1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active Warning Flashing on Desktop / Winlognn.exe

Discussion in 'Malware and Virus Removal Archive' started by scorpion657, 2009/02/17.

Page 1 of 2
  1. 2009/02/17
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    [Active] Warning Flashing on Desktop / Winlognn.exe

    Hey Guys,

    I have a Warning Dangerous Spyware flashing on my friend Desktop and the computer might me infected with malware. I tried spybot, windows defender (which did clear a lot) but I'm still having trouble :confused:. I noticed that I have winlognn.exe runing but I cannot stop it nor find the file in order to remove it. Here is an Hijack this log ran today: Thanks in advance:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 6:21:08 PM, on 2/17/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\Program Files\Java\jre1.6.0_06\bin\jucheck.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Administrator\qoy.exe \s,
    O1 - Hosts: 91.207.117.244 browser-security.microsoft.com
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: (no name) - {FF9839F1-4E20-4A00-851C-D388276CC965} - C:\WINDOWS\system32\hgGwVOec.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe "
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [tezrtsjhfr84iusjfo84f] C:\WINDOWS\TEMP\csrssc.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\Run: [jsf8uiw3jnjgffght] C:\DOCUME~1\BTMS09\LOCALS~1\Temp\winlognn.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1234911007031
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    O20 - AppInit_DLLs: lyisps.dll
    O20 - Winlogon Notify: ddcCuTKd - ddcCuTKd.dll (file missing)
    O22 - SharedTaskScheduler: jgzfkj9w38rksndfi7r4 - {C5BF49A2-94F3-42BD-F434-3604812C8955} - (no file)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
    O23 - Service: Uninterruptible Power Supply (UPS) - Unknown owner - C:\WINDOWS\System32\ups.exe (file missing)

    --
    End of file - 7147 bytes
     
    scorpion657,
    #1
  2. 2009/02/17
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Hi,

    Read this post as indicated at the top of this forum & follow the instructions.
     
    Admin.,
    #2


  3. to hide this advert.

  4. 2009/02/17
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    D.D.S didn't work

    Sorry about that. I tried running D.D.S and all I get is a command promt with the following error: ' "C:\Windows\System32\Find.exe "' is not recognized as an internal command, operable program or batch file

    Is there something else I should do?

    Thanks
     
    scorpion657,
    #3
  5. 2009/02/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi scorpion657

    Please do the following in the order given.

    Download SDFix and save it to your Desktop.

    Double click SDFix.exe and it will extract the files to %systemdrive%
    (Drive that contains the Windows Directory, typically C:\SDFix)

    Please then reboot your computer in Safe Mode by doing the following :
    • Restart your computer
    • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    • Instead of Windows loading as normal, the Advanced Options Menu should appear;
    • Select the first option, to run Windows in Safe Mode, then press Enter.
    • Choose your usual account.
    • Open the extracted SDFix folder and double click RunThis.bat to start the script.
    • Type Y to begin the cleanup process.
    • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
    • Press any Key and it will restart the PC.
    • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
    • Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
      (Report.txt will also be copied to Clipboard ready for posting back on the forum).
    • Finally paste the contents of the Report.txt back on the forum.

    Now this.

    Download ComboFix from Here to your Desktop.

    It's best to disable realtime protection applications as they sometimes interfere with the tool.
    Check this link for any applicable programs you may have.
    • Close all open programs and windows
    • Double click combofix.exe and follow the prompts.
    • Vista users right click Combofix.exe and select Run As Administrator.
    • When finished, it shall produce a log for you. Post the Combofix log
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    **NOTE - Allow ComboFix to update if prompted.

    Please post the SDFix log and the Combofix log.

    Thanks
    Geri
     
    Geri,
    #4
  6. 2009/02/17
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    Hey Geri,

    thanks for your help. Here are the logs. The ComboFix log is too large to be posted. I can maye send it to you if you need if:

    SDFix:

    SDFix: Version 1.240
    Run by BTMS09 on Tue 02/17/2009 at 11:59 PM

    Microsoft Windows XP [Version 5.1.2600]
    Running From: C:\SDFix

    Checking Services :


    Restoring Default Security Values
    Restoring Default Hosts File

    Rebooting


    Checking Files :

    Trojan Files Found:

    C:\-19329~1 - Deleted
    C:\WINDOWS\system32\2.tmp - Deleted
    C:\WINDOWS\system32\3.tmp - Deleted
    C:\WINDOWS\system32\4.tmp - Deleted
    C:\WINDOWS\system32\5.tmp - Deleted
    C:\WINDOWS\system32\6.tmp - Deleted
    C:\WINDOWS\system32\8.tmp - Deleted
    C:\WINDOWS\system32\9.tmp - Deleted
    C:\WINDOWS\system32\A.tmp - Deleted
    C:\WINDOWS\system32\B.tmp - Deleted
    C:\WINDOWS\system32\2.tmp - Deleted
    C:\WINDOWS\system32\10.tmp - Deleted
    C:\Documents and Settings\BTMS09\winlogon.exe - Deleted



    Folder C:\Program Files\Microsoft Common - Removed


    Removing Temp Files

    ADS Check :



    Final Check :

    catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-18 00:05:01
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0


    Remaining Services :




    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe "= "%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe "= "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe:*:Enabled:Veoh Client "
    "C:\\Program Files\\LimeWire\\LimeWire.exe "= "C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire "
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe "= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger "
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe "= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone) "
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "= "%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe "= "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe "= "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe "
    "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe "= "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe "
    "C:\\Program Files\\Java\\jre1.6.0_06\\bin\\javaw.exe "= "C:\\Program Files\\Java\\jre1.6.0_06\\bin\\javaw.exe:*:Enabled:Java(TM) Platform SE binary "

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe "= "%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe "= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger "
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe "= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone) "
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "= "%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "

    Remaining Files :


    File Backups: - C:\SDFix\backups\backups.zip

    Files with Hidden Attributes :

    Mon 26 May 2008 211 ..SH. --- "C:\Boot.bak "
    Mon 26 Jan 2009 1,740,632 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe "
    Mon 26 Jan 2009 5,365,592 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe "
    Mon 26 Jan 2009 2,144,088 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe "
    Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\Tools.dll "
    Sun 21 Dec 2008 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak "
    Mon 8 Dec 2008 33,792 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL0962.tmp "
    Wed 3 Dec 2008 30,208 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL1014.tmp "
    Tue 9 Dec 2008 36,352 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL1297.tmp "
    Tue 9 Dec 2008 38,400 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL1589.tmp "
    Mon 8 Dec 2008 36,864 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL1641.tmp "
    Tue 9 Dec 2008 38,400 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL1910.tmp "
    Tue 9 Dec 2008 36,352 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL3247.tmp "
    Wed 15 Oct 2008 34,816 A..H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL3565.tmp "
    Thu 4 Dec 2008 34,304 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL3638.tmp "
    Thu 4 Dec 2008 32,256 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\~WRL3866.tmp "
    Thu 12 Jun 2008 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp "
    Sun 21 Dec 2008 4,348 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\My Music\License Backup\drmv1key.bak "
    Tue 17 Feb 2009 20 A..H. --- "C:\Documents and Settings\BTMS09\My Documents\My Music\License Backup\drmv1lic.bak "
    Tue 17 Feb 2009 312 ...H. --- "C:\Documents and Settings\BTMS09\My Documents\My Music\License Backup\drmv2key.bak "
    Tue 17 Feb 2009 1,536 A..H. --- "C:\Documents and Settings\BTMS09\My Documents\My Music\License Backup\drmv2lic.bak "

    Finished!


    DDS:

    DDS (Ver_09-02-01.01) - NTFSx86
    Run by BTMS09 at 0:09:25.40 on Wed 02/18/2009
    Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_06
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.583 [GMT -5:00]

    AV: avast! antivirus 4.8.1229 [VPS 090217-0] *On-access scanning enabled* (Updated)

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\system32\msiexec.exe
    C:\Documents and Settings\BTMS09\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uSearch Page = hxxp://www.google.com
    uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
    uSearch Bar = hxxp://www.google.com/ie
    mDefault_Search_URL = hxxp://www.google.com/ie
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    mSearchAssistant = hxxp://www.google.com/ie
    uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\documents and settings\administrator\qoy.exe \s,
    BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    BHO: NoExplorer - No File
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
    BHO: Windows Live Toolbar Helper: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll
    BHO: NoExplorer - No File
    BHO: {ff9839f1-4e20-4a00-851c-d388276cc965} - c:\windows\system32\hgGwVOec.dll
    TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
    TB: Veoh Browser Plug-in: {d0943516-5076-4020-a3b5-aefaf26ab263} - c:\program files\veoh networks\veoh\plugins\reg\VeohToolbar.dll
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll
    uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
    uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_06\bin\jusched.exe "
    mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
    mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
    mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
    mRun: [SigmatelSysTrayApp] stsystra.exe
    mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
    dRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    dRun: [tezrtsjhfr84iusjfo84f] c:\windows\temp\csrssc.exe
    dRun: [jsf8uiw3jnjgffght] c:\docume~1\btms09\locals~1\temp\winlognn.exe
    dRunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
    dPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
    IE: &Windows Live Search - c:\program files\windows live toolbar\msntb.dll/search.htm
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_06\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1234911007031
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    Notify: ddcCuTKd - ddcCuTKd.dll
    Notify: igfxcui - igfxdev.dll
    AppInit_DLLs: lyisps.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    STS: {C5BF49A2-94F3-42BD-F434-3604812C8955} - No File
    SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
    LSA: Authentication Packages = msv1_0 c:\windows\system32\hgGwVOec

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\btms09\applic~1\mozilla\firefox\profiles\vno2yfhx.default\
    FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
    FF - plugin: c:\program files\veoh networks\veoh\plugins\noreg\NPVeohVersion.dll

    ============= SERVICES / DRIVERS ===============

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-9-28 78416]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-9-28 20560]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2008-9-28 147640]
    R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
    R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2008-9-28 250040]
    R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2008-9-28 348344]
    S3 bhndkgep;bhndkgep;\??\c:\windows\system32\drivers\bhndkgep.sys --> c:\windows\system32\drivers\bhndkgep.sys [?]
    S3 boegvfnz;boegvfnz;\??\c:\windows\system32\drivers\boegvfnz.sys --> c:\windows\system32\drivers\boegvfnz.sys [?]
    S3 btruqvla;btruqvla;\??\c:\windows\system32\drivers\btruqvla.sys --> c:\windows\system32\drivers\btruqvla.sys [?]
    S3 cphouhsa;cphouhsa;\??\c:\windows\system32\drivers\cphouhsa.sys --> c:\windows\system32\drivers\cphouhsa.sys [?]
    S3 favmetnc;favmetnc;\??\c:\windows\system32\drivers\favmetnc.sys --> c:\windows\system32\drivers\favmetnc.sys [?]
    S3 fqofkgeo;fqofkgeo;\??\c:\windows\system32\drivers\fqofkgeo.sys --> c:\windows\system32\drivers\fqofkgeo.sys [?]
    S3 fucoeuga;fucoeuga;\??\c:\windows\system32\drivers\fucoeuga.sys --> c:\windows\system32\drivers\fucoeuga.sys [?]
    S3 fvyiyeib;fvyiyeib;\??\c:\windows\system32\drivers\fvyiyeib.sys --> c:\windows\system32\drivers\fvyiyeib.sys [?]
    S3 hcsglqlz;hcsglqlz;\??\c:\windows\system32\drivers\hcsglqlz.sys --> c:\windows\system32\drivers\hcsglqlz.sys [?]
    S3 hhdposka;hhdposka;\??\c:\windows\system32\drivers\hhdposka.sys --> c:\windows\system32\drivers\hhdposka.sys [?]
    S3 IKFileSec;File Security Driver;c:\windows\system32\drivers\ikfilesec.sys [2009-2-17 40840]
    S3 IKSysFlt;System Filter Driver;c:\windows\system32\drivers\iksysflt.sys [2009-2-17 66952]
    S3 IKSysSec;System Security Driver;c:\windows\system32\drivers\iksyssec.sys [2009-2-17 81288]
    S3 iyazocfh;iyazocfh;\??\c:\windows\system32\drivers\iyazocfh.sys --> c:\windows\system32\drivers\iyazocfh.sys [?]
    S3 jqcqpooa;jqcqpooa;\??\c:\windows\system32\drivers\jqcqpooa.sys --> c:\windows\system32\drivers\jqcqpooa.sys [?]
    S3 kjbfcymr;kjbfcymr;\??\c:\windows\system32\drivers\kjbfcymr.sys --> c:\windows\system32\drivers\kjbfcymr.sys [?]
    S3 kqrhwzvd;kqrhwzvd;\??\c:\windows\system32\drivers\kqrhwzvd.sys --> c:\windows\system32\drivers\kqrhwzvd.sys [?]
    S3 ktiwrfyx;ktiwrfyx;\??\c:\windows\system32\drivers\ktiwrfyx.sys --> c:\windows\system32\drivers\ktiwrfyx.sys [?]
    S3 lsxkspwk;lsxkspwk;\??\c:\windows\system32\drivers\lsxkspwk.sys --> c:\windows\system32\drivers\lsxkspwk.sys [?]
    S3 mflbcayo;mflbcayo;\??\c:\windows\system32\drivers\mflbcayo.sys --> c:\windows\system32\drivers\mflbcayo.sys [?]
    S3 mlytiexq;mlytiexq;\??\c:\windows\system32\drivers\mlytiexq.sys --> c:\windows\system32\drivers\mlytiexq.sys [?]
    S3 mpsxhluh;mpsxhluh;\??\c:\windows\system32\drivers\mpsxhluh.sys --> c:\windows\system32\drivers\mpsxhluh.sys [?]
    S3 ocgkgmkn;ocgkgmkn;\??\c:\windows\system32\drivers\ocgkgmkn.sys --> c:\windows\system32\drivers\ocgkgmkn.sys [?]
    S3 ptshozee;ptshozee;\??\c:\windows\system32\drivers\ptshozee.sys --> c:\windows\system32\drivers\ptshozee.sys [?]
    S3 raqcfxvf;raqcfxvf;\??\c:\windows\system32\drivers\raqcfxvf.sys --> c:\windows\system32\drivers\raqcfxvf.sys [?]
    S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-2-17 356920]
    S3 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2009-2-17 1079176]
    S3 upppdrns;upppdrns;\??\c:\windows\system32\drivers\upppdrns.sys --> c:\windows\system32\drivers\upppdrns.sys [?]
    S3 vlmxkazj;vlmxkazj;\??\c:\windows\system32\drivers\vlmxkazj.sys --> c:\windows\system32\drivers\vlmxkazj.sys [?]
    S3 vyprrjlw;vyprrjlw;\??\c:\windows\system32\drivers\vyprrjlw.sys --> c:\windows\system32\drivers\vyprrjlw.sys [?]
    S3 wqspplfo;wqspplfo;\??\c:\windows\system32\drivers\wqspplfo.sys --> c:\windows\system32\drivers\wqspplfo.sys [?]
    S3 wxmyukfq;wxmyukfq;\??\c:\windows\system32\drivers\wxmyukfq.sys --> c:\windows\system32\drivers\wxmyukfq.sys [?]
    S3 xboxlsvp;xboxlsvp;\??\c:\windows\system32\drivers\xboxlsvp.sys --> c:\windows\system32\drivers\xboxlsvp.sys [?]
    S3 xdadavrf;xdadavrf;\??\c:\windows\system32\drivers\xdadavrf.sys --> c:\windows\system32\drivers\xdadavrf.sys [?]
    S3 xskeqmlf;xskeqmlf;\??\c:\windows\system32\drivers\xskeqmlf.sys --> c:\windows\system32\drivers\xskeqmlf.sys [?]
    S3 yjsbzscp;yjsbzscp;\??\c:\windows\system32\drivers\yjsbzscp.sys --> c:\windows\system32\drivers\yjsbzscp.sys [?]
    S3 zrhawwbg;zrhawwbg;\??\c:\windows\system32\drivers\zrhawwbg.sys --> c:\windows\system32\drivers\zrhawwbg.sys [?]

    =============== Created Last 30 ================

    2009-02-17 23:55 15,360 a------- c:\windows\system32\taskman.exe
    2009-02-17 23:48 15,872 a------- c:\windows\system32\expand.exe
    2009-02-17 23:24 <DIR> --d----- C:\SDFix
    2009-02-17 21:38 244 a---h--- C:\sqmnoopt13.sqm
    2009-02-17 21:38 232 a---h--- C:\sqmdata13.sqm
    2009-02-17 21:38 244 a---h--- C:\sqmnoopt12.sqm
    2009-02-17 21:38 232 a---h--- C:\sqmdata12.sqm
    2009-02-17 18:36 139,264 a------- c:\windows\system32\igfxres.dll
    2009-02-17 18:11 268 a---h--- C:\sqmdata11.sqm
    2009-02-17 18:11 244 a---h--- C:\sqmnoopt11.sqm
    2009-02-17 17:58 268 a---h--- C:\sqmdata10.sqm
    2009-02-17 17:58 244 a---h--- C:\sqmnoopt10.sqm
    2009-02-17 17:27 81,288 a------- c:\windows\system32\drivers\iksyssec.sys
    2009-02-17 17:27 66,952 a------- c:\windows\system32\drivers\iksysflt.sys
    2009-02-17 17:27 40,840 a------- c:\windows\system32\drivers\ikfilesec.sys
    2009-02-17 17:27 29,576 a------- c:\windows\system32\drivers\kcom.sys
    2009-02-17 17:27 <DIR> --d----- c:\program files\Spyware Doctor
    2009-02-17 17:27 <DIR> --d----- c:\docume~1\btms09\applic~1\PC Tools
    2009-02-17 17:14 268 a---h--- C:\sqmdata09.sqm
    2009-02-17 17:14 244 a---h--- C:\sqmnoopt09.sqm
    2009-02-17 16:20 <DIR> --d----- c:\windows\system32\appmgmt
    2009-02-17 15:41 2,444 a------- c:\windows\system32\wpa.bak
    2009-02-17 15:25 24,576 ac------ c:\windows\system32\dllcache\userinit.exe
    2009-02-17 15:24 111,104 ac------ c:\windows\system32\dllcache\mtstocom.exe
    2009-02-17 15:23 10,096,640 ac------ c:\windows\system32\dllcache\hwxcht.dll
    2009-02-17 15:22 76,800 ac------ c:\windows\system32\dllcache\logui.ocx
    2009-02-17 15:20 488 a---hr-- c:\windows\system32\logonui.exe.manifest
    2009-02-17 15:19 214,528 ac------ c:\windows\system32\dllcache\icwconn1.exe
    2009-02-17 15:19 18,432 ac------ c:\windows\system32\dllcache\iedw.exe
    2009-02-17 14:49 1,042,903 a----r-- c:\windows\SETC8.tmp
    2009-02-17 11:06 24,576 a------- c:\windows\system32\userinit.exe
    2009-02-16 17:11 <DIR> --d-h--- c:\windows\system32\GroupPolicy
    2009-02-16 13:00 268 a---h--- C:\sqmdata08.sqm
    2009-02-16 12:59 244 a---h--- C:\sqmnoopt08.sqm
    2009-02-16 11:46 268 a---h--- C:\sqmdata07.sqm
    2009-02-16 11:46 244 a---h--- C:\sqmnoopt07.sqm
    2009-02-16 11:12 444 a--sh--- c:\windows\system32\ceOVwGgh.ini
    2009-02-16 10:33 86 a------- c:\windows\file.bat
    2009-02-16 10:02 67,072 a---h--- c:\windows\system32\secupdat.dat
    2009-02-16 09:40 <DIR> --d----- c:\windows\pss
    2009-02-16 09:34 108 a------- c:\windows\system32\xcchit32.ini.tmp
    2009-02-16 09:34 676,352 a------- c:\windows\system32\rtl60.bpl
    2009-02-16 09:33 197 a------- c:\windows\system32\xcchit32.ini
    2009-02-16 09:33 605 a------- c:\windows\xccwinsys.ini
    2009-02-16 09:33 <DIR> --d----- c:\windows\system32\inf
    2009-02-10 14:45 268 a---h--- C:\sqmdata06.sqm
    2009-02-10 14:45 244 a---h--- C:\sqmnoopt06.sqm
    2009-01-31 19:21 244 a---h--- C:\sqmnoopt05.sqm
    2009-01-31 19:21 244 a---h--- C:\sqmdata05.sqm
    2009-01-31 18:46 244 a---h--- C:\sqmnoopt04.sqm
    2009-01-31 18:46 232 a---h--- C:\sqmdata04.sqm
    2009-01-31 18:24 527 a------- c:\windows\system32\win32hlp.cnf
    2009-01-31 18:23 4,785 a------- c:\windows\system32\warning.gif
    2009-01-31 17:53 1,347 a------- c:\windows\system32\ahtn.htm
    2009-01-31 17:51 278,717 a--sh--- c:\windows\system32\cbcLoUvw.ini
    2009-01-31 17:46 <DIR> --d----- c:\windows\system32\Z55
    2009-01-31 17:46 <DIR> --d----- c:\windows\system32\x13
    2009-01-31 17:46 <DIR> --d----- c:\windows\system32\tov02
    2009-01-31 17:46 <DIR> --d----- c:\temp\sTMP3
    2009-01-26 20:00 0 a------- c:\windows\RussSqr.INI
    2009-01-22 23:23 <DIR> --d----- c:\program files\common files\xing shared

    ==================== Find3M ====================

    2009-02-17 15:19 23,332 a------- c:\windows\system32\emptyregdb.dat
    2009-02-16 14:25 90,112 a------- c:\windows\DUMPd1e7.tmp
    2009-02-16 14:12 90,112 a------- c:\windows\DUMPd969.tmp
    2009-02-16 14:03 90,112 a------- c:\windows\DUMPd310.tmp
    2009-02-16 10:46 90,112 a------- c:\windows\DUMPe427.tmp
    2009-02-16 10:38 90,112 a------- c:\windows\DUMPe8bb.tmp
    2009-01-05 22:38 117,364 a------- c:\windows\hpoins11.dat

    ============= FINISH: 0:09:45.65 ===============

    Attach:


    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-02-01.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 2/17/2009 3:26:38 PM
    System Uptime: 2/18/2009 12:02:07 AM (0 hours ago)

    Motherboard: Dell Inc. | | 0FT292
    Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz | Microprocessor | 1830/166mhz
    Processor: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz | Microprocessor | 988/166mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 39 GiB total, 13.054 GiB free.
    D: is FIXED (NTFS) - 17 GiB total, 15.383 GiB free.
    E: is CDROM (CDFS)

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
    Description: Biometric Coprocessor
    Device ID: USB\VID_0483&PID_2016\7&312B4FD&0&1
    Manufacturer:
    Name: Biometric Coprocessor
    PNP Device ID: USB\VID_0483&PID_2016\7&312B4FD&0&1
    Service:

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description:
    Device ID: ROOT\MS_PASSTHRUMP\0000
    Manufacturer: Microsoft
    Name: Intel(R) PRO/Wireless 3945ABG Network Connection -
    PNP Device ID: ROOT\MS_PASSTHRUMP\0000
    Service: Passthru

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description:
    Device ID: ROOT\MS_PASSTHRUMP\0001
    Manufacturer: Microsoft
    Name: #2
    PNP Device ID: ROOT\MS_PASSTHRUMP\0001
    Service: Passthru

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description:
    Device ID: ROOT\MS_PASSTHRUMP\0002
    Manufacturer: Microsoft
    Name: #3
    PNP Device ID: ROOT\MS_PASSTHRUMP\0002
    Service: Passthru

    ==== System Restore Points ===================

    RP1: 2/17/2009 4:09:09 PM - System Checkpoint
    RP2: 2/17/2009 4:15:29 PM - Unsigned driver install
    RP3: 2/17/2009 5:58:24 PM - Installed Windows Installer KB893803v2.
    RP4: 2/17/2009 6:03:04 PM - Installed Windows Defender
    RP5: 2/17/2009 6:04:41 PM - Software Distribution Service 3.0
    RP6: 2/17/2009 6:11:32 PM - Windows Defender Checkpoint
    RP7: 2/17/2009 6:25:37 PM - Windows Defender Checkpoint

    ==== Installed Programs ======================

    6300
    6300_Help
    6300Trb
    Adobe Flash Player 10 Plugin
    Adobe Flash Player ActiveX
    Adobe Shockwave Player
    AiO_Scan_CDA
    AiOSoftwareNPI
    Apple Software Update
    avast! Antivirus
    Broadcom Gigabit Integrated Controller
    BufferChm
    Conexant HDA D110 MDC V.92 Modem
    CP_CalendarTemplates1
    cp_OnlineProjectsConfig
    CP_Package_Basic1
    CP_Panorama1Config
    cp_PosterPrintConfig
    CueTour
    CustomerResearchQFolder
    Dell Resource CD
    Destinations
    DeviceManagementQFolder
    DocProc
    DocProcQFolder
    DocumentViewer
    DocumentViewerQFolder
    eSupportQFolder
    Fax_CDA
    FullDPAppQFolder
    FXCM Trading Station II
    GmoteServer
    Google Toolbar for Internet Explorer
    Highlight Viewer (Windows Live Toolbar)
    HijackThis 2.0.2
    HP Customer Participation Program 7.0
    HP Document Viewer 7.0
    HP Imaging Device Functions 7.0
    HP Photosmart Premier Software 6.5
    HP Photosmart, Officejet and Deskjet 7.0.A
    HP Product Assistant
    HP Solution Center 7.0
    HP Update
    HPPhotoSmartExpress
    HPProductAssistant
    InstantShareDevices
    InstantShareDevicesMFC
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PROSet/Wireless Software
    Java(TM) 6 Update 6
    LimeWire 4.18.8
    Map Button (Windows Live Toolbar)
    MapleStory
    MarketResearch
    mCore
    mDriver
    mDrWiFi
    mHlpDell
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0
    Microsoft Office FrontPage 2003
    Microsoft Office Professional Edition 2003
    Microsoft Plus! for Windows XP
    Microsoft Silverlight
    Microsoft Visual C++ 2005 Redistributable
    mIWA
    mLogView
    mMHouse
    Mozilla Firefox (3.0.5)
    mPfMgr
    mPfWiz
    mProSafe
    MSN
    mSSO
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    mWlsSafe
    mWMI
    mXML
    mZConfig
    Need2Find Bar
    NewCopy_CDA
    Norton PC Checkup
    OCR Software by I.R.I.S 7.0
    OpenOffice.org Installer 1.0
    OZ776 SCR CardBus Windows Driver
    PanoStandAlone
    PhotoGallery
    PowerDVD
    ProductContextNPI
    QuickTime
    RandMap
    Readme
    RealPlayer
    Scan
    ScannerCopy
    SigmaTel Audio
    SkinsHP1
    SlideShow
    Smart Menus (Windows Live Toolbar)
    SolutionCenter
    Sonic DLA
    Sonic RecordNow! Plus
    Sonic Update Manager
    Sonic_PrimoSDK
    Spybot - Search & Destroy
    Spyware Doctor 6.0
    Status
    Toolbox
    TrayApp
    Unload
    VeohTV BETA
    WebFldrs XP
    WebReg
    Windows Defender
    Windows Installer 3.1 (KB893803)
    Windows Live Favorites for Windows Live Toolbar
    Windows Live installer
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Live Toolbar
    Windows Live Toolbar Extension (Windows Live Toolbar)
    Windows Media Format 11 runtime
    Windows Media Player 11
    WizeFeed 2.1
    Wizetrade® FOREX
    Yahoo! Toolbar

    ==== Event Viewer Messages From Past Week ========

    2/16/2009 11:27:35 AM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
    2/16/2009 11:13:56 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments " " in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    2/16/2009 11:11:54 AM, error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: This operation returned because the timeout period expired.
    2/16/2009 11:08:09 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 aswSP Fips intelppm
    2/16/2009 11:07:02 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    2/16/2009 10:54:14 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
    2/16/2009 10:40:06 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Smart Card service to connect.
    2/16/2009 10:40:06 AM, error: Service Control Manager [7000] - The Print Spooler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2/16/2009 10:40:06 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Print Spooler service to connect.
    2/16/2009 10:40:06 AM, error: Service Control Manager [7000] - The avast! Antivirus service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2/16/2009 10:40:06 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the avast! Antivirus service to connect.
    2/16/2009 10:14:11 AM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001B7722F277. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    2/16/2009 9:34:33 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments " " in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}
    2/16/2009 4:06:31 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
    2/16/2009 4:06:31 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/16/2009 4:06:31 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    2/16/2009 4:06:31 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/16/2009 4:06:31 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 AFD aswSP aswTdi Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip WS2IFSL
    2/16/2009 4:08:33 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    2/16/2009 4:41:38 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments " " in order to run the server: {000C101C-0000-0000-C000-000000000046}
    2/17/2009 3:21:49 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service SENS with arguments " " in order to run the server: {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E}
    2/17/2009 3:28:47 PM, error: Setup [60055] - Windows Setup encountered non-fatal errors during installation. Please check the setuperr.log found in your Windows directory for more information.
    2/17/2009 4:09:28 PM, error: System Error [1003] - Error code 10000050, parameter1 fffffffe, parameter2 00000000, parameter3 864bdeca, parameter4 00000000.
    2/17/2009 4:09:48 PM, error: System Error [1003] - Error code 10000050, parameter1 fffffffe, parameter2 00000000, parameter3 862c1eca, parameter4 00000000.
    2/17/2009 4:19:38 PM, error: DCOM [10000] - Unable to start a DCOM Server: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}. The error: "%2" Happened while starting this command: C:\WINDOWS\system32\igfxsrvc.exe -Embedding
    2/17/2009 6:11:36 PM, error: WinDefend [3006] - Windows Defender Real-Time Protection agent has encountered an error when taking action on spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Vundo.IB&threatid=127007 Scan ID: {5118ADD0-5D12-4431-8619-9B07DCE3F30B} User: RYAN-3E9E148840\BTMS09 Name: Trojan:Win32/Vundo.IB ID: 127007 Severity: Severe Category: Trojan Path: Alert Type: Spyware or other potentially unwanted software Action: Remove Error Code: 0x80508022 Error description: To finish removing spyware and other potentially unwanted software, restart the computer.
    2/17/2009 6:36:44 PM, error: DCOM [10000] - Unable to start a DCOM Server: {C2BFE331-6739-4270-86C9-493D9A04CD38}. The error: "%2" Happened while starting this command: C:\WINDOWS\system32\igfxsrvc.exe -Embedding

    ==== End Of File ===========================
     
    scorpion657,
    #5
  7. 2009/02/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Use more then 1 post to post the combofix log.

