfmon.exe[3492] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00B10001
C:\WINDOWS\system32\ctfmon.exe[3492] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\WINDOWS\system32\ctfmon.exe[3492] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\WINDOWS\system32\ctfmon.exe[3492] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\WINDOWS\system32\ctfmon.exe[3492] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\WINDOWS\system32\ctfmon.exe[3492] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtSetInformationFile + 47C90DC62 2 Bytes [95, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [98, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] ntdll.dll!NtWriteVirtualMemory + 47C90DFB2 2 Bytes [8C, 71]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00F30001
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3500] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtSetInformationFile + 4 7C90DC62 2 Bytes [95, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtTerminateProcess7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [98, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] ntdll.dll!NtWriteVirtualMemory + 4 7C90DFB2 2 Bytes [8C, 71]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00B00001
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe[3540] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtClose 7C90CFEE 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtClose + 4 7C90CFF2 2 Bytes [89, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateFile 7C90D0AE 1 Byte [FF]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateFile 7C90D0AE 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateFile + 4 7C90D0B2 2 Bytes [9E, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateKey 7C90D0EE 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateKey + 4 7C90D0F2 2 Bytes [AE, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateSection 7C90D17E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtCreateSection + 4 7C90D182 2 Bytes [92, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtDeleteKey 7C90D24E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtDeleteKey + 4 7C90D252 2 Bytes [AA, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtDeleteValueKey 7C90D26E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtDeleteValueKey + 4 7C90D272 2 Bytes [A4, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtRenameKey 7C90DA5E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtRenameKey + 4 7C90DA62 2 Bytes [A1, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtSetInformationFile 7C90DC5E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtSetInformationFile + 47C90DC62 2 Bytes [95, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtSetValueKey 7C90DDCE 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtSetValueKey + 4 7C90DDD2 2 Bytes [A7, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtTerminateProcess 7C90DE6E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtTerminateProcess + 4 7C90DE72 2 Bytes [8F, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteFile 7C90DF7E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteFile + 4 7C90DF82 2 Bytes [9B, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteFileGather 7C90DF8E 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteFileGather + 4 7C90DF92 2 Bytes [98, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] ntdll.dll!NtWriteVirtualMemory + 47C90DFB2 2 Bytes [8C, 71]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 00B70001
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] USER32.dll!ChangeDisplaySettingsExA 7E42384E 6 Bytes JMP 5F0D0F5A
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] USER32.dll!SetForegroundWindow 7E4242ED 6 Bytes JMP 5F040F5A
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] USER32.dll!SetWindowPos 7E4299F3 3 Bytes [FF, 25, 1E]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] USER32.dll!SetWindowPos + 4 7E4299F7 2 Bytes [0B, 5F]
C:\Documents and Settings\Patrice\Desktop\gmer\gmer.exe[3700] USER32.dll!ChangeDisplaySettingsExW 7E4595BD 6 Bytes JMP 5F100F5A

PatriceB82 · Jun 30, 2010

Last part:
---- User IAT/EAT - GMER 1.0.15 ----

C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9B5A] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9B5A] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6BFA9BE7] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9B5A] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\psapi.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\psapi.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryW] [6BFA9AD3] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryExA] [6BFA9B5A] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!LoadLibraryA] [6BFA9A4C] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe[2028] @ C:\WINDOWS\system32\userenv.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [6BFA9C74] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics/AOL LLC)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Development Company, L.P.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Development Company, L.P.)

---- Disk sectors - GMER 1.0.15 ----

\Device\Harddisk0\DR0 sector 01: copy of MBR
\Device\Harddisk0\DR0 sector 02: copy of MBR
\Device\Harddisk0\DR0 sector 03: copy of MBR
\Device\Harddisk0\DR0 sector 04: copy of MBR
\Device\Harddisk0\DR0 sector 05: copy of MBR
\Device\Harddisk0\DR0 sector 06: copy of MBR
\Device\Harddisk0\DR0 sector 07: copy of MBR
\Device\Harddisk0\DR0 sector 08: copy of MBR
\Device\Harddisk0\DR0 sector 09: copy of MBR
\Device\Harddisk0\DR0 sector 10: copy of MBR
\Device\Harddisk0\DR0 sector 11: copy of MBR
\Device\Harddisk0\DR0 sector 12: copy of MBR
\Device\Harddisk0\DR0 sector 13: copy of MBR
\Device\Harddisk0\DR0 sector 14: copy of MBR
\Device\Harddisk0\DR0 sector 15: copy of MBR
\Device\Harddisk0\DR0 sector 16: copy of MBR
\Device\Harddisk0\DR0 sector 17: copy of MBR
\Device\Harddisk0\DR0 sector 18: copy of MBR
\Device\Harddisk0\DR0 sector 19: copy of MBR
\Device\Harddisk0\DR0 sector 20: copy of MBR
\Device\Harddisk0\DR0 sector 21: copy of MBR
\Device\Harddisk0\DR0 sector 22: copy of MBR
\Device\Harddisk0\DR0 sector 23: copy of MBR
\Device\Harddisk0\DR0 sector 24: copy of MBR
\Device\Harddisk0\DR0 sector 25: copy of MBR
\Device\Harddisk0\DR0 sector 26: copy of MBR
\Device\Harddisk0\DR0 sector 27: copy of MBR
\Device\Harddisk0\DR0 sector 28: copy of MBR
\Device\Harddisk0\DR0 sector 29: copy of MBR
\Device\Harddisk0\DR0 sector 30: copy of MBR
\Device\Harddisk0\DR0 sector 31: copy of MBR
\Device\Harddisk0\DR0 sector 32: copy of MBR
\Device\Harddisk0\DR0 sector 33: copy of MBR
\Device\Harddisk0\DR0 sector 34: copy of MBR
\Device\Harddisk0\DR0 sector 35: copy of MBR
\Device\Harddisk0\DR0 sector 36: copy of MBR
\Device\Harddisk0\DR0 sector 37: copy of MBR
\Device\Harddisk0\DR0 sector 38: copy of MBR
\Device\Harddisk0\DR0 sector 39: copy of MBR
\Device\Harddisk0\DR0 sector 40: copy of MBR
\Device\Harddisk0\DR0 sector 41: copy of MBR
\Device\Harddisk0\DR0 sector 42: copy of MBR
\Device\Harddisk0\DR0 sector 43: copy of MBR
\Device\Harddisk0\DR0 sector 44: copy of MBR
\Device\Harddisk0\DR0 sector 45: copy of MBR
\Device\Harddisk0\DR0 sector 46: copy of MBR
\Device\Harddisk0\DR0 sector 47: copy of MBR
\Device\Harddisk0\DR0 sector 48: copy of MBR
\Device\Harddisk0\DR0 sector 49: copy of MBR
\Device\Harddisk0\DR0 sector 50: copy of MBR
\Device\Harddisk0\DR0 sector 51: copy of MBR
\Device\Harddisk0\DR0 sector 52: copy of MBR
\Device\Harddisk0\DR0 sector 53: copy of MBR
\Device\Harddisk0\DR0 sector 54: copy of MBR
\Device\Harddisk0\DR0 sector 55: copy of MBR
\Device\Harddisk0\DR0 sector 56: copy of MBR
\Device\Harddisk0\DR0 sector 57: copy of MBR
\Device\Harddisk0\DR0 sector 58: copy of MBR
\Device\Harddisk0\DR0 sector 59: copy of MBR
\Device\Harddisk0\DR0 sector 60: copy of MBR
\Device\Harddisk0\DR0 sector 61: copy of MBR
\Device\Harddisk0\DR0 sector 62: rootkit-like behavior; copy of MBR
\Device\Harddisk0\DR0 sector 63: rootkit-like behavior; copy of MBR

---- Files - GMER 1.0.15 ----

File C:\WINDOWS\system32\drivers\ftdisk.sys suspicious modification

---- EOF - GMER 1.0.15 ----

km2357 · Jun 30, 2010

Norton Internet Security 2006 is listed in the DDS Log as one of your AntiViruses. However, I didn't find it in your installed programs list in Attach.txt. Did you recently/some time ago uninstall Norton?

Step # 1: Disable Teatimer

Spybot S&D's tea timer normally provides real-time protection from spyware, however it may interfere with what we need to do. We will disable it until the machine is clean when it can be re-enabled.

This is a two step process.
First step:

Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
If you have the version 1.5 or 1.6, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
If you have Version 1.4, Click on Exit Spybot S&D Resident

Second step, For Either Version :

Open Spybot S&D
Click Mode, choose Advanced Mode
Go To the bottom of the Vertical Panel on the Left, Click Tools
then, also in left panel, click Resident shows a red/white shield.
If your firewall raises a question, say OK
In the Resident protection status frame, Uncheck the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active
OK any prompts.
Use File, Exit to terminate Spybot
Reboot your machine for the changes to take effect.

If ComboFix.exe is on your computer, delete it then follow the instructions below:

Step # 2: Download and Run ComboFix

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

*Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

* IMPORTANT !!! Save ComboFix.exe to your Desktop

When finished, it shall produce a log for you. Please post C:\ComboFix.txt in your next reply.

PatriceB82 · Jul 1, 2010

Yes, I did uninstall Norton years ago but for some reason it shows that its active on my computer.

ComboFix 10-06-30.03 - Patrice 07/01/2010 11:56:22.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.325 [GMT -7:00]
Running from: c:\documents and settings\Patrice\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\xpsp1hfm.log

Infected copy of c:\windows\system32\drivers\ftdisk.sys was found and disinfected
Restored copy from - Kitty had a snack

.
((((((((((((((((((((((((( Files Created from 2010-06-01 to 2010-07-01 )))))))))))))))))))))))))))))))
.

2010-06-27 02:46 . 2010-06-27 02:46 -------- d-----w- c:\program files\ERUNT
2010-06-24 06:22 . 2010-06-24 06:22 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
2010-06-24 06:21 . 2010-06-24 06:21 -------- d-----w- c:\program files\McAfee Security Scan
2010-06-06 02:08 . 2010-06-06 02:08 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-06-06 01:37 . 2010-06-08 02:16 763832 ----a-w- c:\windows\BDTSupport.dll
2010-06-06 01:37 . 2010-01-22 15:56 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-06-06 01:37 . 2009-10-28 07:36 1152444 ----a-w- c:\windows\UDB.zip
2010-06-06 01:37 . 2008-11-26 18:08 131 ----a-w- c:\windows\IDB.zip
2010-06-06 01:37 . 2010-06-08 00:21 1652664 ----a-w- c:\windows\PCTBDCore.dll
2010-06-06 01:37 . 2010-01-22 15:56 165840 ----a-w- c:\windows\PCTBDRes.dll
2010-06-06 01:30 . 2010-02-05 16:17 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-06-06 01:29 . 2010-03-29 17:06 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-06-06 01:29 . 2009-11-23 20:54 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-06-06 01:29 . 2010-04-08 21:29 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-06-06 01:29 . 2010-07-01 19:02 -------- d-----w- c:\program files\Spyware Doctor
2010-06-06 01:29 . 2010-06-06 01:38 -------- d-----w- c:\program files\Common Files\PC Tools
2010-06-06 01:29 . 2010-06-06 01:29 -------- d-----w- c:\documents and settings\Patrice\Application Data\PC Tools
2010-06-04 19:08 . 2010-06-04 19:08 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-06-04 15:15 . 2010-06-04 19:43 -------- d-----w- c:\documents and settings\Patrice\Local Settings\Application Data\eqtkggwya
2010-06-02 17:27 . 2010-06-02 17:27 29512 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys
2010-06-02 17:27 . 2010-06-02 17:27 242896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-06-02 00:07 . 2010-06-02 00:07 -------- d-----w- c:\program files\Trend Micro
2010-06-02 00:01 . 2010-06-02 00:01 -------- d-----w- C:\SDfix

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-01 18:54 . 2007-09-19 14:05 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-07-01 05:17 . 2008-12-16 15:15 0 ----a-w- c:\documents and settings\Guest\Local Settings\Application Data\prvlcl.dat
2010-06-16 16:16 . 2008-04-04 04:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-06-06 06:00 . 2006-09-23 03:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-06-06 03:54 . 2006-09-23 03:44 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-06-06 01:29 . 2010-05-28 03:30 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2010-06-04 15:08 . 2009-01-04 09:38 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-02 17:27 . 2010-02-05 22:35 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-02 17:27 . 2010-02-05 22:35 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-02 00:27 . 2010-02-04 21:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-28 02:42 . 2010-05-28 02:42 503808 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\msvcp71.dll
2010-05-28 02:42 . 2010-05-28 02:42 499712 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\jmc.dll
2010-05-28 02:42 . 2010-05-28 02:42 348160 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\msvcr71.dll
2010-05-28 02:42 . 2010-05-28 02:42 61440 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-23defd8f-n\decora-sse.dll
2010-05-28 02:42 . 2010-05-28 02:42 12800 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-23defd8f-n\decora-d3d.dll
2010-05-28 02:37 . 2007-02-07 21:28 89976 ----a-w- c:\documents and settings\Guest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-28 02:37 . 2010-05-28 02:37 -------- d-----w- c:\documents and settings\Guest\Application Data\Clearwire
2010-05-20 16:14 . 2010-05-18 16:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Clearwire
2010-05-18 23:48 . 2010-05-18 23:48 -------- d-----w- c:\documents and settings\Patrice\Application Data\Clearwire
2010-05-18 23:48 . 2010-05-18 23:48 -------- d-----w- c:\program files\Skyhook Wireless
2010-05-18 23:47 . 2010-05-18 23:47 -------- d-----w- c:\program files\Clearwire
2010-05-03 21:06 . 2010-03-29 06:09 922400 ----a-w- c:\documents and settings\Patrice\Application Data\Sun\Java\JRERunOnce.exe
2010-04-29 22:39 . 2010-02-04 21:02 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 22:39 . 2010-02-04 21:02 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2007-10-06 22:00 . 2007-10-06 22:00 774144 ----a-w- c:\program files\RngInterstitial.dll
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\ERDNT\cache\beep.sys
[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB930916$\ntfs.sys

[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\ERDNT\cache\null.sys
[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\ERDNT\cache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . c:\windows\$NtUninstallKB941644$\tcpip.sys
[-] 2006-01-13 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827] . . c:\windows\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[-] 2006-01-13 . 583E063FDC888CA30D05C2724B0D7EF4 . 359808 . . [5.1.2600.2827] . . c:\windows\$NtUninstallKB917953$\tcpip.sys
[-] 2005-05-25 . 63FDFEA54EB53DE2D863EE454937CE1E . 359936 . . [5.1.2600.2685] . . c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2005-05-25 . 88763A98A4C26C409741B4AA162720C9 . 359808 . . [5.1.2600.2685] . . c:\windows\$NtUninstallKB913446$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893066$\tcpip.sys

[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll
[-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll
[-] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB905414$\netman.dll

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ERDNT\cache\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\ERDNT\cache\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
[-] 2005-04-28 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665] . . c:\windows\$NtUninstallKB902400$\rpcss.dll
[-] 2005-01-14 . 419899803CA479B73B02390318C787C0 . 395776 . . [5.1.2600.2595] . . c:\windows\$NtUninstallKB894391$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\rpcss.dll

[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\ERDNT\cache\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe

[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\spoolsv.exe
[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
[-] 2004-08-04 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896423$\spoolsv.exe

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\ERDNT\cache\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-04 . A77DFB85FAEE49D66C74DA6024EBC69B . 611328 . . [5.82] . . c:\windows\$NtUninstallKB923191$\comctl32.dll

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\ERDNT\cache\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2005-07-26 04:39 . 34BBD9ACC1538818F2C878898C64E793 . 243200 . . [2001.12.4414.308] . . c:\windows\$NtUninstallKB950974_0$\es.dll
[-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-04 08:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB902400$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\ERDNT\cache\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2006-07-05 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll
[-] 2006-07-05 . D8DB5397DE07577C1CB50BA6D23B3AD4 . 984064 . . [5.1.2600.2945] . . c:\windows\$NtUninstallKB935839$\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB917422$\kernel32.dll

[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
[-] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB900725$\linkinfo.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\ERDNT\cache\mshtml.dll
[-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\system32\mshtml.dll
[-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2010-02-25 . 974772C74DA7C7A8E7C813A9908A845F . 5946880 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
[-] 2009-12-21 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\mshtml.dll
[-] 2009-12-21 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 . C0F9AC6FAB2C788FFEE3E69585A0E93F . 5944320 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 . CBB1EF54B86EDB78649909DD1699E5CA . 5940736 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\mshtml.dll
[-] 2009-10-22 . CDA69BC1C23B0EA033B989F67CB722FF . 5939712 . . [8.00.6001.18852] . . c:\windows\ie8updates\KB976325-IE8\mshtml.dll
[-] 2009-10-22 . A6CF28C6E0B6D10098AB601D85EE55E8 . 5943296 . . [8.00.6001.22942] . . c:\windows\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll
[-] 2009-08-29 . 0E49677EE57A928765FC47FFBACD5326 . 5940224 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976749-IE8\mshtml.dll
[-] 2009-08-29 . B68F6E6C66D17D9EDABF3D5DA71046DA . 5942272 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll
[-] 2009-07-19 . 5A32B43A48D6DCA339BF24105D9A028F . 5937152 . . [8.00.6001.18812] . . c:\windows\ie8updates\KB974455-IE8\mshtml.dll
[-] 2009-07-19 . F25D866DD486AD30E05E5596CB363C3E . 5938176 . . [8.00.6001.22902] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
[-] 2009-05-13 . EEAADAA744B20E68CF5EB4FBB4F8AFA9 . 5936128 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\mshtml.dll
[-] 2009-05-13 . EEAADAA744B20E68CF5EB4FBB4F8AFA9 . 5936128 . . [8.00.6001.18783] . . c:\windows\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\SP3GDR\mshtml.dll
[-] 2009-05-13 . 1290E417BF806185CC7B2845E78A104E . 5936128 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
[-] 2009-05-13 . 1290E417BF806185CC7B2845E78A104E . 5936128 . . [8.00.6001.22873] . . c:\windows\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\SP3QFE\mshtml.dll
[-] 2009-04-29 . 2B4315EC9E3124408A2A5074C4B97700 . 3596288 . . [7.00.6000.16850] . . c:\windows\ie8\mshtml.dll
[-] 2009-04-29 . C6FD770D518FB024245A0EE217D72BC1 . 3598336 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\mshtml.dll
[-] 2009-02-21 . 1BB754AB47B327DE8DBF2FA18C36357C . 3596800 . . [7.00.6000.21015] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . C7C3E41CC2F6EB4A629FE2184136C098 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-17 . 3B413267DA8AE71C20E5EF3E54F74728 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . CC9D001B7370B292C35B366CA05B12B4 . 3596288 . . [7.00.6000.20996] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . 121EC39A64D64205A88C2C45B034B455 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . C79FAD61CD4A26ED5AA8C16D991C6FBD . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-10-17 . EACAEDEF6FA2A969DE5B36190D45396F . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-16 . B74F31A4BD83797D7A083F922169287D . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-08-27 . 1AD035E04A7068EC2820B055A3131ED8 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-26 . 25CC085720EE3617FD1F8AB9E2F7CAB2 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-06-24 . EC936148284F557F19C333178768109B . 3592192 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2008-06-23 . 28B8231CA8D55FC85E027A57C90F5C88 . 3594240 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
[-] 2008-04-24 . 8976CAB317105F7431B08EA32AB73C65 . 3591680 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\mshtml.dll
[-] 2008-04-23 . 4D612FF5D3B7EEF200595AE6F95D5E68 . 3593728 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-02 . AB2C88167D78D71D93558ACECB24CC7A . 3591680 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\mshtml.dll
[-] 2008-03-01 . 4EE273E2B09317C1217EF0DB91F93534 . 3593216 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2007-12-08 . A097C36412455F0C7E42377FAF8809B7 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[-] 2007-12-07 . 976C46ED4A75FC66D9C596778898CE1E . 3593216 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
[-] 2007-10-30 . 54D8B404F17AA74C666F7F3AEF2AE459 . 3593216 . . [7.00.6000.20710] . . c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
[-] 2007-10-30 . 8AB7ECF59D6EBBE986277B65ED4A40A1 . 3590656 . . [7.00.6000.16587] . . c:\windows\ie7updates\KB944533-IE7\mshtml.dll
[-] 2007-08-22 . 591449BD8F2C8090B9259E88C78AE61D . 3058176 . . [6.00.2900.3199] . . c:\windows\$NtUninstallKB939653$\mshtml.dll
[-] 2007-08-22 . 885E3BF99EA4B2213901EBC35B34CF12 . 3064832 . . [6.00.2900.3199] . . c:\windows\$hf_mig$\KB939653\SP2QFE\mshtml.dll
[-] 2007-08-22 . 885E3BF99EA4B2213901EBC35B34CF12 . 3064832 . . [6.00.2900.3199] . . c:\windows\ie7\mshtml.dll
[-] 2007-08-20 . E267EE248CDA7667C19001C069DE867B . 3584512 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\mshtml.dll
[-] 2007-08-20 . AA8A4BD78D24FCDB96DDAEE3756AA372 . 3592192 . . [7.00.6000.20661] . . c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
[-] 2007-08-14 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB939653-IE7\mshtml.dll
[-] 2007-06-15 . 53F3FD772C010622346C39284C4A863B . 3064320 . . [6.00.2900.3157] . . c:\windows\$hf_mig$\KB937143\SP2QFE\mshtml.dll
[-] 2007-06-14 . F049C52772FC86FD5F6C16D77A2A6204 . 3058688 . . [6.00.2900.3157] . . c:\windows\$NtUninstallKB939653_0$\mshtml.dll
[-] 2007-05-04 . 00ADCB32832A10ED9419493BCEA97526 . 3064320 . . [6.00.2900.3132] . . c:\windows\$hf_mig$\KB933566\SP2QFE\mshtml.dll
[-] 2007-05-04 . 4D92717B5BBCE85F1254BAD23B0D357C . 3058688 . . [6.00.2900.3132] . . c:\windows\$NtUninstallKB937143$\mshtml.dll
[-] 2007-02-20 . 6B9D083C0D4C4555FE011B01A98872DA . 3056640 . . [6.00.2900.3086] . . c:\windows\$NtUninstallKB933566$\mshtml.dll
[-] 2007-02-20 . 2991727809C7AC3A33E4178CC73244D8 . 3063296 . . [6.00.2900.3086] . . c:\windows\$hf_mig$\KB931768\SP2QFE\mshtml.dll
[-] 2007-01-04 . 1C45525574EF206346FBAFCAAC7CC4A5 . 3062272 . . [6.00.2900.3059] . . c:\windows\$hf_mig$\KB928090\SP2QFE\mshtml.dll
[-] 2007-01-04 . F31274D7667D83E73C6EE16D2206B76C . 3056640 . . [6.00.2900.3059] . . c:\windows\$NtUninstallKB931768$\mshtml.dll
[-] 2006-10-23 . 88E1C15BB1A9ED3CBA4D6F2F408D5010 . 3061248 . . [6.00.2900.3020] . . c:\windows\$hf_mig$\KB925454\SP2QFE\mshtml.dll
[-] 2006-10-23 . 5FC7DE1195C8E9B5360FD65DBE95E5B0 . 3055104 . . [6.00.2900.3020] . . c:\windows\$NtUninstallKB928090$\mshtml.dll
[-] 2006-09-14 . BE45460D1453B7342E01EAE79BFBC681 . 3054592 . . [6.00.2900.2995] . . c:\windows\$NtUninstallKB925454$\mshtml.dll
[-] 2006-09-14 . CEFEA1C301139A817931BE132F0359FE . 3058688 . . [6.00.2900.2995] . . c:\windows\$hf_mig$\KB922760\SP2QFE\mshtml.dll
[-] 2006-07-28 . D251679BD9EF0250201FB899EC40FD32 . 3058176 . . [6.00.2900.2963] . . c:\windows\$hf_mig$\KB918899\SP2QFE\mshtml.dll
[-] 2006-07-28 . C7074DA3D8F8C0F6C03874BA0B05069C . 3054080 . . [6.00.2900.2963] . . c:\windows\$NtUninstallKB922760$\mshtml.dll
[-] 2006-02-01 . 51C91AC189321A320FC4BC90B56255A3 . 3073024 . . [6.00.2900.2838] . . c:\windows\$hf_mig$\KB912945\SP2QFE\mshtml.dll
[-] 2006-02-01 . 568A97E2B959FDD99557AD953702FC8C . 3070464 . . [6.00.2900.2838] . . c:\windows\$NtUninstallKB918899$\mshtml.dll
[-] 2005-07-20 . A14A7A206AE22DE4FE563E44CFC7DDF5 . 3016192 . . [6.00.2900.2722] . . c:\windows\$hf_mig$\KB896727\SP2QFE\mshtml.dll
[-] 2004-08-04 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB896727$\mshtml.dll

[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ERDNT\cache\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\ERDNT\cache\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll

[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\ERDNT\cache\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-02-16 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 05BE3D9A71972223AFF6A3C823BA51B1 . 2189312 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-12-08 . 78EC47F9B9A3A1D539262D8834C896CE . 2189184 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-08-05 . 8415D9C7C050E7022AED8ABF281BE4A6 . 2189184 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
[-] 2009-08-04 . FDE779EA1A564EBFE16F4E0F82B61BAD . 2189312 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-08 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[-] 2008-08-14 . 31914172342BFF330063F343AC6958FE . 2189184 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . EEAF32F8E15A24F62BECB1BD403BB5C5 . 2189184 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2007-02-28 . 5A5C8DB4AA962C714C8371FBDF189FC9 . 2182144 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2006-12-19 . CEF243F6DEFD20BE4ADDE26C7ECACB54 . 2182016 . . [5.1.2600.3051] . . c:\windows\$NtUninstallKB931784$\ntoskrnl.exe
[-] 2005-09-29 . B919A39ACAFF2188FA699E22DCB5F13F . 2180096 . . [5.1.2600.2765] . . c:\windows\$NtUninstallKB929338$\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2004-08-04 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896256$\ntoskrnl.exe

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ERDNT\cache\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
[-] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893756$\tapisrv.dll

[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB925902$\user32.dll
[-] 2004-08-04 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\user32.dll

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\ERDNT\cache\wininet.dll
[-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\system32\wininet.dll
[-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\system32\dllcache\wininet.dll
[-] 2010-02-25 . 4458D59F2B0369F4D3B137541D284041 . 919040 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
[-] 2009-12-21 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\wininet.dll
[-] 2009-12-21 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 . 6AF52998B90F72FF2325D84D90EDA1CC . 916480 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 . 75240F6EDBCE7B85DF66874407D38A4F . 916480 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\wininet.dll
[-] 2009-08-29 . CF0A5FE05BF614C24950D8FAEC1BC309 . 916480 . . [8.00.6001.18828] . . c:\windows\ie8updates\KB976325-IE8\wininet.dll
[-] 2009-08-29 . 972B226BDAD71C55F3CC9A72BBF8F1C1 . 916480 . . [8.00.6001.22918] . . c:\windows\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll
[-] 2009-07-03 . 7E8A47A2E6561274B83E257CE74803FD . 915456 . . [8.00.6001.18806] . . c:\windows\ie8updates\KB974455-IE8\wininet.dll
[-] 2009-07-03 . 38114DAB42FB2EB84D1726C42B8D80C5 . 915456 . . [8.00.6001.22896] . . c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
[-] 2009-05-13 . 366C72AF6970DB7BB39AB0142BF09DB5 . 915456 . . [8.00.6001.18783] . . c:\windows\ie8updates\KB972260-IE8\wininet.dll
[-] 2009-05-13 . 366C72AF6970DB7BB39AB0142BF09DB5 . 915456 . . [8.00.6001.18783] . . c:\windows\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\SP3GDR\wininet.dll
[-] 2009-05-13 . C0EB6850C8A02A154281749DC61FAF22 . 915456 . . [8.00.6001.22873] . . c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
[-] 2009-05-13 . C0EB6850C8A02A154281749DC61FAF22 . 915456 . . [8.00.6001.22873] . . c:\windows\SoftwareDistribution\Download\97fe76a20161cb86e78057600e7c82a0\SP3QFE\wininet.dll
[-] 2009-04-29 . 8E2D471157B0DF329D8D0EA5D83B0DDB . 827392 . . [7.00.6000.16850] . . c:\windows\ie8\wininet.dll
[-] 2009-04-29 . 62CCA075F44015147B8971DAFFBCFF76 . 828928 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB969897-IE8\wininet.dll
[-] 2009-03-03 . 28775945CCD53DEE280EF58DEA1A94C4 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2009-03-03 . C8667854873938CA13C986F16B0CD183 . 828416 . . [7.00.6000.21020] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2008-12-20 . 044E0A4E9FE97C0FB9AFE9C89E2A82E6 . 827904 . . [7.00.6000.20978] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . A82935D32D0672E8FF4E91AE398E901C . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 6741EAF7B7F110E803A6E38F6E5FA6B0 . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . 0D5B75171FF51775B630A431B6C667E8 . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . 77C192FE56A70D7FA0247BA0A6201C32 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . EF8EBA98145BFA44E80D17A3B3453300 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-06-23 . 8C13D4A7479FA0A026EDA8ABCE82C0ED . 826368 . . [7.00.6000.16705] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2008-06-23 . C66402A06B83B036C195242C0C8CF83C . 827904 . . [7.00.6000.20861] . . c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
[-] 2008-04-23 . F6589BE784647CFDBC22EA51CCB1A57A . 826368 . . [7.00.6000.16674] . . c:\windows\ie7updates\KB953838-IE7\wininet.dll
[-] 2008-04-23 . 41546B396A526918DA7995A02EA04E51 . 827392 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-01 . AD21461AEF8244EDEC2EF18E55E1DCF3 . 826368 . . [7.00.6000.16640] . . c:\windows\ie7updates\KB950759-IE7\wininet.dll
[-] 2008-03-01 . 6316C2F0C61271C8ABDFF7429174879E . 827392 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2007-12-07 . 806D274C9A6C3AAEA5EAE8E4AF841E04 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
[-] 2007-12-07 . B5B411BB229AE6EAD7652A32ED47BFB9 . 825344 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
[-] 2007-10-10 . 30C1E0F34AD2972C72A01DB5C74AB065 . 824832 . . [7.00.6000.16574] . . c:\windows\ie7updates\KB944533-IE7\wininet.dll
[-] 2007-10-10 . 0E5D918F87EFA7D2424D66B499C7EB04 . 825344 . . [7.00.6000.20696] . . c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
[-] 2007-08-22 . 1901AD51DA8BE9F8B38D5D526E5D1788 . 658944 . . [6.00.2900.3199] . . c:\windows\$NtUninstallKB939653$\wininet.dll
[-] 2007-08-22 . A1BC17EB3758D73C3938B2318820F5B4 . 665600 . . [6.00.2900.3199] . . c:\windows\$hf_mig$\KB939653\SP2QFE\wininet.dll
[-] 2007-08-22 . A1BC17EB3758D73C3938B2318820F5B4 . 665600 . . [6.00.2900.3199] . . c:\windows\ie7\wininet.dll
[-] 2007-08-20 . 774435E499D8E9643EC961A6103C361F . 824832 . . [7.00.6000.16544] . . c:\windows\ie7updates\KB942615-IE7\wininet.dll
[-] 2007-08-20 . 357D54BF94FE9D6D8505A96B5C2A3BCA . 825344 . . [7.00.6000.20661] . . c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
[-] 2007-08-14 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB939653-IE7\wininet.dll
[-] 2007-06-26 . E1A3DD68B5380B360A7310A64D9BB188 . 665600 . . [6.00.2900.3164] . . c:\windows\$hf_mig$\KB937143\SP2QFE\wininet.dll
[-] 2007-06-26 . 184E47C8F7B331025E6DC92740DB188F . 658944 . . [6.00.2900.3164] . . c:\windows\$NtUninstallKB939653_0$\wininet.dll
[-] 2007-04-18 . 4261BA03AFD659DE04F0A17DFBDD454D . 665600 . . [6.00.2900.3121] . . c:\windows\$hf_mig$\KB933566\SP2QFE\wininet.dll
[-] 2007-04-18 . B7156CD97E739F3014BC4D61758F868A . 658944 . . [6.00.2900.3121] . . c:\windows\$NtUninstallKB937143$\wininet.dll
[-] 2007-02-20 . B258C922D22DEEC880B60720531D7627 . 665600 . . [6.00.2900.3086] . . c:\windows\$hf_mig$\KB931768\SP2QFE\wininet.dll
[-] 2007-02-20 . 30D1C47E40EFBB792FF8D3C3B51CE507 . 658944 . . [6.00.2900.3086] . . c:\windows\$NtUninstallKB933566$\wininet.dll
[-] 2007-01-04 . 3FFA1573FC274E5AA7467D03941C45EE . 665088 . . [6.00.2900.3059] . . c:\windows\$hf_mig$\KB928090\SP2QFE\wininet.dll
[-] 2007-01-04 . 8C393DF5234CBCBFF1EE31902D6B40AE . 658944 . . [6.00.2900.3059] . . c:\windows\$NtUninstallKB931768$\wininet.dll
[-] 2006-10-23 . 231EF4179ACABE486376B5CA893F1076 . 664576 . . [6.00.2900.3020] . . c:\windows\$hf_mig$\KB925454\SP2QFE\wininet.dll
[-] 2006-10-23 . 6B2735ADFF5A5D3B9130CA4A794722F0 . 658944 . . [6.00.2900.3020] . . c:\windows\$NtUninstallKB928090$\wininet.dll
[-] 2006-09-14 . 621AF3F6174A3F60677F5230E28BCC07 . 658944 . . [6.00.2900.2995] . . c:\windows\$NtUninstallKB925454$\wininet.dll
[-] 2006-09-14 . D207370287CF769AEBEBF03837784963 . 664576 . . [6.00.2900.2995] . . c:\windows\$hf_mig$\KB922760\SP2QFE\wininet.dll
[-] 2006-06-23 . 64CE26DB72810B30F7855EA51E1DF836 . 664576 . . [6.00.2900.2937] . . c:\windows\$hf_mig$\KB918899\SP2QFE\wininet.dll
[-] 2006-06-23 . 2B4DB890936430C71419037039502752 . 658944 . . [6.00.2900.2937] . . c:\windows\$NtUninstallKB922760$\wininet.dll
[-] 2006-01-09 . D9E3F8440D208698B3F0E5CFAC26DAA1 . 658432 . . [6.00.2900.2823] . . c:\windows\$NtUninstallKB918899$\wininet.dll
[-] 2006-01-09 . DDE9597A3311748C1519444E2BC147BD . 662016 . . [6.00.2900.2823] . . c:\windows\$hf_mig$\KB912945\SP2QFE\wininet.dll
[-] 2005-07-03 . 6E533D155B259EB2363D3E04B5BE309F . 659456 . . [6.00.2900.2713] . . c:\windows\$hf_mig$\KB896727\SP2QFE\wininet.dll
[-] 2004-08-04 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB896727$\wininet.dll

PatriceB82 · Jul 1, 2010

Part two:

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ERDNT\cache\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
[-] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB938828$\explorer.exe

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-11-17 . 902CF9595F640E53F33C0F1637F464F9 . 171008 . . [5.1.2600.2567] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB888402$\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ERDNT\cache\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
[-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
[-] 2004-08-04 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB928255$\shsvcs.dll

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\ERDNT\cache\acpiec.sys
[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ERDNT\cache\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$NtServicePackUninstall$\aec.sys
[-] 2004-08-04 05:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtUninstallKB900485$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\ERDNT\cache\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:17 . 925F8B61ED301A317BA850EBEECBDAA0 . 927504 . . [4.1.0.61] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
[-] 2004-08-04 08:00 . DDF8D47ACF8FC3FE5F7F2B95C4D4D136 . 924432 . . [4.1.6140] . . c:\windows\$NtUninstallKB924667$\mfc40u.dll

[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2006-10-19 05:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\ERDNT\cache\mspmsnsv.dll
[-] 2006-10-19 05:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-19 05:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2005-01-28 20:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2005-01-28 20:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-04 08:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\ERDNT\cache\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-02-16 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . FFDCE1EEA79C678C40237D4E031E5B51 . 2066176 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-12-08 . A6683E23468776F75EB2D8C6A02AAD3B . 2066048 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-08-05 . 363B2BBEE0AEDC9E5433616D0AD0236A . 2066176 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 7437BA6F538E89381A2E3643AED296C7 . 2066048 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
[-] 2009-02-08 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[-] 2009-02-06 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . A25E9B86EFFB2AF33BF51E676B68BFB0 . 2066048 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 4AC58F03EB94A72809949D757FC39D80 . 2066048 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2007-02-28 . 4D3DBDCCBF97F5BA1E74F322B155C3BA . 2059392 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2006-12-19 . BA4B97C00A437C1CC3DA365D93EE1E9D . 2059392 . . [5.1.2600.3051] . . c:\windows\$NtUninstallKB931784$\ntkrnlpa.exe
[-] 2005-09-28 . C60248DDE015B0A73871A16576B7A945 . 2057344 . . [5.1.2600.2765] . . c:\windows\$NtUninstallKB929338$\ntkrnlpa.exe
[-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2004-08-04 . 947FB1D86D14AFCFFDB54BF837EC25D0 . 2056832 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB896256$\ntkrnlpa.exe

[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ERDNT\cache\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-04 08:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . 36ACA6CDC19C95FF468A1426EB7F32F0 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . ACA5D98663D879C6BAAFCEA7E2F1B710 . 185344 . . [5.1.2600.3077] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
[-] 2004-08-04 . 0546477BDE979E33294FE97F6B3DE84A . 185344 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB931261$\upnphost.dll

[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ERDNT\cache\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll

[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll

[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-04 08:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-06-02_00.23.11 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-01 18:53 . 2010-07-01 18:53 16384 c:\windows\temp\Perflib_Perfdata_f0.dat
+ 2010-07-01 18:53 . 2010-07-01 18:53 16384 c:\windows\temp\Perflib_Perfdata_268.dat
+ 2004-08-07 13:10 . 2010-06-08 07:51 72306 c:\windows\system32\perfc009.dat
+ 2010-06-06 02:08 . 2010-06-16 15:12 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2006-09-19 08:27 . 2010-06-16 15:12 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2006-09-19 08:27 . 2008-08-22 03:18 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2010-06-06 02:08 . 2010-06-09 05:18 16384 c:\windows\system32\config\systemprofile\IETldCache\index.dat
+ 2010-06-06 02:08 . 2010-06-16 15:12 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2006-09-19 08:27 . 2008-08-22 03:18 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2010-06-04 06:17 . 2010-06-04 06:17 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2009-07-12 07:02 . 2009-07-12 07:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2004-08-07 13:10 . 2010-06-08 07:51 444596 c:\windows\system32\perfh009.dat
+ 2010-06-25 16:24 . 2010-06-25 16:24 231888 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
+ 2010-06-25 16:24 . 2010-06-25 16:24 311760 c:\windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.dll
+ 2010-06-02 01:02 . 2010-06-02 01:02 195584 c:\windows\Installer\317b4.msi
+ 2010-07-01 17:30 . 2010-07-01 17:30 196608 c:\windows\ERDNT\AutoBackup\7-1-2010\Users\00000002\UsrClass.dat
+ 2010-07-01 17:30 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\7-1-2010\ERDNT.EXE
+ 2010-06-30 07:00 . 2010-06-30 07:00 196608 c:\windows\ERDNT\AutoBackup\6-30-2010\Users\00000002\UsrClass.dat
+ 2010-06-30 07:00 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\6-30-2010\ERDNT.EXE
+ 2010-06-29 14:31 . 2010-06-29 14:31 196608 c:\windows\ERDNT\AutoBackup\6-29-2010\Users\00000002\UsrClass.dat
+ 2010-06-29 14:31 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\6-29-2010\ERDNT.EXE
+ 2010-06-28 15:19 . 2010-06-28 15:19 196608 c:\windows\ERDNT\AutoBackup\6-28-2010\Users\00000002\UsrClass.dat
+ 2010-06-28 15:19 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\6-28-2010\ERDNT.EXE
+ 2010-06-28 02:34 . 2010-06-28 02:34 196608 c:\windows\ERDNT\AutoBackup\6-27-2010\Users\00000002\UsrClass.dat
+ 2010-06-28 02:34 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\6-27-2010\ERDNT.EXE
+ 2010-06-27 03:57 . 2010-06-27 03:57 196608 c:\windows\ERDNT\AutoBackup\6-26-2010\Users\00000002\UsrClass.dat
+ 2010-06-27 03:57 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\6-26-2010\ERDNT.EXE
+ 2010-06-27 02:47 . 2005-10-20 19:02 163328 c:\windows\ERDNT\6-26-2010\ERDNT.EXE
+ 2010-06-04 06:15 . 2010-06-04 06:15 20242432 c:\windows\Installer\15fac78.msp
+ 2010-07-01 17:30 . 2010-07-01 17:30 10760192 c:\windows\ERDNT\AutoBackup\7-1-2010\Users\00000001\NTUSER.DAT
+ 2010-06-30 07:00 . 2010-06-30 07:00 10760192 c:\windows\ERDNT\AutoBackup\6-30-2010\Users\00000001\NTUSER.DAT
+ 2010-06-29 14:31 . 2010-06-29 14:31 10760192 c:\windows\ERDNT\AutoBackup\6-29-2010\Users\00000001\NTUSER.DAT
+ 2010-06-28 15:19 . 2010-06-28 15:19 10760192 c:\windows\ERDNT\AutoBackup\6-28-2010\Users\00000001\NTUSER.DAT
+ 2010-06-28 02:34 . 2010-06-28 02:34 10760192 c:\windows\ERDNT\AutoBackup\6-27-2010\Users\00000001\NTUSER.DAT
+ 2010-06-27 03:57 . 2010-06-27 03:57 10727424 c:\windows\ERDNT\AutoBackup\6-26-2010\Users\00000001\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-04-10 868352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2010-05-11 1287120]

c:\documents and settings\Patrice\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\1158985060\\EE\\AOLServiceHost.exe"=
"c:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"=
"c:\\Program Files\\Common Files\\AolCoach\\en_en\\player\\AOLNySEV.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\3.0\\aoltpsd3.exe"=
"c:\\Program Files\\Common Files\\AOL\\1158985060\\EE\\aolsoftware.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\AOL 9.1\\waol.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [6/5/2010 6:29 PM 218592]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2/5/2010 3:35 PM 216200]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2/5/2010 3:35 PM 242896]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2/4/2010 2:03 PM 93872]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/12/2010 4:25 PM 308064]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\Spyware Doctor\BDT\BDTUpdateService.exe [6/5/2010 6:37 PM 112592]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [6/5/2010 6:29 PM 366840]
R2 SMSI Device Launch Service;Clearwire Device Launch Service;c:\program files\Clearwire\Connection Manager\DeviceLaunchSvc.exe [11/9/2009 12:00 PM 107856]
R3 bcm;WiMAX Network Adapter;c:\windows\system32\drivers\drxvi314.sys [1/24/2010 11:38 PM 282112]
R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\drivers\BcmBusCtr.sys [1/24/2010 11:38 PM 51712]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [8/22/2005 2:06 AM 231424]
S2 LinksysUpdater;Linksys Updater;c:\program files\Linksys\Linksys Updater\bin\LinksysUpdater.exe [1/15/2008 10:28 AM 204800]
S3 CLEARWIRERcAppSvc;Clearwire RcAppSvc;c:\program files\Clearwire\Connection Manager\RcAppSvc.exe [11/9/2009 12:02 PM 120144]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [1/15/2010 5:49 AM 227232]
S3 MusCDriverV32;MusCDriverV32;c:\windows\system32\drivers\MusCDriverV32.sys [9/19/2007 11:27 PM 513152]

--- Other Services/Drivers In Memory ---

*Deregistered* - PCTSDInjDriver32
.
Contents of the 'Scheduled Tasks' folder

2010-02-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 20:34]

2010-07-01 c:\windows\Tasks\User_Feed_Synchronization-{21626745-D438-4977-AFBA-A4080E34F1D8}.job
- c:\windows\system32\msfeedssync.exe [2007-08-14 11:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://gateway.yahoo.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = https://register.hp.com/servlet/Web...YEAR=2006&gwCountry=US&language=EN&prodOS=011
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5555
IE: &Yahoo! Search - file:///c:\program files\Yahoo!\Common/ycsrch.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - file:///c:\program files\Yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - file:///c:\program files\Yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm
Trusted Zone: adultfanfiction.net\www
Trusted Zone: freefm.com\adam
Trusted Zone: livejournal.com\www
FF - ProfilePath - c:\documents and settings\Patrice\Application Data\Mozilla\Firefox\Profiles\mtak9zax.default\
FF - prefs.js: browser.search.selectedEngine - AOL Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US

fficial
FF - prefs.js: keyword.URL - hxxp://aolsearch.aol.com/aol/search?invocationType=client_searchbox&query=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.07c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-01 12:12
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-2950592267-1235047977-1433109176-1006\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(968)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2010-07-01 12:20:26
ComboFix-quarantined-files.txt 2010-07-01 19:20
ComboFix2.txt 2010-06-02 00:25

Pre-Run: 117,666,566,144 bytes free
Post-Run: 118,009,798,656 bytes free

- - End Of File - - C5C053BDABAD087926B76EA7DAB202C4

km2357 · Jul 2, 2010

Step # 1: Restore Proxy Settings

In Internet Explorer: Tools Menu -> Internet Options -> Connections Tab ->Lan Settings > uncheck "use a proxy server" and check to "Automatically detect settings".

Open up Firefox, go to Tools Menu -> Options... -> Advanced Tab -> Network Tab -> "Settings" under Connection. And once in "Connection Settings" box, make sure that Direct Connection to the Internet has a mark by it then click OK.

Next, I'd like for you to uninstall Windows XP Service Pack 3, once its uninstalled reboot your computer. When your computer boots back up reinstall SP3. Once SP3 is reinstalled, rerun ComboFix.

Post the new ComboFix Log in your next post/reply.

PatriceB82 · Jul 2, 2010

the only options for the firefox were
-No proxy
-Auto detect proxy setting for this network
-Use system proxy settings
-Manual proxy configuration

I'm not sure how to uninstall the service pack because that option isn't avaliable in the add/remove section of the control panel. Also, my malware scanner just completed an automatic scan of my computer, is it safe to delete would it found or should I leave it be for now?

PatriceB82 · Jul 2, 2010

Okay, so I figured out how to uninstall the service pack three. The only problem is that to get my computer back to normal, I had to do two systems update, one to get SP3 back on my computer and another one that involved a lot of security updates. I'm currently sending this message by browsing through firefox because I can't get my IE to work. I think the second group of updates will correct that problem. My question is which combo fix would you like me to send you? The one I ran right after SP3 was installed or the one after I have the final bit of updates?

km2357 · Jul 2, 2010

the only options for the firefox were
-No proxy
-Auto detect proxy setting for this network
-Use system proxy settings
-Manual proxy configuration

Ok, did you select No proxy? Since you report Firefox is working, did you select that option or choose a different one?

Also, my malware scanner just completed an automatic scan of my computer, is it safe to delete would it found or should I leave it be for now?

What did it find?

Okay, so I figured out how to uninstall the service
pack three. The only problem is that to get my computer back to normal, I had to do two systems update, one to get SP3 back on my computer and another one that involved a lot of security updates. I'm currently sending this message by browsing through firefox because I can't get my IE to work. I think the second group of updates will correct that problem. My question is which combo fix would you like me to send you? The one I ran right after SP3 was installed or the one after I have the final bit of updates?

Go ahead and run ComboFix after the final bit of updates, if you haven't run it yet (after downloading the final bit of updates) delete ComboFix.exe and download the latest version from one of the two links below:

Link 1
Link 2

Be sure to save ComboFix.exe to your Desktop.

Besides posting the new ComboFix Log, let me know if IE is working and if it isn't what error message(s) are you getting?

PatriceB82 · Jul 3, 2010

Currently, firefox is set to 'use system proxy setting'
As for Spyware Doctore, the hits are coming up as trojan-downloader.murlo and trojan.generic as the major issues to deal with. I'm going to post the combofix next but just as a warning, to get everything back to relative normal, I had to redownload Spyware Doctor and IE8. The next post will be the new combofix.

PatriceB82 · Jul 3, 2010

ComboFix 10-07-01.02 - Patrice 07/03/2010 0:06.4.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.894.535 [GMT -7:00]
Running from: c:\documents and settings\Patrice\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
.

((((((((((((((((((((((((( Files Created from 2010-06-03 to 2010-07-03 )))))))))))))))))))))))))))))))
.

2010-07-03 04:40 . 2010-01-27 20:51 767952 ----a-w- c:\windows\BDTSupport.dll
2010-07-03 04:40 . 2010-01-22 15:56 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-07-03 04:40 . 2009-10-28 07:36 1152444 ----a-w- c:\windows\UDB.zip
2010-07-03 04:40 . 2008-11-26 18:08 131 ----a-w- c:\windows\IDB.zip
2010-07-03 04:40 . 2010-01-22 15:56 165840 ----a-w- c:\windows\PCTBDRes.dll
2010-07-03 04:40 . 2010-01-22 15:56 1652688 ----a-w- c:\windows\PCTBDCore.dll
2010-07-03 04:33 . 2010-02-05 16:17 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-07-03 04:32 . 2010-03-29 17:06 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-07-03 04:32 . 2009-11-23 20:54 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-07-03 04:32 . 2010-04-08 21:29 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-07-03 04:32 . 2010-07-03 04:41 -------- d-----w- c:\program files\Common Files\PC Tools
2010-07-03 04:32 . 2010-07-03 04:32 -------- d-----w- c:\documents and settings\Patrice\Application Data\PC Tools
2010-07-03 02:49 . 2010-05-06 10:41 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll
2010-07-02 18:59 . 2010-07-02 18:59 -------- d-----w- c:\windows\system32\winrm
2010-07-02 18:56 . 2010-07-02 18:59 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2010-07-02 18:48 . 2010-07-02 18:51 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Adobe
2010-07-02 18:46 . 2010-07-02 18:46 -------- d-----w- c:\documents and settings\Patrice\Application Data\Windows Desktop Search
2010-07-02 18:45 . 2010-07-03 02:38 -------- d-----w- c:\program files\Windows Desktop Search
2010-07-02 18:45 . 2010-07-02 18:45 -------- d-----w- c:\windows\system32\GroupPolicy
2010-07-02 18:41 . 2008-03-07 17:02 29696 ------w- c:\windows\system32\dllcache\mimefilt.dll
2010-07-02 18:41 . 2008-03-07 17:02 98304 ------w- c:\windows\system32\dllcache\nlhtml.dll
2010-07-02 18:41 . 2008-03-07 17:02 192000 ------w- c:\windows\system32\dllcache\offfilt.dll
2010-07-02 04:18 . 2010-07-02 04:25 -------- d-----w- c:\windows\ServicePackFiles
2010-07-02 03:53 . 2008-04-14 00:12 276992 ------w- c:\windows\system32\wmphoto.dll
2010-07-02 03:53 . 2008-04-14 00:12 69120 ------w- c:\windows\system32\wlanapi.dll
2010-07-02 03:53 . 2008-04-14 00:12 346112 ------w- c:\windows\system32\windowscodecsext.dll
2010-07-02 03:53 . 2008-04-14 00:12 712704 ------w- c:\windows\system32\windowscodecs.dll
2010-07-02 03:51 . 2008-04-14 00:12 144384 ------w- c:\windows\system32\onex.dll
2010-07-02 03:50 . 2008-04-14 00:12 33792 ------w- c:\windows\system32\mmcperf.exe
2010-07-02 03:50 . 2008-04-14 00:11 397312 ------w- c:\windows\system32\mmcex.dll
2010-07-02 03:50 . 2008-04-14 00:11 106496 ------w- c:\windows\system32\mmcfxcommon.dll
2010-07-02 03:50 . 2008-04-14 00:11 184320 ------w- c:\windows\system32\microsoft.managementconsole.dll
2010-07-02 03:50 . 2008-04-14 00:11 37376 ------w- c:\windows\system32\l2gpstore.dll
2010-07-02 03:50 . 2008-04-14 00:11 61440 ------w- c:\windows\system32\kmsvc.dll
2010-07-02 03:50 . 2008-04-14 00:09 6144 ------w- c:\windows\system32\kbdpash.dll
2010-07-02 03:50 . 2008-04-14 00:09 6144 ------w- c:\windows\system32\kbdnepr.dll
2010-07-02 03:50 . 2008-04-14 00:09 6144 ------w- c:\windows\system32\kbdiultn.dll
2010-07-02 03:50 . 2008-04-14 00:09 6144 ------w- c:\windows\system32\kbdbhc.dll
2010-07-02 02:10 . 2009-12-31 16:50 353792 ------w- c:\windows\system32\dllcache\srv.sys
2010-07-02 02:04 . 2010-02-24 13:11 455680 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2010-07-02 02:04 . 2010-07-02 02:04 -------- d-----w- C:\237a15cce4636501c27f8d17
2010-07-02 02:02 . 2009-02-09 12:10 401408 ------w- c:\windows\system32\dllcache\rpcss.dll
2010-07-02 02:02 . 2009-02-09 12:10 473600 ------w- c:\windows\system32\dllcache\fastprox.dll
2010-07-02 02:01 . 2009-06-25 08:25 730112 ------w- c:\windows\system32\dllcache\lsasrv.dll
2010-07-02 02:01 . 2009-02-09 12:10 617472 ------w- c:\windows\system32\dllcache\advapi32.dll
2010-07-02 02:01 . 2009-02-09 12:10 714752 ------w- c:\windows\system32\dllcache\ntdll.dll
2010-07-02 02:01 . 2010-02-16 14:08 2146304 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-07-02 02:01 . 2010-02-17 16:10 2189952 ------w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-07-02 02:01 . 2010-02-16 13:25 2024448 ------w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-07-02 01:55 . 2008-10-15 16:34 337408 ------w- c:\windows\system32\dllcache\netapi32.dll
2010-06-27 02:46 . 2010-06-27 02:46 -------- d-----w- c:\program files\ERUNT
2010-06-24 06:22 . 2010-06-24 06:22 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
2010-06-24 06:21 . 2010-06-24 06:21 -------- d-----w- c:\program files\McAfee Security Scan
2010-06-06 02:08 . 2010-06-06 02:08 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2010-06-06 01:29 . 2010-07-03 06:20 -------- d-----w- c:\program files\Spyware Doctor
2010-06-04 19:08 . 2010-06-04 19:08 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-06-04 15:15 . 2010-06-04 19:43 -------- d-----w- c:\documents and settings\Patrice\Local Settings\Application Data\eqtkggwya