    Thanks
     
    Geri,
    #6
  8. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    Here is it: (1)

    ComboFix 09-02-17.01 - BTMS09 2009-02-18 9:21:05.3 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.642 [GMT -5:00]
    Running from: C:\ComboFix.exe
    AV: avast! antivirus 4.8.1229 [VPS 090217-0] *On-access scanning enabled* (Updated)
    .

    ((((((((((((((((((((((((( Files Created from 2009-01-18 to 2009-02-18 )))))))))))))))))))))))))))))))
    .

    2009-02-18 09:13 . 2009-02-18 09:13 268 --ah----- C:\sqmdata16.sqm
    2009-02-18 09:13 . 2009-02-18 09:13 244 --ah----- C:\sqmnoopt16.sqm
    2009-02-18 02:16 . 2009-02-18 09:06 <DIR> d-------- c:\windows\LastGood.Tmp
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\scripting
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\en
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\bits
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\l2schemas
    2009-02-18 02:08 . 2009-02-18 02:12 <DIR> d-------- c:\windows\ServicePackFiles
    2009-02-18 01:49 . 2009-02-18 01:49 268 --ah----- C:\sqmdata15.sqm
    2009-02-18 01:49 . 2009-02-18 01:49 244 --ah----- C:\sqmnoopt15.sqm
    2009-02-18 01:29 . 2009-02-18 01:29 <DIR> d-------- C:\Office2003SP3Changes
    2009-02-18 01:24 . 2009-02-18 01:24 <DIR> d-------- c:\program files\Microsoft.NET
    2009-02-18 01:23 . 2009-02-18 01:24 <DIR> d-------- c:\windows\SHELLNEW
    2009-02-18 00:14 . 2009-02-18 00:14 268 --ah----- C:\sqmdata14.sqm
    2009-02-18 00:14 . 2009-02-18 00:14 244 --ah----- C:\sqmnoopt14.sqm
    2009-02-17 23:55 . 2004-03-24 10:04 851,968 --a------ c:\windows\system32\nvdspsch.exe
    2009-02-17 23:48 . 2001-08-23 07:00 15,872 --a------ c:\windows\system32\expand.exe
    2009-02-17 23:24 . 2009-02-18 00:07 <DIR> d-------- C:\SDFix
    2009-02-17 21:38 . 2009-02-17 21:38 244 --ah----- C:\sqmnoopt13.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 244 --ah----- C:\sqmnoopt12.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 232 --ah----- C:\sqmdata13.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 232 --ah----- C:\sqmdata12.sqm
    2009-02-17 19:30 . 2004-07-17 12:45 613,334 -----c--- c:\windows\system32\dllcache\wmplayer.chm
    2009-02-17 19:30 . 2008-04-13 19:12 276,992 --------- c:\windows\system32\wmphoto.dll
    2009-02-17 19:30 . 2004-08-04 05:00 172,196 -----c--- c:\windows\system32\dllcache\wmpaud9.wav
    2009-02-17 19:30 . 2004-07-17 12:45 67,374 -----c--- c:\windows\system32\dllcache\wmplayer.adm
    2009-02-17 19:30 . 2004-07-17 23:54 23,195 -----c--- c:\windows\system32\dllcache\wmplay.chm
    2009-02-17 19:30 . 2004-08-04 05:00 10,457 -----c--- c:\windows\system32\dllcache\wmptour.hta
    2009-02-17 19:30 . 2004-08-04 05:00 1,771 -----c--- c:\windows\system32\dllcache\wmptour.css
    2009-02-17 19:30 . 2004-08-03 23:51 855 -----c--- c:\windows\system32\dllcache\wmpocm.inf
    2009-02-17 19:30 . 2004-08-04 05:00 420 -----c--- c:\windows\system32\dllcache\wmploc.js
    2009-02-17 19:28 . 2008-04-13 19:10 294,912 -----c--- c:\windows\system32\dllcache\msaud32.acm
    2009-02-17 19:28 . 2008-04-13 19:12 155,136 --------- c:\windows\system32\mssha.dll
    2009-02-17 19:28 . 2008-04-13 19:11 106,496 --------- c:\windows\system32\mmcfxcommon.dll
    2009-02-17 19:28 . 2001-08-23 08:00 97,117 -----c--- c:\windows\system32\dllcache\mplayer2.hlp
    2009-02-17 19:28 . 2008-04-13 13:14 76,800 --------- c:\windows\system32\msshavmsg.dll
    2009-02-17 19:28 . 2004-08-03 23:51 18,286 -----c--- c:\windows\system32\dllcache\mplayer2.inf
    2009-02-17 19:28 . 2004-08-04 05:00 2,778 -----c--- c:\windows\system32\dllcache\mplogoh.gif
    2009-02-17 19:28 . 2004-08-04 05:00 2,545 -----c--- c:\windows\system32\dllcache\mplogo.gif
    2009-02-17 19:28 . 2001-08-23 08:00 1,885 -----c--- c:\windows\system32\dllcache\mplayer2.cnt
    2009-02-17 19:27 . 2004-08-04 05:00 457,607 -----c--- c:\windows\system32\dllcache\mdlib.wmv
    2009-02-17 19:27 . 2008-04-13 19:11 397,312 --------- c:\windows\system32\mmcex.dll
    2009-02-17 19:27 . 2008-04-13 19:09 290,816 -----c--- c:\windows\system32\dllcache\l3codeca.acm
    2009-02-17 19:27 . 2008-04-13 19:11 184,320 --------- c:\windows\system32\microsoft.managementconsole.dll
    2009-02-17 19:27 . 2008-04-13 19:11 61,440 --------- c:\windows\system32\kmsvc.dll
    2009-02-17 19:27 . 2008-04-13 19:11 37,376 --------- c:\windows\system32\l2gpstore.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdpash.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdnepr.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdiultn.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdbhc.dll
    2009-02-17 19:26 . 2004-08-03 22:41 1,041,536 --------- c:\windows\system32\drivers\hsfdpsp2.sys
    2009-02-17 19:26 . 2004-08-03 22:41 685,056 --------- c:\windows\system32\drivers\hsfcxts2.sys
    2009-02-17 19:26 . 2004-08-03 22:41 220,032 --------- c:\windows\system32\drivers\hsfbs2s2.sys
    2009-02-17 19:26 . 2008-04-13 13:45 46,592 --------- c:\windows\system32\drivers\irbus.sys
    2009-02-17 19:26 . 2008-04-13 19:11 32,285 --------- c:\windows\system32\hsfcisp2.dll
    2009-02-17 19:26 . 2008-04-13 13:46 25,600 --------- c:\windows\system32\drivers\hidbth.sys
    2009-02-17 19:26 . 2008-04-13 13:45 19,200 --------- c:\windows\system32\drivers\hidir.sys
    2009-02-17 19:26 . 2008-04-13 19:12 10,752 --------- c:\windows\system32\smtpapi.dll
    2009-02-17 19:26 . 2008-04-13 19:12 9,728 --------- c:\windows\system32\rwnh.dll
    2009-02-17 19:26 . 2007-06-21 00:52 974 --------- c:\windows\system32\pid.inf
    2009-02-17 19:24 . 2008-04-13 19:11 1,888,992 --------- c:\windows\system32\ati3duag.dll
    2009-02-17 18:43 . 2008-10-15 20:00 1,499,136 -----c--- c:\windows\system32\dllcache\shdocvw.dll
    2009-02-17 18:43 . 2008-10-15 20:00 666,112 -----c--- c:\windows\system32\dllcache\wininet.dll
    2009-02-17 18:43 . 2008-10-15 20:00 619,520 -----c--- c:\windows\system32\dllcache\urlmon.dll
    2009-02-17 18:43 . 2008-06-13 06:05 272,128 -----c--- c:\windows\system32\dllcache\bthport.sys
    2009-02-17 18:43 . 2008-08-14 05:04 138,496 -----c--- c:\windows\system32\dllcache\afd.sys
    2009-02-17 18:42 . 2008-09-15 07:12 1,846,400 -----c--- c:\windows\system32\dllcache\win32k.sys
    2009-02-17 18:41 . 2008-12-12 12:01 3,067,904 -----c--- c:\windows\system32\dllcache\mshtml.dll
    2009-02-17 18:41 . 2008-08-14 05:11 2,189,184 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
    2009-02-17 18:41 . 2008-08-14 05:09 2,145,280 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
    2009-02-17 18:41 . 2008-08-14 04:33 2,066,048 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
    2009-02-17 18:41 . 2008-08-14 04:33 2,023,936 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
    2009-02-17 18:40 . 2008-09-04 12:15 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
    2009-02-17 18:40 . 2008-04-11 14:04 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll
    2009-02-17 18:40 . 2008-10-24 06:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
    2009-02-17 18:40 . 2008-10-15 11:34 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
    2009-02-17 18:40 . 2008-12-11 05:57 333,952 -----c--- c:\windows\system32\dllcache\srv.sys
    2009-02-17 18:40 . 2008-05-01 09:33 331,776 -----c--- c:\windows\system32\dllcache\msadce.dll
    2009-02-17 18:40 . 2008-05-08 09:02 203,136 -----c--- c:\windows\system32\dllcache\rmcast.sys
    2009-02-17 18:36 . 2006-07-14 16:03 139,264 --a------ c:\windows\system32\igfxres.dll
    2009-02-17 18:11 . 2009-02-17 18:11 268 --ah----- C:\sqmdata11.sqm
    2009-02-17 18:11 . 2009-02-17 18:11 244 --ah----- C:\sqmnoopt11.sqm
    2009-02-17 18:03 . 2009-02-17 18:03 <DIR> d-------- c:\program files\Windows Defender
    2009-02-17 17:58 . 2009-02-17 17:58 268 --ah----- C:\sqmdata10.sqm
    2009-02-17 17:58 . 2009-02-17 17:58 244 --ah----- C:\sqmnoopt10.sqm
    2009-02-17 17:27 . 2009-02-17 17:28 <DIR> d-------- c:\program files\Spyware Doctor
    2009-02-17 17:27 . 2009-02-17 17:27 <DIR> d-------- c:\documents and settings\BTMS09\Application Data\PC Tools
    2009-02-17 17:27 . 2008-08-25 12:36 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys
    2009-02-17 17:27 . 2008-08-25 12:36 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys
    2009-02-17 17:27 . 2008-08-25 12:36 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys
    2009-02-17 17:27 . 2008-06-02 16:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys
    2009-02-17 17:14 . 2009-02-17 17:14 268 --ah----- C:\sqmdata09.sqm
    2009-02-17 17:14 . 2009-02-17 17:14 244 --ah----- C:\sqmnoopt09.sqm
    2009-02-17 15:41 . 2009-02-17 15:41 2,444 --a------ c:\windows\system32\wpa.bak
    2009-02-17 15:25 . 2008-04-13 19:11 571,392 --a--c--- c:\windows\system32\dllcache\tintlgnt.ime
    2009-02-17 15:24 . 2008-04-13 19:09 13,463,552 --a--c--- c:\windows\system32\dllcache\hwxjpn.dll
    2009-02-17 15:23 . 2001-08-23 08:00 10,096,640 --a--c--- c:\windows\system32\dllcache\hwxcht.dll
    2009-02-17 15:22 . 2001-08-23 08:00 169,984 --a--c--- c:\windows\system32\dllcache\iisui.dll
    2009-02-17 15:22 . 2001-08-23 08:00 94,720 --a--c--- c:\windows\system32\dllcache\certmap.ocx
    2009-02-17 15:22 . 2001-08-23 08:00 19,968 --a--c--- c:\windows\system32\dllcache\inetsloc.dll
    2009-02-17 15:22 . 2001-08-23 08:00 14,336 --a--c--- c:\windows\system32\dllcache\iisreset.exe
    2009-02-17 15:22 . 2001-08-23 08:00 7,680 --a--c--- c:\windows\system32\dllcache\inetmgr.exe
    2009-02-17 15:22 . 2001-08-23 08:00 6,144 --a--c--- c:\windows\system32\dllcache\ftpsapi2.dll
    2009-02-17 15:22 . 2001-08-23 08:00 5,632 --a--c--- c:\windows\system32\dllcache\iisrstap.dll
    2009-02-17 15:18 . 2008-04-13 19:12 677,888 --a------ c:\windows\system32\mstsc.exe
    2009-02-17 14:50 . 2004-08-04 02:57 1,086,058 -ra------ c:\windows\SETCB.tmp
    2009-02-17 14:49 . 2004-08-04 03:03 1,042,903 -ra------ c:\windows\SETC8.tmp
    2009-02-17 11:06 . 2008-04-13 19:12 26,112 --a------ c:\windows\system32\userinit.exe
    2009-02-16 22:06 . 2008-05-26 15:59 <DIR> d-------- c:\documents and settings\Guest\Application Data\Intel
    2009-02-16 22:06 . 2009-02-16 22:06 <DIR> d-------- c:\documents and settings\Guest
    2009-02-16 17:11 . 2009-02-16 17:11 <DIR> d--h----- c:\windows\system32\GroupPolicy
    2009-02-16 13:00 . 2009-02-16 13:00 268 --ah----- C:\sqmdata08.sqm
    2009-02-16 12:59 . 2009-02-16 12:59 244 --ah----- C:\sqmnoopt08.sqm
    2009-02-16 11:46 . 2009-02-16 11:46 268 --ah----- C:\sqmdata07.sqm
    2009-02-16 11:46 . 2009-02-16 11:46 244 --ah----- C:\sqmnoopt07.sqm
    2009-02-16 10:02 . 2009-02-16 10:17 67,072 --ah----- c:\windows\system32\secupdat.dat
    2009-02-16 09:34 . 2002-02-15 14:02 676,352 --a------ c:\windows\system32\rtl60.bpl
    2009-02-16 09:33 . 2009-02-18 00:28 <DIR> d-------- c:\windows\system32\inf
    2009-02-16 09:21 . 2009-02-16 09:21 <DIR> d-------- c:\documents and settings\Administrator\Application Data\Sonic
    2009-02-10 14:45 . 2009-02-10 14:45 268 --ah----- C:\sqmdata06.sqm
    2009-02-10 14:45 . 2009-02-10 14:45 244 --ah----- C:\sqmnoopt06.sqm
    2009-01-31 19:21 . 2009-01-31 19:21 244 --ah----- C:\sqmnoopt05.sqm
    2009-01-31 19:21 . 2009-01-31 19:21 244 --ah----- C:\sqmdata05.sqm
    2009-01-31 19:05 . 2009-01-31 19:39 <DIR> d-------- c:\windows\system32\config\systemprofile\Application Data\Gmote
    2009-01-31 18:46 . 2009-01-31 18:46 244 --ah----- C:\sqmnoopt04.sqm

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-18 06:50 --------- d-----w c:\program files\Yahoo!
    2009-02-18 05:23 2,923,321 ----a-r C:\ComboFix.exe
    2009-02-17 23:51 --------- d-----w c:\program files\Common Files\Symantec Shared
    2009-02-17 23:05 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2009-02-17 22:16 --------- d-----w c:\program files\Spybot - Search & Destroy
    2009-02-17 21:37 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-02-17 01:24 --------- d-----w c:\program files\Windows Media Connect 2
    2009-02-17 01:24 --------- d-----w c:\program files\Windows Live Toolbar
    2009-02-17 01:21 --------- d-----w c:\program files\QuickTime
    2009-02-17 01:19 --------- d-----w c:\program files\Microsoft Plus!
    2009-02-17 01:12 --------- d-----w c:\program files\LimeWire
    2009-02-17 01:04 --------- d-----w c:\program files\GmoteServer
    2009-02-17 01:02 --------- d-----w c:\program files\eSignal
    2009-02-16 19:25 90,112 ----a-w c:\windows\DUMPd1e7.tmp
    2009-02-16 19:12 90,112 ----a-w c:\windows\DUMPd969.tmp
    2009-02-16 19:03 90,112 ----a-w c:\windows\DUMPd310.tmp
    2009-02-16 17:59 --------- d-----w c:\documents and settings\BTMS09\Application Data\Gmote
    2009-02-16 15:46 90,112 ----a-w c:\windows\DUMPe427.tmp
    2009-02-16 15:38 90,112 ----a-w c:\windows\DUMPe8bb.tmp
    2009-01-31 23:05 --------- d-----w c:\documents and settings\BTMS09\Application Data\LimeWire
    2009-01-23 04:23 --------- d-----w c:\program files\Common Files\Real
    2009-01-18 00:06 --------- d--h--w c:\program files\InstallJammer Registry
    2009-01-12 00:05 --------- d-----w c:\program files\NCH Software
    2009-01-12 00:02 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Software
    2009-01-11 23:49 --------- d-----w c:\documents and settings\BTMS09\Application Data\HP
    2009-01-11 00:45 --------- d-----w c:\program files\Norton PC Checkup
    2009-01-08 12:57 --------- d-----w c:\program files\HP
    2009-01-08 12:56 --------- d-----w c:\documents and settings\All Users\Application Data\HP Product Assistant
    2009-01-06 03:36 --------- d-----w c:\documents and settings\All Users\Application Data\HP
    2009-01-06 03:33 --------- d-----w c:\program files\Common Files\Sonic Shared
    2009-01-06 03:33 --------- d-----w c:\documents and settings\All Users\Application Data\Sonic
    2009-01-06 03:32 --------- d-----w c:\program files\Common Files\HP
    2009-01-06 03:27 --------- d-----w c:\program files\Hewlett-Packard
    2009-01-06 03:26 --------- d-----w c:\program files\Common Files\Hewlett-Packard
    2008-12-23 18:04 --------- d-----w c:\documents and settings\BTMS09\Application Data\Apple Computer
    .