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-03 07:02 . 2007-09-19 14:05 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-07-03 04:32 . 2010-05-28 03:30 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2010-07-03 02:16 . 2008-12-16 15:15 0 ----a-w- c:\documents and settings\Guest\Local Settings\Application Data\prvlcl.dat
2010-07-02 19:03 . 2006-09-19 03:15 -------- d-----w- c:\program files\Microsoft.NET
2010-07-02 04:29 . 2004-08-07 13:10 86835 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-06-16 16:16 . 2008-04-04 04:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-06-06 06:00 . 2006-09-23 03:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-06-06 03:54 . 2006-09-23 03:44 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-06-04 15:08 . 2009-01-04 09:38 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-02 17:27 . 2010-02-05 22:35 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-02 17:27 . 2010-02-05 22:35 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-02 00:27 . 2010-02-04 21:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-02 00:07 . 2010-06-02 00:07 -------- d-----w- c:\program files\Trend Micro
2010-05-28 02:42 . 2010-05-28 02:42 503808 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\msvcp71.dll
2010-05-28 02:42 . 2010-05-28 02:42 499712 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\jmc.dll
2010-05-28 02:42 . 2010-05-28 02:42 348160 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-7256d360-n\msvcr71.dll
2010-05-28 02:42 . 2010-05-28 02:42 61440 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-23defd8f-n\decora-sse.dll
2010-05-28 02:42 . 2010-05-28 02:42 12800 ----a-w- c:\documents and settings\Guest\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-23defd8f-n\decora-d3d.dll
2010-05-28 02:37 . 2007-02-07 21:28 89976 ----a-w- c:\documents and settings\Guest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-28 02:37 . 2010-05-28 02:37 -------- d-----w- c:\documents and settings\Guest\Application Data\Clearwire
2010-05-20 16:14 . 2010-05-18 16:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Clearwire
2010-05-18 23:48 . 2010-05-18 23:48 -------- d-----w- c:\documents and settings\Patrice\Application Data\Clearwire
2010-05-18 23:48 . 2010-05-18 23:48 -------- d-----w- c:\program files\Skyhook Wireless
2010-05-18 23:47 . 2010-05-18 23:47 -------- d-----w- c:\program files\Clearwire
2010-05-06 10:41 . 2004-08-04 08:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-03 21:06 . 2010-03-29 06:09 922400 ----a-w- c:\documents and settings\Patrice\Application Data\Sun\Java\JRERunOnce.exe
2010-05-02 05:22 . 2008-08-22 01:37 1851264 ----a-w- c:\windows\system32\win32k.sys
2010-04-29 22:39 . 2010-02-04 21:02 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 22:39 . 2010-02-04 21:02 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-20 05:30 . 2004-08-04 08:00 285696 ----a-w- c:\windows\system32\atmfd.dll
2007-10-06 22:00 . 2007-10-06 22:00 774144 ----a-w- c:\program files\RngInterstitial.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-06-02_00.23.11 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-08-20 02:02 . 2008-04-14 00:12 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
- 2008-08-20 02:02 . 2008-04-14 00:12 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2010-07-03 04:41 . 2010-07-03 04:41 16384 c:\windows\temp\Perflib_Perfdata_fa8.dat
+ 2010-07-03 04:23 . 2010-07-03 04:23 16384 c:\windows\temp\Perflib_Perfdata_16c.dat
+ 2008-05-27 05:18 . 2008-05-27 05:18 56320 c:\windows\system32\xmlfilter.dll
+ 2009-10-09 21:56 . 2009-10-09 21:56 14848 c:\windows\system32\wsmprovhost.exe
+ 2009-10-09 21:56 . 2009-10-09 21:56 12288 c:\windows\system32\wsmplpxy.dll
+ 2009-10-09 21:56 . 2009-10-09 21:56 12288 c:\windows\system32\winrssrv.dll
+ 2009-10-09 21:56 . 2009-10-09 21:56 22528 c:\windows\system32\winrshost.exe
+ 2009-10-09 23:22 . 2009-10-09 23:22 69632 c:\windows\system32\winrs.exe
+ 2009-10-09 21:56 . 2009-10-09 21:56 25088 c:\windows\system32\winrmprov.dll
+ 2009-10-09 21:56 . 2009-10-09 21:56 24064 c:\windows\system32\WindowsPowerShell\v1.0\pwrshsip.dll
+ 2010-07-02 03:49 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
- 2008-08-20 02:02 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 26112 c:\windows\system32\userinit.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 26112 c:\windows\system32\userinit.exe
+ 2008-05-27 05:19 . 2008-05-27 05:19 97792 c:\windows\system32\UncCplExt.dll
+ 2007-02-16 02:19 . 2008-04-14 00:12 60416 c:\windows\system32\tzchange.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 50688 c:\windows\system32\tspkg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50688 c:\windows\system32\tspkg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 53248 c:\windows\system32\tsgqec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 53248 c:\windows\system32\tsgqec.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmonui.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmonui.dll
+ 2008-05-27 04:59 . 2008-05-27 04:59 18904 c:\windows\system32\structuredqueryschematrivial.bin
+ 2008-08-22 01:37 . 2008-04-14 00:12 96768 c:\windows\system32\srvsvc.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 96768 c:\windows\system32\srvsvc.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 20992 c:\windows\system32\spupdwxp.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 20992 c:\windows\system32\spupdwxp.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 50688 c:\windows\system32\smss.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 50688 c:\windows\system32\smss.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 73796 c:\windows\system32\slserv.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 73796 c:\windows\system32\slserv.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 32866 c:\windows\system32\slrundll.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 32866 c:\windows\system32\slrundll.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 73832 c:\windows\system32\slcoinst.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 73832 c:\windows\system32\slcoinst.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 32768 c:\windows\system32\setupn.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 32768 c:\windows\system32\setupn.exe
+ 2008-05-27 05:17 . 2008-05-27 05:17 87552 c:\windows\system32\searchfilterhost.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 95744 c:\windows\system32\scardsvr.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 95744 c:\windows\system32\scardsvr.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 13312 c:\windows\system32\savedump.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 13312 c:\windows\system32\savedump.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 64000 c:\windows\system32\samlib.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 64000 c:\windows\system32\samlib.dll
+ 2008-05-27 05:18 . 2008-05-27 05:18 38400 c:\windows\system32\rtffilt.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 39936 c:\windows\system32\rshx32.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 39936 c:\windows\system32\rshx32.dll
+ 2010-07-02 04:11 . 2004-08-04 08:00 67584 c:\windows\system32\ReinstallBackups\0009\DriverFiles\i386\sdbus.sys
- 2004-08-04 08:00 . 2008-04-14 00:12 58368 c:\windows\system32\rastapi.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 58368 c:\windows\system32\rastapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 61952 c:\windows\system32\rasqec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 61952 c:\windows\system32\rasqec.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 61440 c:\windows\system32\rasman.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 61440 c:\windows\system32\rasman.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 88576 c:\windows\system32\rasauto.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 88576 c:\windows\system32\rasauto.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 76800 c:\windows\system32\qutil.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 76800 c:\windows\system32\qutil.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 62464 c:\windows\system32\qcliprov.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 62464 c:\windows\system32\qcliprov.dll
+ 2009-10-09 23:22 . 2009-10-09 23:22 42496 c:\windows\system32\pwrshplugin.dll
+ 2008-05-27 05:18 . 2008-05-27 05:18 71680 c:\windows\system32\propdefs.dll
+ 2010-03-31 07:16 . 2010-03-31 07:16 99176 c:\windows\system32\PresentationHostProxy.dll
+ 2005-10-29 06:49 . 2005-10-29 06:49 84480 c:\windows\system32\pintool.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 39936 c:\windows\system32\perfctrs.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 39936 c:\windows\system32\perfctrs.dll
+ 2004-08-07 13:10 . 2010-07-02 19:11 87464 c:\windows\system32\perfc009.dat
- 2006-09-19 19:18 . 2008-04-14 00:12 37376 c:\windows\system32\olecnv32.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 37376 c:\windows\system32\olecnv32.dll
+ 2008-05-27 05:19 . 2008-05-27 05:19 11264 c:\windows\system32\oephRes.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 91136 c:\windows\system32\ntprint.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 91136 c:\windows\system32\ntprint.dll
+ 2008-08-22 01:37 . 2008-04-14 00:12 76800 c:\windows\system32\nslookup.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 76800 c:\windows\system32\nslookup.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 98304 c:\windows\system32\nlhtml.dll
+ 2004-08-04 08:00 . 2008-03-07 17:02 98304 c:\windows\system32\nlhtml.dll
+ 2009-11-07 08:07 . 2009-11-07 08:07 49488 c:\windows\system32\netfxperf.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 30208 c:\windows\system32\napipsec.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 30208 c:\windows\system32\napipsec.dll
+ 2009-11-06 05:17 . 2009-11-06 05:17 11600 c:\windows\system32\mui\0409\mscorees.dll
+ 2010-07-02 03:51 . 2008-04-13 17:27 79872 c:\windows\system32\msxml6r.dll
- 2008-08-20 02:05 . 2008-04-13 17:27 79872 c:\windows\system32\msxml6r.dll
+ 2008-05-27 05:18 . 2008-05-27 05:18 44032 c:\windows\system32\msstrc.dll
+ 2008-05-27 05:17 . 2008-05-27 05:17 32768 c:\windows\system32\mssprxy.dll
+ 2008-05-27 05:17 . 2008-05-27 05:17 87552 c:\windows\system32\mssitlb.dll
+ 2008-05-27 05:17 . 2008-05-27 05:17 11776 c:\windows\system32\msshooks.dll
- 2008-08-20 02:05 . 2008-04-13 18:14 76800 c:\windows\system32\msshavmsg.dll
+ 2010-07-02 03:51 . 2008-04-13 18:14 76800 c:\windows\system32\msshavmsg.dll
+ 2008-05-27 05:17 . 2008-05-27 05:17 60416 c:\windows\system32\msscntrs.dll
+ 2008-05-27 05:17 . 2008-05-27 05:17 34816 c:\windows\system32\msscb.dll
+ 2008-08-22 01:37 . 2008-04-14 00:11 33792 c:\windows\system32\msgsvc.dll
- 2004-08-04 08:00 . 2008-04-14 00:11 33792 c:\windows\system32\msgsvc.dll
- 2007-08-14 01:54 . 2010-02-25 06:24 55296 c:\windows\system32\msfeedsbs.dll
+ 2007-08-14 01:54 . 2010-05-06 10:41 55296 c:\windows\system32\msfeedsbs.dll
+ 2004-08-04 08:00 . 2008-03-07 17:02 29696 c:\windows\system32\mimefilt.dll
- 2004-08-04 08:00 . 2008-04-14 00:11 29696 c:\windows\system32\mimefilt.dll
+ 2008-08-22 01:37 . 2008-04-14 00:11 14848 c:\windows\system32\mgmtapi.dll
- 2004-08-04 08:00 . 2008-04-14 00:11 14848 c:\windows\system32\mgmtapi.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 75264 c:\windows\system32\locator.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 75264 c:\windows\system32\locator.exe
- 2004-08-04 08:00 . 2008-04-14 00:11 13824 c:\windows\system32\lmhsvc.dll
+ 2008-08-22 01:37 . 2008-04-14 00:11 13824 c:\windows\system32\lmhsvc.dll
- 2004-08-04 08:00 . 2010-02-25 06:24 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-04 08:00 . 2010-05-06 10:41 25600 c:\windows\system32\jsproxy.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32285 c:\windows\system32\hsfcisp2.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32285 c:\windows\system32\hsfcisp2.dll
- 2004-08-04 08:00 . 2008-04-14 00:12 42496 c:\windows\system32\ftp.exe
+ 2008-08-22 01:37 . 2008-04-14 00:12 42496 c:\windows\system32\ftp.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 29696 c:\windows\system32\format.com
+ 2008-08-22 01:37 . 2008-04-14 00:12 29696 c:\windows\system32\format.com
+ 2010-07-02 03:49 . 2008-04-14 00:12 20992 c:\windows\system32\faxpatch.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 20992 c:\windows\system32\faxpatch.exe
+ 2010-07-02 03:50 . 2008-04-14 00:11 40960 c:\windows\system32\en\mmcex.resources.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 40960 c:\windows\system32\en\mmcex.resources.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 33792 c:\windows\system32\eapsvc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 33792 c:\windows\system32\eapsvc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 59392 c:\windows\system32\eapqec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 59392 c:\windows\system32\eapqec.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 40960 c:\windows\system32\eappprxy.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 40960 c:\windows\system32\eappprxy.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 94208 c:\windows\system32\eappgnui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 94208 c:\windows\system32\eappgnui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 30720 c:\windows\system32\eapolqec.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 30720 c:\windows\system32\eapolqec.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 70472 c:\windows\system32\dxva2.dll
- 2006-04-11 12:20 . 2008-04-13 19:17 83072 c:\windows\system32\drivers\wdmaud.sys
+ 2008-08-22 01:37 . 2008-04-13 19:17 83072 c:\windows\system32\drivers\wdmaud.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 25471 c:\windows\system32\drivers\watv10nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 25471 c:\windows\system32\drivers\watv10nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 22271 c:\windows\system32\drivers\watv06nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 22271 c:\windows\system32\drivers\watv06nt.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 34560 c:\windows\system32\drivers\wanarp.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 34560 c:\windows\system32\drivers\wanarp.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11935 c:\windows\system32\drivers\wadv11nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11935 c:\windows\system32\drivers\wadv11nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11871 c:\windows\system32\drivers\wadv09nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11871 c:\windows\system32\drivers\wadv09nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11295 c:\windows\system32\drivers\wadv08nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11295 c:\windows\system32\drivers\wadv08nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11807 c:\windows\system32\drivers\wadv07nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11807 c:\windows\system32\drivers\wadv07nt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:43 14208 c:\windows\system32\drivers\wacompen.sys
- 2008-08-20 02:07 . 2008-04-13 18:43 14208 c:\windows\system32\drivers\wacompen.sys
- 2004-08-04 08:00 . 2008-04-13 18:41 52352 c:\windows\system32\drivers\volsnap.sys
+ 2008-08-22 01:37 . 2008-04-13 18:41 52352 c:\windows\system32\drivers\volsnap.sys
+ 2008-08-22 01:37 . 2008-04-13 18:44 81664 c:\windows\system32\drivers\videoprt.sys
- 2004-08-04 08:00 . 2008-04-13 18:44 81664 c:\windows\system32\drivers\videoprt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 42240 c:\windows\system32\drivers\viaagp.sys
- 2008-08-20 02:07 . 2008-04-13 18:36 42240 c:\windows\system32\drivers\viaagp.sys
- 2004-08-04 08:00 . 2008-04-13 18:44 20992 c:\windows\system32\drivers\vga.sys
+ 2008-08-22 01:37 . 2008-04-13 18:44 20992 c:\windows\system32\drivers\vga.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 11325 c:\windows\system32\drivers\vchnt5.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 11325 c:\windows\system32\drivers\vchnt5.dll
+ 2008-08-22 01:37 . 2008-04-13 18:45 20608 c:\windows\system32\drivers\usbuhci.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 20608 c:\windows\system32\drivers\usbuhci.sys
- 2006-09-19 02:32 . 2008-04-13 18:45 26368 c:\windows\system32\drivers\usbstor.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 26368 c:\windows\system32\drivers\usbstor.sys
- 2007-01-01 18:43 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
+ 2008-08-22 01:37 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 17152 c:\windows\system32\drivers\usbohci.sys
- 2006-04-11 12:19 . 2008-04-13 18:45 17152 c:\windows\system32\drivers\usbohci.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 15872 c:\windows\system32\drivers\usbintel.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 15872 c:\windows\system32\drivers\usbintel.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 59520 c:\windows\system32\drivers\usbhub.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 59520 c:\windows\system32\drivers\usbhub.sys
+ 2008-08-22 01:39 . 2008-04-13 18:45 30208 c:\windows\system32\drivers\usbehci.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 30208 c:\windows\system32\drivers\usbehci.sys
- 2007-01-01 18:43 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 25728 c:\windows\system32\drivers\usbcamd2.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 25728 c:\windows\system32\drivers\usbcamd2.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 25600 c:\windows\system32\drivers\usbcamd.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 25600 c:\windows\system32\drivers\usbcamd.sys
- 2008-08-20 02:07 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023x.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023x.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023.sys
- 2004-08-04 08:00 . 2008-04-13 18:32 66048 c:\windows\system32\drivers\udfs.sys
+ 2008-08-22 01:37 . 2008-04-13 18:32 66048 c:\windows\system32\drivers\udfs.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 44672 c:\windows\system32\drivers\uagp35.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 44672 c:\windows\system32\drivers\uagp35.sys
+ 2008-08-22 01:39 . 2008-04-13 18:56 12288 c:\windows\system32\drivers\tunmp.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 12288 c:\windows\system32\drivers\tunmp.sys
+ 2008-08-22 01:37 . 2008-04-14 00:13 40840 c:\windows\system32\drivers\termdd.sys
- 2004-08-04 03:01 . 2008-04-14 00:13 40840 c:\windows\system32\drivers\termdd.sys
+ 2008-08-22 01:37 . 2008-04-14 00:13 21896 c:\windows\system32\drivers\tdtcp.sys
- 2004-08-04 08:00 . 2008-04-14 00:13 21896 c:\windows\system32\drivers\tdtcp.sys
+ 2008-08-22 01:37 . 2008-04-14 00:13 12040 c:\windows\system32\drivers\tdpipe.sys
- 2004-08-04 08:00 . 2008-04-14 00:13 12040 c:\windows\system32\drivers\tdpipe.sys
+ 2008-08-22 01:37 . 2008-04-13 19:00 19072 c:\windows\system32\drivers\tdi.sys
- 2004-08-04 08:00 . 2008-04-13 19:00 19072 c:\windows\system32\drivers\tdi.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 14976 c:\windows\system32\drivers\tape.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 14976 c:\windows\system32\drivers\tape.sys
- 2006-04-11 12:20 . 2008-04-13 19:15 60800 c:\windows\system32\drivers\sysaudio.sys
+ 2008-08-22 01:37 . 2008-04-13 19:15 60800 c:\windows\system32\drivers\sysaudio.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 56576 c:\windows\system32\drivers\swmidi.sys
- 2006-04-11 12:20 . 2008-04-13 18:45 56576 c:\windows\system32\drivers\swmidi.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 73472 c:\windows\system32\drivers\sr.sys
- 2004-08-04 08:00 . 2008-04-13 18:36 73472 c:\windows\system32\drivers\sr.sys