    ((((((((((((((((((((((((((((( SnapShot_2009-02-18_ 0.34.35.45 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
    - 2006-10-04 14:05:26 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
    + 2008-04-14 00:11:48 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
    - 2004-08-04 06:56:42 1,852,416 ----a-w c:\windows\AppPatch\AcGenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
    - 2004-08-04 06:56:42 450,048 ----a-w c:\windows\AppPatch\AcLayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
    - 2004-08-04 06:56:42 137,728 ----a-w c:\windows\AppPatch\AcLua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll
    - 2004-08-04 06:56:42 244,736 ----a-w c:\windows\AppPatch\AcSpecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
    - 2004-08-04 06:56:42 116,224 ----a-w c:\windows\AppPatch\AcXtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
    + 2009-02-18 06:41:57 110,592 ----a-w c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
    + 2009-02-18 06:43:00 91,488 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
    + 2009-02-18 06:42:59 103,776 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
    + 2009-02-18 06:42:06 66,936 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2009-02-18 06:41:57 4,096 ----a-w c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
    + 2009-02-18 06:42:02 226,656 ----a-w c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
    + 2009-02-18 06:41:58 16,384 ----a-w c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2004-08-04 06:56:50 1,032,192 ----a-w c:\windows\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\explorer.exe
    - 2004-08-04 06:56:46 34,816 ----a-w c:\windows\Help\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ----a-w c:\windows\Help\sniffpol.dll
    - 2004-08-04 06:56:46 33,280 ----a-w c:\windows\Help\sstub.dll
    + 2008-04-14 00:12:07 33,280 ----a-w c:\windows\Help\sstub.dll
    - 2004-08-04 06:56:48 279,040 ----a-w c:\windows\Help\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ----a-w c:\windows\Help\tshoot.dll
    - 2004-08-04 06:56:52 10,752 ----a-w c:\windows\hh.exe
    + 2008-04-14 00:12:21 10,752 ----a-w c:\windows\hh.exe
    - 2004-08-04 06:56:44 220,160 ----a-w c:\windows\ime\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ----a-w c:\windows\ime\mscandui.dll
    - 2004-08-04 06:56:46 130,048 ----a-w c:\windows\ime\SOFTKBD.DLL
    + 2008-04-14 00:12:06 130,048 ----a-w c:\windows\ime\softkbd.dll
    - 2004-08-04 06:56:30 62,976 ----a-w c:\windows\ime\SPGRMR.dll
    + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll
    - 2004-08-04 06:56:46 250,880 ----a-w c:\windows\ime\SPTIP.dll
    + 2008-04-14 00:12:06 250,368 ----a-w c:\windows\ime\sptip.dll
    - 2004-08-04 06:56:58 208,896 ----a-w c:\windows\inf\unregmp2.exe
    + 2008-04-14 00:12:38 208,896 ----a-w c:\windows\inf\unregmp2.exe
    + 2003-07-15 08:13:58 166,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ACCWIZ.DLL
    + 2003-07-15 03:43:20 87,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ADDRPARS.DLL
    + 2003-07-25 23:57:20 75,832 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\DLGSETP.DLL
    + 2003-07-31 20:19:52 131,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\ENVELOPE.DLL
    + 2003-08-13 07:34:38 10,073,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\EXCEL.EXE
    + 2003-07-15 03:41:44 13,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
    + 2003-07-15 03:40:12 179,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
    + 2003-07-15 03:40:12 165,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\FPLACE.DLL
    + 2003-07-15 04:11:42 2,139,192 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\GRAPH.EXE
    + 2003-07-24 03:32:32 121,400 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\IMPMAIL.DLL
    + 2003-08-01 20:07:36 4,815,424 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\INFOPATH.EXE
    + 2003-07-15 03:45:14 58,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\INLAUNCH.DLL
    + 2003-06-18 22:31:44 758,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIGRAPH.DLL
    + 2003-06-18 22:31:10 252,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
    + 2003-06-18 22:31:48 17,920 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIMON.DLL
    + 2003-06-18 22:31:48 18,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIPPR.DLL
    + 2003-06-18 22:31:46 35,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIUI.DLL
    + 2003-06-18 22:31:34 443,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MDIVWCTL.DLL
    + 2003-07-15 03:46:08 176,696 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MIMEDIR.DLL
    + 2003-08-15 05:54:08 6,627,392 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSACCESS.EXE
    + 2003-07-15 08:13:58 130,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSAEXP30.DLL
    + 2003-07-15 03:51:50 116,288 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSCONV97.DLL
    + 2003-07-15 08:14:00 139,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSJSPP40.DLL
    + 2003-07-15 03:53:20 39,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
    + 2003-06-18 22:31:24 1,033,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPCORE.DLL
    + 2003-06-18 22:31:50 16,384 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
    + 2003-07-28 17:24:40 5,677,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPUB.EXE
    + 2003-06-19 21:05:50 364,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
    + 2003-07-15 03:41:56 24,640 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLACCT.DLL
    + 2003-07-15 03:44:34 102,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
    + 2003-08-10 04:06:42 7,522,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLLIB.DLL
    + 2003-07-15 03:44:32 88,128 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLMIME.DLL
    + 2003-07-15 03:45:18 196,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLOOK.EXE
    + 2003-07-15 03:43:48 139,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLPH.DLL
    + 2003-07-15 03:43:18 64,056 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLRPC.DLL
    + 2003-07-15 03:43:16 49,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
    + 2003-07-30 17:40:40 6,133,312 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\POWERPNT.EXE
    + 2003-07-15 08:18:54 430,136 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PP4X322.DLL
    + 2003-07-15 08:18:44 93,752 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
    + 2003-07-31 20:21:08 1,782,840 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PPTVIEW.EXE
    + 2003-07-15 03:40:26 130,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PRTF9.DLL
    + 2003-07-15 03:51:12 604,728 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PTXT9.DLL
    + 2003-07-15 03:50:26 551,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBCONV.DLL
    + 2003-07-15 03:40:16 51,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
    + 2003-07-15 03:42:26 37,432 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RECALL.DLL
    + 2003-07-15 03:43:30 74,288 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RM.DLL
    + 2003-07-21 16:46:38 390,712 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
    + 2003-07-15 03:44:16 66,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
    + 2003-07-15 03:53:14 11,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
    + 2003-08-06 18:26:18 445,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\SOA.DLL
    + 2003-08-03 15:52:32 2,808,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\STSLIST.DLL
    + 2003-07-15 04:00:22 99,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\TRANSMGR.DLL
    + 2003-08-06 18:24:20 12,037,688 ----a-r c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.5614\WINWORD.EXE
    + 2009-02-18 06:43:20 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
    - 2008-06-10 14:00:07 30,208 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2009-02-18 06:43:20 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2009-02-18 06:43:20 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2009-02-18 06:43:19 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-06-10 14:00:07 29,184 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2009-02-18 06:43:20 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2008-06-10 14:00:07 45,056 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2009-02-18 06:43:21 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-06-10 14:00:07 22,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2009-02-18 06:43:21 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2009-02-18 06:43:21 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2009-02-18 06:43:20 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2009-02-18 06:43:20 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
    - 2008-06-10 14:00:07 40,960 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2009-02-18 06:43:21 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2009-02-18 06:43:19 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2009-02-18 06:43:19 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
    - 2004-08-04 06:56:42 24,064 ----a-w c:\windows\msagent\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentanm.dll
    - 2004-08-04 06:56:42 214,016 ----a-w c:\windows\msagent\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ----a-w c:\windows\msagent\agentctl.dll
    - 2004-08-04 06:56:42 41,984 ----a-w c:\windows\msagent\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ----a-w c:\windows\msagent\agentdp2.dll
    - 2004-08-04 06:56:42 58,880 ----a-w c:\windows\msagent\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    - 2004-08-04 06:56:42 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    - 2004-08-04 06:56:42 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    - 2004-08-04 06:56:42 44,032 ----a-w c:\windows\msagent\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ----a-w c:\windows\msagent\agentsr.dll
    - 2004-08-04 06:56:48 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    - 2004-08-04 06:56:42 24,064 ----a-w c:\windows\msagent\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ----a-w c:\windows\msagent\agtintl.dll
    - 2004-08-04 10:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    - 2001-08-23 13:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    - 2001-08-23 13:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    - 2004-08-04 10:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    - 2001-08-23 13:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll
    - 2001-08-23 13:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    - 2001-08-23 13:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    - 2004-08-04 10:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    - 2001-08-23 13:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    - 2001-08-23 13:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    - 2001-08-23 13:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    - 2004-08-04 10:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    - 2001-08-23 13:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    - 2004-08-04 10:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    - 2001-08-23 13:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    - 2004-08-04 10:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    - 2001-08-23 13:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    - 2001-08-23 13:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    - 2004-08-04 06:56:44 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    - 2004-08-04 06:56:54 90,624 ----a-w c:\windows\mui\muisetup.exe
    + 2008-04-14 00:12:29 90,624 ----a-w c:\windows\mui\muisetup.exe
    - 2006-06-03 11:40:49 33,792 ----a-w c:\windows\network diagnostic\custsat.dll
    + 2008-04-14 00:11:51 33,792 ----a-w c:\windows\network diagnostic\custsat.dll
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe
    - 2004-08-04 06:56:56 69,120 ----a-w c:\windows\notepad.exe
    + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\notepad.exe
    - 2004-08-04 06:56:50 768,512 ----a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
    + 2008-04-14 00:12:21 769,024 ----a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe
    - 2004-08-04 06:56:52 743,936 ----a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
    + 2008-04-14 00:12:21 744,448 ----a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    - 2004-08-04 06:56:52 18,944 ----a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
    + 2008-04-14 00:12:21 18,432 ----a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe
    - 2004-08-04 06:56:54 158,208 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    - 2004-08-04 10:00:00 376,320 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    - 2004-08-04 10:00:00 102,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    - 2004-08-04 10:00:00 38,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    - 2008-05-26 16:14:14 87,263 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    + 2009-02-18 07:15:00 87,263 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    - 2008-05-26 16:14:14 3,344 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    + 2009-02-18 07:15:01 4,082 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    - 2004-08-04 06:56:58 150,528 ----a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
    + 2008-04-14 00:12:38 150,528 ----a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-04 06:56:46 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
    - 2004-08-04 06:56:46 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
    - 2004-08-04 06:56:46 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
    - 2004-08-04 06:56:56 146,432 ----a-w c:\windows\regedit.exe
    + 2008-04-14 00:12:32 146,432 ----a-w c:\windows\regedit.exe
    + 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
    + 2008-04-14 00:11:48 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
    + 2004-08-04 03:32:22 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys
    + 2004-08-04 03:32:32 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys
    + 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
    + 2008-04-14 00:12:11 184,320 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 00:11:48 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 00:11:48 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 00:11:48 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 00:11:48 115,712 ------w c:\windows\ServicePackFiles\i386\aclui.dll
    + 2008-04-13 18:36:35 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
    + 2008-04-14 00:11:48 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 00:11:48 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 00:12:12 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 00:11:48 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 00:11:48 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 00:11:48 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
    + 2008-04-14 00:11:48 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
    + 2004-08-04 03:32:24 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys
    + 2008-04-14 00:11:48 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 00:11:48 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
    + 2008-04-14 00:11:48 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
    + 2008-04-14 00:11:48 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 00:11:48 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 00:11:48 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 00:11:48 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 00:11:48 123,392 ------w c:\windows\ServicePackFiles\i386\adsnw.dll
    + 2007-04-02 13:10:44 85,813 ------w c:\windows\ServicePackFiles\i386\adsutil.vbs
    + 2008-04-14 00:11:48 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 00:11:48 617,472 ------w c:\windows\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 00:11:48 99,840 ------w c:\windows\ServicePackFiles\i386\advpack.dll
    + 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys
    + 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 00:11:48 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 00:11:48 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 00:11:48 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 00:11:48 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 00:11:48 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 00:12:12 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll
    + 2008-04-14 00:11:49 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 00:12:12 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 00:12:12 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe
    + 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2008-04-14 00:11:49 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2008-04-13 18:31:32 37,376 ------w c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2008-04-13 18:31:33 37,760 ------w c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2008-04-14 00:11:49 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll
    + 2004-08-04 03:31:20 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys
    + 2008-04-14 00:11:49 108,544 ------w c:\windows\ServicePackFiles\i386\appconf.dll
    + 2008-04-14 00:11:49 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 00:11:49 167,936 ------w c:\windows\ServicePackFiles\i386\appmgmts.dll
    + 2008-04-14 00:11:49 295,936 ------w c:\windows\ServicePackFiles\i386\appmgr.dll
    + 2008-04-14 00:11:49 331,264 ------w c:\windows\ServicePackFiles\i386\aqueue.dll
    + 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2008-04-14 00:11:49 369,664 ------w c:\windows\ServicePackFiles\i386\asp51.dll
    + 2008-04-13 16:09:58 20,480 ------w c:\windows\ServicePackFiles\i386\aspnet_filter.dll
    + 2008-04-13 16:09:59 200,704 ------w c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
    + 2008-04-13 16:10:01 24,576 ------w c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_state.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_wp.exe
    + 2008-04-14 00:12:12 30,208 ------w c:\windows\ServicePackFiles\i386\asr_fmt.exe
    + 2008-04-14 00:12:12 32,768 ------w c:\windows\ServicePackFiles\i386\asr_pfu.exe
    + 2008-04-14 00:11:49 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-14 00:12:12 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe
    + 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys
    + 2004-08-04 03:29:30 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys
    + 2004-08-04 03:29:30 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys
    + 2004-08-04 03:29:30 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys
    + 2004-08-04 03:29:32 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys
    + 2004-08-04 03:29:32 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys
    + 2004-08-04 03:29:32 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys
    + 2004-08-04 03:29:32 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys
    + 2004-08-04 03:29:32 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys
    + 2004-08-04 03:29:32 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys
    + 2004-08-04 03:29:32 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys
    + 2008-04-14 00:11:49 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll
    + 2004-08-04 03:29:28 327,040 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys
    + 2004-08-04 03:29:28 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 00:11:49 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll
    + 2004-08-04 03:29:28 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys
    + 2004-08-04 03:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys
    + 2004-08-04 03:29:30 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys
    + 2004-08-04 03:29:30 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys
    + 2004-08-04 03:29:32 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys
    + 2004-08-04 03:29:32 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys
    + 2004-08-04 03:29:32 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys
    + 2004-08-04 03:29:32 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys
    + 2004-08-04 03:29:32 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys
    + 2004-08-04 03:29:32 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 00:11:50 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll
    + 2008-04-14 00:12:12 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-14 00:09:01 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll
    + 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:12:12 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe
    + 2008-04-14 00:11:50 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 00:11:50 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 00:12:12 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 00:11:50 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe
    + 2008-04-14 00:11:50 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll
    + 2008-04-14 00:12:12 588,800 ------w c:\windows\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 00:12:12 602,624 ------w c:\windows\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 00:12:13 580,608 ------w c:\windows\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 00:12:13 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe
    + 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-14 00:11:50 84,992 ------w c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll
    + 2008-04-14 00:11:50 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 00:11:50 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 00:11:50 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys
    + 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2008-04-14 00:11:50 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 00:11:50 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll
    + 2008-04-14 00:12:13 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2008-04-14 00:12:13 142,848 ------w c:\windows\ServicePackFiles\i386\bootcfg.exe
    + 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys
    + 2008-04-13 17:03:24 63,488 ------w c:\windows\ServicePackFiles\i386\browselc.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll
    + 2008-04-14 00:11:50 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 00:11:50 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 00:11:50 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll
    + 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys
    + 2008-04-13 18:46:32 273,024 ------w c:\windows\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll
    + 2008-04-14 00:11:50 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 00:11:50 84,480 ------w c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:12:13 19,968 ------w c:\windows\ServicePackFiles\i386\cacls.exe
    + 2008-04-14 00:11:50 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll
    + 2007-06-27 12:53:18 94,208 ------w c:\windows\ServicePackFiles\i386\caspol.exe
    + 2008-04-14 00:11:50 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 00:11:50 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 00:11:50 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2008-04-14 00:11:50 151,040 ------w c:\windows\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 00:11:50 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 00:11:50 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll
    + 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2008-04-14 00:11:50 194,560 ------w c:\windows\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 00:11:50 457,728 ------w c:\windows\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 00:11:50 38,912 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 00:09:05 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 00:12:14 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 00:11:50 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys
    + 2008-04-14 00:11:50 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll
    + 2008-04-14 00:11:50 1,358,848 ------w
     
    scorpion657,
    #7
  9. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    + 2008-04-14 00:11:51 46,592 ------w c:\windows\ServicePackFiles\i386\coadmin.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll
    + 2008-04-14 00:11:51 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll
    + 2008-04-14 00:11:51 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 00:11:51 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 00:11:51 276,992 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 00:11:51 252,928 ------w c:\windows\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys
    + 2008-04-14 00:11:51 24,064 ------w c:\windows\ServicePackFiles\i386\compfilt.dll
    + 2008-04-14 00:11:51 229,376 ------w c:\windows\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll
    + 2008-04-14 00:12:15 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe
    + 2008-04-14 00:11:51 792,064 ------w c:\windows\ServicePackFiles\i386\comres.dll
    + 2008-04-13 18:43:32 9,728 ------w c:\windows\ServicePackFiles\i386\comsdupd.exe
    + 2008-04-14 00:11:51 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll
    + 2008-04-14 00:11:51 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 00:11:51 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 00:12:15 1,032,192 ------w c:\windows\ServicePackFiles\i386\conf.exe
    + 2008-04-14 00:11:51 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\windows\ServicePackFiles\i386\confmsp.dll
    + 2008-04-14 00:12:15 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe
    + 2008-04-13 16:10:05 69,632 ------w c:\windows\ServicePackFiles\i386\corperfmonext.dll
    + 2008-04-14 00:11:51 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll
    + 2008-04-14 00:11:51 163,840 ------w c:\windows\ServicePackFiles\i386\credui.dll
    + 2008-04-13 18:31:32 36,736 ------w c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2008-04-14 00:11:51 599,040 ------w c:\windows\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 00:11:51 74,752 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 00:11:51 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 00:11:51 53,760 ------w c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 00:11:51 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 00:11:51 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 00:11:51 512,512 ------w c:\windows\ServicePackFiles\i386\cryptui.dll
    + 2008-04-13 16:10:13 49,152 ------w c:\windows\ServicePackFiles\i386\csc.exe
    + 2008-04-14 00:11:51 101,888 ------w c:\windows\ServicePackFiles\i386\cscdll.dll
    + 2007-06-27 12:53:47 589,824 ------w c:\windows\ServicePackFiles\i386\cscomp.dll
    + 2008-04-14 00:12:15 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 00:11:51 326,656 ------w c:\windows\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 00:11:51 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 00:12:16 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe
    + 2008-04-14 00:11:51 249,856 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll
    + 2004-08-04 03:32:26 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys
    + 2008-04-14 00:11:51 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 00:11:51 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 00:11:51 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 00:11:51 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 00:11:51 1,054,208 ------w c:\windows\ServicePackFiles\i386\danim.dll
    + 2008-01-23 04:56:21 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll
    + 2008-04-14 00:11:51 54,272 ------w c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll
    + 2008-04-14 00:12:16 42,496 ------w c:\windows\ServicePackFiles\i386\davcdata.exe
    + 2008-04-14 00:11:51 25,088 ------w c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 00:11:51 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 00:11:51 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 00:11:51 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:25:26 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin
    + 2008-04-14 00:11:51 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 00:11:51 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:12:16 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
    + 2008-04-14 00:12:16 30,208 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 00:11:51 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 00:11:51 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 00:12:16 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 00:11:51 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 00:11:51 282,624 ------w c:\windows\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 00:12:16 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 00:12:16 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 00:11:51 39,424 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 00:11:51 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 00:11:51 111,104 ------w c:\windows\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 00:11:51 126,976 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll
    + 2008-04-14 00:12:17 539,136 ------w c:\windows\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 00:12:17 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe
    + 2004-08-04 10:00:00 884,712 ------w c:\windows\ServicePackFiles\i386\digcore.exe
    + 2008-04-14 00:11:52 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll
    + 2008-04-14 00:11:52 158,720 ------w c:\windows\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 00:11:52 181,760 ------w c:\windows\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 00:11:52 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll
    + 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll
    + 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2008-04-14 00:12:17 163,840 ------w c:\windows\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:11:52 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll
    + 2008-04-14 00:12:17 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe
    + 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys
    + 2008-04-14 00:12:17 224,768 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe
    + 2008-04-14 00:11:52 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll
    + 2008-04-13 18:44:48 799,744 ------w c:\windows\ServicePackFiles\i386\dmboot.sys
    + 2008-04-14 00:11:52 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll
    + 2008-04-14 00:11:52 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll
    + 2008-04-13 18:44:46 153,344 ------w c:\windows\ServicePackFiles\i386\dmio.sys
    + 2008-04-14 00:11:52 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2008-04-14 00:12:17 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2008-04-14 00:11:52 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2008-04-14 00:11:52 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll
    + 2008-04-14 00:11:52 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll
    + 2008-04-14 00:11:52 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll
    + 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2008-04-14 00:11:52 52,224 ------w c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2008-04-14 00:11:52 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll
    + 2008-04-14 00:11:52 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    + 2008-04-14 00:11:52 48,128 ------w c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2004-08-04 04:51:22 53,840 ------w c:\windows\ServicePackFiles\i386\dosx.exe
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll
    + 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys
    + 2008-04-14 00:11:52 102,912 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll
    + 2008-04-14 00:12:17 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2008-04-14 00:11:52 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2008-04-14 00:09:19 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll
    + 2008-04-14 00:11:52 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll
    + 2008-04-14 00:11:52 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2008-04-14 00:11:52 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-04-14 00:09:20 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll
    + 2008-04-14 00:12:17 17,920 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2008-04-14 00:11:52 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2008-04-14 00:11:52 212,480 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll
    + 2008-04-14 00:12:18 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2008-04-14 00:11:52 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll
    + 2008-04-14 00:11:52 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys
    + 2008-04-14 00:11:52 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll
    + 2008-04-14 00:12:18 62,976 ------w c:\windows\ServicePackFiles\i386\drvqry.exe
    + 2004-07-17 17:36:44 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll
    + 2008-04-14 00:11:52 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll
    + 2008-04-14 00:11:52 71,680 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-04-14 00:11:52 92,672 ------w c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll
    + 2008-04-14 00:11:52 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll
    + 2008-04-14 00:11:52 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll
    + 2008-04-14 00:11:52 142,848 ------w c:\windows\ServicePackFiles\i386\dsprop.dll
    + 2008-04-13 17:09:30 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll
    + 2008-04-14 00:11:52 239,104 ------w c:\windows\ServicePackFiles\i386\dsquery.dll
    + 2008-04-14 00:11:52 51,200 ------w c:\windows\ServicePackFiles\i386\dssec.dll
    + 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll
    + 2008-04-14 00:11:52 113,152 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll
    + 2008-04-14 00:12:18 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2008-04-14 00:11:52 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll
    + 2008-04-14 00:12:18 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-04-14 00:12:18 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe
    + 2008-04-14 00:11:52 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll
    + 2008-04-14 00:11:52 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll
    + 2008-04-14 00:12:18 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe
    + 2008-04-14 00:11:52 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll
    + 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys
    + 2008-04-14 00:11:52 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll
    + 2008-04-14 00:11:52 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\ServicePackFiles\i386\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2008-04-14 00:11:52 26,624 ------w c:\windows\ServicePackFiles\i386\efsadu.dll
    + 2008-04-14 00:11:53 183,296 ------w c:\windows\ServicePackFiles\i386\els.dll
    + 2008-04-14 00:11:53 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll
    + 2008-04-14 00:11:53 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll
    + 2008-04-13 16:26:02 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2004-07-17 16:39:36 120,320 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll
    + 2008-04-14 00:11:53 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2008-04-14 00:11:53 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll
    + 2008-04-14 00:11:53 1,082,368 ------w c:\windows\ServicePackFiles\i386\esent.dll
    + 2008-04-14 00:11:53 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll
    + 2004-08-04 03:32:28 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys
    + 2008-04-14 00:12:19 193,024 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe
    + 2008-04-14 00:12:19 50,688 ------w c:\windows\ServicePackFiles\i386\evcreate.exe
    + 2008-04-14 00:11:53 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2007-06-27 12:54:17 798,720 ------w c:\windows\ServicePackFiles\i386\eventlogmessages.dll
    + 2008-04-14 00:11:53 101,888 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2008-04-14 00:12:19 92,160 ------w c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2008-04-14 00:11:53 45,056 ------w c:\windows\ServicePackFiles\i386\evtgprov.dll
    + 2008-04-14 00:12:19 82,944 ------w c:\windows\ServicePackFiles\i386\evtrig.exe
    + 2008-04-14 00:12:19 1,033,728 ------w c:\windows\ServicePackFiles\i386\explorer.exe
    + 2008-04-14 00:11:53 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll
    + 2008-04-14 00:11:53 14,336 ------w c:\windows\ServicePackFiles\i386\exstrace.dll
    + 2008-04-14 00:11:53 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll
    + 2008-04-14 00:09:30 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
    + 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys
    + 2008-04-14 00:11:53 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll
    + 2008-04-14 00:11:53 80,384 ------w c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys
    + 2008-04-14 00:11:53 124,928 ------w c:\windows\ServicePackFiles\i386\fde.dll
    + 2008-04-14 00:11:53 73,728 ------w c:\windows\ServicePackFiles\i386\fdeploy.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll
    + 2008-04-14 00:11:53 337,920 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll
    + 2008-04-14 00:12:20 27,136 ------w c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-04-13 18:33:28 44,544 ------w c:\windows\ServicePackFiles\i386\fips.sys
    + 2008-04-14 00:11:53 87,552 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2008-04-14 00:11:53 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2008-04-14 00:12:20 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys
    + 2008-04-14 00:11:53 382,976 ------w c:\windows\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe
    + 2004-08-04 03:31:24 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys
    + 2008-04-14 00:12:42 29,696 ------w c:\windows\ServicePackFiles\i386\format.com
    + 2008-04-14 00:11:53 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2008-04-14 00:11:53 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll
    + 2008-04-14 00:11:53 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2008-04-14 00:11:53 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll
    + 2008-04-14 00:11:53 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2008-04-14 00:11:53 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll
    + 2008-04-14 00:11:53 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll
    + 2008-04-14 00:11:53 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2008-04-14 00:11:53 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2008-04-14 00:11:53 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2008-04-14 00:11:53 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll
    + 2008-04-14 00:12:20 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2008-04-14 00:12:20 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe
    + 2008-04-14 00:12:20 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2008-04-14 00:12:20 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe
    + 2008-04-14 00:11:53 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2008-04-14 00:11:53 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll
    + 2007-04-02 16:36:04 208,896 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
    + 2008-04-14 00:12:20 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2008-04-14 00:12:20 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-04-14 00:09:33 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll
    + 2008-04-14 00:11:53 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll
    + 2008-04-14 00:12:20 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe
    + 2008-04-14 00:12:20 42,496 ------w c:\windows\ServicePackFiles\i386\ftp.exe
    + 2008-04-14 00:11:53 6,144 ------w c:\windows\ServicePackFiles\i386\ftpmib.dll
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\ftpsv251.dll
    + 2007-06-27 12:54:17 233,472 ------w c:\windows\ServicePackFiles\i386\fusion.dll
    + 2008-04-14 00:11:53 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2008-04-14 00:11:53 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll
    + 2008-04-14 00:12:21 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe
    + 2008-04-14 00:11:54 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll
    + 2008-04-14 00:12:21 229,376 ------w c:\windows\ServicePackFiles\i386\fxscover.exe
    + 2008-04-14 00:11:54 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2008-04-14 00:11:54 55,296 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2008-04-14 00:11:54 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll
    + 2008-04-14 00:11:54 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll
    + 2008-04-14 00:09:33 6,656 ------w c:\windows\ServicePackFiles\i386\fxsres.dll
    + 2008-04-14 00:11:54 562,176 ------w c:\windows\ServicePackFiles\i386\fxsst.dll
    + 2008-04-14 00:12:21 267,776 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe
    + 2008-04-14 00:11:54 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll
    + 2008-04-14 00:11:54 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll
    + 2008-04-14 00:11:54 154,112 ------w c:\windows\ServicePackFiles\i386\fxsui.dll
    + 2008-04-14 00:11:54 192,512 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll
    + 2008-04-14 00:11:54 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll
    + 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll
    + 2008-04-14 00:12:21 59,904 ------w c:\windows\ServicePackFiles\i386\getmac.exe
    + 2008-04-14 00:11:54 122,880 ------w c:\windows\ServicePackFiles\i386\glu32.dll
    + 2008-04-14 00:09:35 566,784 ------w c:\windows\ServicePackFiles\i386\gpedit.dll
    + 2004-08-04 04:31:44 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll
    + 2006-12-31 01:26:44 9,728 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
    + 2008-04-14 00:12:21 120,832 ------w c:\windows\ServicePackFiles\i386\gprslt.exe
    + 2008-04-14 00:11:54 199,680 ------w c:\windows\ServicePackFiles\i386\gptext.dll
    + 2008-04-14 00:12:21 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2008-04-13 18:40:21 28,288 ------w c:\windows\ServicePackFiles\i386\grserial.sys
    + 2008-04-14 00:11:54 133,120 ------w c:\windows\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\ServicePackFiles\i386\guitrna.dll
    + 2008-04-14 00:11:54 32,256 ------w c:\windows\ServicePackFiles\i386\gzip.dll
    + 2008-04-14 00:11:54 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2008-04-14 00:11:54 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll
    + 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll
    + 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll
    + 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll
    + 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll
    + 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll
    + 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll
    + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys
    + 2008-04-14 00:12:21 15,872 ------w c:\windows\ServicePackFiles\i386\help.exe
    + 2008-04-14 00:12:21 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe
    + 2008-04-14 00:12:21 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe
    + 2008-04-14 00:12:21 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe
    + 2008-04-14 00:11:54 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2008-04-14 00:11:54 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys
    + 2008-04-13 18:46:30 25,600 ------w c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys
    + 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2008-04-14 00:11:54 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2008-04-14 00:11:54 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll
    + 2008-04-14 00:11:54 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2008-04-14 00:11:54 344,064 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll
    + 2008-04-14 00:11:54 330,752 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll
    + 2008-04-14 00:11:54 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2008-04-14 00:11:54 144,896 ------w c:\windows\ServicePackFiles\i386\hotplug.dll
    + 2008-04-14 00:11:54 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2008-04-14 00:11:54 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-04-14 00:11:54 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2008-04-14 00:12:21 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2004-08-04 03:41:48 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
    + 2008-04-14 00:11:54 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2004-08-04 03:41:50 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys
    + 2004-08-04 03:41:56 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
    + 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys
    + 2008-04-14 00:11:54 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2008-04-14 00:11:54 268,288 ------w c:\windows\ServicePackFiles\i386\httpext.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\httpmb51.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\httpod51.dll
    + 2008-04-14 00:11:54 41,984 ------w c:\windows\ServicePackFiles\i386\htui.dll
    + 2008-04-14 00:11:54 347,136 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll
    + 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys
    + 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2008-04-13 19:18:00 52,480 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2008-04-14 00:11:54 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
    + 2004-08-04 03:29:38 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys
    + 2008-04-14 00:11:54 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll
    + 2008-04-14 00:11:54 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2008-04-14 00:11:54 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2008-04-14 00:11:54 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll
    + 2008-04-14 00:09:40 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll
    + 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2008-04-14 00:12:22 214,528 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe
    + 2008-04-14 00:12:22 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2008-04-14 00:11:54 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2008-04-14 00:11:54 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2008-04-14 00:11:54 172,032 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll
    + 2008-04-14 00:11:54 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2008-04-14 00:12:22 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2008-04-14 00:11:54 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2008-04-14 00:11:54 120,832 ------w c:\windows\ServicePackFiles\i386\idq.dll
    + 2008-04-14 00:12:22 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2008-04-14 00:11:54 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll
    + 2008-04-14 00:11:54 216,576 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll
    + 2008-04-14 00:11:54 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll
    + 2008-04-14 00:12:22 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2007-12-17 11:58:35 8,192 ------w c:\windows\ServicePackFiles\i386\ieexec.exe
    + 2007-06-27 12:54:23 7,168 ------w c:\windows\ServicePackFiles\i386\ieexecremote.dll
    + 2007-06-27 12:54:23 32,768 ------w c:\windows\ServicePackFiles\i386\iehost.dll
    + 2008-04-14 00:11:54 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll
    + 2008-04-14 00:11:54 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2008-04-14 00:11:54 62,976 ------w c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2008-04-14 00:12:22 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2008-04-14 00:12:22 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe
    + 2008-04-14 00:11:54 135,680 ------w c:\windows\ServicePackFiles\i386\ifmon.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll
    + 2008-04-14 00:11:54 505,344 ------w c:\windows\ServicePackFiles\i386\iis.dll
    + 2008-04-14 00:11:54 25,088 ------w c:\windows\ServicePackFiles\i386\iisadmin.dll
    + 2008-04-14 00:11:54 145,408 ------w c:\windows\ServicePackFiles\i386\iische51.dll
    + 2008-04-14 00:11:54 68,608 ------w c:\windows\ServicePackFiles\i386\iisext51.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\iisfecnv.dll
    + 2008-04-14 00:11:54 79,872 ------w c:\windows\ServicePackFiles\i386\iislog51.dll
    + 2008-04-14 00:11:54 64,512 ------w c:\windows\ServicePackFiles\i386\iismap.dll
    + 2008-04-14 00:12:22 30,720 ------w c:\windows\ServicePackFiles\i386\iisrstas.exe
    + 2008-04-14 00:11:54 133,632 ------w c:\windows\ServicePackFiles\i386\iisrtl.dll
    + 2008-04-13 16:10:32 184,320 ------w c:\windows\ServicePackFiles\i386\ilasm.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll
    + 2008-04-14 00:11:54 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll
    + 2008-04-14 00:12:22 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe
    + 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys
    + 2008-04-14 00:11:54 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2008-04-14 00:11:54 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2008-04-14 00:11:54 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 123,392 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll
    + 2008-04-14 00:11:54 274,432 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll
    + 2008-04-14 00:11:54 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll
    + 2008-04-14 00:12:22 15,360 ------w c:\windows\ServicePackFiles\i386\inetin51.exe
    + 2008-04-14 00:11:55 829,440 ------w c:\windows\ServicePackFiles\i386\inetmgr.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2008-04-14 00:11:55 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2008-04-14 00:11:55 15,872 ------w c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2008-04-13 16:22:12 48,128 ------w c:\windows\ServicePackFiles\i386\inetres.dll
    + 2008-04-14 00:12:22 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2008-04-14 00:11:55 13,312 ------w c:\windows\ServicePackFiles\i386\infoadmn.dll
    + 2008-04-14 00:11:55 257,024 ------w c:\windows\ServicePackFiles\i386\infocomm.dll
    + 2008-04-14 00:11:55 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll
    + 2008-04-14 00:11:55 123,392 ------w c:\windows\ServicePackFiles\i386\input.dll
    + 2008-04-14 00:11:55 96,256 ------w c:\windows\ServicePackFiles\i386\inseng.dll
    + 2007-06-27 12:54:28 24,576 ------w c:\windows\ServicePackFiles\i386\installutil.exe
    + 2008-04-13 18:40:29 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys
    + 2008-04-13 18:31:32 36,352 ------w c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2008-04-14 00:12:22 55,808 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2008-04-14 00:09:30 103,424 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll
    + 2008-04-14 00:09:23 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2008-04-14 00:11:55 94,720 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-04-14 00:11:55 161,280 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll
    + 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys
    + 2008-04-14 00:11:55 331,264 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll
    + 2008-04-14 00:11:55 330,752 ------w c:\windows\ServicePackFiles\i386\ippromon.dll
    + 2008-04-14 00:11:55 35,328 ------w c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
    + 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2008-04-14 00:11:55 349,696 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
    + 2008-04-14 00:10:45 102,912 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll
    + 2008-04-14 00:09:24 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2008-04-14 00:11:55 384,000 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
    + 2008-04-14 00:12:23 53,248 ------w c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2008-04-14 00:11:55 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2008-04-14 00:12:23 23,552 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:11:55 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll
    + 2008-04-14 00:11:55 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll
    + 2008-04-14 00:11:55 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
    + 2008-04-14 00:11:55 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll
    + 2008-04-14 00:11:55 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
    + 2008-04-13 18:45:36 46,592 ------w c:\windows\ServicePackFiles\i386\irbus.sys
    + 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys
    + 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys
    + 2008-04-14 00:12:23 151,552 ------w c:\windows\ServicePackFiles\i386\irftp.exe
    + 2008-04-14 00:11:55 28,160 ------w c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-04-13 18:36:41 37,248 ------w c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2008-04-14 00:11:55 68,608 ------w c:\windows\ServicePackFiles\i386\isatq.dll
    + 2008-04-14 00:11:55 26,624 ------w c:\windows\ServicePackFiles\i386\iscomlog.dll
    + 2008-04-14 00:10:32 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll
    + 2008-04-14 00:10:55 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll
    + 2008-04-14 00:10:55 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll
    + 2008-04-14 00:11:55 81,920 ------w c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:10:32 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2008-04-14 00:11:55 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll
    + 2008-04-14 00:11:55 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll
    + 2008-04-14 00:11:55 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll
    + 2008-04-14 00:11:55 54,272 ------w c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2008-04-14 00:11:55 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll
    + 2007-06-27 12:54:35 40,960 ------w c:\windows\ServicePackFiles\i386\jsc.exe
    + 2008-04-14 00:11:56 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll
    + 2008-04-14 00:11:56 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll
    + 2008-04-13 18:39:47 24,576 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll
    + 2008-04-13 18:39:48 14,592 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
    + 2008-04-14 00:09:55 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll
    + 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll
    + 2008-04-14 00:11:56 184,832 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll
    + 2008-04-14 00:11:56 48,640 ------w c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2008-04-14 00:11:56 253,952 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll
    + 2008-04-14 00:11:56 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll
    + 2008-04-14 00:11:56 989,696 ------w c:\windows\ServicePackFiles\i386\kernel32.dll
    + 2004-08-04 04:46:56 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys
     
    scorpion657,
    #8
  10. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\ServicePackFiles\i386\cipher.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2004-08-04 04:49:34 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 04:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 04:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 04:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 04:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 04:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 04:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 04:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 04:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
    + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 04:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 04:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2004-08-04 04:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
    + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    + 2008-04-14 10:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:11:56 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 03:41:36 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 03:41:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
    + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 03:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 03:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-04-14 00:11:56 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-14 00:11:56 85,504 ------w c:\windows\ServicePackFiles\i386\metada51.dll
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2007-06-27 12:54:42 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
    + 2007-06-27 12:54:48 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
    + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-04 04:51:12 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
    + 2008-04-14 00:11:57 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2008-04-14 00:11:58 471,552 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2004-07-17 17:42:20 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
    + 2007-06-27 12:54:57 1,564,672 ------w
    c:\windows\ServicePackFiles\i386\mscorcfg.dll
    + 2008-04-13 16:10:41 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2008-04-13 16:10:42 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
    + 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
    + 2008-04-13 16:10:45 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2007-06-27 12:55:20 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
    + 2008-04-13 16:10:49 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2007-12-17 11:58:42 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
    + 2008-04-13 16:10:53 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2008-04-13 16:10:53 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
    + 2008-04-13 16:10:55 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2008-04-13 16:10:55 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
    + 2008-04-13 16:10:58 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
    + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2007-12-10 12:41:11 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
    + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2007-12-10 12:41:11 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2007-12-10 12:41:12 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2007-12-10 12:41:12 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-04 10:00:00 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-04 10:00:00 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2007-12-10 12:41:12 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2007-12-10 12:41:13 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2007-12-10 12:41:13 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2007-12-10 12:41:13 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2007-12-10 12:41:14 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2007-12-10 12:41:14 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 03:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 03:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 03:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2004-08-04 04:10:58 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 03:31:42 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
    + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2008-04-13 16:11:06 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
    + 2004-08-04 04:38:34 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2004-08-04 04:45:10 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys
    + 2004-08-04 04:45:16 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2004-08-04 04:45:12 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2004-08-04 04:45:16 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2004-08-04 04:45:14 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 03:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
    + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 03:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\ServicePackFiles\i386\obrb0401.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\ServicePackFiles\i386\obrb0404.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\ServicePackFiles\i386\obrb0405.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\ServicePackFiles\i386\obrb0406.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\ServicePackFiles\i386\obrb0407.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\ServicePackFiles\i386\obrb0408.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\ServicePackFiles\i386\obrb040b.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\ServicePackFiles\i386\obrb040c.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\ServicePackFiles\i386\obrb040d.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\ServicePackFiles\i386\obrb040e.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\ServicePackFiles\i386\obrb0410.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\ServicePackFiles\i386\obrb0411.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\ServicePackFiles\i386\obrb0412.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\ServicePackFiles\i386\obrb0413.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\ServicePackFiles\i386\obrb0414.dll
     
    scorpion657,
    #9
  11. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\ServicePackFiles\i386\cipher.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2004-08-04 04:49:34 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 04:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 04:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 04:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 04:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 04:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 04:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 04:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 04:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
    + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 04:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 04:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2004-08-04 04:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
    + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    + 2008-04-14 10:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:11:56 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 03:41:36 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 03:41:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
    + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 03:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 03:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-04-14 00:11:56 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-14 00:11:56 85,504 ------w c:\windows\ServicePackFiles\i386\metada51.dll
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2007-06-27 12:54:42 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
    + 2007-06-27 12:54:48 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
    + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-04 04:51:12 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
    + 2008-04-14 00:11:57 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2008-04-14 00:11:58 471,552 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2004-07-17 17:42:20 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
    + 2007-06-27 12:54:57 1,564,672 ------w
    c:\windows\ServicePackFiles\i386\mscorcfg.dll
    + 2008-04-13 16:10:41 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2008-04-13 16:10:42 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
    + 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
    + 2008-04-13 16:10:45 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2007-06-27 12:55:20 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
    + 2008-04-13 16:10:49 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2007-12-17 11:58:42 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
    + 2008-04-13 16:10:53 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2008-04-13 16:10:53 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
    + 2008-04-13 16:10:55 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2008-04-13 16:10:55 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
    + 2008-04-13 16:10:58 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
    + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2007-12-10 12:41:11 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
    + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2007-12-10 12:41:11 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2007-12-10 12:41:12 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2007-12-10 12:41:12 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-04 10:00:00 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-04 10:00:00 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2007-12-10 12:41:12 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2007-12-10 12:41:13 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2007-12-10 12:41:13 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2007-12-10 12:41:13 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2007-12-10 12:41:14 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2007-12-10 12:41:14 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 03:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 03:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 03:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2004-08-04 04:10:58 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 03:31:42 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
    + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2008-04-13 16:11:06 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
    + 2004-08-04 04:38:34 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2004-08-04 04:45:10 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys
    + 2004-08-04 04:45:16 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2004-08-04 04:45:12 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2004-08-04 04:45:16 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2004-08-04 04:45:14 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 03:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
    + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 03:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\ServicePackFiles\i386\obrb0401.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\ServicePackFiles\i386\obrb0404.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\ServicePackFiles\i386\obrb0405.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\ServicePackFiles\i386\obrb0406.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\ServicePackFiles\i386\obrb0407.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\ServicePackFiles\i386\obrb0408.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\ServicePackFiles\i386\obrb040b.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\ServicePackFiles\i386\obrb040c.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\ServicePackFiles\i386\obrb040d.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\ServicePackFiles\i386\obrb040e.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\ServicePackFiles\i386\obrb0410.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\ServicePackFiles\i386\obrb0411.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\ServicePackFiles\i386\obrb0412.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\ServicePackFiles\i386\obrb0413.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\ServicePackFiles\i386\obrb0414.dll
    + 2008-04-13 18:40:47 391,680 ------w c:\windows\ServicePackFiles\i386\obrb0415.dll
    + 2008-04-13 18:40:10 409,600 ------w c:\windows\ServicePackFiles\i386\obrb0416.dll
    + 2008-04-13 18:40:50 427,008 ------w c:\windows\ServicePackFiles\i386\obrb0419.dll
    + 2008-04-13 18:40:52 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll
    + 2008-04-13 18:40:56 363,008 ------w c:\windows\ServicePackFiles\i386\obrb041d.dll
    + 2008-04-13 18:41:00 390,144 ------w c:\windows\ServicePackFiles\i386\obrb041f.dll
    + 2008-04-13 18:40:56 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll
    + 2008-04-13 18:40:24 270,336 ------w c:\windows\ServicePackFiles\i386\obrb0804.dll
    + 2008-04-13 18:40:48 435,200 ------w c:\windows\ServicePackFiles\i386\obrb0816.dll
    + 2008-04-13 18:40:30 446,464 ------w c:\windows\ServicePackFiles\i386\obrb0c0a.dll
    + 2008-04-14 00:12:02 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2008-04-14 00:12:02 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2004-07-17 17:36:44 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2008-04-14 00:12:02 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
    + 2008-04-14 00:12:02 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-04-14 00:12:30 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-04-14 00:12:02 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-04-14 00:12:02 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
    + 2008-04-14 00:12:30 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-04-14 00:12:02 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-04-13 17:26:05 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-04-14 00:10:31 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-04-14 00:12:02 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-04-14 00:12:02 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-04-14 00:12:02 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
    + 2008-04-14 00:12:30 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-04-14 00:12:02 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
    + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-04-14 00:12:02 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll
    + 2008-04-14 00:12:02 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2008-04-14 00:12:02 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
    + 2008-04-14 00:12:02 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
    + 2008-04-14 00:12:02 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll
    + 2008-04-14 00:12:31 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-04-14 00:12:02 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
    + 2008-04-14 00:12:31 67,584 ------w c:\windows\ServicePackFiles\i386\opnfiles.exe
    + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
    + 2008-04-14 00:12:31 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe
    + 2008-04-13 18:31:43 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-04-14 00:12:02 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    + 2008-04-14 00:12:02 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    + 2008-04-14 00:12:02 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    + 2008-04-14 00:12:02 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
    + 2008-04-13 18:31:31 42,752 ------w c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-04-14 00:12:31 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-04-13 18:40:10 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2004-08-04 03:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2008-04-14 00:12:02 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
    + 2008-04-14 00:12:02 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-04-13 18:36:44 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
    + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
    + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
    + 2008-04-13 18:36:43 120,192 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
    + 2004-08-04 03:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys
    + 2008-04-14 00:12:02 284,160 ------w c:\windows\ServicePackFiles\i386\pdh.dll
    + 2008-04-13 16:11:06 20,480 ------w c:\windows\ServicePackFiles\i386\perfcounter.dll
    + 2008-04-14 00:12:02 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-04-14 00:12:02 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-04-14 00:12:31 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2008-04-14 00:12:02 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-04-14 00:12:02 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-04-14 00:10:34 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
    + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-04-14 00:10:34 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
    + 2008-04-14 00:12:02 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-04-14 00:11:09 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-04-14 00:12:31 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe
    + 2008-04-14 00:12:31 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-04-14 00:12:02 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
    + 2008-04-14 00:12:02 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-04-14 00:12:02 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-04-14 00:12:02 92,672 ------w c:\windows\ServicePackFiles\i386\policman.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll
     
    scorpion657,
    #10
  12. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\ServicePackFiles\i386\cipher.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2004-08-04 04:49:34 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 04:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 04:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 04:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 04:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 04:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 04:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 04:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 04:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
    + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 04:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 04:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2004-08-04 04:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
    + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    + 2008-04-14 10:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:11:56 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 03:41:36 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 03:41:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
    + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 03:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 03:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-04-14 00:11:56 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-14 00:11:56 85,504 ------w c:\windows\ServicePackFiles\i386\metada51.dll
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2007-06-27 12:54:42 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
    + 2007-06-27 12:54:48 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
    + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-04 04:51:12 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
    + 2008-04-14 00:11:57 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2008-04-14 00:11:58 471,552 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2004-07-17 17:42:20 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
    + 2007-06-27 12:54:57 1,564,672 ------w
    c:\windows\ServicePackFiles\i386\mscorcfg.dll
    + 2008-04-13 16:10:41 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2008-04-13 16:10:42 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
    + 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
    + 2008-04-13 16:10:45 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2007-06-27 12:55:20 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
    + 2008-04-13 16:10:49 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2007-12-17 11:58:42 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
    + 2008-04-13 16:10:53 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2008-04-13 16:10:53 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
    + 2008-04-13 16:10:54 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
    + 2008-04-13 16:10:54 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
    + 2008-04-13 16:10:55 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
    + 2008-04-13 16:10:55 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
    + 2008-04-13 16:10:55 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2008-04-13 16:10:55 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
    + 2008-04-13 16:10:58 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
    + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2007-12-10 12:41:11 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
    + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2007-12-10 12:41:11 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2007-12-10 12:41:12 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2007-12-10 12:41:12 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-04 10:00:00 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-04 10:00:00 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2007-12-10 12:41:12 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2007-12-10 12:41:13 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2007-12-10 12:41:13 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2007-12-10 12:41:13 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2007-12-10 12:41:14 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2007-12-10 12:41:14 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 03:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 03:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 03:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2004-08-04 04:10:58 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 03:31:42 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
    + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2008-04-13 16:11:06 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
    + 2004-08-04 04:38:34 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2004-08-04 04:45:10 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys
    + 2004-08-04 04:45:16 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2004-08-04 04:45:12 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2004-08-04 04:45:16 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2004-08-04 04:45:14 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 03:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
    + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 03:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\ServicePackFiles\i386\obrb0401.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\ServicePackFiles\i386\obrb0404.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\ServicePackFiles\i386\obrb0405.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\ServicePackFiles\i386\obrb0406.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\ServicePackFiles\i386\obrb0407.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\ServicePackFiles\i386\obrb0408.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\ServicePackFiles\i386\obrb040b.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\ServicePackFiles\i386\obrb040c.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\ServicePackFiles\i386\obrb040d.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\ServicePackFiles\i386\obrb040e.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\ServicePackFiles\i386\obrb0410.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\ServicePackFiles\i386\obrb0411.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\ServicePackFiles\i386\obrb0412.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\ServicePackFiles\i386\obrb0413.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\ServicePackFiles\i386\obrb0414.dll
    + 2008-04-13 18:40:47 391,680 ------w c:\windows\ServicePackFiles\i386\obrb0415.dll
    + 2008-04-13 18:40:10 409,600 ------w c:\windows\ServicePackFiles\i386\obrb0416.dll
    + 2008-04-13 18:40:50 427,008 ------w c:\windows\ServicePackFiles\i386\obrb0419.dll
    + 2008-04-13 18:40:52 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll
    + 2008-04-13 18:40:56 363,008 ------w c:\windows\ServicePackFiles\i386\obrb041d.dll
    + 2008-04-13 18:41:00 390,144 ------w c:\windows\ServicePackFiles\i386\obrb041f.dll
    + 2008-04-13 18:40:56 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll
    + 2008-04-13 18:40:24 270,336 ------w c:\windows\ServicePackFiles\i386\obrb0804.dll
    + 2008-04-13 18:40:48 435,200 ------w c:\windows\ServicePackFiles\i386\obrb0816.dll
    + 2008-04-13 18:40:30 446,464 ------w c:\windows\ServicePackFiles\i386\obrb0c0a.dll
    + 2008-04-14 00:12:02 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
     