PatriceB82 · Jul 3, 2010

- 2004-08-04 08:00 . 2008-04-13 18:46 25344 c:\windows\system32\drivers\sonydcam.sys
+ 2008-08-22 01:37 . 2008-04-13 18:46 25344 c:\windows\system32\drivers\sonydcam.sys
- 2008-08-20 02:06 . 2004-08-04 05:41 13240 c:\windows\system32\drivers\slwdmsup.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 13240 c:\windows\system32\drivers\slwdmsup.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 95424 c:\windows\system32\drivers\slnthal.sys
- 2008-08-20 02:06 . 2004-08-04 05:41 95424 c:\windows\system32\drivers\slnthal.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 40960 c:\windows\system32\drivers\sisagp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 40960 c:\windows\system32\drivers\sisagp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 11392 c:\windows\system32\drivers\sfloppy.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 11392 c:\windows\system32\drivers\sfloppy.sys
+ 2008-08-22 01:39 . 2008-04-13 18:40 11008 c:\windows\system32\drivers\sffp_sd.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 11008 c:\windows\system32\drivers\sffp_sd.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 10240 c:\windows\system32\drivers\sffp_mmc.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 10240 c:\windows\system32\drivers\sffp_mmc.sys
+ 2008-08-22 01:39 . 2008-04-13 18:40 11904 c:\windows\system32\drivers\sffdisk.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 11904 c:\windows\system32\drivers\sffdisk.sys
+ 2008-08-22 01:37 . 2008-04-13 19:15 64512 c:\windows\system32\drivers\serial.sys
- 2004-08-04 08:00 . 2008-04-13 19:15 64512 c:\windows\system32\drivers\serial.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 15744 c:\windows\system32\drivers\serenum.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 15744 c:\windows\system32\drivers\serenum.sys
- 2004-08-04 08:00 . 2008-04-13 18:36 79232 c:\windows\system32\drivers\sdbus.sys
+ 2008-08-22 01:39 . 2008-04-13 18:36 79232 c:\windows\system32\drivers\sdbus.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 96384 c:\windows\system32\drivers\scsiport.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 96384 c:\windows\system32\drivers\scsiport.sys
- 2008-08-20 02:06 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismpx.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismpx.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismp.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:46 59136 c:\windows\system32\drivers\rfcomm.sys
- 2008-08-20 02:05 . 2008-04-13 18:46 59136 c:\windows\system32\drivers\rfcomm.sys
- 2006-04-11 12:18 . 2008-04-13 18:40 57600 c:\windows\system32\drivers\redbook.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 57600 c:\windows\system32\drivers\redbook.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 13776 c:\windows\system32\drivers\recagent.sys
- 2008-08-20 02:05 . 2004-08-04 05:41 13776 c:\windows\system32\drivers\recagent.sys
- 2004-08-04 08:00 . 2008-04-13 19:19 48384 c:\windows\system32\drivers\raspptp.sys
+ 2008-08-22 01:37 . 2008-04-13 19:19 48384 c:\windows\system32\drivers\raspptp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 41472 c:\windows\system32\drivers\raspppoe.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 41472 c:\windows\system32\drivers\raspppoe.sys
+ 2008-08-22 01:37 . 2008-04-13 19:19 51328 c:\windows\system32\drivers\rasl2tp.sys
- 2004-08-04 08:00 . 2008-04-13 19:19 51328 c:\windows\system32\drivers\rasl2tp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 69120 c:\windows\system32\drivers\psched.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 69120 c:\windows\system32\drivers\psched.sys
- 2004-08-04 08:00 . 2008-04-13 18:31 35840 c:\windows\system32\drivers\processr.sys
+ 2008-08-22 01:37 . 2008-04-13 18:31 35840 c:\windows\system32\drivers\processr.sys
- 2004-08-04 00:59 . 2008-04-13 18:40 24960 c:\windows\system32\drivers\pciidex.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 24960 c:\windows\system32\drivers\pciidex.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 68224 c:\windows\system32\drivers\pci.sys
- 2004-08-04 01:07 . 2008-04-13 18:36 68224 c:\windows\system32\drivers\pci.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 19712 c:\windows\system32\drivers\partmgr.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 19712 c:\windows\system32\drivers\partmgr.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 80128 c:\windows\system32\drivers\parport.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 80128 c:\windows\system32\drivers\parport.sys
+ 2008-08-22 01:37 . 2008-04-13 18:31 42752 c:\windows\system32\drivers\p3.sys
- 2004-08-04 08:00 . 2008-04-13 18:31 42752 c:\windows\system32\drivers\p3.sys
- 2004-08-04 08:00 . 2008-04-13 18:46 61696 c:\windows\system32\drivers\ohci1394.sys
+ 2008-08-22 01:37 . 2008-04-13 18:46 61696 c:\windows\system32\drivers\ohci1394.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 88320 c:\windows\system32\drivers\nwlnkipx.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 88320 c:\windows\system32\drivers\nwlnkipx.sys
+ 2008-08-22 01:37 . 2008-04-13 18:32 30848 c:\windows\system32\drivers\npfs.sys
- 2004-08-04 08:00 . 2008-04-13 18:32 30848 c:\windows\system32\drivers\npfs.sys
- 2004-08-04 08:00 . 2008-04-13 18:53 40320 c:\windows\system32\drivers\nmnt.sys
+ 2008-08-22 01:37 . 2008-04-13 18:53 40320 c:\windows\system32\drivers\nmnt.sys
+ 2008-08-22 01:37 . 2008-04-13 18:51 61824 c:\windows\system32\drivers\nic1394.sys
- 2004-08-04 08:00 . 2008-04-13 18:51 61824 c:\windows\system32\drivers\nic1394.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 34688 c:\windows\system32\drivers\netbios.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 34688 c:\windows\system32\drivers\netbios.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 40576 c:\windows\system32\drivers\ndproxy.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 40576 c:\windows\system32\drivers\ndproxy.sys
+ 2008-08-22 01:37 . 2008-04-13 19:20 91520 c:\windows\system32\drivers\ndiswan.sys
- 2004-08-04 08:00 . 2008-04-13 19:20 91520 c:\windows\system32\drivers\ndiswan.sys
+ 2008-08-22 01:37 . 2008-04-13 18:55 14592 c:\windows\system32\drivers\ndisuio.sys
- 2004-08-04 08:00 . 2008-04-13 18:55 14592 c:\windows\system32\drivers\ndisuio.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 10112 c:\windows\system32\drivers\ndistapi.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 10112 c:\windows\system32\drivers\ndistapi.sys
- 2008-08-20 02:05 . 2008-04-13 18:43 12672 c:\windows\system32\drivers\mutohpen.sys
+ 2010-07-02 03:51 . 2008-04-13 18:43 12672 c:\windows\system32\drivers\mutohpen.sys
+ 2008-08-22 01:39 . 2008-04-13 18:36 15488 c:\windows\system32\drivers\mssmbios.sys
- 2004-08-04 08:00 . 2008-04-13 18:36 15488 c:\windows\system32\drivers\mssmbios.sys
- 2004-08-04 08:00 . 2008-04-13 18:56 35072 c:\windows\system32\drivers\msgpc.sys
+ 2008-08-22 01:37 . 2008-04-13 18:56 35072 c:\windows\system32\drivers\msgpc.sys
- 2004-08-04 08:00 . 2008-04-13 18:32 19072 c:\windows\system32\drivers\msfs.sys
+ 2008-08-22 01:37 . 2008-04-13 18:32 19072 c:\windows\system32\drivers\msfs.sys
- 2004-08-04 08:00 . 2008-04-13 18:39 42368 c:\windows\system32\drivers\mountmgr.sys
+ 2008-08-22 01:37 . 2008-04-13 18:39 42368 c:\windows\system32\drivers\mountmgr.sys
- 2004-08-04 08:00 . 2008-04-13 18:39 23040 c:\windows\system32\drivers\mouclass.sys
+ 2008-08-22 01:37 . 2008-04-13 18:39 23040 c:\windows\system32\drivers\mouclass.sys
+ 2008-08-22 01:37 . 2008-04-13 19:00 30080 c:\windows\system32\drivers\modem.sys
- 2004-08-04 08:00 . 2008-04-13 19:00 30080 c:\windows\system32\drivers\modem.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 63744 c:\windows\system32\drivers\mf.sys
- 2004-08-04 08:00 . 2008-04-13 18:36 63744 c:\windows\system32\drivers\mf.sys
+ 2008-08-22 01:37 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
- 2004-08-04 08:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
+ 2008-08-22 01:37 . 2008-04-13 18:39 24576 c:\windows\system32\drivers\kbdclass.sys
- 2004-08-04 08:00 . 2008-04-13 18:39 24576 c:\windows\system32\drivers\kbdclass.sys
- 2001-08-17 15:58 . 2008-04-13 18:36 37248 c:\windows\system32\drivers\isapnp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 37248 c:\windows\system32\drivers\isapnp.sys
+ 2008-08-22 01:37 . 2008-04-13 18:54 11264 c:\windows\system32\drivers\irenum.sys
- 2004-08-04 08:00 . 2008-04-13 18:54 11264 c:\windows\system32\drivers\irenum.sys
- 2004-08-03 18:00 . 2008-04-13 18:54 88192 c:\windows\system32\drivers\irda.sys
+ 2008-08-22 01:37 . 2008-04-13 18:54 88192 c:\windows\system32\drivers\irda.sys
- 2004-08-04 08:00 . 2008-04-13 19:19 75264 c:\windows\system32\drivers\ipsec.sys
+ 2008-08-22 01:37 . 2008-04-13 19:19 75264 c:\windows\system32\drivers\ipsec.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 20864 c:\windows\system32\drivers\ipinip.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 20864 c:\windows\system32\drivers\ipinip.sys
- 2004-08-04 08:00 . 2008-04-13 18:53 36608 c:\windows\system32\drivers\ip6fw.sys
+ 2008-08-22 01:39 . 2008-04-13 18:53 36608 c:\windows\system32\drivers\ip6fw.sys
- 2006-04-11 13:36 . 2008-04-13 18:31 36352 c:\windows\system32\drivers\intelppm.sys
+ 2008-08-22 01:39 . 2008-04-13 18:31 36352 c:\windows\system32\drivers\intelppm.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 42112 c:\windows\system32\drivers\imapi.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 42112 c:\windows\system32\drivers\imapi.sys
+ 2008-08-22 01:37 . 2008-04-13 19:18 52480 c:\windows\system32\drivers\i8042prt.sys
- 2004-08-04 08:00 . 2008-04-13 19:18 52480 c:\windows\system32\drivers\i8042prt.sys
- 2006-09-19 06:45 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 24960 c:\windows\system32\drivers\hidparse.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 24960 c:\windows\system32\drivers\hidparse.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 19200 c:\windows\system32\drivers\hidir.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 19200 c:\windows\system32\drivers\hidir.sys
- 2004-08-04 08:00 . 2008-04-13 18:45 36864 c:\windows\system32\drivers\hidclass.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 36864 c:\windows\system32\drivers\hidclass.sys
- 2008-08-20 02:03 . 2008-04-13 18:46 25600 c:\windows\system32\drivers\hidbth.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 25600 c:\windows\system32\drivers\hidbth.sys
- 2008-08-20 02:03 . 2008-04-13 18:36 46464 c:\windows\system32\drivers\gagp30kx.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 46464 c:\windows\system32\drivers\gagp30kx.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 20480 c:\windows\system32\drivers\flpydisk.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 20480 c:\windows\system32\drivers\flpydisk.sys
+ 2008-08-22 01:37 . 2008-04-13 18:33 44544 c:\windows\system32\drivers\fips.sys
- 2004-08-04 08:00 . 2008-04-13 18:33 44544 c:\windows\system32\drivers\fips.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 27392 c:\windows\system32\drivers\fdc.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 27392 c:\windows\system32\drivers\fdc.sys
- 2004-08-04 08:00 . 2008-04-13 18:38 71168 c:\windows\system32\drivers\dxg.sys
+ 2008-08-22 01:37 . 2008-04-13 18:38 71168 c:\windows\system32\drivers\dxg.sys
- 2006-04-11 12:19 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
- 2006-04-11 12:20 . 2008-04-13 18:45 52864 c:\windows\system32\drivers\dmusic.sys
+ 2008-08-22 01:37 . 2008-04-13 18:45 52864 c:\windows\system32\drivers\dmusic.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 14208 c:\windows\system32\drivers\diskdump.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 14208 c:\windows\system32\drivers\diskdump.sys
- 2004-08-04 08:00 . 2008-04-13 18:40 36352 c:\windows\system32\drivers\disk.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 36352 c:\windows\system32\drivers\disk.sys
+ 2008-08-22 01:37 . 2008-04-13 18:31 36736 c:\windows\system32\drivers\crusoe.sys
- 2004-08-04 08:00 . 2008-04-13 18:31 36736 c:\windows\system32\drivers\crusoe.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 10240 c:\windows\system32\drivers\compbatt.sys
- 2001-08-17 08:58 . 2008-04-13 18:36 10240 c:\windows\system32\drivers\compbatt.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 13952 c:\windows\system32\drivers\cmbatt.sys
- 2004-08-03 18:07 . 2008-04-13 18:36 13952 c:\windows\system32\drivers\cmbatt.sys
- 2004-08-04 08:00 . 2008-04-13 19:16 49536 c:\windows\system32\drivers\classpnp.sys
+ 2008-08-22 01:37 . 2008-04-13 19:16 49536 c:\windows\system32\drivers\classpnp.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 15423 c:\windows\system32\drivers\ch7xxnt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 15423 c:\windows\system32\drivers\ch7xxnt5.dll
- 2004-08-04 08:00 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
- 2004-08-04 08:00 . 2008-04-13 19:14 63744 c:\windows\system32\drivers\cdfs.sys
+ 2008-08-22 01:37 . 2008-04-13 19:14 63744 c:\windows\system32\drivers\cdfs.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 18944 c:\windows\system32\drivers\bthusb.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 18944 c:\windows\system32\drivers\bthusb.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 36480 c:\windows\system32\drivers\bthprint.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 36480 c:\windows\system32\drivers\bthprint.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 37888 c:\windows\system32\drivers\bthmodem.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 37888 c:\windows\system32\drivers\bthmodem.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\bthenum.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\bthenum.sys
+ 2008-08-22 01:37 . 2008-04-13 18:53 71552 c:\windows\system32\drivers\bridge.sys
- 2004-08-04 08:00 . 2008-04-13 18:53 71552 c:\windows\system32\drivers\bridge.sys
- 2001-08-17 08:57 . 2008-04-13 18:36 14208 c:\windows\system32\drivers\battc.sys
+ 2008-08-22 01:37 . 2008-04-13 18:36 14208 c:\windows\system32\drivers\battc.sys
- 2008-08-20 02:02 . 2008-04-14 00:11 17279 c:\windows\system32\drivers\atv10nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 17279 c:\windows\system32\drivers\atv10nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 14143 c:\windows\system32\drivers\atv06nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 14143 c:\windows\system32\drivers\atv06nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 25471 c:\windows\system32\drivers\atv04nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 25471 c:\windows\system32\drivers\atv04nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 11359 c:\windows\system32\drivers\atv02nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 11359 c:\windows\system32\drivers\atv02nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 21183 c:\windows\system32\drivers\atv01nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 21183 c:\windows\system32\drivers\atv01nt5.dll
+ 2008-08-22 01:37 . 2008-04-13 18:51 55808 c:\windows\system32\drivers\atmlane.sys
- 2004-08-04 08:00 . 2008-04-13 18:51 55808 c:\windows\system32\drivers\atmlane.sys
+ 2008-08-22 01:37 . 2008-04-13 18:51 59904 c:\windows\system32\drivers\atmarpc.sys
- 2004-08-04 08:00 . 2008-04-13 18:51 59904 c:\windows\system32\drivers\atmarpc.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 63488 c:\windows\system32\drivers\atinxsxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 63488 c:\windows\system32\drivers\atinxsxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 31744 c:\windows\system32\drivers\atinxbxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 31744 c:\windows\system32\drivers\atinxbxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 73216 c:\windows\system32\drivers\atintuxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 73216 c:\windows\system32\drivers\atintuxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 13824 c:\windows\system32\drivers\atinttxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 13824 c:\windows\system32\drivers\atinttxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 28672 c:\windows\system32\drivers\atinsnxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 28672 c:\windows\system32\drivers\atinsnxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 52224 c:\windows\system32\drivers\atinraxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 52224 c:\windows\system32\drivers\atinraxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 14336 c:\windows\system32\drivers\atinpdxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 14336 c:\windows\system32\drivers\atinpdxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 13824 c:\windows\system32\drivers\atinmdxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 13824 c:\windows\system32\drivers\atinmdxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 57856 c:\windows\system32\drivers\atinbtxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 57856 c:\windows\system32\drivers\atinbtxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 26367 c:\windows\system32\drivers\ati1snxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 26367 c:\windows\system32\drivers\ati1snxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 30671 c:\windows\system32\drivers\ati1raxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 30671 c:\windows\system32\drivers\ati1raxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 56623 c:\windows\system32\drivers\ati1btxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 56623 c:\windows\system32\drivers\ati1btxx.sys
+ 2008-08-22 01:37 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
- 2004-08-04 00:59 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
- 2004-08-04 08:00 . 2008-04-13 18:57 14336 c:\windows\system32\drivers\asyncmac.sys
+ 2008-08-22 01:37 . 2008-04-13 18:57 14336 c:\windows\system32\drivers\asyncmac.sys
- 2004-08-04 08:00 . 2008-04-13 18:51 60800 c:\windows\system32\drivers\arp1394.sys
+ 2008-08-22 01:37 . 2008-04-13 18:51 60800 c:\windows\system32\drivers\arp1394.sys
- 2004-08-04 08:00 . 2008-04-13 18:31 37760 c:\windows\system32\drivers\amdk7.sys
+ 2008-08-22 01:39 . 2008-04-13 18:31 37760 c:\windows\system32\drivers\amdk7.sys
+ 2008-08-22 01:37 . 2008-04-13 18:31 37376 c:\windows\system32\drivers\amdk6.sys
- 2004-08-04 08:00 . 2008-04-13 18:31 37376 c:\windows\system32\drivers\amdk6.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 43008 c:\windows\system32\drivers\amdagp.sys
- 2008-08-20 02:02 . 2008-04-13 18:36 43008 c:\windows\system32\drivers\amdagp.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 42752 c:\windows\system32\drivers\alim1541.sys
- 2008-08-20 02:02 . 2008-04-13 18:36 42752 c:\windows\system32\drivers\alim1541.sys
- 2008-08-20 02:02 . 2008-04-13 18:36 44928 c:\windows\system32\drivers\agpcpq.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 44928 c:\windows\system32\drivers\agpcpq.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 42368 c:\windows\system32\drivers\agp440.sys
- 2008-08-20 02:02 . 2008-04-13 18:36 42368 c:\windows\system32\drivers\agp440.sys
- 2004-08-04 08:00 . 2008-04-13 18:46 53376 c:\windows\system32\drivers\1394bus.sys
+ 2008-08-22 01:37 . 2008-04-13 18:46 53376 c:\windows\system32\drivers\1394bus.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 56320 c:\windows\system32\dot3msm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 56320 c:\windows\system32\dot3msm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39936 c:\windows\system32\dot3gpclnt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39936 c:\windows\system32\dot3gpclnt.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 57856 c:\windows\system32\dot3cfg.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 57856 c:\windows\system32\dot3cfg.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 26112 c:\windows\system32\dot3api.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 26112 c:\windows\system32\dot3api.dll
- 2009-06-27 03:09 . 2010-02-25 06:24 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-06-27 03:09 . 2010-05-06 10:41 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-10-08 21:56 . 2009-10-08 21:56 20480 c:\windows\system32\dllcache\oleaccrc.dll
- 2008-08-20 02:05 . 2008-04-13 17:27 79872 c:\windows\system32\dllcache\msxml6r.dll
+ 2010-07-02 03:51 . 2008-04-13 17:27 79872 c:\windows\system32\dllcache\msxml6r.dll
- 2007-11-01 04:25 . 2010-02-25 06:24 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-11-01 04:25 . 2010-05-06 10:41 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2006-06-23 11:02 . 2010-02-25 06:24 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2006-06-23 11:02 . 2010-05-06 10:41 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-06-27 03:13 . 2010-04-16 11:43 41984 c:\windows\system32\dllcache\iecompat.dll
+ 2010-03-05 14:37 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39936 c:\windows\system32\dimsroam.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39936 c:\windows\system32\dimsroam.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 19456 c:\windows\system32\dimsntfy.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 19456 c:\windows\system32\dimsntfy.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 48640 c:\windows\system32\dhcpqec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 48640 c:\windows\system32\dhcpqec.dll
- 2004-08-04 08:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
+ 2008-08-22 01:37 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 12800 c:\windows\system32\credssp.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 12800 c:\windows\system32\credssp.dll
+ 2010-06-06 02:08 . 2010-07-03 04:52 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2010-07-02 04:43 . 2010-07-02 04:43 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012010070120100702\index.dat
- 2006-09-19 08:27 . 2008-08-22 03:18 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2006-09-19 08:27 . 2010-07-03 04:52 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2010-06-06 02:08 . 2010-07-03 04:52 16384 c:\windows\system32\config\systemprofile\IETldCache\index.dat
- 2006-09-19 08:27 . 2008-08-22 03:18 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2010-07-03 04:52 . 2010-07-03 04:52 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-08-22 01:37 . 2008-04-14 00:12 19968 c:\windows\system32\cacls.exe
- 2004-08-04 08:00 . 2008-04-14 00:12 19968 c:\windows\system32\cacls.exe
+ 2005-10-29 06:49 . 2005-10-29 06:49 25600 c:\windows\system32\bcsprsrc.dll
+ 2005-10-28 23:40 . 2005-10-28 23:40 96792 c:\windows\system32\basecsp.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 32768 c:\windows\system32\ativtmxx.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32768 c:\windows\system32\ativtmxx.dll
+ 2004-08-04 08:00 . 2010-03-05 14:37 65536 c:\windows\system32\asycfilt.dll
- 2010-05-26 15:15 . 2010-04-22 22:21 16896 c:\windows\SoftwareDistribution\Download\15fb6079829f3095c7ac4c815978e93c\update\tzchange.dll
- 2010-05-26 15:15 . 2009-05-26 09:01 26488 c:\windows\SoftwareDistribution\Download\15fb6079829f3095c7ac4c815978e93c\update\spcustom.dll
- 2010-05-26 15:15 . 2010-04-21 13:28 46080 c:\windows\SoftwareDistribution\Download\15fb6079829f3095c7ac4c815978e93c\tzchange.exe
- 2010-05-26 15:15 . 2010-04-22 22:21 16896 c:\windows\SoftwareDistribution\Download\15fb6079829f3095c7ac4c815978e93c\tzchange.dll
- 2010-05-26 15:15 . 2009-05-26 09:01 17272 c:\windows\SoftwareDistribution\Download\15fb6079829f3095c7ac4c815978e93c\spmsg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 32866 c:\windows\slrundll.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 32866 c:\windows\slrundll.exe
+ 2010-07-02 03:51 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
- 2008-08-20 02:08 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
- 2008-08-20 02:07 . 2004-08-04 05:29 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
+ 2010-07-02 03:53 . 2004-08-04 05:29 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wups.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wups.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\wstdecod.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\wstdecod.dll
- 2008-08-20 02:07 . 2008-04-13 18:46 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
+ 2010-07-02 03:53 . 2008-04-13 18:46 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 22528 c:\windows\ServicePackFiles\i386\wsock32.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 22528 c:\windows\ServicePackFiles\i386\wsock32.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
+ 2010-07-02 03:53 . 2004-08-04 05:29 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\wship6.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\wship6.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\wshext.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\wshext.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wpnpinst.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wpnpinst.exe
+ 2010-07-02 03:53 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 95232 c:\windows\ServicePackFiles\i386\wmiutils.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 95232 c:\windows\ServicePackFiles\i386\wmiutils.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\wlnotify.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\wlnotify.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\winsta.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\winsta.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 99328 c:\windows\ServicePackFiles\i386\winscard.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 99328 c:\windows\ServicePackFiles\i386\winscard.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\wextract.exe
+ 2010-07-02 03:53 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\wextract.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
+ 2010-07-02 03:53 . 2008-04-13 19:17 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
- 2008-08-20 02:07 . 2008-04-13 19:17 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
+ 2010-07-02 03:53 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
- 2008-08-20 02:07 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
+ 2010-07-02 03:53 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
- 2008-08-20 02:07 . 2004-08-04 05:29 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
+ 2010-07-02 03:53 . 2004-08-04 05:29 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
+ 2010-07-02 03:53 . 2008-04-13 18:45 31744 c:\windows\ServicePackFiles\i386\wceusbsh.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 31744 c:\windows\ServicePackFiles\i386\wceusbsh.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
+ 2010-07-02 03:53 . 2008-04-14 00:12 43008 c:\windows\ServicePackFiles\i386\wbemperf.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 43008 c:\windows\ServicePackFiles\i386\wbemperf.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
+ 2010-07-02 03:52 . 2004-08-04 05:29 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:44 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
- 2008-08-20 02:07 . 2008-04-13 18:44 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
- 2008-08-20 02:07 . 2008-04-13 18:57 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:57 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
+ 2010-07-02 03:52 . 2004-08-04 05:29 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
- 2008-08-20 02:07 . 2004-08-04 05:29 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:43 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
- 2008-08-20 02:07 . 2008-04-13 18:43 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 46080 c:\windows\ServicePackFiles\i386\wab.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 46080 c:\windows\ServicePackFiles\i386\wab.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
- 2008-08-20 02:07 . 2008-04-13 18:41 52352 c:\windows\ServicePackFiles\i386\volsnap.sys
+ 2010-07-02 03:52 . 2008-04-13 18:41 52352 c:\windows\ServicePackFiles\i386\volsnap.sys
+ 2010-07-02 03:52 . 2008-04-13 18:44 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
- 2008-08-20 02:07 . 2008-04-13 18:44 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
- 2008-08-20 02:07 . 2008-04-13 18:36 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:44 20992 c:\windows\ServicePackFiles\i386\vga.sys
- 2008-08-20 02:07 . 2008-04-13 18:44 20992 c:\windows\ServicePackFiles\i386\vga.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\version.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\version.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\verifier.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\verifier.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\utilman.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\utilman.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\userinit.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\userinit.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\usbui.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\usbui.dll
- 2008-08-20 02:07 . 2008-04-13 18:45 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 26112 c:\windows\ServicePackFiles\i386\usbser.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 26112 c:\windows\ServicePackFiles\i386\usbser.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
+ 2010-07-02 03:52 . 2008-04-13 18:47 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
- 2008-08-20 02:07 . 2008-04-13 18:47 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
- 2008-08-20 02:07 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
- 2008-08-20 02:07 . 2008-04-13 18:45 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys
- 2008-08-20 02:07 . 2008-04-13 18:45 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys
- 2008-08-20 02:07 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023.sys
- 2008-08-20 02:07 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023.sys
- 2008-08-20 02:07 . 2004-08-04 05:31 32384 c:\windows\ServicePackFiles\i386\usb101et.sys
+ 2010-07-02 03:52 . 2004-08-04 05:31 32384 c:\windows\ServicePackFiles\i386\usb101et.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 37888 c:\windows\ServicePackFiles\i386\url.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 37888 c:\windows\ServicePackFiles\i386\url.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\ups.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\ups.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe
- 2008-08-20 02:07 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\uniplat.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\uniplat.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\unimdmat.dll
- 2008-08-20 02:07 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\unimdmat.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\umandlg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\umandlg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll
- 2008-08-20 02:06 . 2008-04-13 18:32 66048 c:\windows\ServicePackFiles\i386\udfs.sys
+ 2010-07-02 03:52 . 2008-04-13 18:32 66048 c:\windows\ServicePackFiles\i386\udfs.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 44672 c:\windows\ServicePackFiles\i386\uagp35.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 44672 c:\windows\ServicePackFiles\i386\uagp35.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\tzchange.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\tzchange.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\twext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\twext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\twain_32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\twain_32.dll
- 2008-08-20 02:06 . 2008-04-13 18:56 12288 c:\windows\ServicePackFiles\i386\tunmp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 12288 c:\windows\ServicePackFiles\i386\tunmp.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\ttyui.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\ttyui.dll
+ 2010-07-02 03:52 . 2007-04-02 15:31 39936 c:\windows\ServicePackFiles\i386\ttyres.dll
- 2008-08-20 02:06 . 2007-04-02 15:31 39936 c:\windows\ServicePackFiles\i386\ttyres.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\tspkg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\tspkg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:13 12168 c:\windows\ServicePackFiles\i386\tsddd.dll
- 2008-08-20 02:06 . 2008-04-14 00:13 12168 c:\windows\ServicePackFiles\i386\tsddd.dll
- 2008-08-20 02:06 . 2008-04-14 00:11 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:11 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll
+ 2010-07-02 03:52 . 2007-10-30 10:06 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs
- 2008-08-20 02:06 . 2007-10-30 10:06 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs
- 2008-08-20 02:06 . 2007-12-12 10:33 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs
+ 2010-07-02 03:52 . 2007-12-12 10:33 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs
- 2008-08-20 02:06 . 2008-04-14 00:12 93696 c:\windows\ServicePackFiles\i386\tscfgwmi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 93696 c:\windows\ServicePackFiles\i386\tscfgwmi.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\trkwks.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\trkwks.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 12800 c:\windows\ServicePackFiles\i386\tree.com
- 2008-08-20 02:06 . 2008-04-14 00:12 12800 c:\windows\ServicePackFiles\i386\tree.com
- 2008-08-20 02:06 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\tracert.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\tracert.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe
+ 2010-07-02 03:52 . 2008-04-14 00:13 40840 c:\windows\ServicePackFiles\i386\termdd.sys
- 2008-08-20 02:06 . 2008-04-14 00:13 40840 c:\windows\ServicePackFiles\i386\termdd.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\telnet.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\telnet.exe
- 2008-08-20 02:06 . 2008-04-14 00:13 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys
+ 2010-07-02 03:52 . 2008-04-14 00:13 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys
- 2008-08-20 02:06 . 2008-04-14 00:13 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys
+ 2010-07-02 03:52 . 2008-04-14 00:13 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys
- 2008-08-20 02:06 . 2008-04-13 19:00 19072 c:\windows\ServicePackFiles\i386\tdi.sys
+ 2010-07-02 03:52 . 2008-04-13 19:00 19072 c:\windows\ServicePackFiles\i386\tdi.sys
+ 2010-07-02 03:52 . 2007-04-02 16:36 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll
- 2008-08-20 02:06 . 2007-04-02 16:36 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 32827 c:\windows\ServicePackFiles\i386\tcptest.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 32827 c:\windows\ServicePackFiles\i386\tcptest.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmonui.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmonui.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmon.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmon.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll
- 2008-08-20 02:06 . 2008-04-13 18:40 14976 c:\windows\ServicePackFiles\i386\tape.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 14976 c:\windows\ServicePackFiles\i386\tape.sys
+ 2010-07-02 03:52 . 2008-04-13 19:15 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys
- 2008-08-20 02:06 . 2008-04-13 19:15 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys

PatriceB82 · Jul 3, 2010

+ 2010-07-02 03:52 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\synceng.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\synceng.dll
+ 2010-07-02 03:52 . 2008-04-13 18:45 56576 c:\windows\ServicePackFiles\i386\swmidi.sys
- 2008-08-20 02:06 . 2008-04-13 18:45 56576 c:\windows\ServicePackFiles\i386\swmidi.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\svchost.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\svchost.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll
- 2008-08-20 02:06 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\streamip.sys
+ 2010-07-02 03:52 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\streamip.sys
+ 2010-07-02 03:52 . 2008-04-13 18:45 49408 c:\windows\ServicePackFiles\i386\stream.sys
- 2008-08-20 02:06 . 2008-04-13 18:45 49408 c:\windows\ServicePackFiles\i386\stream.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\storprop.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\storprop.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\stimon.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\stimon.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\sti.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\sti.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 86528 c:\windows\ServicePackFiles\i386\stdprov.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 86528 c:\windows\ServicePackFiles\i386\stdprov.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\stclient.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\stclient.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\startoc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\startoc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\sstub.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\sstub.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\ssstars.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\ssstars.scr
- 2008-08-20 02:06 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr
- 2008-08-20 02:06 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr
- 2008-08-20 02:06 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr
+ 2010-07-02 03:52 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\srclient.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\srclient.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 58434 c:\windows\ServicePackFiles\i386\srchctls.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 58434 c:\windows\ServicePackFiles\i386\srchctls.dll
+ 2010-07-02 03:52 . 2008-04-13 18:36 73472 c:\windows\ServicePackFiles\i386\sr.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 73472 c:\windows\ServicePackFiles\i386\sr.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\spoolss.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\spoolss.dll
+ 2010-07-02 03:52 . 2008-04-14 12:42 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe
- 2008-08-20 02:06 . 2008-04-14 12:42 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe
+ 2010-07-02 03:52 . 2008-04-13 16:43 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll
- 2008-08-20 02:06 . 2008-04-13 16:43 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\sort.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\sort.exe
+ 2010-07-02 03:52 . 2008-04-13 18:46 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys
- 2008-08-20 02:06 . 2008-04-13 18:46 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\snmp.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\snmp.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\smss.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\smss.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 89600 c:\windows\ServicePackFiles\i386\smlogsvc.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 89600 c:\windows\ServicePackFiles\i386\smlogsvc.exe
- 2008-08-20 02:06 . 2008-04-13 18:36 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys
- 2008-08-20 02:06 . 2004-08-04 05:41 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 73796 c:\windows\ServicePackFiles\i386\slserv.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 73796 c:\windows\ServicePackFiles\i386\slserv.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 32866 c:\windows\ServicePackFiles\i386\slrundll.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 32866 c:\windows\ServicePackFiles\i386\slrundll.exe
- 2008-08-20 02:06 . 2004-08-04 05:41 95424 c:\windows\ServicePackFiles\i386\slnthal.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 95424 c:\windows\ServicePackFiles\i386\slnthal.sys
+ 2010-07-02 03:52 . 2008-04-13 18:46 11136 c:\windows\ServicePackFiles\i386\slip.sys
- 2008-08-20 02:06 . 2008-04-13 18:46 11136 c:\windows\ServicePackFiles\i386\slip.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\slbiop.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\slbiop.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\slayerxp.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\slayerxp.dll
- 2008-08-20 02:06 . 2004-08-04 05:31 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys
+ 2010-07-02 03:52 . 2004-08-04 05:31 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\skeys.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\skeys.exe
+ 2010-07-02 03:52 . 2004-08-04 05:31 32768 c:\windows\ServicePackFiles\i386\sisnic.sys
- 2008-08-20 02:06 . 2004-08-04 05:31 32768 c:\windows\ServicePackFiles\i386\sisnic.sys
+ 2010-07-02 03:52 . 2008-04-13 18:36 40960 c:\windows\ServicePackFiles\i386\sisagp.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 40960 c:\windows\ServicePackFiles\i386\sisagp.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 70144 c:\windows\ServicePackFiles\i386\sigverif.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 70144 c:\windows\ServicePackFiles\i386\sigverif.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\sigtab.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\sigtab.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\shutdown.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\shutdown.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 16437 c:\windows\ServicePackFiles\i386\shtml.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 16437 c:\windows\ServicePackFiles\i386\shtml.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 20536 c:\windows\ServicePackFiles\i386\shtml.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 20536 c:\windows\ServicePackFiles\i386\shtml.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\shscrap.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\shscrap.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\shrpubw.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\shrpubw.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\shimeng.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\shimeng.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\shgina.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\shgina.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\shfolder.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\shfolder.dll
+ 2010-07-02 03:52 . 2008-04-13 18:40 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\setupn.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\setupn.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 73216 c:\windows\ServicePackFiles\i386\setup50.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 73216 c:\windows\ServicePackFiles\i386\setup50.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\setup.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\setup.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 31232 c:\windows\ServicePackFiles\i386\sethc.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 31232 c:\windows\ServicePackFiles\i386\sethc.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\servdeps.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\servdeps.dll
+ 2010-07-02 03:52 . 2008-04-13 19:15 64512 c:\windows\ServicePackFiles\i386\serial.sys
- 2008-08-20 02:06 . 2008-04-13 19:15 64512 c:\windows\ServicePackFiles\i386\serial.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 15744 c:\windows\ServicePackFiles\i386\serenum.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 15744 c:\windows\ServicePackFiles\i386\serenum.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\sens.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\sens.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\sendmail.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\sendmail.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sendcmsg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sendcmsg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\secur32.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\secur32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\seclogon.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\seclogon.dll
+ 2010-07-02 03:52 . 2007-11-13 10:25 20480 c:\windows\ServicePackFiles\i386\secdrv.sys
- 2008-08-20 02:06 . 2007-11-13 10:25 20480 c:\windows\ServicePackFiles\i386\secdrv.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll
+ 2010-07-02 03:52 . 2008-04-13 18:36 79232 c:\windows\ServicePackFiles\i386\sdbus.sys
- 2008-08-20 02:06 . 2008-04-13 18:36 79232 c:\windows\ServicePackFiles\i386\sdbus.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\sdbinst.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\sdbinst.exe
+ 2010-07-02 03:52 . 2008-04-13 18:45 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys
- 2008-08-20 02:06 . 2008-04-13 18:45 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 96384 c:\windows\ServicePackFiles\i386\scsiport.sys
- 2008-08-20 02:06 . 2008-04-13 18:40 96384 c:\windows\ServicePackFiles\i386\scsiport.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\scrcons.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\scrcons.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\sclgntfy.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\sclgntfy.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 95744 c:\windows\ServicePackFiles\i386\scardsvr.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 95744 c:\windows\ServicePackFiles\i386\scardsvr.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\scarddlg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\scarddlg.dll
- 2008-08-20 02:06 . 2008-04-13 18:40 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\savedump.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\savedump.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\samlib.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\samlib.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\safrslv.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\safrslv.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\safrdm.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\safrdm.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw430ext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw430ext.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw001ext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw001ext.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\runonce.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\runonce.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\rundll32.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\rundll32.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\rtutils.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\rtutils.dll
- 2008-08-20 02:06 . 2004-08-04 05:31 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys
+ 2010-07-02 03:52 . 2004-08-04 05:31 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\rtcshare.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\rtcshare.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\rsmps.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\rsmps.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\rshx32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\rshx32.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\rsh.exe
- 2008-08-20 02:06 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\rsh.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rrcm.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rrcm.dll
- 2008-08-20 02:06 . 2008-04-13 18:40 79104 c:\windows\ServicePackFiles\i386\rocket.sys
+ 2010-07-02 03:52 . 2008-04-13 18:40 79104 c:\windows\ServicePackFiles\i386\rocket.sys
- 2008-08-20 02:06 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismp.sys
- 2008-08-20 02:06 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismp.sys
- 2008-08-20 02:06 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui2.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui2.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui1.dll
- 2008-08-20 02:06 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui1.dll
+ 2010-07-02 03:52 . 2008-04-13 18:46 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
- 2008-08-20 02:05 . 2008-04-13 18:46 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rexec.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rexec.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\resutils.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\resutils.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\remotepg.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\remotepg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 49664 c:\windows\ServicePackFiles\i386\regapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 49664 c:\windows\ServicePackFiles\i386\regapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\reg.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\reg.exe
+ 2010-07-02 03:52 . 2008-04-13 18:40 57600 c:\windows\ServicePackFiles\i386\redbook.sys
- 2008-08-20 02:05 . 2008-04-13 18:40 57600 c:\windows\ServicePackFiles\i386\redbook.sys
- 2008-08-20 02:05 . 2004-08-04 05:41 13776 c:\windows\ServicePackFiles\i386\recagent.sys
+ 2010-07-02 03:52 . 2004-08-04 05:41 13776 c:\windows\ServicePackFiles\i386\recagent.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
- 2008-08-20 02:05 . 2008-04-14 00:13 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
+ 2010-07-02 03:52 . 2008-04-14 00:13 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
- 2008-08-20 02:05 . 2008-04-14 00:13 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
+ 2010-07-02 03:52 . 2008-04-14 00:13 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 21504 c:\windows\ServicePackFiles\i386\rcp.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 21504 c:\windows\ServicePackFiles\i386\rcp.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
- 2008-08-20 02:05 . 2008-04-13 19:19 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
+ 2010-07-02 03:52 . 2008-04-13 19:19 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
+ 2010-07-02 03:52 . 2008-04-13 18:57 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
- 2008-08-20 02:05 . 2008-04-13 18:57 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 56832 c:\windows\ServicePackFiles\i386\rasphone.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 56832 c:\windows\ServicePackFiles\i386\rasphone.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rasman.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rasman.dll
- 2008-08-20 02:05 . 2008-04-13 19:19 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
+ 2010-07-02 03:52 . 2008-04-13 19:19 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 79872 c:\windows\ServicePackFiles\i386\raschap.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 79872 c:\windows\ServicePackFiles\i386\raschap.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
- 2008-08-20 02:05 . 2008-04-13 18:41 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys
+ 2010-07-02 03:52 . 2008-04-13 18:41 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\qutil.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\qutil.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\qprocess.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\qprocess.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\pstorec.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\pstorec.dll
- 2008-08-20 02:05 . 2008-04-13 18:56 69120 c:\windows\ServicePackFiles\i386\psched.sys
+ 2010-07-02 03:52 . 2008-04-13 18:56 69120 c:\windows\ServicePackFiles\i386\psched.sys
+ 2010-07-02 03:52 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\psbase.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\psbase.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\psapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\psapi.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\proquota.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\proquota.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\profmap.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\profmap.dll
- 2008-08-20 02:05 . 2008-04-13 18:31 35840 c:\windows\ServicePackFiles\i386\processr.sys
+ 2010-07-02 03:52 . 2008-04-13 18:31 35840 c:\windows\ServicePackFiles\i386\processr.sys
- 2008-08-20 02:05 . 2008-04-13 18:41 17664 c:\windows\ServicePackFiles\i386\ppa3.sys
+ 2010-07-02 03:52 . 2008-04-13 18:41 17664 c:\windows\ServicePackFiles\i386\ppa3.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\powrprof.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\powrprof.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\powercfg.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\powercfg.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\plotui.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\plotui.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\plotter.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\plotter.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\ping.exe
+ 2010-07-02 03:52 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\ping.exe
- 2008-08-20 02:03 . 2008-04-13 18:35 24064 c:\windows\ServicePackFiles\i386\pidgen.dll
+ 2010-07-02 03:49 . 2008-04-13 18:35 24064 c:\windows\ServicePackFiles\i386\pidgen.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\pid.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\pid.dll
+ 2010-07-02 03:52 . 2008-04-13 18:44 28032 c:\windows\ServicePackFiles\i386\perm3.sys
- 2008-08-20 02:05 . 2008-04-13 18:44 28032 c:\windows\ServicePackFiles\i386\perm3.sys
- 2008-08-20 02:05 . 2008-04-13 18:44 27904 c:\windows\ServicePackFiles\i386\perm2.sys
+ 2010-07-02 03:52 . 2008-04-13 18:44 27904 c:\windows\ServicePackFiles\i386\perm2.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\perfproc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\perfproc.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\perfos.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\perfos.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\perfnet.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\perfnet.dll
+ 2010-07-02 03:52 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\perfmon.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\perfmon.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll
+ 2010-07-02 03:51 . 2008-04-13 18:40 24960 c:\windows\ServicePackFiles\i386\pciidex.sys
- 2008-08-20 02:05 . 2008-04-13 18:40 24960 c:\windows\ServicePackFiles\i386\pciidex.sys
- 2008-08-20 02:05 . 2008-04-13 18:36 68224 c:\windows\ServicePackFiles\i386\pci.sys
+ 2010-07-02 03:51 . 2008-04-13 18:36 68224 c:\windows\ServicePackFiles\i386\pci.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll
- 2008-08-20 02:05 . 2004-08-04 05:31 29502 c:\windows\ServicePackFiles\i386\pca200e.sys
+ 2010-07-02 03:51 . 2004-08-04 05:31 29502 c:\windows\ServicePackFiles\i386\pca200e.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll
+ 2010-07-02 03:51 . 2008-04-13 18:40 19712 c:\windows\ServicePackFiles\i386\partmgr.sys
- 2008-08-20 02:05 . 2008-04-13 18:40 19712 c:\windows\ServicePackFiles\i386\partmgr.sys
+ 2010-07-02 03:51 . 2008-04-13 18:40 80128 c:\windows\ServicePackFiles\i386\parport.sys
- 2008-08-20 02:05 . 2008-04-13 18:40 80128 c:\windows\ServicePackFiles\i386\parport.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\packager.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\packager.exe
+ 2010-07-02 03:51 . 2008-04-13 18:31 42752 c:\windows\ServicePackFiles\i386\p3.sys
- 2008-08-20 02:05 . 2008-04-13 18:31 42752 c:\windows\ServicePackFiles\i386\p3.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\osuninst.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\osuninst.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 84992 c:\windows\ServicePackFiles\i386\olepro32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 84992 c:\windows\ServicePackFiles\i386\olepro32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\olecli32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\olecli32.dll
- 2008-08-20 02:05 . 2008-04-13 18:46 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys
+ 2010-07-02 03:51 . 2008-04-13 18:46 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\oemig50.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\oemig50.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\odtext32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\odtext32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odfox32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odfox32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odexl32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odexl32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll
+ 2010-07-02 03:51 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll
- 2008-08-20 02:05 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll
- 2008-08-20 02:05 . 2008-04-14 00:10 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:10 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll
- 2008-08-20 02:05 . 2008-04-13 17:26 94208 c:\windows\ServicePackFiles\i386\odbcint.dll
+ 2010-07-02 03:51 . 2008-04-13 17:26 94208 c:\windows\ServicePackFiles\i386\odbcint.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll
- 2008-08-20 02:05 . 2004-08-04 08:00 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll
+ 2010-07-02 03:51 . 2004-08-04 08:00 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ocgen.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ocgen.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 96256 c:\windows\ServicePackFiles\i386\occache.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 96256 c:\windows\ServicePackFiles\i386\occache.dll
+ 2010-07-02 03:51 . 2008-04-14 00:10 86016 c:\windows\ServicePackFiles\i386\obepopc.dll
- 2008-08-20 02:05 . 2008-04-14 00:10 86016 c:\windows\ServicePackFiles\i386\obepopc.dll
+ 2010-07-02 03:51 . 2007-04-02 18:44 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll
- 2008-08-20 02:05 . 2007-04-02 18:44 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll
+ 2010-07-02 03:51 . 2008-04-13 18:56 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys
- 2008-08-20 02:05 . 2008-04-13 18:56 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 91136 c:\windows\ServicePackFiles\i386\ntprint.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 91136 c:\windows\ServicePackFiles\i386\ntprint.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\ntoc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\ntoc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll
- 2008-08-20 02:05 . 2004-08-04 08:00 34560 c:\windows\ServicePackFiles\i386\ntio804.sys
+ 2010-07-02 03:51 . 2004-08-04 08:00 34560 c:\windows\ServicePackFiles\i386\ntio804.sys
- 2008-08-20 02:05 . 2004-08-04 08:00 35424 c:\windows\ServicePackFiles\i386\ntio412.sys
+ 2010-07-02 03:51 . 2004-08-04 08:00 35424 c:\windows\ServicePackFiles\i386\ntio412.sys
+ 2010-07-02 03:51 . 2004-08-04 08:00 35648 c:\windows\ServicePackFiles\i386\ntio411.sys
- 2008-08-20 02:05 . 2004-08-04 08:00 35648 c:\windows\ServicePackFiles\i386\ntio411.sys
- 2008-08-20 02:05 . 2004-08-04 08:00 34560 c:\windows\ServicePackFiles\i386\ntio404.sys
+ 2010-07-02 03:51 . 2004-08-04 08:00 34560 c:\windows\ServicePackFiles\i386\ntio404.sys
- 2008-08-20 02:05 . 2004-08-04 08:00 33840 c:\windows\ServicePackFiles\i386\ntio.sys
+ 2010-07-02 03:51 . 2004-08-04 08:00 33840 c:\windows\ServicePackFiles\i386\ntio.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll
+ 2010-07-02 03:51 . 2004-08-04 08:00 47564 c:\windows\ServicePackFiles\i386\ntdetect.com
- 2008-08-20 02:05 . 2004-08-04 08:00 47564 c:\windows\ServicePackFiles\i386\ntdetect.com
+ 2010-07-02 03:51 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\nslookup.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\nslookup.exe
+ 2010-07-02 03:51 . 2008-04-13 18:54 28672 c:\windows\ServicePackFiles\i386\nscirda.sys
- 2008-08-20 02:05 . 2008-04-13 18:54 28672 c:\windows\ServicePackFiles\i386\nscirda.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\npptools.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\npptools.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\nppagent.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\nppagent.exe
+ 2010-07-02 03:51 . 2008-04-13 18:32 30848 c:\windows\ServicePackFiles\i386\npfs.sys
- 2008-08-20 02:05 . 2008-04-13 18:32 30848 c:\windows\ServicePackFiles\i386\npfs.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\notepad.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\notepad.exe
- 2008-08-20 02:05 . 2008-04-13 18:53 40320 c:\windows\ServicePackFiles\i386\nmnt.sys
+ 2010-07-02 03:51 . 2008-04-13 18:53 40320 c:\windows\ServicePackFiles\i386\nmnt.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\nmcom.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\nmcom.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 81920 c:\windows\ServicePackFiles\i386\nmchat.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 81920 c:\windows\ServicePackFiles\i386\nmchat.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll
+ 2010-07-02 03:51 . 2008-04-13 18:51 61824 c:\windows\ServicePackFiles\i386\nic1394.sys
- 2008-08-20 02:05 . 2008-04-13 18:51 61824 c:\windows\ServicePackFiles\i386\nic1394.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\netui0.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\netui0.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\netstat.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\netstat.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\netsh.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\netsh.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\netrap.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\netrap.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\netoc.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\netoc.dll
+ 2010-07-02 03:51 . 2008-04-13 18:56 34688 c:\windows\ServicePackFiles\i386\netbios.sys
- 2008-08-20 02:05 . 2008-04-13 18:56 34688 c:\windows\ServicePackFiles\i386\netbios.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\net.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\net.exe
+ 2010-07-02 03:51 . 2008-04-13 18:57 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys
- 2008-08-20 02:05 . 2008-04-13 18:57 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys
+ 2010-07-02 03:51 . 2008-04-13 19:20 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys
- 2008-08-20 02:05 . 2008-04-13 19:20 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys
- 2008-08-20 02:05 . 2008-04-13 18:55 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys
+ 2010-07-02 03:51 . 2008-04-13 18:55 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys
- 2008-08-20 02:05 . 2008-04-13 18:57 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys
+ 2010-07-02 03:51 . 2008-04-13 18:57 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll
- 2008-08-20 02:05 . 2008-04-13 18:46 10880 c:\windows\ServicePackFiles\i386\ndisip.sys
+ 2010-07-02 03:51 . 2008-04-13 18:46 10880 c:\windows\ServicePackFiles\i386\ndisip.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ncprov.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ncprov.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\narrator.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\narrator.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\napipsec.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\napipsec.dll
+ 2010-07-02 03:51 . 2008-04-13 18:46 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys
- 2008-08-20 02:05 . 2008-04-13 18:46 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\mydocs.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\mydocs.dll
- 2008-08-20 02:05 . 2008-04-13 18:43 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys
+ 2010-07-02 03:51 . 2008-04-13 18:43 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys
- 2008-08-20 02:05 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\muisetup.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\muisetup.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\msyuv.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\msyuv.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\msxactps.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\msxactps.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll
- 2008-08-20 02:05 . 2008-04-13 18:30 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll
+ 2010-07-02 03:51 . 2008-04-13 18:30 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\mstinit.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\mstinit.exe
- 2008-08-20 02:05 . 2008-04-13 18:46 49024 c:\windows\ServicePackFiles\i386\mstape.sys
+ 2010-07-02 03:51 . 2008-04-13 18:46 49024 c:\windows\ServicePackFiles\i386\mstape.sys
+ 2010-07-02 03:51 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\mst123.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\mst123.dll
+ 2010-07-02 03:51 . 2008-04-13 18:36 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys
- 2008-08-20 02:05 . 2008-04-13 18:36 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys
+ 2010-07-02 03:51 . 2008-04-13 18:14 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll
- 2008-08-20 02:05 . 2008-04-13 18:14 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\msrle32.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\msrle32.dll
+ 2010-07-02 03:51 . 2008-04-13 16:23 48128 c:\windows\ServicePackFiles\i386\msprivs.dll
- 2008-08-20 02:05 . 2008-04-13 16:23 48128 c:\windows\ServicePackFiles\i386\msprivs.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll
- 2008-08-20 02:05 . 2008-04-13 17:24 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll
+ 2010-07-02 03:51 . 2008-04-13 17:24 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\msoobe.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\msoobe.exe
- 2008-08-20 02:05 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\msobweb.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\msobweb.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\msobshel.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\msobshel.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\msobdl.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\msobdl.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll
- 2008-08-20 02:05 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\mslbui.dll
+ 2010-07-02 03:51 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\mslbui.dll
- 2008-08-20 02:04 . 2008-03-25 04:50 60192 c:\windows\ServicePackFiles\i386\msjter40.dll
+ 2010-07-02 03:51 . 2008-03-25 04:50 60192 c:\windows\ServicePackFiles\i386\msjter40.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msisip.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msisip.dll
- 2008-08-20 02:04 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe
- 2008-08-20 02:04 . 2008-04-13 18:54 22016 c:\windows\ServicePackFiles\i386\msircomm.sys
+ 2010-07-02 03:51 . 2008-04-13 18:54 22016 c:\windows\ServicePackFiles\i386\msircomm.sys
- 2008-08-20 02:04 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\msimn.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\msimn.exe
- 2008-08-20 02:04 . 2008-04-14 00:12 78848 c:\windows\ServicePackFiles\i386\msiexec.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 78848 c:\windows\ServicePackFiles\i386\msiexec.exe
+ 2010-07-02 03:51 . 2008-04-14 00:11 51712 c:\windows\ServicePackFiles\i386\msident.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 51712 c:\windows\ServicePackFiles\i386\msident.dll
+ 2010-07-02 03:51 . 2008-04-13 16:26 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll
- 2008-08-20 02:04 . 2008-04-13 16:26 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll
- 2008-08-20 02:04 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\mshta.exe
+ 2010-07-02 03:51 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\mshta.exe
+ 2010-07-02 03:51 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\i386\msgsc.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\i386\msgsc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll
- 2008-08-20 02:04 . 2008-04-13 18:56 35072 c:\windows\ServicePackFiles\i386\msgpc.sys
+ 2010-07-02 03:51 . 2008-04-13 18:56 35072 c:\windows\ServicePackFiles\i386\msgpc.sys
- 2008-08-20 02:04 . 2008-04-13 18:32 19072 c:\windows\ServicePackFiles\i386\msfs.sys
+ 2010-07-02 03:51 . 2008-04-13 18:32 19072 c:\windows\ServicePackFiles\i386\msfs.sys
+ 2010-07-02 03:51 . 2008-04-13 18:46 51200 c:\windows\ServicePackFiles\i386\msdv.sys
- 2008-08-20 02:04 . 2008-04-13 18:46 51200 c:\windows\ServicePackFiles\i386\msdv.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\msdmo.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\msdmo.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\msdatt.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\msdatt.dll