    scorpion657,
    #11
  13. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2008-04-14 00:12:02 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2004-07-17 17:36:44 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2008-04-14 00:12:02 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
    + 2008-04-14 00:12:02 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-04-14 00:12:30 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-04-14 00:12:02 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-04-14 00:12:02 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
    + 2008-04-14 00:12:30 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-04-14 00:12:02 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-04-13 17:26:05 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-04-14 00:10:31 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-04-14 00:12:02 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-04-14 00:12:02 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-04-14 00:12:02 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
    + 2008-04-14 00:12:30 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-04-14 00:12:02 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
    + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-04-14 00:12:02 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll
    + 2008-04-14 00:12:02 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2008-04-14 00:12:02 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
    + 2008-04-14 00:12:02 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
    + 2008-04-14 00:12:02 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll
    + 2008-04-14 00:12:31 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-04-14 00:12:02 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
    + 2008-04-14 00:12:31 67,584 ------w c:\windows\ServicePackFiles\i386\opnfiles.exe
    + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
    + 2008-04-14 00:12:31 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe
    + 2008-04-13 18:31:43 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-04-14 00:12:02 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    + 2008-04-14 00:12:02 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    + 2008-04-14 00:12:02 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    + 2008-04-14 00:12:02 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
    + 2008-04-13 18:31:31 42,752 ------w c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-04-14 00:12:31 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-04-13 18:40:10 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2004-08-04 03:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2008-04-14 00:12:02 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
    + 2008-04-14 00:12:02 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-04-13 18:36:44 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
    + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
    + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
    + 2008-04-13 18:36:43 120,192 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
    + 2004-08-04 03:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys
    + 2008-04-14 00:12:02 284,160 ------w c:\windows\ServicePackFiles\i386\pdh.dll
    + 2008-04-13 16:11:06 20,480 ------w c:\windows\ServicePackFiles\i386\perfcounter.dll
    + 2008-04-14 00:12:02 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-04-14 00:12:02 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-04-14 00:12:31 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2008-04-14 00:12:02 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-04-14 00:12:02 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-04-14 00:10:34 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
    + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-04-14 00:10:34 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
    + 2008-04-14 00:12:02 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-04-14 00:11:09 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-04-14 00:12:31 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe
    + 2008-04-14 00:12:31 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-04-14 00:12:02 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
    + 2008-04-14 00:12:02 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-04-14 00:12:02 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-04-14 00:12:02 92,672 ------w c:\windows\ServicePackFiles\i386\policman.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll
    + 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys
    + 2008-04-14 00:12:31 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys
    + 2008-04-14 00:12:03 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2008-04-14 00:12:03 560,640 ------w c:\windows\ServicePackFiles\i386\printui.dll
    + 2008-04-13 18:31:30 35,840 ------w c:\windows\ServicePackFiles\i386\processr.sys
    + 2008-04-14 00:12:03 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll
    + 2008-04-14 00:12:31 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\proquota.exe
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll
    + 2008-04-14 00:12:32 9,216 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe
    + 2008-04-14 00:12:03 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll
    + 2008-04-14 00:12:03 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll
    + 2008-04-14 00:12:03 96,768 ------w c:\windows\ServicePackFiles\i386\psbase.dll
    + 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys
    + 2008-04-14 00:12:03 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll
    + 2008-04-14 00:12:03 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2008-04-14 00:12:03 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2008-04-14 00:12:03 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\pwsdata.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll
    + 2008-04-14 00:12:03 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll
    + 2008-04-14 00:12:03 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll
    + 2008-04-14 00:12:03 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll
    + 2008-04-14 00:12:03 386,048 ------w c:\windows\ServicePackFiles\i386\qdvd.dll
    + 2008-04-14 00:12:03 562,176 ------w c:\windows\ServicePackFiles\i386\qedit.dll
    + 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll
    + 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll
    + 2008-04-14 00:12:03 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2008-04-14 00:12:32 19,968 ------w c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2008-04-14 00:12:03 1,288,192 ------w c:\windows\ServicePackFiles\i386\quartz.dll
    + 2008-04-14 00:12:03 1,435,648 ------w c:\windows\ServicePackFiles\i386\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll
    + 2008-04-14 00:12:03 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2008-04-14 00:12:03 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll
    + 2008-04-14 00:12:03 658,432 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll
    + 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2008-04-14 00:12:03 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll
    + 2008-04-14 00:12:03 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll
    + 2008-04-14 00:12:32 56,832 ------w c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2008-04-14 00:12:03 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll
    + 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll
    + 2008-04-14 00:12:03 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2008-04-14 00:12:03 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2008-04-14 00:12:03 150,016 ------w c:\windows\ServicePackFiles\i386\rastls.dll
    + 2008-04-14 00:12:03 102,400 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
    + 2008-04-14 00:12:32 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2008-04-14 00:12:32 21,504 ------w c:\windows\ServicePackFiles\i386\rcp.exe
    + 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys
    + 2008-04-14 00:12:03 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll
    + 2008-04-14 00:12:32 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2008-04-14 00:13:22 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys
    + 2008-04-14 00:12:04 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2008-04-14 00:13:22 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys
    + 2008-04-14 00:13:22 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2008-04-14 00:12:32 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2008-04-14 00:12:32 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2004-08-04 03:41:40 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys
    + 2008-04-13 18:40:27 57,600 ------w c:\windows\ServicePackFiles\i386\redbook.sys
    + 2004-08-04 04:48:46 3,338 ------w c:\windows\ServicePackFiles\i386\redir.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\reg.exe
    + 2008-04-14 00:12:04 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll
    + 2007-06-27 12:57:33 28,672 ------w c:\windows\ServicePackFiles\i386\regasm.exe
    + 2007-06-27 12:57:36 32,768 ------w c:\windows\ServicePackFiles\i386\regcode.dll
    + 2008-04-14 00:12:32 146,432 ------w c:\windows\ServicePackFiles\i386\regedit.exe
    + 2008-04-14 00:12:04 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2007-06-27 12:57:41 11,264 ------w c:\windows\ServicePackFiles\i386\regsvcs.exe
    + 2008-04-14 00:12:32 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2008-04-14 00:12:04 397,824 ------w c:\windows\ServicePackFiles\i386\regwizc.dll
    + 2008-04-14 00:12:04 60,416 ------w c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2008-04-14 00:12:04 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll
    + 2008-04-14 00:12:04 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll
    + 2008-04-14 00:12:33 13,824 ------w c:\windows\ServicePackFiles\i386\rexec.exe
    + 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll
    + 2008-04-14 00:12:04 123,392 ------w c:\windows\ServicePackFiles\i386\riafres.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2008-04-14 00:12:04 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll
    + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys
    + 2008-04-13 18:40:14 79,104 ------w c:\windows\ServicePackFiles\i386\rocket.sys
    + 2008-04-14 00:12:04 4,096 ------w c:\windows\ServicePackFiles\i386\rpcref.dll
    + 2008-04-14 00:12:04 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll
    + 2008-04-14 00:12:04 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll
    + 2008-04-14 00:12:04 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll
    + 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll
    + 2008-04-14 00:12:33 14,848 ------w c:\windows\ServicePackFiles\i386\rsh.exe
    + 2008-04-14 00:12:04 39,936 ------w c:\windows\ServicePackFiles\i386\rshx32.dll
    + 2008-04-14 00:12:04 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll
    + 2008-04-14 00:12:33 107,520 ------w c:\windows\ServicePackFiles\i386\rsnotify.exe
    + 2008-04-14 00:12:33 380,416 ------w c:\windows\ServicePackFiles\i386\rstrui.exe
    + 2008-04-14 00:12:04 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll
    + 2008-04-14 00:12:33 77,312 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe
    + 2008-04-14 00:12:04 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll
    + 2004-08-04 03:31:34 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys
    + 2008-04-14 00:12:04 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll
    + 2008-04-14 00:12:33 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe
    + 2008-04-14 00:12:33 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll
    + 2008-04-14 00:12:04 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll
    + 2008-04-14 00:12:04 9,728 ------w c:\windows\ServicePackFiles\i386\rwnh.dll
    + 2008-04-14 00:12:04 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll
    + 2004-08-04 03:29:52 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys
    + 2008-04-14 00:12:04 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll
    + 2008-04-14 00:12:04 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll
    + 2008-04-14 00:12:04 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll
    + 2008-04-14 00:12:04 415,744 ------w c:\windows\ServicePackFiles\i386\samsrv.dll
    + 2008-04-14 00:12:04 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll
    + 2008-04-14 00:12:33 13,312 ------w c:\windows\ServicePackFiles\i386\savedump.exe
    + 2008-04-14 00:12:04 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll
    + 2008-04-14 00:12:04 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll
    + 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys
    + 2008-04-14 00:12:04 69,632 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll
    + 2008-04-14 00:12:33 95,744 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe
    + 2004-08-04 04:31:44 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll
    + 2008-04-14 00:12:05 171,008 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll
    + 2008-04-14 00:12:05 181,248 ------w c:\windows\ServicePackFiles\i386\scecli.dll
    + 2008-04-14 00:12:05 314,880 ------w c:\windows\ServicePackFiles\i386\scesrv.dll
    + 2008-04-14 00:12:05 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll
    + 2008-04-14 00:12:05 192,512 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll
    + 2008-04-14 00:12:05 20,480 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll
    + 2008-04-14 00:12:34 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe
    + 2008-04-14 00:12:05 215,552 ------w c:\windows\ServicePackFiles\i386\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\ServicePackFiles\i386\scripta.dll
    + 2008-04-14 00:12:43 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr
    + 2008-04-14 00:12:05 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll
    + 2008-04-14 00:12:05 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll
    + 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys
    + 2008-04-14 00:12:34 121,856 ------w c:\windows\ServicePackFiles\i386\sctasks.exe
    + 2008-04-14 00:12:34 77,312 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe
    + 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll
    + 2007-11-13 08:47:45 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys
    + 2008-04-14 00:12:34 18,944 ------w c:\windows\ServicePackFiles\i386\secedit.exe
    + 2008-04-14 00:12:05 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll
    + 2006-12-31 12:57:08 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll
    + 2008-04-14 00:12:05 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll
    + 2008-04-14 00:12:05 54,784 ------w c:\windows\ServicePackFiles\i386\sendmail.dll
    + 2008-04-14 00:12:05 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll
    + 2008-04-14 00:12:05 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll
    + 2008-04-14 00:12:05 221,696 ------w c:\windows\ServicePackFiles\i386\seo.dll
    + 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys
    + 2008-04-13 19:15:45 64,512 ------w c:\windows\ServicePackFiles\i386\serial.sys
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll
    + 2008-04-14 00:12:34 108,544 ------w c:\windows\ServicePackFiles\i386\services.exe
    + 2008-04-14 00:12:34 141,312 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe
    + 2008-04-14 00:12:34 31,232 ------w c:\windows\ServicePackFiles\i386\sethc.exe
    + 2007-12-17 11:59:54 66,592 ------w c:\windows\ServicePackFiles\i386\setregni.exe
    + 2008-04-14 00:12:34 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe
    + 2008-04-14 00:12:34 73,216 ------w c:\windows\ServicePackFiles\i386\setup50.exe
    + 2008-04-14 10:42:06 985,088 ------w c:\windows\ServicePackFiles\i386\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe
    + 2008-04-14 00:12:05 101,376 ------w c:\windows\ServicePackFiles\i386\setupqry.dll
    + 2008-04-14 00:12:05 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll
    + 2008-04-14 00:12:05 140,288 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll
    + 2008-04-14 00:12:05 1,614,848 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll
    + 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
    + 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys
    + 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys
    + 2008-04-13 17:03:19 549,376 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll
    + 2008-04-14 00:12:05 1,499,136 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll
    + 2008-04-14 00:12:05 8,461,312 ------w c:\windows\ServicePackFiles\i386\shell32.dll
    + 2008-04-14 00:12:05 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll
    + 2008-04-14 00:12:05 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll
    + 2008-04-14 00:12:05 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll
    + 2008-04-14 00:12:05 438,272 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll
    + 2008-04-14 00:12:05 474,112 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll
    + 2008-04-14 00:12:35 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe
    + 2008-04-14 00:12:35 77,824 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe
    + 2008-04-14 00:12:05 27,648 ------w c:\windows\ServicePackFiles\i386\shscrap.dll
    + 2008-04-14 00:12:05 135,168 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll
    + 2008-04-14 00:12:05 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll
    + 2008-04-14 00:12:35 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe
    + 2008-04-14 00:12:35 19,456 ------w c:\windows\ServicePackFiles\i386\shutdown.exe
    + 2008-04-14 00:12:05 13,312 ------w c:\windows\ServicePackFiles\i386\sigtab.dll
    + 2008-04-14 00:12:35 70,144 ------w c:\windows\ServicePackFiles\i386\sigverif.exe
    + 2008-04-14 00:12:05 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll
    + 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys
    + 2004-08-04 03:31:36 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys
    + 2008-04-14 00:12:35 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe
    + 2004-08-04 03:31:42 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys
    + 2008-04-14 00:12:06 25,088 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll
    + 2004-08-04 04:31:44 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll
    + 2008-04-14 00:12:06 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll
    + 2008-04-14 00:12:06 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll
    + 2008-04-14 00:12:06 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll
    + 2008-04-14 00:12:06 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll
    + 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys
    + 2004-08-04 03:41:42 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys
    + 2004-08-04 03:41:44 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys
    + 2004-08-04 03:41:46 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe
    + 2008-04-14 00:12:35 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe
    + 2004-08-04 03:41:46 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys
    + 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys
    + 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys
    + 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys
    + 2008-04-14 00:12:35 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe
    + 2008-04-14 00:12:35 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe
    + 2008-04-14 00:12:06 362,496 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll
    + 2008-04-14 00:12:35 89,600 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe
    + 2008-04-14 00:12:36 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe
    + 2008-04-14 00:12:06 189,440 ------w c:\windows\ServicePackFiles\i386\smtpadm.dll
    + 2008-04-14 00:12:06 10,752 ------w c:\windows\ServicePackFiles\i386\smtpapi.dll
    + 2008-04-14 00:12:06 2,134,528 ------w c:\windows\ServicePackFiles\i386\smtpsnap.dll
    + 2008-04-14 00:12:06 456,192 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll
    + 2008-04-14 00:12:36 131,584 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe
    + 2008-04-14 00:12:06 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll
    + 2008-04-14 00:12:36 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe
    + 2008-04-14 00:12:06 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll
    + 2008-04-14 00:12:06 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll
    + 2008-04-14 00:12:06 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll
    + 2008-04-14 00:12:06 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll
    + 2008-04-14 00:12:06 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll
    + 2008-04-14 00:12:06 182,272 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll
    + 2008-04-14 00:12:06 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll
    + 2008-04-14 00:12:36 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe
    + 2008-04-14 00:12:06 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll
    + 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys
    + 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2008-04-14 00:12:36 24,576 ------w c:\windows\ServicePackFiles\i386\sort.exe
    + 2008-04-14 00:12:36 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
    + 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll
    + 2008-04-14 00:12:36 538,624 ------w c:\windows\ServicePackFiles\i386\spider.exe
    + 2008-04-13 18:43:31 12,800 ------w c:\windows\ServicePackFiles\i386\spiisupd.exe
    + 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys
    + 2008-04-14 10:42:38 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe
    + 2008-04-14 00:12:06 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll
    + 2008-04-14 00:12:36 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe
    + 2008-04-13 18:35:06 186,880 ------w c:\windows\ServicePackFiles\i386\spra0401.dll
    + 2008-04-13 18:35:08 189,440 ------w c:\windows\ServicePackFiles\i386\spra0402.dll
    + 2008-04-13 18:35:09 161,280 ------w c:\windows\ServicePackFiles\i386\spra0404.dll
    + 2008-04-13 18:35:09 188,928 ------w c:\windows\ServicePackFiles\i386\spra0405.dll
    + 2008-04-13 18:35:09 192,000 ------w c:\windows\ServicePackFiles\i386\spra0406.dll
    + 2008-04-13 18:35:21 199,680 ------w c:\windows\ServicePackFiles\i386\spra0407.dll
    + 2008-04-13 18:35:11 197,632 ------w c:\windows\ServicePackFiles\i386\spra0408.dll
    + 2008-04-13 18:35:11 186,368 ------w c:\windows\ServicePackFiles\i386\spra040b.dll
    + 2008-04-13 18:35:20 197,632 ------w c:\windows\ServicePackFiles\i386\spra040c.dll
    + 2008-04-13 18:35:21 181,760 ------w c:\windows\ServicePackFiles\i386\spra040d.dll
    + 2008-04-13 18:35:23 195,584 ------w c:\windows\ServicePackFiles\i386\spra040e.dll
    + 2008-04-13 18:35:23 195,072 ------w c:\windows\ServicePackFiles\i386\spra0410.dll
    + 2008-04-13 18:35:23 171,008 ------w c:\windows\ServicePackFiles\i386\spra0411.dll
    + 2008-04-13 18:35:23 167,936 ------w c:\windows\ServicePackFiles\i386\spra0412.dll
    + 2008-04-13 18:35:25 196,096 ------w c:\windows\ServicePackFiles\i386\spra0413.dll
    + 2008-04-13 18:35:25 189,440 ------w c:\windows\ServicePackFiles\i386\spra0414.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0415.dll
    + 2008-04-13 18:35:08 192,512 ------w c:\windows\ServicePackFiles\i386\spra0416.dll
    + 2008-04-13 18:35:27 190,464 ------w c:\windows\ServicePackFiles\i386\spra0418.dll
    + 2008-04-13 18:35:27 192,512 ------w c:\windows\ServicePackFiles\i386\spra0419.dll
    + 2008-04-13 18:35:21 188,928 ------w c:\windows\ServicePackFiles\i386\spra041a.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra041b.dll
    + 2008-04-13 18:35:28 188,928 ------w c:\windows\ServicePackFiles\i386\spra041d.dll
    + 2008-04-13 18:35:29 188,416 ------w c:\windows\ServicePackFiles\i386\spra041e.dll
    + 2008-04-13 18:35:30 188,928 ------w c:\windows\ServicePackFiles\i386\spra041f.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra0424.dll
    + 2008-04-13 18:35:11 186,880 ------w c:\windows\ServicePackFiles\i386\spra0425.dll
    + 2008-04-13 18:35:24 188,928 ------w c:\windows\ServicePackFiles\i386\spra0426.dll
    + 2008-04-13 18:35:24 189,952 ------w c:\windows\ServicePackFiles\i386\spra0427.dll
    + 2008-04-13 18:35:06 161,280 ------w c:\windows\ServicePackFiles\i386\spra0804.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0816.dll
    + 2008-04-13 18:35:11 196,096 ------w c:\windows\ServicePackFiles\i386\spra0c0a.dll
    + 2008-04-13 18:35:49 2,869,248 ------w c:\windows\ServicePackFiles\i386\sprb0401.dll
    + 2008-04-13 18:36:10 477,696 ------w c:\windows\ServicePackFiles\i386\sprb0404.dll
    + 2008-04-13 18:36:10 734,720 ------w c:\windows\ServicePackFiles\i386\sprb0405.dll
    + 2008-04-13 18:36:10 742,912 ------w c:\windows\ServicePackFiles\i386\sprb0406.dll
    + 2008-04-13 18:37:03 788,480 ------w c:\windows\ServicePackFiles\i386\sprb0407.dll
    + 2008-04-13 18:36:35 801,280 ------w c:\windows\ServicePackFiles\i386\sprb0408.dll
    + 2008-04-13 18:36:39 729,088 ------w c:\windows\ServicePackFiles\i386\sprb040b.dll
    + 2008-04-13 18:36:55 793,088 ------w c:\windows\ServicePackFiles\i386\sprb040c.dll
    + 2008-04-13 18:37:07 2,842,112 ------w c:\windows\ServicePackFiles\i386\sprb040d.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb040e.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb0410.dll
    + 2008-04-13 18:37:34 562,688 ------w c:\windows\ServicePackFiles\i386\sprb0411.dll
    + 2008-04-13 18:37:37 543,744 ------w c:\windows\ServicePackFiles\i386\sprb0412.dll
    + 2008-04-13 18:38:00 769,024 ------w c:\windows\ServicePackFiles\i386\sprb0413.dll
    + 2008-04-13 18:38:02 716,288 ------w c:\windows\ServicePackFiles\i386\sprb0414.dll
    + 2008-04-13 18:38:05 759,808 ------w c:\windows\ServicePackFiles\i386\sprb0415.dll
    + 2008-04-13 18:35:43 752,128 ------w c:\windows\ServicePackFiles\i386\sprb0416.dll
    + 2008-04-13 18:38:28 736,768 ------w c:\windows\ServicePackFiles\i386\sprb0419.dll
    + 2008-04-13 18:38:37 757,248 ------w c:\windows\ServicePackFiles\i386\sprb041b.dll
    + 2008-04-13 18:38:47 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041d.dll
    + 2008-04-13 18:38:51 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041f.dll
    + 2008-04-13 18:38:36 732,160 ------w c:\windows\ServicePackFiles\i386\sprb0424.dll
    + 2008-04-13 18:35:54 470,016 ------w c:\windows\ServicePackFiles\i386\sprb0804.dll
    + 2008-04-13 18:38:06 751,616 ------w c:\windows\ServicePackFiles\i386\sprb0816.dll
    + 2008-04-13 18:36:38 773,632 ------w c:\windows\ServicePackFiles\i386\sprb0c0a.dll
    + 2008-04-13 18:39:02 656,896 ------w c:\windows\ServicePackFiles\i386\sprc0401.dll
    + 2008-04-13 18:39:13 327,680 ------w c:\windows\ServicePackFiles\i386\sprc0404.dll
    + 2008-04-13 18:39:02 601,088 ------w c:\windows\ServicePackFiles\i386\sprc0405.dll
    + 2008-04-13 18:39:12 605,696 ------w c:\windows\ServicePackFiles\i386\sprc0406.dll
    + 2008-04-13 18:39:19 663,552 ------w c:\windows\ServicePackFiles\i386\sprc0407.dll
    + 2008-04-13 18:39:12 679,936 ------w c:\windows\ServicePackFiles\i386\sprc0408.dll
    + 2008-04-13 18:39:17 604,672 ------w c:\windows\ServicePackFiles\i386\sprc040b.dll
    + 2008-04-13 18:39:20 663,040 ------w c:\windows\ServicePackFiles\i386\sprc040c.dll
    + 2008-04-13 18:39:28 620,544 ------w c:\windows\ServicePackFiles\i386\sprc040d.dll
    + 2008-04-13 18:39:28 645,120 ------w c:\windows\ServicePackFiles\i386\sprc040e.dll
    + 2008-04-13 18:39:28 658,432 ------w c:\windows\ServicePackFiles\i386\sprc0410.dll
    + 2008-04-13 18:39:49 412,672 ------w c:\windows\ServicePackFiles\i386\sprc0411.dll
    + 2008-04-13 18:39:49 392,704 ------w c:\windows\ServicePackFiles\i386\sprc0412.dll
    + 2008-04-13 18:39:47 645,120 ------w c:\windows\ServicePackFiles\i386\sprc0413.dll
    + 2008-04-13 18:39:48 591,872 ------w c:\windows\ServicePackFiles\i386\sprc0414.dll
    + 2008-04-13 18:39:52 641,024 ------w c:\windows\ServicePackFiles\i386\sprc0415.dll
    + 2008-04-13 18:38:56 620,032 ------w c:\windows\ServicePackFiles\i386\sprc0416.dll
    + 2008-04-13 18:39:56 627,200 ------w c:\windows\ServicePackFiles\i386\sprc0419.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\ServicePackFiles\i386\sprc041b.dll
    + 2008-04-13 18:40:05 590,848 ------w c:\windows\ServicePackFiles\i386\sprc041d.dll
    + 2008-04-13 18:40:09 592,896 ------w c:\windows\ServicePackFiles\i386\sprc041f.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\ServicePackFiles\i386\sprc0424.dll
    + 2008-04-13 18:39:03 322,560 ------w c:\windows\ServicePackFiles\i386\sprc0804.dll
    + 2008-04-13 18:39:53 639,488 ------w c:\windows\ServicePackFiles\i386\sprc0816.dll
    + 2008-04-13 18:39:13 648,704 ------w c:\windows\ServicePackFiles\i386\sprc0c0a.dll
    + 2008-04-14 00:12:06 250,368 ------w c:\windows\ServicePackFiles\i386\sptip.dll
    + 2008-04-14 00:12:36 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe
    + 2008-04-14 00:12:06 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll
    + 2008-04-14 00:12:06 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll
    + 2008-04-14 00:12:06 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll
    + 2008-04-14 00:12:06 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll
    + 2008-04-14 00:12:06 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
    + 2008-04-14 00:12:06 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll
    + 2008-04-14 00:12:06 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
    + 2008-04-13 18:36:52 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys
    + 2008-04-14 00:12:06 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll
    + 2008-04-14 00:12:07 726,078 ------w c:\windows\ServicePackFiles\i386\srchui.dll
    + 2008-04-14 00:12:07 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll
    + 2008-04-14 00:12:07 239,104 ------w c:\windows\ServicePackFiles\i386\srrstr.dll
    + 2008-04-14 00:12:07 171,008 ------w c:\windows\ServicePackFiles\i386\srsvc.dll
    + 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys
    + 2008-04-14 00:12:07 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll
    + 2008-04-14 00:12:43 704,512 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr
    + 2008-04-14 00:12:43 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr
    + 2008-04-14 00:12:07 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll
    + 2008-04-14 00:12:07 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    + 2008-04-14 00:12:43 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr
    + 2008-04-14 00:12:07 45,056 ------w c:\windows\ServicePackFiles\i386\ssinc51.dll
    + 2008-04-14 00:12:44 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr
    + 2008-04-14 00:12:44 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr
    + 2008-04-14 00:12:44 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\sspifilt.dll
    + 2008-04-14 00:12:44 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr
    + 2008-04-14 00:12:44 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr
    + 2008-04-14 00:12:44 679,936 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr
    + 2008-04-14 00:12:07 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll
    + 2008-04-14 00:12:07 8,192 ------w c:\windows\ServicePackFiles\i386\staxmem.dll
    + 2008-04-14 00:12:07 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll
    + 2008-04-14 00:12:07 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll
    + 2008-04-14 00:12:07 68,096 ------w c:\windows\ServicePackFiles\i386\sti.dll
    + 2008-04-14 00:12:07 136,704 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll
    + 2008-04-14 00:12:36 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe
    + 2008-04-14 00:12:07 121,856 ------w c:\windows\ServicePackFiles\i386\stobject.dll
    + 2008-04-14 00:12:07 74,752 ------w c:\windows\ServicePackFiles\i386\storprop.dll
    + 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys
    + 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys
    + 2008-04-14 00:12:07 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll
    + 2008-04-14 00:12:36 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2008-04-14 00:12:36 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\svcext51.dll
    + 2008-04-14 00:12:36 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe
    + 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys
    + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys
    + 2008-04-14 00:12:07 713,216 ------w c:\windows\ServicePackFiles\i386\sxs.dll
    + 2007-12-17 11:59:56 1,179,648 ------w c:\windows\ServicePackFiles\i386\sy52106.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll
    + 2008-04-14 00:12:07 191,488 ------w c:\windows\ServicePackFiles\i386\syncui.dll
    + 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys
    + 2008-04-14 00:12:36 71,680 ------w c:\windows\ServicePackFiles\i386\sysinfo.exe
    + 2008-04-14 00:12:07 193,024 ------w c:\windows\ServicePackFiles\i386\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll
    + 2008-04-14 00:12:37 106,496 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe
    + 2008-04-14 00:12:07 990,208 ------w c:\windows\ServicePackFiles\i386\syssetup.dll
    + 2007-06-27 12:57:55 77,824 ------w c:\windows\ServicePackFiles\i386\system.configuration.install.dll
    + 2007-06-27 12:58:00 1,179,648 ------w c:\windows\ServicePackFiles\i386\system.data.dll
    + 2007-06-27 12:58:10 1,695,744 ------w c:\windows\ServicePackFiles\i386\system.design.dll
    + 2007-06-27 12:58:18 86,016 ------w c:\windows\ServicePackFiles\i386\system.directoryservices.dll
    + 2007-06-27 12:58:21 65,536 ------w c:\windows\ServicePackFiles\i386\system.drawing.design.dll
    + 2007-06-27 12:58:26 462,848 ------w c:\windows\ServicePackFiles\i386\system.drawing.dll
    + 2007-06-27 12:58:31 212,992 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
    + 2008-04-13 16:11:22 48,640 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
    + 2007-06-27 12:58:39 352,256 ------w c:\windows\ServicePackFiles\i386\system.management.dll
    + 2007-06-27 12:58:43 241,664 ------w c:\windows\ServicePackFiles\i386\system.messaging.dll
    + 2007-06-27 12:58:55 311,296 ------w c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
    + 2007-06-27 12:59:02 131,072 ------w c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
    + 2007-06-27 12:59:05 77,824 ------w c:\windows\ServicePackFiles\i386\system.security.dll
    + 2007-06-27 12:59:10 126,976 ------w c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
    + 2007-12-17 12:00:01 1,200,128 ------w c:\windows\ServicePackFiles\i386\system.web.dll
    + 2007-06-27 12:59:21 61,440 ------w c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
    + 2007-06-27 12:59:25 507,904 ------w c:\windows\ServicePackFiles\i386\system.web.services.dll
    + 2007-06-27 12:59:34 2,002,944 ------w c:\windows\ServicePackFiles\i386\system.windows.forms.dll
    + 2007-06-27 12:59:48 1,302,528 ------w c:\windows\ServicePackFiles\i386\system.xml.dll
    + 2008-04-14 00:12:07 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tabletoc.dll
    + 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys
    + 2008-04-14 00:12:07 858,624 ------w c:\windows\ServicePackFiles\i386\tapi3.dll
    + 2008-04-14 00:12:07 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll
    + 2008-04-14 00:12:07 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll
    + 2008-04-14 00:12:37 76,288 ------w c:\windows\ServicePackFiles\i386\taskkill.exe
    + 2008-04-14 00:12:37 77,824 ------w c:\windows\ServicePackFiles\i386\tasklist.exe
    + 2008-04-14 00:12:37 135,680 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe
    + 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys
    + 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys
    + 2008-04-14 00:12:07 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll
    + 2008-04-14 00:12:37 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe
    + 2007-04-02 16:36:07 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll
    + 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys
    + 2008-04-14 00:13:20 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys
    + 2008-04-14 00:13:21 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys
    + 2008-04-14 00:12:37 75,776 ------w c:\windows\ServicePackFiles\i386\telnet.exe
    + 2008-04-14 00:13:20 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys
    + 2008-04-14 00:12:07 358,400 ------w c:\windows\ServicePackFiles\i386\termmgr.dll
    + 2008-04-14 00:12:07 295,424 ------w c:\windows\ServicePackFiles\i386\termsrv.dll
    + 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys
    + 2008-04-14 00:12:07 385,536 ------w c:\windows\ServicePackFiles\i386\themeui.dll
    + 2008-04-14 00:12:37 61,440 ------w c:\windows\ServicePackFiles\i386\tlntadmn.exe
    + 2008-04-14 00:12:37 78,336 ------w c:\windows\ServicePackFiles\i386\tlntsess.exe
    + 2008-04-14 00:12:38 73,216 ------w c:\windows\ServicePackFiles\i386\tlntsvr.exe
    + 2008-04-14 00:12:07 7,168 ------w c:\windows\ServicePackFiles\i386\tlntsvrp.dll
    + 2007-12-17 12:00:05 66,592 ------w c:\windows\ServicePackFiles\i386\togac.exe
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tools.dll
    + 2008-04-14 00:12:38 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe
    + 2008-04-14 00:12:38 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe
    + 2008-04-14 00:12:38 259,584 ------w c:\windows\ServicePackFiles\i386\tracerpt.exe
    + 2008-04-14 00:12:38 12,288 ------w c:\windows\ServicePackFiles\i386\tracert.exe
    + 2008-04-14 00:12:42 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com
    + 2008-04-14 00:12:07 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll
    + 2008-04-14 00:12:07 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat
    + 2008-04-14 00:12:07 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll
    + 2008-04-14 00:13:21 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll
    + 2008-04-14 00:12:07 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll
    + 2008-04-14 00:12:07 130,048 ------w c:\windows\ServicePackFiles\i386\tsoc.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll
    + 2008-04-14 00:12:07 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll
    + 2007-04-02 15:31:00 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll
    + 2008-04-14 00:12:07 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll
    + 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll
    + 2008-04-14 00:12:07 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll
    + 2008-04-14 00:12:38 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe
    + 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys
    + 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys
    + 2008-04-14 00:12:07 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll
    + 2008-04-14 00:12:07 103,424 ------w c:\windows\ServicePackFiles\i386\uihelper.dll
    + 2008-04-14 00:12:07 275,456 ------w c:\windows\ServicePackFiles\i386\ulib.dll
    + 2008-04-14 00:12:07 35,840 ------w c:\windows\ServicePackFiles\i386\umandlg.dll
    + 2008-04-14 00:12:07 123,392 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
    + 2008-04-14 00:12:07 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll
    + 2008-04-14 00:12:07 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll
    + 2008-04-14 00:12:07 74,240 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll
    + 2008-04-14 00:12:07 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll
    + 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll
     
    scorpion657,
    #12
  14. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    + 2008-04-14 00:12:07 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll
    + 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys
    + 2008-04-14 00:12:38 150,528 ------w c:\windows\ServicePackFiles\i386\uploadm.exe
    + 2008-04-14 00:12:08 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll
    + 2008-04-14 00:12:38 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe
    + 2008-04-14 00:12:08 185,856 ------w c:\windows\ServicePackFiles\i386\upnphost.dll
    + 2008-04-14 00:12:08 239,616 ------w c:\windows\ServicePackFiles\i386\upnpui.dll
    + 2008-04-14 00:12:38 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe
    + 2008-04-14 00:12:08 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll
    + 2008-04-14 00:12:08 619,520 ------w c:\windows\ServicePackFiles\i386\urlmon.dll
    + 2004-08-04 03:31:26 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys
    + 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys
    + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys
    + 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2008-04-14 00:12:08 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys
    + 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys
    + 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys
    + 2008-04-14 00:12:08 74,240 ------w c:\windows\ServicePackFiles\i386\usbui.dll
    + 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys
    + 2008-04-14 00:12:08 578,560 ------w c:\windows\ServicePackFiles\i386\user32.dll
    + 2008-04-14 00:12:08 727,040 ------w c:\windows\ServicePackFiles\i386\userenv.dll
    + 2008-04-14 00:12:38 26,112 ------w c:\windows\ServicePackFiles\i386\userinit.exe
    + 2008-04-14 00:12:08 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll
    + 2008-04-14 00:12:38 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe
    + 2008-04-14 00:12:08 218,624 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll
    + 2008-04-14 00:12:08 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2007-06-27 12:59:58 716,800 ------w c:\windows\ServicePackFiles\i386\vbc.exe
    + 2008-04-13 16:11:44 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
    + 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
    + 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.dll
    + 2008-04-13 16:11:45 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
    + 2008-04-13 16:11:45 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
    + 2008-04-13 16:11:45 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
    + 2008-04-13 16:11:45 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
    + 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
    + 2008-04-13 16:11:45 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
    + 2008-04-14 00:12:08 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll
    + 2008-04-14 00:12:08 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2008-04-14 00:12:08 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2008-04-14 00:12:08 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 00:12:38 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2008-04-14 00:12:08 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll
    + 2008-04-14 00:12:08 53,760 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys
    + 2008-04-14 00:12:08 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll
    + 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys
    + 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2008-04-14 00:12:08 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll
    + 2008-04-13 18:41:01 52,352 ------w c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2008-04-13 16:11:47 999,424 ------w c:\windows\ServicePackFiles\i386\vsavb7rt.dll
    + 2008-04-14 00:12:08 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll
    + 2008-04-14 00:12:38 289,792 ------w c:\windows\ServicePackFiles\i386\vssvc.exe
    + 2008-04-14 00:12:08 175,104 ------w c:\windows\ServicePackFiles\i386\w32time.dll
    + 2008-04-14 00:12:08 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2008-04-14 00:12:08 364,032 ------w c:\windows\ServicePackFiles\i386\w3svc.dll
    + 2008-04-14 00:12:08 483,840 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll
    + 2008-04-14 00:12:38 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe
    + 2008-04-14 00:12:08 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll
    + 2008-04-13 16:21:48 249,856 ------w c:\windows\ServicePackFiles\i386\wab32res.dll
    + 2008-04-14 00:12:08 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2008-04-14 00:12:08 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2008-04-14 00:12:39 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2004-08-04 03:29:38 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys
    + 2004-08-04 03:29:38 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys
    + 2004-08-04 03:29:38 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys
    + 2004-08-04 03:29:40 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys
    + 2004-08-04 03:29:40 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys
    + 2004-08-04 03:29:42 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys
    + 2004-08-04 03:29:42 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys
    + 2008-04-14 00:12:08 76,800 ------w c:\windows\ServicePackFiles\i386\wam51.dll
    + 2008-04-14 00:12:08 53,248 ------w c:\windows\ServicePackFiles\i386\wamreg51.dll
    + 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2004-08-04 03:29:42 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys
    + 2004-08-04 03:29:44 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys
    + 2004-08-04 03:29:44 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys
    + 2004-08-04 03:29:46 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys
    + 2004-08-04 03:29:46 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys
    + 2008-04-14 00:12:08 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll
    + 2008-04-14 00:12:08 196,608 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll
    + 2008-04-14 00:12:08 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll
    + 2008-04-14 00:12:08 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2008-04-14 00:12:08 531,456 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll
    + 2008-04-14 00:12:08 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll
    + 2008-04-14 00:12:08 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll
    + 2008-04-14 00:12:08 43,008 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2008-04-14 00:12:08 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2008-04-14 00:12:39 116,224 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe
    + 2008-04-14 00:12:08 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll
    + 2008-04-13 18:45:38 31,744 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2004-08-04 03:29:46 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys
    + 2008-04-14 00:12:08 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-04-14 00:12:45 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv
    + 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2008-04-14 00:12:08 276,480 ------w c:\windows\ServicePackFiles\i386\webcheck.dll
    + 2008-04-14 00:12:08 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2008-04-14 00:12:08 135,680 ------w c:\windows\ServicePackFiles\i386\webvw.dll
    + 2008-04-14 00:12:39 65,024 ------w c:\windows\ServicePackFiles\i386\wextract.exe
    + 2008-04-14 00:12:39 433,664 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
    + 2008-04-14 00:12:08 463,360 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll
    + 2008-04-14 00:12:08 124,416 ------w c:\windows\ServicePackFiles\i386\wiadss.dll
    + 2008-04-14 00:12:08 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2008-04-14 00:12:08 333,824 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll
    + 2008-04-14 00:12:08 589,312 ------w c:\windows\ServicePackFiles\i386\wiashext.dll
    + 2008-04-14 00:12:08 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll
    + 2008-04-13 19:30:10 1,845,632 ------w c:\windows\ServicePackFiles\i386\win32k.sys
    + 2008-04-14 00:12:08 102,400 ------w c:\windows\ServicePackFiles\i386\win32spl.dll
    + 2008-04-13 16:48:53 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll
    + 2008-04-14 00:12:39 283,648 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe
    + 2008-04-14 00:12:08 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll
    + 2008-04-14 00:12:08 666,112 ------w c:\windows\ServicePackFiles\i386\wininet.dll
    + 2008-04-14 00:12:09 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2008-04-14 00:12:39 507,904 ------w c:\windows\ServicePackFiles\i386\winlogon.exe
    + 2008-04-14 00:12:09 176,128 ------w c:\windows\ServicePackFiles\i386\winmm.dll
    + 2004-08-04 04:51:20 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll
    + 2008-04-14 00:11:11 756,224 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll
    + 2008-04-14 00:12:09 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2008-04-14 00:12:09 99,328 ------w c:\windows\ServicePackFiles\i386\winscard.dll
    + 2008-04-14 00:12:09 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 00:12:45 146,432 ------w c:\windows\ServicePackFiles\i386\winspool.drv
    + 2008-04-14 00:12:09 293,376 ------w c:\windows\ServicePackFiles\i386\winsrv.dll
    + 2008-04-14 00:12:09 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll
    + 2008-04-14 00:12:09 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll
    + 2008-04-14 00:12:40 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll
    + 2008-04-14 00:12:09 172,032 ------w c:\windows\ServicePackFiles\i386\wldap32.dll
    + 2004-08-04 03:31:28 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys
    + 2008-04-14 00:12:09 92,672 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2008-04-14 00:11:15 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll
    + 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys
    + 2008-04-14 00:12:40 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe
    + 2008-04-13 17:10:20 6,656 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll
    + 2008-04-14 00:12:09 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2008-04-14 00:12:40 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
    + 2008-04-14 00:12:40 358,912 ------w c:\windows\ServicePackFiles\i386\wmic.exe
    + 2008-04-14 00:12:09 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2008-04-14 00:12:09 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll
    + 2008-04-14 00:12:09 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll
    + 2008-04-14 00:12:09 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2008-04-14 00:12:09 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll
    + 2008-04-14 00:12:09 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
    + 2008-04-14 00:12:40 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe
    + 2008-04-14 00:12:09 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll
    + 2008-04-14 00:12:09 95,232 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2008-04-14 00:12:09 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll
    + 2008-04-14 00:12:09 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll
    + 2008-04-14 00:12:09 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll
    + 2008-04-14 00:12:09 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll
    + 2008-04-14 00:12:09 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
    + 2008-04-14 00:12:09 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
    + 2008-04-14 00:12:09 4,256,768 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll
    + 2008-04-14 00:12:09 5,632 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll
    + 2008-04-14 00:12:09 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll
    + 2008-04-14 00:12:40 214,528 ------w c:\windows\ServicePackFiles\i386\wordpad.exe
    + 2008-04-14 00:12:10 264,192 ------w c:\windows\ServicePackFiles\i386\wow32.dll
    + 2008-04-14 00:12:40 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2008-04-14 00:12:41 11,264 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2008-04-14 00:12:10 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2008-04-14 00:12:10 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2008-04-14 00:12:41 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2008-04-14 00:12:41 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe
    + 2008-04-14 00:12:10 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2008-04-14 00:12:10 604,160 ------w c:\windows\ServicePackFiles\i386\wsecedit.dll
    + 2008-04-14 00:12:10 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll
    + 2008-04-14 00:12:10 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2008-04-14 00:12:10 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll
    + 2008-04-14 00:12:10 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll
    + 2008-04-14 00:12:10 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll
    + 2008-04-14 00:12:10 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2008-04-14 00:12:10 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2004-08-04 03:29:48 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys
    + 2008-04-14 00:12:10 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2008-04-14 00:12:10 22,528 ------w c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2008-04-14 00:12:10 50,688 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2008-04-14 00:12:10 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2008-04-14 00:12:10 430,592 ------w c:\windows\ServicePackFiles\i386\wuapi.dll
    + 2008-04-14 00:12:41 111,104 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe
    + 2008-04-14 00:12:41 165,888 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe
    + 2008-04-14 00:12:11 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll
    + 2008-04-14 00:12:11 183,296 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll
    + 2008-04-14 00:12:11 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll
    + 2008-04-14 00:12:11 112,640 ------w c:\windows\ServicePackFiles\i386\wucltui.dll
    + 2008-04-14 00:12:11 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll
    + 2008-04-14 00:12:11 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll
    + 2004-08-04 03:29:50 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys
    + 2008-04-14 00:12:11 383,488 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll
    + 2008-04-14 00:12:11 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2008-04-14 00:12:11 483,840 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll
    + 2008-04-14 00:12:11 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2008-04-14 00:12:41 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2004-07-17 17:39:16 174,200 ------w c:\windows\ServicePackFiles\i386\xenroll.dll
    + 2008-04-14 00:12:11 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll
    + 2008-04-14 00:12:11 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll
    + 2008-04-14 00:12:11 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2008-04-14 00:12:11 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe
    + 2008-04-13 17:39:29 438,784 ------w c:\windows\ServicePackFiles\i386\xpob2res.dll
    + 2008-04-13 17:39:22 187,392 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll
    + 2008-04-13 17:39:24 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll
    + 2008-04-13 17:39:26 689,152 ------w c:\windows\ServicePackFiles\i386\xpsp3res.dll
    + 2008-04-14 00:12:11 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll
    + 2008-04-14 00:12:11 116,224 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
    + 2008-04-14 00:12:11 338,432 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\slrundll.exe
    - 2004-08-04 10:00:00 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    + 2008-04-14 00:11:59 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    - 2004-08-04 10:00:00 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    + 2008-04-14 00:12:06 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    - 2004-08-04 10:00:00 725,566 ----a-w c:\windows\srchasst\srchui.dll
    + 2008-04-14 00:12:07 726,078 ----a-w c:\windows\srchasst\srchui.dll
    - 2004-08-04 10:00:00 146,432 ----a-w c:\windows\system\WINSPOOL.DRV
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system\winspool.drv
    - 2004-08-04 06:56:42 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\system32\aaclient.dll
    - 2004-08-04 06:56:48 183,808 ----a-w c:\windows\system32\accwiz.exe
    + 2008-04-14 00:12:11 184,320 ----a-w c:\windows\system32\accwiz.exe
    - 2004-08-04 06:56:42 114,688 ----a-w c:\windows\system32\aclui.dll
    + 2008-04-14 00:11:48 115,712 ----a-w c:\windows\system32\aclui.dll
    - 2004-08-04 06:56:42 194,048 ----a-w c:\windows\system32\activeds.dll
    + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\system32\activeds.dll
    - 2004-08-04 06:56:48 4,096 ----a-w c:\windows\system32\actmovie.exe
    + 2008-04-14 00:12:12 4,096 ----a-w c:\windows\system32\actmovie.exe
    - 2004-08-04 06:56:42 101,888 ----a-w c:\windows\system32\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\system32\actxprxy.dll
    - 2004-08-04 06:56:42 61,440 ----a-w c:\windows\system32\admparse.dll
    + 2008-04-14 00:11:48 61,440 ----a-w c:\windows\system32\admparse.dll
    - 2004-08-04 06:56:42 175,616 ----a-w c:\windows\system32\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ----a-w c:\windows\system32\adsldp.dll
    - 2004-08-04 06:56:42 143,360 ----a-w c:\windows\system32\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\system32\adsldpc.dll
    - 2004-08-04 06:56:42 68,096 ----a-w c:\windows\system32\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ----a-w c:\windows\system32\adsmsext.dll
    - 2004-08-04 06:56:42 263,680 ----a-w c:\windows\system32\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ----a-w c:\windows\system32\adsnt.dll
    - 2001-08-23 13:00:00 109,568 ----a-w c:\windows\system32\adsnw.dll
    + 2008-04-14 00:11:48 123,392 ----a-w c:\windows\system32\adsnw.dll
    - 2004-08-04 06:56:42 616,960 ----a-w c:\windows\system32\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ----a-w c:\windows\system32\advapi32.dll
    - 2004-08-04 06:56:42 99,840 ----a-w c:\windows\system32\advpack.dll
    + 2008-04-14 00:11:48 99,840 ----a-w c:\windows\system32\advpack.dll
    - 2004-08-04 06:56:48 98,304 ----a-w c:\windows\system32\ahui.exe
    + 2008-04-14 00:12:12 98,304 ----a-w c:\windows\system32\ahui.exe
    - 2004-08-04 06:56:48 44,544 ----a-w c:\windows\system32\alg.exe
    + 2008-04-14 00:12:12 44,544 ----a-w c:\windows\system32\alg.exe
    - 2004-08-04 06:56:42 17,408 ----a-w c:\windows\system32\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ----a-w c:\windows\system32\alrsvc.dll
    - 2004-08-04 06:56:42 70,656 ----a-w c:\windows\system32\amstream.dll
    + 2008-04-14 00:11:49 70,656 ----a-w c:\windows\system32\amstream.dll
    - 2004-08-04 06:56:42 126,976 ----a-w c:\windows\system32\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\system32\apphelp.dll
    - 2004-08-04 06:56:42 167,936 ----a-w c:\windows\system32\appmgmts.dll
    + 2008-04-14 00:11:49 167,936 ----a-w c:\windows\system32\appmgmts.dll
    - 2004-08-04 06:56:42 295,936 ----a-w c:\windows\system32\appmgr.dll
    + 2008-04-14 00:11:49 295,936 ----a-w c:\windows\system32\appmgr.dll
    - 2004-08-04 06:56:00 8,192 ----a-w c:\windows\system32\asferror.dll
    + 2008-04-13 17:23:38 8,192 ----a-w c:\windows\system32\asferror.dll
    - 2004-08-04 06:56:48 30,208 ----a-w c:\windows\system32\asr_fmt.exe
    + 2008-04-14 00:12:12 30,208 ----a-w c:\windows\system32\asr_fmt.exe
    - 2004-08-04 06:56:48 32,768 ----a-w c:\windows\system32\asr_pfu.exe
    + 2008-04-14 00:12:12 32,768 ----a-w c:\windows\system32\asr_pfu.exe
    - 2004-08-04 06:56:42 65,024 ----a-w c:\windows\system32\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ----a-w c:\windows\system32\asycfilt.dll
    - 2004-08-04 07:56:47 25,088 ----a-w c:\windows\system32\at.exe
    + 2008-04-14 00:12:12 25,088 ----a-w c:\windows\system32\at.exe
    + 2008-04-14 00:11:49 229,376 ------w c:\windows\system32\ati2cqag.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\system32\ati2dvaa.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\windows\system32\ati2dvag.dll
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\system32\ati3d1ag.dll
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\system32\ativtmxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\windows\system32\ativvaxx.dll
    - 2004-08-04 06:56:42 58,880 ----a-w c:\windows\system32\atl.dll
    + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\system32\atl.dll
    - 2004-08-04 06:56:48 11,264 ----a-w c:\windows\system32\atmadm.exe
    + 2008-04-14 00:12:12 11,264 ----a-w c:\windows\system32\atmadm.exe
    - 2004-08-04 06:56:00 285,696 ----a-w c:\windows\system32\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ----a-w c:\windows\system32\atmfd.dll
    - 2004-08-04 06:56:42 30,208 ----a-w c:\windows\system32\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\atmlib.dll
    - 2001-08-23 12:00:00 11,264 ----a-w c:\windows\system32\attrib.exe
    + 2008-04-14 00:12:12 12,288 ----a-w c:\windows\system32\attrib.exe
    - 2004-08-04 06:56:42 42,496 ----a-w c:\windows\system32\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\system32\audiosrv.dll
    - 2004-08-04 06:56:48 14,336 ----a-w c:\windows\system32\auditusr.exe
    + 2008-04-14 00:12:12 14,336 ----a-w c:\windows\system32\auditusr.exe
    - 2004-08-04 06:56:42 56,832 ----a-w c:\windows\system32\authz.dll
    + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\system32\authz.dll
    - 2004-08-04 06:56:48 588,800 ----a-w c:\windows\system32\autochk.exe
    + 2008-04-14 00:12:12 588,800 ----a-w c:\windows\system32\autochk.exe
    - 2004-08-04 06:56:48 602,624 ----a-w c:\windows\system32\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ----a-w c:\windows\system32\autoconv.exe
    - 2004-08-04 06:56:48 580,608 ----a-w c:\windows\system32\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ----a-w c:\windows\system32\autofmt.exe
    - 2004-08-04 06:56:48 11,264 ----a-w c:\windows\system32\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ----a-w c:\windows\system32\autolfn.exe
    - 2004-08-04 06:56:42 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\system32\azroles.dll
    - 2004-08-04 06:56:42 52,736 ----a-w c:\windows\system32\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\system32\basesrv.dll
    - 2004-08-04 06:56:42 28,672 ----a-w c:\windows\system32\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\system32\batmeter.dll
    - 2004-08-04 06:56:42 8,704 ----a-w c:\windows\system32\batt.dll
    + 2008-04-14 00:11:50 8,704 ----a-w c:\windows\system32\batt.dll
    - 2004-08-04 06:56:42 17,408 ----a-w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ----a-w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\system32\bits\qmgr.dll
    - 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    - 2004-08-04 10:00:00 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\system32\bitsprx4.dll
    - 2004-08-04 06:56:42 286,208 ----a-w c:\windows\system32\blackbox.dll
    + 2008-04-14 00:11:50 286,720 ----a-w c:\windows\system32\blackbox.dll
    - 2004-08-04 06:56:48 71,680 ----a-w c:\windows\system32\blastcln.exe
    + 2008-04-14 00:12:13 71,680 ----a-w c:\windows\system32\blastcln.exe
    - 2001-08-23 13:00:00 136,704 ----a-w c:\windows\system32\bootcfg.exe
    + 2008-04-14 00:12:13 142,848 ----a-w c:\windows\system32\bootcfg.exe
    - 2004-08-04 06:56:00 63,488 ----a-w c:\windows\system32\browselc.dll
    + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\system32\browselc.dll
    - 2004-08-04 06:56:42 77,312 ----a-w c:\windows\system32\browser.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\browser.dll
    - 2004-08-04 06:56:42 1,016,832 ----a-w c:\windows\system32\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\system32\browseui.dll
    - 2004-08-04 06:56:42 78,336 ----a-w c:\windows\system32\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ----a-w c:\windows\system32\browsewm.dll
    - 2004-08-04 06:56:42 20,992 ----a-w c:\windows\system32\bthci.dll
    + 2008-04-14 00:11:50 20,992 ----a-w c:\windows\system32\bthci.dll
    - 2004-08-04 06:56:42 30,208 ----a-w c:\windows\system32\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\bthserv.dll
    - 2004-08-04 06:56:42 50,688 ----a-w c:\windows\system32\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\btpanui.dll
    - 2004-08-04 06:56:42 59,904 ----a-w c:\windows\system32\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\system32\cabinet.dll
    - 2004-08-04 06:56:42 84,480 ----a-w c:\windows\system32\cabview.dll
    + 2008-04-14 00:11:50 84,480 ----a-w c:\windows\system32\cabview.dll
    - 2001-08-23 13:00:00 18,432 ----a-w c:\windows\system32\cacls.exe
    + 2008-04-14 00:12:13 19,968 ----a-w c:\windows\system32\cacls.exe
    - 2004-08-04 06:56:42 50,688 ----a-w c:\windows\system32\camocx.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\camocx.dll
    - 2001-08-23 13:00:00 142,848 ----a-w c:\windows\system32\capesnpn.dll
    + 2008-04-14 00:11:50 150,016 ----a-w c:\windows\system32\capesnpn.dll
    - 2004-08-04 06:56:42 229,888 ----a-w c:\windows\system32\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\system32\catsrv.dll
    - 2004-08-04 10:00:00 85,504 ----a-w c:\windows\system32\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ----a-w c:\windows\system32\catsrvps.dll
    - 2004-08-04 06:56:42 628,224 ----a-w c:\windows\system32\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\system32\catsrvut.dll
    - 2004-08-04 06:56:42 150,528 ----a-w c:\windows\system32\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ----a-w c:\windows\system32\cdfview.dll
    - 2004-08-04 06:56:42 2,067,968 ----a-w c:\windows\system32\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ----a-w c:\windows\system32\cdosys.dll
    - 2004-08-04 06:56:42 194,560 ----a-w c:\windows\system32\certcli.dll
    + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\system32\certcli.dll
    - 2004-08-04 06:56:42 457,728 ----a-w c:\windows\system32\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ----a-w c:\windows\system32\certmgr.dll
    - 2004-08-04 06:56:42 159,232 ----a-w c:\windows\system32\cewmdm.dll
    + 2008-04-14 00:11:50 159,232 ----a-w c:\windows\system32\cewmdm.dll
    - 2004-08-04 10:00:00 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    - 2004-08-04 06:56:02 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    - 2001-08-23 13:00:00 109,568 ----a-w c:\windows\system32\cic.dll
    + 2008-04-14 00:11:50 148,480 ----a-w c:\windows\system32\cic.dll
    - 2004-08-04 06:56:42 69,120 ----a-w c:\windows\system32\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ----a-w c:\windows\system32\ciodm.dll
    - 2004-08-04 06:56:48 56,320 ----a-w c:\windows\system32\cipher.exe
    + 2008-04-14 00:12:14 56,832 ----a-w c:\windows\system32\cipher.exe
    - 2004-08-04 06:56:48 5,632 ----a-w c:\windows\system32\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ----a-w c:\windows\system32\cisvc.exe
    - 2004-08-04 06:56:42 110,080 ----a-w c:\windows\system32\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ----a-w c:\windows\system32\clbcatex.dll
    - 2004-08-04 06:56:42 501,248 ----a-w c:\windows\system32\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\system32\clbcatq.dll
    - 2004-08-04 06:56:48 64,000 ----a-w c:\windows\system32\cleanmgr.exe
    + 2008-04-14 00:12:14 64,000 ----a-w c:\windows\system32\cleanmgr.exe
    - 2004-08-04 06:56:42 77,824 ----a-w c:\windows\system32\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\cliconfg.dll
    - 2004-08-04 06:56:48 20,480 ----a-w c:\windows\system32\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ----a-w c:\windows\system32\cliconfg.exe
    - 2004-08-04 06:56:48 102,912 ----a-w c:\windows\system32\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ----a-w c:\windows\system32\clipbrd.exe
    - 2004-08-04 07:56:47 33,280 ----a-w c:\windows\system32\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ----a-w c:\windows\system32\clipsrv.exe
    - 2004-08-04 06:56:42 57,856 ----a-w c:\windows\system32\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\system32\clusapi.dll
    - 2004-08-04 06:56:42 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    - 2004-08-04 06:56:50 388,608 ----a-w c:\windows\system32\cmd.exe
    + 2008-04-14 00:12:14 389,120 ----a-w c:\windows\system32\cmd.exe
    - 2004-08-04 06:56:42 343,040 ----a-w c:\windows\system32\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ----a-w c:\windows\system32\cmdial32.dll
    - 2004-08-04 06:56:50 47,104 ----a-w c:\windows\system32\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ----a-w c:\windows\system32\cmdl32.exe
    - 2004-08-04 06:56:50 39,936 ----a-w c:\windows\system32\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ----a-w c:\windows\system32\cmmon32.exe
    - 2004-08-04 10:00:00 185,344 ----a-w c:\windows\system32\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ----a-w c:\windows\system32\cmprops.dll
    - 2004-08-04 06:56:42 13,824 ----a-w c:\windows\system32\cmsetACL.dll
    + 2008-04-14 00:11:50 13,312 ----a-w c:\windows\system32\cmsetacl.dll
    - 2004-08-04 06:56:50 63,488 ----a-w c:\windows\system32\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ----a-w c:\windows\system32\cmstp.exe
    - 2004-08-04 06:56:42 39,936 ----a-w c:\windows\system32\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ----a-w c:\windows\system32\cmutil.dll
    - 2004-08-04 07:05:44 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    - 2004-08-04 06:56:42 62,464 ----a-w c:\windows\system32\colbact.dll
    + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\system32\colbact.dll
    - 2004-08-04 06:56:42 195,584 ----a-w c:\windows\system32\Com\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
    - 2004-08-04 06:56:50 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
    + 2008-04-14 00:12:15 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
    - 2001-08-23 13:00:00 5,120 ----a-w c:\windows\system32\Com\comrereg.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\system32\Com\comrereg.exe
    - 2004-08-04 10:00:00 25,600 ----a-w c:\windows\system32\comaddin.dll
    + 2008-04-14 00:11:51 28,160 ----a-w c:\windows\system32\comaddin.dll
    - 2004-08-04 06:56:42 611,328 ----a-w c:\windows\system32\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ----a-w c:\windows\system32\comctl32.dll
    - 2004-08-04 06:56:42 276,992 ----a-w c:\windows\system32\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ----a-w c:\windows\system32\comdlg32.dll
    - 2004-08-04 06:56:42 252,928 ----a-w c:\windows\system32\compatUI.dll
    + 2008-04-14 00:11:51 252,928 ----a-w c:\windows\system32\compatui.dll
    - 2004-08-04 06:56:42 229,376 ----a-w c:\windows\system32\compstui.dll
    + 2008-04-14 00:11:51 229,376 ----a-w c:\windows\system32\compstui.dll
    - 2001-08-23 13:00:00 82,432 ----a-w c:\windows\system32\comrepl.dll
    + 2008-04-14 00:11:51 97,792 ----a-w c:\windows\system32\comrepl.dll
    - 2004-08-04 06:56:42 792,064 ----a-w c:\windows\system32\comres.dll
    + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\system32\comres.dll
    - 2004-08-04 05:59:34 9,728 ----a-w c:\windows\system32\comsdupd.exe
    + 2008-04-13 18:43:32 9,728 ----a-w c:\windows\system32\comsdupd.exe
    - 2004-08-04 10:00:00 147,456 ----a-w c:\windows\system32\comsnap.dll
    + 2008-04-14 00:11:51 167,424 ----a-w c:\windows\system32\comsnap.dll
    - 2004-08-04 06:56:42 1,251,840 ----a-w c:\windows\system32\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    - 2004-08-04 06:56:42 540,160 ----a-w c:\windows\system32\comuid.dll
    + 2008-04-14 00:11:51 539,648 ----a-w c:\windows\system32\comuid.dll
    - 2009-02-17 20:30:13 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-02-18 14:15:49 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2009-02-17 20:30:13 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-02-18 14:15:49 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-02-18 14:15:44 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009021820090219\index.dat
    - 2009-02-17 20:30:13 49,152 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-02-18 14:15:49 49,152 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2001-08-23 13:00:00 345,600 ----a-w c:\windows\system32\confmsp.dll
    + 2008-04-14 00:11:51 357,888 ----a-w c:\windows\system32\confmsp.dll
    - 2004-08-04 06:56:50 27,648 ----a-w c:\windows\system32\conime.exe
    + 2008-04-14 00:12:15 27,648 ----a-w c:\windows\system32\conime.exe
    - 2004-08-04 06:56:42 35,328 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 35,328 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\system32\credssp.dll
    - 2004-08-04 06:56:42 163,840 ----a-w c:\windows\system32\credui.dll
    + 2008-04-14 00:11:51 163,840 ----a-w c:\windows\system32\credui.dll
    - 2004-08-04 06:56:42 597,504 ----a-w c:\windows\system32\crypt32.dll
    + 2008-04-14 00:11:51 599,040 ----a-w c:\windows\system32\crypt32.dll
    - 2004-08-04 06:56:42 74,752 ----a-w c:\windows\system32\cryptdlg.dll
    + 2008-04-14 00:11:51 74,752 ----a-w c:\windows\system32\cryptdlg.dll
    - 2004-08-04 06:56:42 33,280 ----a-w c:\windows\system32\cryptdll.dll
    + 2008-04-14 00:11:51 33,280 ----a-w c:\windows\system32\cryptdll.dll
    - 2004-08-04 06:56:42 53,760 ----a-w c:\windows\system32\cryptext.dll
    + 2008-04-14 00:11:51 53,760 ----a-w c:\windows\system32\cryptext.dll
    - 2004-08-04 06:56:42 63,488 ----a-w c:\windows\system32\cryptnet.dll
    + 2008-04-14 00:11:51 64,512 ----a-w c:\windows\system32\cryptnet.dll
    - 2004-08-04 06:56:42 60,416 ----a-w c:\windows\system32\cryptsvc.dll
    + 2008-04-14 00:11:51 62,464 ----a-w c:\windows\system32\cryptsvc.dll
    - 2004-08-04 06:56:42 512,512 ----a-w c:\windows\system32\cryptui.dll
    + 2008-04-14 00:11:51 512,512 ----a-w c:\windows\system32\cryptui.dll
    - 2004-08-04 06:56:42 101,888 ----a-w c:\windows\system32\cscdll.dll
    + 2008-04-14 00:11:51 101,888 ----a-w c:\windows\system32\cscdll.dll
    - 2004-08-04 06:56:50 98,304 ----a-w c:\windows\system32\cscript.exe
    + 2008-04-14 00:12:15 139,264 ----a-w c:\windows\system32\cscript.exe
    - 2004-08-04 06:56:42 326,656 ----a-w c:\windows\system32\cscui.dll
    + 2008-04-14 00:11:51 326,656 ----a-w c:\windows\system32\cscui.dll
    - 2004-08-04 06:56:42 32,768 ----a-w c:\windows\system32\csrsrv.dll
    + 2008-04-14 00:11:51 32,256 ----a-w c:\windows\system32\csrsrv.dll
    - 2004-08-04 06:56:50 6,144 ----a-w c:\windows\system32\csrss.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\system32\csrss.exe
    - 2004-08-04 06:56:50 15,360 ----a-w c:\windows\system32\ctfmon.exe
    + 2008-04-14 00:12:16 15,360 ----a-w c:\windows\system32\ctfmon.exe
    - 2004-08-04 06:56:42 1,179,648 ----a-w c:\windows\system32\d3d8.dll
    + 2008-04-14 00:11:51 1,179,648 ----a-w c:\windows\system32\d3d8.dll
    - 2004-08-04 06:56:42 8,192 ----a-w c:\windows\system32\d3d8thk.dll
    + 2008-04-14 00:11:51 8,192 ----a-w c:\windows\system32\d3d8thk.dll
    - 2004-08-04 06:56:42 1,689,088 ----a-w c:\windows\system32\d3d9.dll
    + 2008-04-14 00:11:51 1,689,088 ----a-w c:\windows\system32\d3d9.dll
    - 2004-08-04 06:56:42 825,344 ----a-w c:\windows\system32\d3dim700.dll
    + 2008-04-14 00:11:51 824,320 ----a-w c:\windows\system32\d3dim700.dll
    - 2004-08-04 06:56:42 1,053,696 ----a-w c:\windows\system32\danim.dll
    + 2008-04-14 00:11:51 1,054,208 ----a-w c:\windows\system32\danim.dll
    - 2004-08-04 06:56:44 54,272 ----a-w c:\windows\system32\dataclen.dll
    + 2008-04-14 00:11:51 54,272 ----a-w c:\windows\system32\dataclen.dll
    - 2001-08-23 13:00:00 152,064 ----a-w c:\windows\system32\datime.dll
    + 2008-04-14 00:11:51 165,376 ----a-w c:\windows\system32\datime.dll
    - 2004-08-04 06:56:44 24,576 ----a-w c:\windows\system32\davclnt.dll
    + 2008-04-14 00:11:51 25,088 ----a-w c:\windows\system32\davclnt.dll
    - 2004-08-04 06:56:44 640,000 ----a-w c:\windows\system32\dbghelp.dll
    + 2008-04-14 00:11:51 640,000 ----a-w c:\windows\system32\dbghelp.dll
    - 2004-08-04 06:56:44 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll
    + 2008-04-14 00:11:51 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll
    - 2004-08-04 06:56:44 110,592 ----a-w c:\windows\system32\dbnetlib.dll
    + 2008-04-14 00:11:51 110,592 ----a-w c:\windows\system32\dbnetlib.dll
    - 2004-08-04 06:56:44 28,672 ----a-w c:\windows\system32\dbnmpntw.dll
    + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\system32\dbnmpntw.dll
    - 2004-08-04 07:07:22 1,788 ----a-w c:\windows\system32\Dcache.bin
    + 2008-04-14 00:25:26 1,804 ----a-w c:\windows\system32\dcache.bin
    - 2004-08-04 06:56:44 8,704 ----a-w c:\windows\system32\dciman32.dll
    + 2008-04-14 00:11:51 8,704 ----a-w c:\windows\system32\dciman32.dll
    - 2001-08-23 13:00:00 5,120 ----a-w c:\windows\system32\dcomcnfg.exe
    + 2008-04-14 00:12:16 6,144 ----a-w c:\windows\system32\dcomcnfg.exe
    - 2004-08-04 07:56:48 30,208 ----a-w c:\windows\system32\ddeshare.exe
    + 2008-04-14 00:12:16 30,208 ----a-w c:\windows\system32\ddeshare.exe
    - 2004-08-04 06:56:44 266,240 ----a-w c:\windows\system32\ddraw.dll
    + 2008-04-14 00:11:51 279,552 ----a-w c:\windows\system32\ddraw.dll
    - 2004-08-04 06:56:44 27,136 ----a-w c:\windows\system32\ddrawex.dll
    + 2008-04-14 00:11:51 27,136 ----a-w c:\windows\system32\ddrawex.dll
    - 2004-08-04 06:56:50 25,088 ----a-w c:\windows\system32\defrag.exe
    + 2008-04-14 00:12:16 25,088 ----a-w c:\windows\system32\defrag.exe
    - 2004-08-04 06:56:44 59,904 ----a-w c:\windows\system32\devenum.dll
    + 2008-04-14 00:11:51 59,904 ----a-w c:\windows\system32\devenum.dll
    - 2004-08-04 06:56:44 282,624 ----a-w c:\windows\system32\devmgr.dll
    + 2008-04-14 00:11:51 282,624 ----a-w c:\windows\system32\devmgr.dll
    - 2004-08-04 06:56:50 82,432 ----a-w c:\windows\system32\dfrgfat.exe
    + 2008-04-14 00:12:16 82,944 ----a-w c:\windows\system32\dfrgfat.exe
    - 2004-08-04 06:56:50 104,960 ----a-w c:\windows\system32\dfrgntfs.exe
    + 2008-04-14 00:12:16 105,472 ----a-w c:\windows\system32\dfrgntfs.exe
    - 2004-08-04 06:56:44 38,912 ----a-w c:\windows\system32\dfrgsnap.dll
    + 2008-04-14 00:11:51 39,424 ----a-w c:\windows\system32\dfrgsnap.dll
    - 2004-08-04 06:56:44 123,904 ----a-w c:\windows\system32\dfrgui.dll
    + 2008-04-14 00:11:51 124,416 ----a-w c:\windows\system32\dfrgui.dll
    - 2004-08-04 06:56:44 28,672 ----a-w c:\windows\system32\dfsshlex.dll
    + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\system32\dfsshlex.dll
    - 2004-08-04 06:56:44 111,104 ----a-w c:\windows\system32\dgnet.dll
    + 2008-04-14 00:11:51 111,104 ----a-w c:\windows\system32\dgnet.dll
    - 2004-08-04 06:56:44 111,104 ----a-w c:\windows\system32\dhcpcsvc.dll
    + 2008-04-14 00:11:51 126,976 ----a-w c:\windows\system32\dhcpcsvc.dll
    - 2001-08-23 13:00:00 370,176 ----a-w c:\windows\system32\dhcpmon.dll
    + 2008-04-14 00:11:52 379,904 ----a-w c:\windows\system32\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\system32\dhcpqec.dll
    - 2004-08-04 06:56:50 85,504 ----a-w c:\windows\system32\diantz.exe
    + 2008-04-14 00:12:17 87,040 ----a-w c:\windows\system32\diantz.exe
    - 2004-08-04 06:56:44 68,608 ----a-w c:\windows\system32\digest.dll
    + 2008-04-14 00:11:52 68,608 ----a-w c:\windows\system32\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\system32\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\system32\dimsroam.dll
    - 2004-08-04 06:56:44 159,232 ----a-w c:\windows\system32\dinput.dll
    + 2008-04-14 00:11:52 158,720 ----a-w c:\windows\system32\dinput.dll
    - 2004-08-04 06:56:44 181,760 ----a-w c:\windows\system32\dinput8.dll
    + 2008-04-14 00:11:52 181,760 ----a-w c:\windows\system32\dinput8.dll
    - 2001-08-23 13:00:00 1,501,696 ----a-w c:\windows\system32\diskcopy.dll
    + 2008-04-14 00:11:52 1,504,256 ----a-w c:\windows\system32\diskcopy.dll
    - 2004-08-04 06:56:50 163,840 ----a-w c:\windows\system32\diskpart.exe
    + 2008-04-14 00:12:17 163,840 ----a-w c:\windows\system32\diskpart.exe
    - 2001-08-23 13:00:00 45,083 ----a-w c:\windows\system32\dispex.dll
    + 2008-04-14 00:11:52 32,768 ----a-w c:\windows\system32\dispex.dll
    - 2004-08-04 06:56:00 8,192 -c--a-w c:\windows\system32\dllcache\asferror.dll
    + 2008-04-13 17:23:38 8,192 -c--a-w c:\windows\system32\dllcache\asferror.dll
    - 2004-08-04 06:56:42 286,208 -c--a-w c:\windows\system32\dllcache\blackbox.dll
    + 2008-04-14 00:11:50 286,720 -c--a-w c:\windows\system32\dllcache\blackbox.dll
    - 2004-08-04 06:56:42 159,232 -c--a-w c:\windows\system32\dllcache\cewmdm.dll
    + 2008-04-14 00:11:50 159,232 -c--a-w c:\windows\system32\dllcache\cewmdm.dll
    - 2004-08-04 04:31:52 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll
     