PatriceB82 · Jul 3, 2010

- 2008-08-20 02:04 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll
+ 2010-07-02 03:51 . 2008-04-13 17:26 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll
- 2008-08-20 02:04 . 2008-04-13 17:26 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll
+ 2010-07-02 03:51 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll
+ 2010-07-02 03:51 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll
- 2008-08-20 02:04 . 2008-04-13 17:24 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll
+ 2010-07-02 03:51 . 2008-04-13 17:24 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\msctfp.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\msctfp.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll
- 2008-08-20 02:04 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll
+ 2010-07-02 03:51 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 69632 c:\windows\ServicePackFiles\i386\msconf.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 69632 c:\windows\ServicePackFiles\i386\msconf.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\mscms.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\mscms.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msasn1.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msasn1.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msador15.dll
+ 2010-07-02 03:51 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msador15.dll
+ 2010-07-02 03:51 . 2008-04-13 17:26 24576 c:\windows\ServicePackFiles\i386\msader15.dll
- 2008-08-20 02:04 . 2008-04-13 17:26 24576 c:\windows\ServicePackFiles\i386\msader15.dll
+ 2010-07-02 03:51 . 2008-04-13 17:25 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\msadcs.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\msadcs.dll
+ 2010-07-02 03:50 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcor.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcor.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll
+ 2010-07-02 03:50 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\msadcf.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\msadcf.dll
- 2008-08-20 02:04 . 2008-04-13 17:25 20480 c:\windows\ServicePackFiles\i386\msadcer.dll
+ 2010-07-02 03:50 . 2008-04-13 17:25 20480 c:\windows\ServicePackFiles\i386\msadcer.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\msacm32.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\msacm32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\mprdim.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\mprdim.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 87040 c:\windows\ServicePackFiles\i386\mprapi.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 87040 c:\windows\ServicePackFiles\i386\mprapi.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\mpr.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\mpr.dll
- 2008-08-20 02:04 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\mpe.sys
+ 2010-07-02 03:50 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\mpe.sys
- 2008-08-20 02:04 . 2008-04-13 18:39 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys
+ 2010-07-02 03:50 . 2008-04-13 18:39 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys
+ 2010-07-02 03:50 . 2008-04-13 18:39 23040 c:\windows\ServicePackFiles\i386\mouclass.sys
- 2008-08-20 02:04 . 2008-04-13 18:39 23040 c:\windows\ServicePackFiles\i386\mouclass.sys
- 2008-08-20 02:04 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\more.com
+ 2010-07-02 03:50 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\more.com
- 2008-08-20 02:04 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe
- 2008-08-20 02:04 . 2008-04-13 19:00 30080 c:\windows\ServicePackFiles\i386\modem.sys
+ 2010-07-02 03:50 . 2008-04-13 19:00 30080 c:\windows\ServicePackFiles\i386\modem.sys
- 2008-08-20 02:04 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe
- 2008-08-20 02:04 . 2008-04-14 00:11 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll
+ 2010-07-02 03:50 . 2004-08-04 08:00 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll
- 2008-08-20 02:04 . 2004-08-04 08:00 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll
- 2008-08-20 02:04 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe
+ 2010-07-02 03:50 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\midimap.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\midimap.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mf3216.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mf3216.dll
- 2008-08-20 02:04 . 2008-04-13 18:36 63744 c:\windows\ServicePackFiles\i386\mf.sys
+ 2010-07-02 03:50 . 2008-04-13 18:36 63744 c:\windows\ServicePackFiles\i386\mf.sys
- 2008-08-20 02:04 . 2008-04-13 18:41 26112 c:\windows\ServicePackFiles\i386\memstpci.sys
+ 2010-07-02 03:50 . 2008-04-13 18:41 26112 c:\windows\ServicePackFiles\i386\memstpci.sys
- 2008-08-20 02:04 . 2004-08-04 05:41 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys
+ 2010-07-02 03:50 . 2004-08-04 05:41 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\mciwave.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\mciwave.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\mciseq.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\mciseq.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll
+ 2010-07-02 03:50 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\makecab.exe
- 2008-08-20 02:04 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\makecab.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\magnify.exe
- 2008-08-20 02:04 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\magnify.exe
+ 2010-07-02 03:50 . 2004-08-04 05:39 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys
- 2008-08-20 02:04 . 2004-08-04 05:39 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys
- 2008-08-20 02:04 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\lsass.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\lsass.exe
+ 2010-07-02 03:50 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\lprmon.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\lprmon.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\lpk.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\lpk.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\logman.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\logman.exe
+ 2010-07-02 03:50 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\log.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\log.dll
- 2008-08-20 02:04 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\locator.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\locator.exe
- 2008-08-20 02:04 . 2008-04-14 00:11 11776 c:\windows\ServicePackFiles\i386\localui.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 11776 c:\windows\ServicePackFiles\i386\localui.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 97280 c:\windows\ServicePackFiles\i386\loadperf.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 97280 c:\windows\ServicePackFiles\i386\loadperf.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\licwmi.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\licwmi.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll
- 2008-08-20 02:04 . 2008-04-13 18:40 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys
+ 2010-07-02 03:50 . 2008-04-13 18:40 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll
+ 2010-07-02 03:50 . 2008-04-14 00:10 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
- 2008-08-20 02:04 . 2008-04-14 00:10 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
- 2008-08-20 02:04 . 2004-08-04 13:00 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
+ 2010-07-02 03:50 . 2004-08-04 13:00 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
+ 2010-07-02 03:50 . 2008-04-14 00:10 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
- 2008-08-20 02:04 . 2008-04-14 00:10 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
+ 2010-07-02 03:50 . 2008-04-13 16:43 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
- 2008-08-20 02:04 . 2008-04-13 16:43 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
+ 2010-07-02 03:50 . 2008-04-14 00:10 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
- 2008-08-20 02:04 . 2008-04-14 00:10 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
- 2008-08-20 02:04 . 2008-04-14 00:10 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll
+ 2010-07-02 03:50 . 2008-04-14 00:10 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll
- 2008-08-20 02:04 . 2008-04-14 00:10 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll
+ 2010-07-02 03:50 . 2008-04-14 00:10 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll
- 2008-08-20 02:04 . 2004-08-04 13:00 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe
+ 2010-07-02 03:50 . 2004-08-04 13:00 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe
- 2008-08-20 02:04 . 2008-04-14 00:09 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
+ 2010-07-02 03:50 . 2004-08-04 13:00 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe
- 2008-08-20 02:04 . 2004-08-04 13:00 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe
+ 2010-07-02 03:50 . 2008-04-14 00:09 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 37376 c:\windows\ServicePackFiles\i386\l2store.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 37376 c:\windows\ServicePackFiles\i386\l2store.dll
+ 2010-07-02 03:50 . 2008-04-13 18:31 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys
- 2008-08-20 02:04 . 2008-04-13 18:31 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll
+ 2010-07-02 03:50 . 2004-08-04 08:00 92224 c:\windows\ServicePackFiles\i386\krnl386.exe
- 2008-08-20 02:04 . 2004-08-04 08:00 92224 c:\windows\ServicePackFiles\i386\krnl386.exe
+ 2010-07-02 03:50 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\kpropid.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\kpropid.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\kperpid.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\kperpid.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\knpropid.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\knpropid.dll
- 2008-08-20 02:04 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\knperpid.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\knperpid.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll
- 2008-08-20 02:04 . 2004-08-04 08:00 42537 c:\windows\ServicePackFiles\i386\keyboard.sys
+ 2010-07-02 03:50 . 2004-08-04 08:00 42537 c:\windows\ServicePackFiles\i386\keyboard.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\kdsui.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\kdsui.dll
- 2008-08-20 02:04 . 2008-04-13 18:39 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys
+ 2010-07-02 03:50 . 2008-04-13 18:39 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys
+ 2010-07-02 03:50 . 2008-04-13 18:39 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys
- 2008-08-20 02:04 . 2008-04-13 18:39 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys
- 2008-08-20 02:04 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll
- 2008-08-20 02:04 . 2008-04-14 00:11 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\ixsso.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\ixsso.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\ispid.dll
- 2008-08-20 02:03 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\ispid.dll