    scorpion657,
    #13
  15. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    + 2008-04-14 00:09:05 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll
    - 2004-08-04 04:31:54 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll
    + 2008-04-14 00:09:05 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll
    - 2004-08-04 04:31:54 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll
    + 2008-04-14 00:09:05 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll
    - 2004-08-04 04:31:54 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll
    + 2008-04-14 00:09:06 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll
    - 2004-08-04 10:00:00 28,672 -c--a-w c:\windows\system32\dllcache\custsat.dll
    + 2008-04-14 00:11:51 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
    + 2008-04-14 00:12:17 294,912 -c----w c:\windows\system32\dllcache\dlimport.exe
    - 2004-08-04 06:57:06 299,520 -c--a-w c:\windows\system32\dllcache\drmclien.dll
    + 2008-04-14 00:13:00 299,520 -c--a-w c:\windows\system32\dllcache\drmclien.dll
    - 2004-08-04 06:56:44 87,040 -c--a-w c:\windows\system32\dllcache\drmstor.dll
    + 2008-04-14 00:11:52 87,040 -c--a-w c:\windows\system32\dllcache\drmstor.dll
    - 2004-08-04 06:57:04 695,296 -c--a-w c:\windows\system32\dllcache\drmv2clt.dll
    + 2008-04-14 00:12:57 695,808 -c--a-w c:\windows\system32\dllcache\drmv2clt.dll
    - 2004-08-04 06:56:44 498,205 -c--a-w c:\windows\system32\dllcache\dxmasf.dll
    + 2008-04-14 00:11:52 498,742 -c--a-w c:\windows\system32\dllcache\dxmasf.dll
    - 2004-08-04 05:04:38 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll
    + 2008-04-14 00:09:43 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll
    - 2004-08-04 05:04:34 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll
    + 2008-04-14 00:09:43 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll
    - 2004-08-04 04:31:50 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll
    + 2008-04-14 00:09:44 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll
    - 2004-08-04 04:31:52 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll
    + 2008-04-14 00:09:45 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll
    - 2004-08-04 04:31:52 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll
    + 2008-04-14 00:09:45 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll
    - 2004-08-04 04:31:54 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll
    + 2008-04-14 00:09:45 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll
    - 2004-08-04 04:32:16 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll
    + 2008-04-14 00:09:46 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll
    - 2004-08-04 04:32:28 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll
    + 2008-04-14 00:09:46 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll
    - 2001-08-23 13:00:00 315,452 -c--a-w c:\windows\system32\dllcache\imskf.dll
    + 2008-04-14 00:09:47 315,455 -c--a-w c:\windows\system32\dllcache\imskf.dll
    - 2004-08-04 06:56:44 6,656 -c--a-w c:\windows\system32\dllcache\laprxy.dll
    + 2008-04-14 00:11:56 6,656 -c--a-w c:\windows\system32\dllcache\laprxy.dll
    - 2004-08-04 06:56:52 103,936 -c--a-w c:\windows\system32\dllcache\logagent.exe
    + 2008-04-14 00:12:24 103,936 -c--a-w c:\windows\system32\dllcache\logagent.exe
    - 2004-08-04 06:56:52 786,432 -c--a-w c:\windows\system32\dllcache\migrate.exe
    + 2008-04-14 00:12:25 786,432 -c--a-w c:\windows\system32\dllcache\migrate.exe
    - 2004-08-04 06:56:44 310,272 -c--a-w c:\windows\system32\dllcache\mp43dmod.dll
    + 2008-04-14 00:11:57 310,272 -c--a-w c:\windows\system32\dllcache\mp43dmod.dll
    - 2004-08-04 06:56:44 384,512 -c--a-w c:\windows\system32\dllcache\mp4sdmod.dll
    + 2008-04-14 00:11:57 384,512 -c--a-w c:\windows\system32\dllcache\mp4sdmod.dll
    - 2004-08-04 06:56:44 240,640 -c--a-w c:\windows\system32\dllcache\mpg4dmod.dll
    + 2008-04-14 00:11:57 240,640 -c--a-w c:\windows\system32\dllcache\mpg4dmod.dll
    - 2004-08-04 06:56:54 123,392 -c--a-w c:\windows\system32\dllcache\mplay32.exe
    + 2008-04-14 00:12:27 123,392 -c--a-w c:\windows\system32\dllcache\mplay32.exe
    - 2004-08-04 06:56:54 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe
    + 2008-04-14 00:12:27 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe
    - 2004-08-04 06:56:44 368,640 -c--a-w c:\windows\system32\dllcache\mpvis.dll
    + 2008-04-14 00:11:57 368,640 -c--a-w c:\windows\system32\dllcache\mpvis.dll
    - 2004-08-04 06:56:14 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll
    + 2008-04-14 00:10:08 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll
    - 2004-08-04 06:57:02 259,072 -c--a-w c:\windows\system32\dllcache\msnetobj.dll
    + 2008-04-14 00:12:55 259,072 -c--a-w c:\windows\system32\dllcache\msnetobj.dll
    - 2004-08-04 06:56:44 52,224 -c--a-w c:\windows\system32\dllcache\mspmsnsv.dll
    + 2008-04-14 00:12:00 52,224 -c--a-w c:\windows\system32\dllcache\mspmsnsv.dll
    - 2004-08-04 06:56:44 201,728 -c--a-w c:\windows\system32\dllcache\mspmsp.dll
    + 2008-04-14 00:12:00 201,728 -c--a-w c:\windows\system32\dllcache\mspmsp.dll
    - 2004-08-04 06:57:02 356,352 -c--a-w c:\windows\system32\dllcache\msscp.dll
    + 2008-04-14 00:12:56 356,352 -c--a-w c:\windows\system32\dllcache\msscp.dll
    - 2004-08-04 06:56:46 245,760 -c--a-w c:\windows\system32\dllcache\mswmdm.dll
    + 2008-04-14 00:12:01 245,760 -c--a-w c:\windows\system32\dllcache\mswmdm.dll
    + 2008-04-14 00:12:01 1,306,624 -c----w c:\windows\system32\dllcache\msxml6.dll
    + 2008-04-13 17:27:18 79,872 -c----w c:\windows\system32\dllcache\msxml6r.dll
    - 2004-08-04 10:00:00 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll
    + 2008-04-14 00:12:56 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll
    - 2004-08-04 06:56:46 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll
    + 2008-04-14 00:12:02 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll
    - 2004-08-04 10:00:00 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll
    + 2008-04-14 00:12:02 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll
    - 2004-08-04 04:32:12 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll
    + 2008-04-14 00:10:33 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll
    - 2004-08-04 04:31:50 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll
    + 2008-04-14 00:10:33 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll
    - 2004-08-04 04:31:50 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll
    + 2008-04-14 00:10:34 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll
    - 2004-08-04 04:31:50 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll
    + 2008-04-14 00:10:34 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll
    - 2004-08-04 04:31:50 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe
    + 2008-04-13 16:43:36 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe
    - 2004-08-04 04:31:50 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll
    + 2008-04-14 00:10:34 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll
    - 2004-08-04 06:56:58 774,144 -c--a-w c:\windows\system32\dllcache\setup_wm.exe
    + 2008-04-14 00:12:35 774,144 -c--a-w c:\windows\system32\dllcache\setup_wm.exe
    - 2004-08-04 06:56:46 151,552 -c--a-w c:\windows\system32\dllcache\shmedia.dll
    + 2008-04-14 00:12:05 152,064 -c--a-w c:\windows\system32\dllcache\shmedia.dll
    - 2004-08-04 06:56:46 246,302 -c--a-w c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-03 10:02:42 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll
    - 2004-08-04 04:32:14 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll
    + 2008-04-14 00:10:59 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll
    - 2004-08-04 05:04:12 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll
    + 2008-04-14 00:11:01 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll
    - 2004-08-04 06:56:58 208,896 -c--a-w c:\windows\system32\dllcache\unregmp2.exe
    + 2008-04-14 00:12:38 208,896 -c--a-w c:\windows\system32\dllcache\unregmp2.exe
    - 2004-08-04 04:32:36 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll
    + 2008-04-14 00:11:04 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll
    - 2004-08-04 04:32:36 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll
    + 2008-04-14 00:11:04 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll
    - 2004-08-04 06:56:48 408,064 -c--a-w c:\windows\system32\dllcache\wmadmod.dll
    + 2008-04-14 00:12:09 408,064 -c--a-w c:\windows\system32\dllcache\wmadmod.dll
    - 2004-08-04 06:56:48 670,720 -c--a-w c:\windows\system32\dllcache\wmadmoe.dll
    + 2008-04-14 00:12:09 670,720 -c--a-w c:\windows\system32\dllcache\wmadmoe.dll
    - 2004-08-04 06:56:48 230,400 -c--a-w c:\windows\system32\dllcache\wmasf.dll
    + 2008-04-14 00:12:09 230,912 -c--a-w c:\windows\system32\dllcache\wmasf.dll
    - 2004-08-04 06:56:48 27,136 -c--a-w c:\windows\system32\dllcache\wmdmlog.dll
    + 2008-04-14 00:12:09 27,136 -c--a-w c:\windows\system32\dllcache\wmdmlog.dll
    - 2004-08-04 06:56:48 23,552 -c--a-w c:\windows\system32\dllcache\wmdmps.dll
    + 2008-04-14 00:12:09 23,552 -c--a-w c:\windows\system32\dllcache\wmdmps.dll
    - 2004-08-04 06:56:36 168,448 -c--a-w c:\windows\system32\dllcache\wmerror.dll
    + 2008-04-13 17:23:24 168,448 -c--a-w c:\windows\system32\dllcache\wmerror.dll
    - 2004-08-04 06:56:48 151,552 -c--a-w c:\windows\system32\dllcache\wmidx.dll
    + 2008-04-14 00:12:09 151,552 -c--a-w c:\windows\system32\dllcache\wmidx.dll
    - 2004-08-04 06:56:48 1,050,624 -c--a-w c:\windows\system32\dllcache\wmnetmgr.dll
    + 2008-04-14 00:12:09 1,053,184 -c--a-w c:\windows\system32\dllcache\wmnetmgr.dll
    - 2004-08-04 06:56:48 4,874,240 -c--a-w c:\windows\system32\dllcache\wmp.dll
    + 2008-04-14 00:12:09 4,874,240 -c--a-w c:\windows\system32\dllcache\wmp.dll
    - 2004-08-04 06:56:48 114,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll
    + 2008-04-14 00:12:09 114,688 -c--a-w c:\windows\system32\dllcache\wmpasf.dll
    - 2004-08-04 06:56:48 98,304 -c--a-w c:\windows\system32\dllcache\wmpband.dll
    + 2008-04-14 00:12:09 98,304 -c--a-w c:\windows\system32\dllcache\wmpband.dll
    - 2004-08-04 06:56:48 20,480 -c--a-w c:\windows\system32\dllcache\wmpcd.dll
    + 2008-04-14 00:12:09 20,480 -c--a-w c:\windows\system32\dllcache\wmpcd.dll
    - 2004-08-04 06:56:48 20,480 -c--a-w c:\windows\system32\dllcache\wmpcore.dll
    + 2008-04-14 00:12:09 20,480 -c--a-w c:\windows\system32\dllcache\wmpcore.dll
    - 2004-08-04 06:56:48 233,472 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll
    + 2008-04-14 00:12:09 233,472 -c--a-w c:\windows\system32\dllcache\wmpdxm.dll
    - 2004-08-04 06:56:58 73,728 -c--a-w c:\windows\system32\dllcache\wmplayer.exe
    + 2008-04-14 00:12:40 73,728 -c--a-w c:\windows\system32\dllcache\wmplayer.exe
    - 2004-08-04 06:56:38 2,940,928 -c--a-w c:\windows\system32\dllcache\wmploc.dll
    + 2008-04-13 17:28:21 2,940,928 -c--a-w c:\windows\system32\dllcache\wmploc.dll
    - 2004-08-04 10:00:00 221,184 -c--a-w c:\windows\system32\dllcache\wmpns.dll
    + 2008-04-14 00:12:09 221,184 -c--a-w c:\windows\system32\dllcache\wmpns.dll
    - 2004-08-04 06:56:48 102,400 -c--a-w c:\windows\system32\dllcache\wmpshell.dll
    + 2008-04-14 00:12:09 102,400 -c--a-w c:\windows\system32\dllcache\wmpshell.dll
    - 2004-08-04 06:56:48 20,480 -c--a-w c:\windows\system32\dllcache\wmpui.dll
    + 2008-04-14 00:12:09 20,480 -c--a-w c:\windows\system32\dllcache\wmpui.dll
    - 2004-08-04 06:56:48 759,296 -c--a-w c:\windows\system32\dllcache\wmsdmod.dll
    + 2008-04-14 00:12:09 759,296 -c--a-w c:\windows\system32\dllcache\wmsdmod.dll
    - 2004-08-04 06:56:48 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll
    + 2008-04-14 00:12:09 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll
    - 2004-08-04 06:56:48 1,119,744 -c--a-w c:\windows\system32\dllcache\wmsdmoe2.dll
    + 2008-04-14 00:12:09 1,119,744 -c--a-w c:\windows\system32\dllcache\wmsdmoe2.dll
    - 2004-08-04 06:56:48 484,864 -c--a-w c:\windows\system32\dllcache\wmspdmod.dll
    + 2008-04-14 00:12:09 485,376 -c--a-w c:\windows\system32\dllcache\wmspdmod.dll
    - 2004-08-04 06:56:48 896,512 -c--a-w c:\windows\system32\dllcache\wmspdmoe.dll
    + 2008-04-14 00:12:10 897,024 -c--a-w c:\windows\system32\dllcache\wmspdmoe.dll
    - 2004-08-04 06:56:48 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll
    + 2008-04-14 00:12:10 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll
    - 2004-08-04 06:57:04 2,105,344 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
    + 2008-04-14 00:12:58 2,109,440 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
    - 2004-08-04 06:56:48 809,984 -c--a-w c:\windows\system32\dllcache\wmvdmod.dll
    + 2008-04-14 00:12:10 809,984 -c--a-w c:\windows\system32\dllcache\wmvdmod.dll
    - 2004-08-04 06:56:48 1,001,472 -c--a-w c:\windows\system32\dllcache\wmvdmoe2.dll
    + 2008-04-14 00:12:10 1,001,472 -c--a-w c:\windows\system32\dllcache\wmvdmoe2.dll
    - 2004-08-04 06:56:50 5,120 ----a-w c:\windows\system32\dllhost.exe
    + 2008-04-14 00:12:17 5,120 ----a-w c:\windows\system32\dllhost.exe
    - 2004-08-04 06:56:50 224,768 ----a-w c:\windows\system32\dmadmin.exe
    + 2008-04-14 00:12:17 224,768 ----a-w c:\windows\system32\dmadmin.exe
    - 2004-08-04 06:56:44 28,672 ----a-w c:\windows\system32\dmband.dll
    + 2008-04-14 00:11:52 28,672 ----a-w c:\windows\system32\dmband.dll
    - 2004-08-04 06:56:44 61,440 ----a-w c:\windows\system32\dmcompos.dll
    + 2008-04-14 00:11:52 61,440 ----a-w c:\windows\system32\dmcompos.dll
    - 2001-08-23 13:00:00 273,920 ----a-w c:\windows\system32\dmdlgs.dll
    + 2008-04-14 00:11:52 285,184 ----a-w c:\windows\system32\dmdlgs.dll
    - 2004-08-04 06:56:44 200,704 ----a-w c:\windows\system32\dmdskmgr.dll
    + 2008-04-14 00:11:52 200,704 ----a-w c:\windows\system32\dmdskmgr.dll
    - 2004-08-04 06:56:44 181,248 ----a-w c:\windows\system32\dmime.dll
    + 2008-04-14 00:11:52 181,248 ----a-w c:\windows\system32\dmime.dll
    - 2004-08-04 06:56:44 35,840 ----a-w c:\windows\system32\dmloader.dll
    + 2008-04-14 00:11:52 35,840 ----a-w c:\windows\system32\dmloader.dll
    - 2004-08-04 06:56:50 15,872 ----a-w c:\windows\system32\dmremote.exe
    + 2008-04-14 00:12:17 15,872 ----a-w c:\windows\system32\dmremote.exe
    - 2004-08-04 06:56:44 82,432 ----a-w c:\windows\system32\dmscript.dll
    + 2008-04-14 00:11:52 82,432 ----a-w c:\windows\system32\dmscript.dll
    - 2004-08-04 06:56:44 23,552 ----a-w c:\windows\system32\dmserver.dll
    + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\system32\dmserver.dll
    - 2004-08-04 06:56:44 105,984 ----a-w c:\windows\system32\dmstyle.dll
    + 2008-04-14 00:11:52 105,984 ----a-w c:\windows\system32\dmstyle.dll
    - 2004-08-04 06:56:44 103,424 ----a-w c:\windows\system32\dmsynth.dll
    + 2008-04-14 00:11:52 103,424 ----a-w c:\windows\system32\dmsynth.dll
    - 2004-08-04 06:56:44 104,448 ----a-w c:\windows\system32\dmusic.dll
    + 2008-04-14 00:11:52 104,448 ----a-w c:\windows\system32\dmusic.dll
    - 2004-08-04 07:05:44 52,224 ----a-w c:\windows\system32\dmutil.dll
    + 2008-04-14 00:11:52 52,224 ----a-w c:\windows\system32\dmutil.dll
    - 2004-08-04 06:56:44 148,480 ----a-w c:\windows\system32\dnsapi.dll
    + 2008-04-14 00:11:52 147,968 ----a-w c:\windows\system32\dnsapi.dll
    - 2004-08-04 06:56:44 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
    + 2008-04-14 00:11:52 45,568 ----a-w c:\windows\system32\dnsrslvr.dll
    - 2004-08-04 06:56:44 48,128 ----a-w c:\windows\system32\docprop2.dll
    + 2008-04-14 00:11:52 48,128 ----a-w c:\windows\system32\docprop2.dll
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\system32\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\system32\dot3cfg.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\system32\dot3dlg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\system32\dot3gpclnt.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\system32\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\system32\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\system32\dot3ui.dll
    - 2004-08-04 06:56:44 96,768 ----a-w c:\windows\system32\dpcdll.dll
    + 2008-04-14 00:11:52 102,912 ----a-w c:\windows\system32\dpcdll.dll
    - 2004-08-04 06:56:50 30,208 ----a-w c:\windows\system32\dplaysvr.exe
    + 2008-04-14 00:12:17 29,696 ----a-w c:\windows\system32\dplaysvr.exe
    - 2004-08-04 06:56:44 229,888 ----a-w c:\windows\system32\dplayx.dll
    + 2008-04-14 00:11:52 229,888 ----a-w c:\windows\system32\dplayx.dll
    - 2004-08-04 06:56:44 23,552 ----a-w c:\windows\system32\dpmodemx.dll
    + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\system32\dpmodemx.dll
    - 2004-08-04 06:56:04 3,584 ----a-w c:\windows\system32\dpnaddr.dll
    + 2008-04-14 00:09:19 3,072 ----a-w c:\windows\system32\dpnaddr.dll
    - 2004-08-04 06:56:44 375,296 ----a-w c:\windows\system32\dpnet.dll
    + 2008-04-14 00:11:52 375,296 ----a-w c:\windows\system32\dpnet.dll
    - 2004-08-04 06:56:44 35,328 ----a-w c:\windows\system32\dpnhpast.dll
    + 2008-04-14 00:11:52 35,328 ----a-w c:\windows\system32\dpnhpast.dll
    - 2004-08-04 06:56:44 60,928 ----a-w c:\windows\system32\dpnhupnp.dll
    + 2008-04-14 00:11:52 60,928 ----a-w c:\windows\system32\dpnhupnp.dll
    - 2004-08-04 06:56:04 3,584 ----a-w c:\windows\system32\dpnlobby.dll
    + 2008-04-14 00:09:20 3,072 ----a-w c:\windows\system32\dpnlobby.dll
    - 2004-08-04 06:56:50 18,432 ----a-w c:\windows\system32\dpnsvr.exe
    + 2008-04-14 00:12:17 17,920 ----a-w c:\windows\system32\dpnsvr.exe
    - 2004-08-04 06:56:44 21,504 ----a-w c:\windows\system32\dpvacm.dll
    + 2008-04-14 00:11:52 21,504 ----a-w c:\windows\system32\dpvacm.dll
    - 2004-08-04 06:56:44 212,480 ----a-w c:\windows\system32\dpvoice.dll
    + 2008-04-14 00:11:52 212,480 ----a-w c:\windows\system32\dpvoice.dll
    - 2004-08-04 06:56:50 83,456 ----a-w c:\windows\system32\dpvsetup.exe
    + 2008-04-14 00:12:18 83,456 ----a-w c:\windows\system32\dpvsetup.exe
    - 2004-08-04 06:56:44 116,736 ----a-w c:\windows\system32\dpvvox.dll
    + 2008-04-14 00:11:52 116,736 ----a-w c:\windows\system32\dpvvox.dll
    - 2004-08-04 06:56:44 57,344 ----a-w c:\windows\system32\dpwsockx.dll
    + 2008-04-14 00:11:52 57,344 ----a-w c:\windows\system32\dpwsockx.dll
    - 2001-08-23 13:00:00 58,368 ----a-w c:\windows\system32\driverquery.exe
    + 2008-04-14 00:12:18 62,976 ----a-w c:\windows\system32\driverquery.exe
    - 2004-08-04 05:07:38 187,776 ----a-w c:\windows\system32\drivers\acpi.sys
    + 2008-04-13 18:36:35 187,776 ----a-w c:\windows\system32\drivers\acpi.sys
    + 2008-04-14 00:11:48 4,255 ------w c:\windows\system32\drivers\adv01nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\windows\system32\drivers\adv02nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\windows\system32\drivers\adv05nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\windows\system32\drivers\adv07nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\windows\system32\drivers\adv08nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\windows\system32\drivers\adv09nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\windows\system32\drivers\adv11nt5.dll