PatriceB82 · Jul 3, 2010

+ 2010-07-02 03:50 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\isign32.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\isign32.dll
+ 2010-07-02 03:50 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\isenpid.dll
- 2008-08-20 02:03 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\isenpid.dll
- 2008-08-20 02:03 . 2008-04-13 18:36 37248 c:\windows\ServicePackFiles\i386\isapnp.sys
+ 2010-07-02 03:50 . 2008-04-13 18:36 37248 c:\windows\ServicePackFiles\i386\isapnp.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\irmon.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\irmon.dll
- 2008-08-20 02:03 . 2008-04-13 18:54 11264 c:\windows\ServicePackFiles\i386\irenum.sys
+ 2010-07-02 03:50 . 2008-04-13 18:54 11264 c:\windows\ServicePackFiles\i386\irenum.sys
- 2008-08-20 02:03 . 2008-04-13 18:54 88192 c:\windows\ServicePackFiles\i386\irda.sys
+ 2010-07-02 03:50 . 2008-04-13 18:54 88192 c:\windows\ServicePackFiles\i386\irda.sys
+ 2010-07-02 03:50 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe
+ 2010-07-02 03:50 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll
+ 2010-07-02 03:50 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\ipv6.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\ipv6.exe
+ 2010-07-02 03:50 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll
- 2008-08-20 02:03 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll
- 2008-08-20 02:03 . 2008-04-13 19:19 75264 c:\windows\ServicePackFiles\i386\ipsec.sys
+ 2010-07-02 03:50 . 2008-04-13 19:19 75264 c:\windows\ServicePackFiles\i386\ipsec.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\iprip.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\iprip.dll
+ 2010-07-02 03:50 . 2008-04-13 18:57 20864 c:\windows\ServicePackFiles\i386\ipinip.sys
- 2008-08-20 02:03 . 2008-04-13 18:57 20864 c:\windows\ServicePackFiles\i386\ipinip.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll
- 2008-08-20 02:03 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll
+ 2010-07-02 03:50 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe
+ 2010-07-02 03:50 . 2008-04-14 00:12 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe
- 2008-08-20 02:03 . 2008-04-13 18:53 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys
+ 2010-07-02 03:50 . 2008-04-13 18:53 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys
- 2008-08-20 02:03 . 2008-04-13 18:31 36352 c:\windows\ServicePackFiles\i386\intelppm.sys
+ 2010-07-02 03:50 . 2008-04-13 18:31 36352 c:\windows\ServicePackFiles\i386\intelppm.sys
+ 2010-07-02 03:50 . 2008-04-14 00:11 96256 c:\windows\ServicePackFiles\i386\inseng.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 96256 c:\windows\ServicePackFiles\i386\inseng.dll
+ 2010-07-02 03:50 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe
+ 2010-07-02 03:50 . 2008-04-13 16:22 48128 c:\windows\ServicePackFiles\i386\inetres.dll
- 2008-08-20 02:03 . 2008-04-13 16:22 48128 c:\windows\ServicePackFiles\i386\inetres.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\inetppui.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\inetppui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 75264 c:\windows\ServicePackFiles\i386\inetpp.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 75264 c:\windows\ServicePackFiles\i386\inetpp.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\imgutil.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\imgutil.dll
+ 2010-07-02 03:50 . 2008-04-14 00:11 36921 c:\windows\ServicePackFiles\i386\imeshare.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 36921 c:\windows\ServicePackFiles\i386\imeshare.dll
+ 2010-07-02 03:50 . 2008-04-13 18:40 42112 c:\windows\ServicePackFiles\i386\imapi.sys
- 2008-08-20 02:03 . 2008-04-13 18:40 42112 c:\windows\ServicePackFiles\i386\imapi.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ils.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ils.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 93184 c:\windows\ServicePackFiles\i386\iexplore.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 93184 c:\windows\ServicePackFiles\i386\iexplore.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 62976 c:\windows\ServicePackFiles\i386\iesetup.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 62976 c:\windows\ServicePackFiles\i386\iesetup.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\iernonce.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\iernonce.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ieencode.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ieencode.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\iedw.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\iedw.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\icwutil.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\icwutil.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\icwdl.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\icwdl.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\icwdial.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\icwdial.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\icwconn.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\icwconn.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\iccvid.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\iccvid.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 11264 c:\windows\ServicePackFiles\i386\icaapi.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 11264 c:\windows\ServicePackFiles\i386\icaapi.dll
- 2008-08-20 02:03 . 2008-04-13 19:18 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys
+ 2010-07-02 03:49 . 2008-04-13 19:18 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys
- 2008-08-20 02:03 . 2008-04-13 18:41 18560 c:\windows\ServicePackFiles\i386\i2omp.sys
+ 2010-07-02 03:49 . 2008-04-13 18:41 18560 c:\windows\ServicePackFiles\i386\i2omp.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 41984 c:\windows\ServicePackFiles\i386\htui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 41984 c:\windows\ServicePackFiles\i386\htui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\httpapi.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\httpapi.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\hscupd.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\hscupd.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\hostmib.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\hostmib.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 72704 c:\windows\ServicePackFiles\i386\hlink.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 72704 c:\windows\ServicePackFiles\i386\hlink.dll
+ 2010-07-02 03:49 . 2008-04-13 18:45 10368 c:\windows\ServicePackFiles\i386\hidusb.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 10368 c:\windows\ServicePackFiles\i386\hidusb.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\hidserv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\hidserv.dll
- 2008-08-20 02:03 . 2008-04-13 18:45 24960 c:\windows\ServicePackFiles\i386\hidparse.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 24960 c:\windows\ServicePackFiles\i386\hidparse.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 19200 c:\windows\ServicePackFiles\i386\hidir.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 19200 c:\windows\ServicePackFiles\i386\hidir.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 36864 c:\windows\ServicePackFiles\i386\hidclass.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 36864 c:\windows\ServicePackFiles\i386\hidclass.sys
- 2008-08-20 02:03 . 2008-04-13 18:46 25600 c:\windows\ServicePackFiles\i386\hidbth.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 25600 c:\windows\ServicePackFiles\i386\hidbth.sys
- 2008-08-20 02:03 . 2008-04-13 18:36 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\hid.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\hid.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\hh.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\hh.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\help.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\help.exe
- 2008-08-20 02:03 . 2008-04-13 18:31 77696 c:\windows\ServicePackFiles\i386\halsp.dll
+ 2010-07-02 03:49 . 2008-04-13 18:31 77696 c:\windows\ServicePackFiles\i386\halsp.dll
+ 2010-07-02 03:49 . 2008-04-13 18:31 81152 c:\windows\ServicePackFiles\i386\halacpi.dll
- 2008-08-20 02:03 . 2008-04-13 18:31 81152 c:\windows\ServicePackFiles\i386\halacpi.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\h323cc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\h323cc.dll
+ 2010-07-02 03:49 . 2008-04-13 18:40 28288 c:\windows\ServicePackFiles\i386\grserial.sys
- 2008-08-20 02:03 . 2008-04-13 18:40 28288 c:\windows\ServicePackFiles\i386\grserial.sys
+ 2010-07-02 03:49 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\grpconv.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\grpconv.exe
- 2008-08-20 02:03 . 2008-04-13 18:45 59136 c:\windows\ServicePackFiles\i386\gckernel.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 59136 c:\windows\ServicePackFiles\i386\gckernel.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 10624 c:\windows\ServicePackFiles\i386\gameenum.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 10624 c:\windows\ServicePackFiles\i386\gameenum.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys
- 2008-08-20 02:03 . 2008-04-13 18:36 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 72192 c:\windows\ServicePackFiles\i386\fxscom.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 72192 c:\windows\ServicePackFiles\i386\fxscom.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\ftp.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\ftp.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\fpencode.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\fpencode.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\format.com
- 2008-08-20 02:03 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\format.com
+ 2010-07-02 03:49 . 2004-08-04 05:31 34173 c:\windows\ServicePackFiles\i386\forehe.sys
- 2008-08-20 02:03 . 2004-08-04 05:31 34173 c:\windows\ServicePackFiles\i386\forehe.sys
- 2008-08-20 02:03 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\fontview.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\fontview.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 80896 c:\windows\ServicePackFiles\i386\fontsub.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 80896 c:\windows\ServicePackFiles\i386\fontsub.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\fltmc.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\fltmc.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\fltlib.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\fltlib.dll
- 2008-08-20 02:03 . 2008-04-13 18:40 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys
+ 2010-07-02 03:49 . 2008-04-13 18:40 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll
- 2008-08-20 02:03 . 2008-04-13 18:33 44544 c:\windows\ServicePackFiles\i386\fips.sys
+ 2010-07-02 03:49 . 2008-04-13 18:33 44544 c:\windows\ServicePackFiles\i386\fips.sys
- 2008-08-20 02:03 . 2008-04-14 00:12 27136 c:\windows\ServicePackFiles\i386\findstr.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 27136 c:\windows\ServicePackFiles\i386\findstr.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\feclient.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\feclient.dll
- 2008-08-20 02:03 . 2008-04-13 18:40 27392 c:\windows\ServicePackFiles\i386\fdc.sys
+ 2010-07-02 03:49 . 2008-04-13 18:40 27392 c:\windows\ServicePackFiles\i386\fdc.sys
+ 2010-07-02 03:49 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\faultrep.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\faultrep.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\extrac32.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\extrac32.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 55808 c:\windows\ServicePackFiles\i386\extmgr.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 55808 c:\windows\ServicePackFiles\i386\extmgr.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 92160 c:\windows\ServicePackFiles\i386\evntwin.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 92160 c:\windows\ServicePackFiles\i386\evntwin.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\eventlog.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\eventlog.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\ersvc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\ersvc.dll
+ 2010-07-02 03:49 . 2008-04-13 16:26 40960 c:\windows\ServicePackFiles\i386\ep9res.dll
- 2008-08-20 02:03 . 2008-04-13 16:26 40960 c:\windows\ServicePackFiles\i386\ep9res.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\encapi.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\encapi.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 59392 c:\windows\ServicePackFiles\i386\eapqec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 59392 c:\windows\ServicePackFiles\i386\eapqec.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll
+ 2010-07-02 03:49 . 2008-04-13 18:38 71168 c:\windows\ServicePackFiles\i386\dxg.sys
- 2008-08-20 02:03 . 2008-04-13 18:38 71168 c:\windows\ServicePackFiles\i386\dxg.sys
- 2008-08-20 02:03 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\dumprep.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\dumprep.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dswave.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dswave.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 51200 c:\windows\ServicePackFiles\i386\dssec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 51200 c:\windows\ServicePackFiles\i386\dssec.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 92672 c:\windows\ServicePackFiles\i386\dskquota.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 92672 c:\windows\ServicePackFiles\i386\dskquota.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\drprov.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\drprov.dll
+ 2010-07-02 03:49 . 2008-04-13 18:45 60160 c:\windows\ServicePackFiles\i386\drmk.sys
- 2008-08-20 02:03 . 2008-04-13 18:45 60160 c:\windows\ServicePackFiles\i386\drmk.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 26112 c:\windows\ServicePackFiles\i386\dot3api.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 26112 c:\windows\ServicePackFiles\i386\dot3api.dll
- 2008-08-20 02:03 . 2004-08-04 08:00 53840 c:\windows\ServicePackFiles\i386\dosx.exe
+ 2010-07-02 03:49 . 2004-08-04 08:00 53840 c:\windows\ServicePackFiles\i386\dosx.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 48128 c:\windows\ServicePackFiles\i386\docprop2.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 48128 c:\windows\ServicePackFiles\i386\docprop2.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 52224 c:\windows\ServicePackFiles\i386\dmutil.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 52224 c:\windows\ServicePackFiles\i386\dmutil.dll
- 2008-08-20 02:03 . 2008-04-13 18:45 52864 c:\windows\ServicePackFiles\i386\dmusic.sys
+ 2010-07-02 03:49 . 2008-04-13 18:45 52864 c:\windows\ServicePackFiles\i386\dmusic.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dmserver.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dmserver.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 82432 c:\windows\ServicePackFiles\i386\dmscript.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 82432 c:\windows\ServicePackFiles\i386\dmscript.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\dmremote.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\dmremote.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\dmloader.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\dmloader.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dmband.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dmband.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\dispex.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\dispex.dll
- 2008-08-20 02:03 . 2008-04-13 18:40 14208 c:\windows\ServicePackFiles\i386\diskdump.sys
+ 2010-07-02 03:49 . 2008-04-13 18:40 14208 c:\windows\ServicePackFiles\i386\diskdump.sys
- 2008-08-20 02:03 . 2008-04-13 18:40 36352 c:\windows\ServicePackFiles\i386\disk.sys
+ 2010-07-02 03:49 . 2008-04-13 18:40 36352 c:\windows\ServicePackFiles\i386\disk.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 86528 c:\windows\ServicePackFiles\i386\directdb.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 86528 c:\windows\ServicePackFiles\i386\directdb.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\digest.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\digest.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 87040 c:\windows\ServicePackFiles\i386\diantz.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 87040 c:\windows\ServicePackFiles\i386\diantz.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe
- 2008-08-20 02:03 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\devenum.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\devenum.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\defrag.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\defrag.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe
- 2008-08-20 02:03 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\dcap32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\dcap32.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 25088 c:\windows\ServicePackFiles\i386\davclnt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 25088 c:\windows\ServicePackFiles\i386\davclnt.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\dataclen.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\dataclen.dll
- 2008-08-20 02:03 . 2004-08-04 05:32 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys
+ 2010-07-02 03:49 . 2004-08-04 05:32 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys
- 2008-08-20 02:03 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\custsat.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\custsat.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 53760 c:\windows\ServicePackFiles\i386\cryptext.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 53760 c:\windows\ServicePackFiles\i386\cryptext.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll
+ 2010-07-02 03:49 . 2008-04-13 18:31 36736 c:\windows\ServicePackFiles\i386\crusoe.sys
- 2008-08-20 02:03 . 2008-04-13 18:31 36736 c:\windows\ServicePackFiles\i386\crusoe.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 12800 c:\windows\ServicePackFiles\i386\credssp.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 12800 c:\windows\ServicePackFiles\i386\credssp.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\corpol.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\corpol.dll
- 2008-08-20 02:03 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\conime.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\conime.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 97792 c:\windows\ServicePackFiles\i386\comrepl.dll
- 2008-08-20 02:03 . 2008-04-14 00:11 97792 c:\windows\ServicePackFiles\i386\comrepl.dll
- 2008-08-20 02:02 . 2008-04-13 18:36 10240 c:\windows\ServicePackFiles\i386\compbatt.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 10240 c:\windows\ServicePackFiles\i386\compbatt.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\comaddin.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\comaddin.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\colbact.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\colbact.dll
- 2008-08-20 02:02 . 2008-04-13 16:44 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll
+ 2010-07-02 03:49 . 2008-04-13 16:44 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\cmutil.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\cmutil.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 63488 c:\windows\ServicePackFiles\i386\cmstp.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 63488 c:\windows\ServicePackFiles\i386\cmstp.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll
- 2008-08-20 02:02 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe
- 2008-08-20 02:02 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll
- 2008-08-20 02:02 . 2008-04-13 18:36 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys
- 2008-08-20 02:02 . 2008-04-14 00:11 58368 c:\windows\ServicePackFiles\i386\clusapi.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 58368 c:\windows\ServicePackFiles\i386\clusapi.dll
- 2008-08-20 02:02 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe
- 2008-08-20 02:02 . 2008-04-13 19:16 49536 c:\windows\ServicePackFiles\i386\classpnp.sys
+ 2010-07-02 03:49 . 2008-04-13 19:16 49536 c:\windows\ServicePackFiles\i386\classpnp.sys
- 2008-08-20 02:02 . 2008-04-14 00:11 69120 c:\windows\ServicePackFiles\i386\ciodm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 69120 c:\windows\ServicePackFiles\i386\ciodm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:09 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:09 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll
+ 2010-07-02 03:49 . 2008-04-13 18:40 62976 c:\windows\ServicePackFiles\i386\cdrom.sys
- 2008-08-20 02:02 . 2008-04-13 18:40 62976 c:\windows\ServicePackFiles\i386\cdrom.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 66560 c:\windows\ServicePackFiles\i386\cdm.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 66560 c:\windows\ServicePackFiles\i386\cdm.dll
- 2008-08-20 02:02 . 2008-04-13 19:14 63744 c:\windows\ServicePackFiles\i386\cdfs.sys
+ 2010-07-02 03:49 . 2008-04-13 19:14 63744 c:\windows\ServicePackFiles\i386\cdfs.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\camocx.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\camocx.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\cacls.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\cacls.exe
- 2008-08-20 02:02 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\cabview.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\cabview.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\cabinet.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\cabinet.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\btpanui.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\btpanui.dll
- 2008-08-20 02:02 . 2008-04-13 18:46 18944 c:\windows\ServicePackFiles\i386\bthusb.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 18944 c:\windows\ServicePackFiles\i386\bthusb.sys
+ 2010-07-02 03:49 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\bthserv.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\bthserv.dll
- 2008-08-20 02:02 . 2008-04-13 18:46 36480 c:\windows\ServicePackFiles\i386\bthprint.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 36480 c:\windows\ServicePackFiles\i386\bthprint.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\bthenum.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\bthenum.sys
- 2008-08-20 02:02 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\bthci.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\bthci.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 78336 c:\windows\ServicePackFiles\i386\browsewm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 78336 c:\windows\ServicePackFiles\i386\browsewm.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\browser.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\browser.dll
+ 2010-07-02 03:49 . 2008-04-13 17:03 63488 c:\windows\ServicePackFiles\i386\browselc.dll
- 2008-08-20 02:02 . 2008-04-13 17:03 63488 c:\windows\ServicePackFiles\i386\browselc.dll
+ 2010-07-02 03:49 . 2008-04-13 18:53 71552 c:\windows\ServicePackFiles\i386\bridge.sys
- 2008-08-20 02:02 . 2008-04-13 18:53 71552 c:\windows\ServicePackFiles\i386\bridge.sys
+ 2010-07-02 03:49 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\blastcln.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\blastcln.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\bidispl.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\bidispl.dll
- 2008-08-20 02:02 . 2008-04-13 18:46 11776 c:\windows\ServicePackFiles\i386\bdasup.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 11776 c:\windows\ServicePackFiles\i386\bdasup.sys
+ 2010-07-02 03:49 . 2008-04-13 18:36 14208 c:\windows\ServicePackFiles\i386\battc.sys
- 2008-08-20 02:02 . 2008-04-13 18:36 14208 c:\windows\ServicePackFiles\i386\battc.sys
- 2008-08-20 02:02 . 2008-04-14 00:11 29184 c:\windows\ServicePackFiles\i386\batmeter.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 29184 c:\windows\ServicePackFiles\i386\batmeter.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 52736 c:\windows\ServicePackFiles\i386\basesrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 52736 c:\windows\ServicePackFiles\i386\basesrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 84992 c:\windows\ServicePackFiles\i386\avifil32.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 84992 c:\windows\ServicePackFiles\i386\avifil32.dll
- 2008-08-20 02:02 . 2008-04-13 18:46 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys
- 2008-08-20 02:02 . 2008-04-13 18:46 38912 c:\windows\ServicePackFiles\i386\avc.sys
+ 2010-07-02 03:49 . 2008-04-13 18:46 38912 c:\windows\ServicePackFiles\i386\avc.sys
- 2008-08-20 02:02 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\autolfn.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\autolfn.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\authz.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\authz.dll
+ 2010-07-02 03:49 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\author.exe
- 2008-08-20 02:02 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\author.exe
- 2008-08-20 02:02 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\author.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\author.dll
- 2008-08-20 02:02 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\auditusr.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\auditusr.exe
- 2008-08-20 02:02 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll
- 2008-08-20 02:02 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\attrib.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\attrib.exe
+ 2010-07-02 03:49 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\atmlib.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\atmlib.dll
+ 2010-07-02 03:49 . 2008-04-13 18:51 55808 c:\windows\ServicePackFiles\i386\atmlane.sys
- 2008-08-20 02:02 . 2008-04-13 18:51 55808 c:\windows\ServicePackFiles\i386\atmlane.sys
- 2008-08-20 02:02 . 2008-04-13 18:51 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys
+ 2010-07-02 03:49 . 2008-04-13 18:51 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys
- 2008-08-20 02:02 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\atmadm.exe
+ 2010-07-02 03:49 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\atmadm.exe
- 2008-08-20 02:02 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\atl.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\atl.dll
+ 2010-07-02 03:49 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll
- 2008-08-20 02:02 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll
+ 2010-07-02 03:49 . 2004-08-04 05:29 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys
- 2008-08-20 02:02 . 2004-08-04 05:29 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys
+ 2010-07-02 03:49 . 2004-08-04 05:29 31744 c:\windows\ServicePackFiles\i386\atinxbxx.sys

Redirect virus

New member

Security Expert -Emeritus

New member

New member

New member

New member

New member

Security Expert -Emeritus

New member

New member

Security Expert -Emeritus

New member

New member

Security Expert -Emeritus

New member

New member

New member

New member

New member

New member