    - 2004-08-04 07:05:44 142,464 ----a-w c:\windows\system32\drivers\aec.sys
    + 2008-04-13 16:39:23 142,592 ----a-w c:\windows\system32\drivers\aec.sys
    - 2004-08-04 05:14:16 138,496 ----a-w c:\windows\system32\drivers\afd.sys
    + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\system32\drivers\afd.sys
    - 2004-08-04 07:05:44 42,368 ----a-w c:\windows\system32\drivers\agp440.sys
    + 2008-04-13 18:36:38 42,368 ----a-w c:\windows\system32\drivers\agp440.sys
    - 2004-08-04 07:05:44 44,928 ----a-w c:\windows\system32\drivers\agpcpq.sys
    + 2008-04-13 18:36:39 44,928 ----a-w c:\windows\system32\drivers\agpcpq.sys
    - 2004-08-04 07:05:44 42,752 ----a-w c:\windows\system32\drivers\alim1541.sys
    + 2008-04-13 18:36:38 42,752 ----a-w c:\windows\system32\drivers\alim1541.sys
    - 2004-08-04 07:05:44 43,008 ----a-w c:\windows\system32\drivers\amdagp.sys
    + 2008-04-13 18:36:39 43,008 ----a-w c:\windows\system32\drivers\amdagp.sys
    - 2004-08-04 07:05:44 36,992 ----a-w c:\windows\system32\drivers\amdk6.sys
    + 2008-04-13 18:31:32 37,376 ----a-w c:\windows\system32\drivers\amdk6.sys
    - 2004-08-04 07:05:44 37,376 ----a-w c:\windows\system32\drivers\amdk7.sys
    + 2008-04-13 18:31:33 37,760 ----a-w c:\windows\system32\drivers\amdk7.sys
    - 2004-08-04 07:05:44 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys
    + 2008-04-13 18:51:25 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys
    - 2004-08-04 05:05:04 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys
    + 2008-04-13 18:57:27 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys
    - 2004-08-04 04:59:44 95,360 ----a-w c:\windows\system32\drivers\atapi.sys
    + 2008-04-13 18:40:30 96,512 ----a-w c:\windows\system32\drivers\atapi.sys
    + 2004-08-04 03:29:30 56,623 ------w c:\windows\system32\drivers\ati1btxx.sys
    + 2004-08-04 03:29:30 11,615 ------w c:\windows\system32\drivers\ati1mdxx.sys
    + 2004-08-04 03:29:30 12,047 ------w c:\windows\system32\drivers\ati1pdxx.sys
    + 2004-08-04 03:29:32 30,671 ------w c:\windows\system32\drivers\ati1raxx.sys
    + 2004-08-04 03:29:32 63,663 ------w c:\windows\system32\drivers\ati1rvxx.sys
    + 2004-08-04 03:29:32 26,367 ------w c:\windows\system32\drivers\ati1snxx.sys
    + 2004-08-04 03:29:32 21,343 ------w c:\windows\system32\drivers\ati1ttxx.sys
    + 2004-08-04 03:29:32 36,463 ------w c:\windows\system32\drivers\ati1tuxx.sys
    + 2004-08-04 03:29:32 29,455 ------w c:\windows\system32\drivers\ati1xbxx.sys
    + 2004-08-04 03:29:32 34,735 ------w c:\windows\system32\drivers\ati1xsxx.sys
    + 2004-08-04 03:29:28 327,040 ------w c:\windows\system32\drivers\ati2mtaa.sys
    + 2004-08-04 03:29:28 701,440 ------w c:\windows\system32\drivers\ati2mtag.sys
    + 2004-08-04 03:29:28 57,856 ------w c:\windows\system32\drivers\atinbtxx.sys
    + 2004-08-04 03:29:30 13,824 ------w c:\windows\system32\drivers\atinmdxx.sys
    + 2004-08-04 03:29:30 14,336 ------w c:\windows\system32\drivers\atinpdxx.sys
    + 2004-08-04 03:29:30 52,224 ------w c:\windows\system32\drivers\atinraxx.sys
    + 2004-08-04 03:29:32 104,960 ------w c:\windows\system32\drivers\atinrvxx.sys
    + 2004-08-04 03:29:32 28,672 ------w c:\windows\system32\drivers\atinsnxx.sys
    + 2004-08-04 03:29:32 13,824 ------w c:\windows\system32\drivers\atinttxx.sys
    + 2004-08-04 03:29:32 73,216 ------w c:\windows\system32\drivers\atintuxx.sys
    + 2004-08-04 03:29:32 31,744 ------w c:\windows\system32\drivers\atinxbxx.sys
    + 2004-08-04 03:29:32 63,488 ------w c:\windows\system32\drivers\atinxsxx.sys
    - 2004-08-04 04:58:32 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys
    + 2008-04-13 18:51:25 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys
    - 2004-08-04 04:58:36 55,936 ----a-w c:\windows\system32\drivers\atmlane.sys
    + 2008-04-13 18:51:30 55,808 ----a-w c:\windows\system32\drivers\atmlane.sys
    + 2008-04-14 00:11:50 21,183 ------w c:\windows\system32\drivers\atv01nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\windows\system32\drivers\atv02nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\windows\system32\drivers\atv04nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\windows\system32\drivers\atv06nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\windows\system32\drivers\atv10nt5.dll
    - 2001-08-23 13:00:00 14,080 ----a-w c:\windows\system32\drivers\battc.sys
    + 2008-04-13 18:36:32 14,208 ----a-w c:\windows\system32\drivers\battc.sys
    - 2004-08-04 04:59:58 71,552 ----a-w c:\windows\system32\drivers\bridge.sys
    + 2008-04-13 18:53:23 71,552 ----a-w c:\windows\system32\drivers\bridge.sys
    + 2008-04-13 18:46:33 17,024 ------w c:\windows\system32\drivers\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\windows\system32\drivers\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\windows\system32\drivers\bthpan.sys
    - 2004-08-04 05:10:38 274,304 ----a-w c:\windows\system32\drivers\bthport.sys
    + 2008-06-13 11:05:51 272,128 ----a-w c:\windows\system32\drivers\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\windows\system32\drivers\bthprint.sys
    + 2008-04-13 18:46:29 18,944 ------w c:\windows\system32\drivers\bthusb.sys
    - 2004-08-04 05:14:12 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys
    + 2008-04-13 19:14:21 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys
    - 2004-08-04 04:59:54 49,536 ----a-w c:\windows\system32\drivers\cdrom.sys
    + 2008-04-13 18:40:46 62,976 ----a-w c:\windows\system32\drivers\cdrom.sys
    + 2008-04-14 00:11:50 15,423 ------w c:\windows\system32\drivers\ch7xxnt5.dll
    - 2004-08-04 05:14:28 49,664 ----a-w c:\windows\system32\drivers\classpnp.sys
    + 2008-04-13 19:16:22 49,536 ----a-w c:\windows\system32\drivers\classpnp.sys
    - 2004-08-04 07:05:44 14,080 ----a-w c:\windows\system32\drivers\cmbatt.sys
    + 2008-04-13 18:36:37 13,952 ----a-w c:\windows\system32\drivers\cmbatt.sys
    - 2001-08-23 13:00:00 9,344 ----a-w c:\windows\system32\drivers\compbatt.sys
    + 2008-04-13 18:36:37 10,240 ----a-w c:\windows\system32\drivers\compbatt.sys
    - 2004-08-04 07:05:44 36,480 ----a-w c:\windows\system32\drivers\crusoe.sys
    + 2008-04-13 18:31:32 36,736 ----a-w c:\windows\system32\drivers\crusoe.sys
    - 2004-08-04 04:59:56 36,352 ----a-w c:\windows\system32\drivers\disk.sys
    + 2008-04-13 18:40:47 36,352 ----a-w c:\windows\system32\drivers\disk.sys
    - 2004-08-04 04:59:54 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys
    + 2008-04-13 18:40:44 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys
    - 2004-08-04 05:07:18 799,744 ----a-w c:\windows\system32\drivers\dmboot.sys
    + 2008-04-13 18:44:48 799,744 ----a-w c:\windows\system32\drivers\dmboot.sys
    - 2004-08-04 05:07:18 153,344 ----a-w c:\windows\system32\drivers\dmio.sys
    + 2008-04-13 18:44:46 153,344 ----a-w c:\windows\system32\drivers\dmio.sys
    - 2004-08-04 03:07:40 52,864 ----a-w c:\windows\system32\drivers\DMusic.sys
    + 2008-04-13 18:45:01 52,864 ----a-w c:\windows\system32\drivers\dmusic.sys
    - 2004-08-04 03:58:30 207,360 ----a-w c:\windows\system32\drivers\Dot4.sys
    + 2008-04-13 18:39:46 206,976 ----a-w c:\windows\system32\drivers\dot4.sys
    - 2004-08-04 07:05:44 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
    + 2008-04-13 18:45:14 60,160 ----a-w c:\windows\system32\drivers\drmk.sys
    - 2004-08-04 07:05:44 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
    + 2008-04-13 18:45:13 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys
    - 2004-08-04 05:00:56 71,040 ----a-w c:\windows\system32\drivers\dxg.sys
    + 2008-04-13 18:38:29 71,168 ----a-w c:\windows\system32\drivers\dxg.sys
    - 2004-08-04 05:14:18 143,360 ----a-w c:\windows\system32\drivers\fastfat.sys
    + 2008-04-13 19:14:29 143,744 ----a-w c:\windows\system32\drivers\fastfat.sys
    - 2004-08-04 04:59:28 27,392 ----a-w c:\windows\system32\drivers\fdc.sys
    + 2008-04-13 18:40:25 27,392 ----a-w c:\windows\system32\drivers\fdc.sys
    - 2001-08-23 13:00:00 34,944 ----a-w c:\windows\system32\drivers\fips.sys
    + 2008-04-13 18:33:28 44,544 ----a-w c:\windows\system32\drivers\fips.sys
    - 2004-08-04 04:59:28 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys
    + 2008-04-13 18:40:25 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys
    - 2004-08-04 05:01:20 124,800 ----a-w c:\windows\system32\drivers\fltMgr.sys
    + 2008-04-13 18:32:59 129,792 ----a-w c:\windows\system32\drivers\fltmgr.sys
    - 2004-08-04 07:05:44 46,464 ----a-w c:\windows\system32\drivers\gagp30kx.sys
    + 2008-04-13 18:36:40 46,464 ----a-w c:\windows\system32\drivers\gagp30kx.sys
    - 2004-08-12 21:45:54 137,728 ----a-w c:\windows\system32\drivers\Hdaudbus.sys
    + 2008-04-13 16:36:05 144,384 ----a-w c:\windows\system32\drivers\hdaudbus.sys
    - 2004-08-04 05:08:20 36,224 ----a-w c:\windows\system32\drivers\hidclass.sys
    + 2008-04-13 18:45:26 36,864 ----a-w c:\windows\system32\drivers\hidclass.sys
    - 2004-08-04 05:08:18 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys
    + 2008-04-13 18:45:22 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys
    - 2001-08-23 13:00:00 9,600 ----a-w c:\windows\system32\drivers\hidusb.sys
    + 2008-04-13 18:45:27 10,368 ----a-w c:\windows\system32\drivers\hidusb.sys
    - 2004-08-04 05:00:14 263,040 ----a-w c:\windows\system32\drivers\http.sys
    + 2008-04-13 18:53:53 264,832 ----a-w c:\windows\system32\drivers\http.sys
    - 2004-08-04 05:14:38 52,736 ----a-w c:\windows\system32\drivers\i8042prt.sys
    + 2008-04-13 19:18:00 52,480 ----a-w c:\windows\system32\drivers\i8042prt.sys
    - 2004-08-04 05:00:16 41,856 ----a-w c:\windows\system32\drivers\imapi.sys
    + 2008-04-13 18:40:58 42,112 ----a-w c:\windows\system32\drivers\imapi.sys
    - 2004-08-04 04:59:20 36,096 ----a-w c:\windows\system32\drivers\intelppm.sys
    + 2008-04-13 18:31:32 36,352 ----a-w c:\windows\system32\drivers\intelppm.sys
    - 2004-08-04 05:00:08 29,056 ----a-w c:\windows\system32\drivers\ip6fw.sys
    + 2008-04-13 18:53:34 36,608 ----a-w c:\windows\system32\drivers\ip6fw.sys
    - 2004-08-04 05:04:46 20,992 ----a-w c:\windows\system32\drivers\ipinip.sys
    + 2008-04-13 18:57:07 20,864 ----a-w c:\windows\system32\drivers\ipinip.sys
    - 2004-08-04 05:04:52 134,912 ----a-w c:\windows\system32\drivers\ipnat.sys
    + 2008-04-13 18:57:15 152,832 ----a-w c:\windows\system32\drivers\ipnat.sys
    - 2004-08-04 05:14:30 74,752 ----a-w c:\windows\system32\drivers\ipsec.sys
    + 2008-04-13 19:19:42 75,264 ----a-w c:\windows\system32\drivers\ipsec.sys
    - 2004-08-04 10:00:00 11,264 ----a-w c:\windows\system32\drivers\irenum.sys
    + 2008-04-13 18:54:28 11,264 ----a-w c:\windows\system32\drivers\irenum.sys
    - 2001-08-23 13:00:00 35,840 ----a-w c:\windows\system32\drivers\isapnp.sys
    + 2008-04-13 18:36:41 37,248 ----a-w c:\windows\system32\drivers\isapnp.sys
    - 2004-08-04 04:58:34 24,576 ----a-w c:\windows\system32\drivers\kbdclass.sys
    + 2008-04-13 18:39:47 24,576 ----a-w c:\windows\system32\drivers\kbdclass.sys
    - 2004-08-04 07:05:44 171,776 ----a-w c:\windows\system32\drivers\kmixer.sys
    + 2008-04-13 18:45:09 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys
    - 2004-08-04 07:05:44 140,928 ----a-w c:\windows\system32\drivers\ks.sys
    + 2008-04-13 19:16:36 141,056 ----a-w c:\windows\system32\drivers\ks.sys
    - 2004-08-04 04:59:48 92,032 ----a-w c:\windows\system32\drivers\ksecdd.sys
    + 2008-04-13 18:31:43 92,288 ----a-w c:\windows\system32\drivers\ksecdd.sys
    - 2004-08-04 07:05:44 63,744 ----a-w c:\windows\system32\drivers\mf.sys
    + 2008-04-13 18:36:41 63,744 ----a-w c:\windows\system32\drivers\mf.sys
    - 2004-08-04 07:05:44 30,080 ----a-w c:\windows\system32\drivers\modem.sys
    + 2008-04-13 19:00:19 30,080 ----a-w c:\windows\system32\drivers\modem.sys
    - 2004-08-04 07:05:44 23,040 ----a-w c:\windows\system32\drivers\mouclass.sys
    + 2008-04-13 18:39:47 23,040 ----a-w c:\windows\system32\drivers\mouclass.sys
    - 2004-08-04 04:58:32 42,240 ----a-w c:\windows\system32\drivers\mountmgr.sys
    + 2008-04-13 18:39:46 42,368 ----a-w c:\windows\system32\drivers\mountmgr.sys
    - 2004-08-04 04:58:22 72,960 ----a-w c:\windows\system32\drivers\mqac.sys
    + 2008-04-13 18:39:44 92,544 ----a-w c:\windows\system32\drivers\mqac.sys
    - 2004-08-04 05:00:58 181,248 ----a-w c:\windows\system32\drivers\mrxdav.sys
    + 2008-04-13 18:32:44 180,608 ----a-w c:\windows\system32\drivers\mrxdav.sys
    - 2004-08-04 05:15:18 451,456 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    - 2004-08-04 05:00:42 19,072 ----a-w c:\windows\system32\drivers\msfs.sys
    + 2008-04-13 18:32:39 19,072 ----a-w c:\windows\system32\drivers\msfs.sys
    - 2004-08-04 05:04:14 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys
    + 2008-04-13 18:56:32 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys
    - 2004-08-04 07:05:44 7,552 ----a-w c:\windows\system32\drivers\mskssrv.sys
    + 2008-04-13 18:39:52 7,552 ----a-w c:\windows\system32\drivers\mskssrv.sys
    - 2004-08-04 07:05:44 5,376 ----a-w c:\windows\system32\drivers\mspclock.sys
    + 2008-04-13 18:39:50 5,376 ----a-w c:\windows\system32\drivers\mspclock.sys
    - 2004-08-04 07:05:44 4,992 ----a-w c:\windows\system32\drivers\mspqm.sys
    + 2008-04-13 18:39:51 4,992 ----a-w c:\windows\system32\drivers\mspqm.sys
    - 2004-08-04 07:05:44 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys
    + 2008-04-13 18:36:46 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys
    + 2004-08-04 03:41:40 126,686 ------w c:\windows\system32\drivers\mtlmnt5.sys
    + 2004-08-04 03:41:38 1,309,184 ------w c:\windows\system32\drivers\mtlstrm.sys
    + 2004-08-04 03:29:38 452,736 ------w c:\windows\system32\drivers\mtxparhm.sys
    - 2004-08-04 05:15:22 107,904 ----a-w c:\windows\system32\drivers\mup.sys
    + 2008-04-13 19:17:05 105,344 ----a-w c:\windows\system32\drivers\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\system32\drivers\mutohpen.sys
    - 2004-08-04 05:14:30 182,912 ----a-w c:\windows\system32\drivers\ndis.sys
    + 2008-04-13 19:20:37 182,656 ----a-w c:\windows\system32\drivers\ndis.sys
    - 2001-08-23 13:00:00 9,600 ----a-w c:\windows\system32\drivers\ndistapi.sys
    + 2008-04-13 18:57:27 10,112 ----a-w c:\windows\system32\drivers\ndistapi.sys
    - 2004-08-04 07:05:44 12,928 ----a-w c:\windows\system32\drivers\ndisuio.sys
    + 2008-04-13 18:55:58 14,592 ----a-w c:\windows\system32\drivers\ndisuio.sys
    - 2004-08-04 05:14:32 91,776 ----a-w c:\windows\system32\drivers\ndiswan.sys
    + 2008-04-13 19:20:42 91,520 ----a-w c:\windows\system32\drivers\ndiswan.sys
    - 2001-08-23 13:00:00 38,016 ----a-w c:\windows\system32\drivers\ndproxy.sys
    + 2008-04-13 18:57:29 40,576 ----a-w c:\windows\system32\drivers\ndproxy.sys
    - 2004-08-04 05:03:22 34,560 ----a-w c:\windows\system32\drivers\netbios.sys
    + 2008-04-13 18:56:02 34,688 ----a-w c:\windows\system32\drivers\netbios.sys
    - 2004-08-04 05:14:38 162,816 ----a-w c:\windows\system32\drivers\netbt.sys
    + 2008-04-13 19:21:00 162,816 ----a-w c:\windows\system32\drivers\netbt.sys
    - 2004-08-04 07:05:44 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys
    + 2008-04-13 18:51:25 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys
    - 2004-08-04 04:59:52 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys
    + 2008-04-13 18:53:09 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys
    - 2004-08-04 05:00:44 30,848 ----a-w c:\windows\system32\drivers\npfs.sys
    + 2008-04-13 18:32:39 30,848 ----a-w c:\windows\system32\drivers\npfs.sys
    - 2004-08-04 05:15:10 574,592 ----a-w c:\windows\system32\drivers\ntfs.sys
    + 2008-04-13 19:15:53 574,976 ----a-w c:\windows\system32\drivers\ntfs.sys
    + 2004-08-04 03:41:40 180,360 ------w c:\windows\system32\drivers\ntmtlfax.sys
    + 2004-08-04 03:29:56 1,897,408 ------w c:\windows\system32\drivers\nv4_mini.sys
    - 2004-08-04 05:03:36 88,448 ----a-w c:\windows\system32\drivers\nwlnkipx.sys
    + 2008-04-13 18:56:06 88,320 ----a-w c:\windows\system32\drivers\nwlnkipx.sys
    - 2004-08-04 05:02:24 163,584 ----a-w c:\windows\system32\drivers\nwrdr.sys
    + 2008-04-13 18:34:12 163,584 ----a-w c:\windows\system32\drivers\nwrdr.sys
    - 2004-08-04 07:05:44 42,496 ----a-w c:\windows\system32\drivers\p3.sys
    + 2008-04-13 18:31:31 42,752 ----a-w c:\windows\system32\drivers\p3.sys
    - 2004-08-04 07:05:44 80,128 ----a-w c:\windows\system32\drivers\parport.sys
    + 2008-04-13 18:40:10 80,128 ----a-w c:\windows\system32\drivers\parport.sys
    - 2001-08-23 13:00:00 18,688 ----a-w c:\windows\system32\drivers\partmgr.sys
    + 2008-04-13 18:40:49 19,712 ----a-w c:\windows\system32\drivers\partmgr.sys
    - 2004-08-04 05:07:48 68,224 ----a-w c:\windows\system32\drivers\pci.sys
    + 2008-04-13 18:36:44 68,224 ----a-w c:\windows\system32\drivers\pci.sys
    - 2004-08-04 04:59:42 25,088 ----a-w c:\windows\system32\drivers\pciidex.sys
    + 2008-04-13 18:40:29 24,960 ----a-w c:\windows\system32\drivers\pciidex.sys
    - 2004-08-04 05:07:48 119,936 ----a-w c:\windows\system32\drivers\pcmcia.sys
    + 2008-04-13 18:36:43 120,192 ----a-w c:\windows\system32\drivers\pcmcia.sys
    - 2004-08-04 07:05:44 145,792 ----a-w c:\windows\system32\drivers\portcls.sys
    + 2008-04-13 19:19:41 146,048 ----a-w c:\windows\system32\drivers\portcls.sys
    - 2004-08-04 07:05:44 35,328 ----a-w c:\windows\system32\drivers\processr.sys
    + 2008-04-13 18:31:30 35,840 ----a-w c:\windows\system32\drivers\processr.sys
    - 2004-08-04 05:04:20 69,120 ----a-w c:\windows\system32\drivers\psched.sys
    + 2008-04-13 18:56:38 69,120 ----a-w c:\windows\system32\drivers\psched.sys
    - 2004-08-04 05:14:24 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys
    + 2008-04-13 19:19:43 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys
    - 2004-08-04 05:05:08 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys
    + 2008-04-13 18:57:32 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys
    - 2004-08-04 05:14:28 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys
    + 2008-04-13 19:19:48 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys
    - 2004-08-04 05:20:08 176,512 ----a-w c:\windows\system32\drivers\rdbss.sys
    + 2008-04-13 19:28:39 175,744 ----a-w c:\windows\system32\drivers\rdbss.sys
    - 2004-08-04 03:01:16 196,864 ----a-w c:\windows\system32\drivers\rdpdr.sys
    + 2008-04-13 18:32:51 196,224 ----a-w c:\windows\system32\drivers\rdpdr.sys
    - 2004-08-04 07:01:10 139,400 ----a-w c:\windows\system32\drivers\rdpwd.sys
    + 2008-04-14 00:13:22 139,656 ----a-w c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-04 03:41:40 13,776 ------w c:\windows\system32\drivers\recagent.sys
    - 2004-08-03 22:59:38 57,472 ----a-w c:\windows\system32\drivers\redbook.sys
    + 2008-04-13 18:40:27 57,600 ----a-w c:\windows\system32\drivers\redbook.sys
    + 2008-04-13 18:46:32 59,136 ------w c:\windows\system32\drivers\rfcomm.sys
    - 2001-08-23 13:00:00 200,064 ----a-w c:\windows\system32\drivers\RMCast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\system32\drivers\rmcast.sys
    - 2004-08-04 05:04:32 30,080 ----a-w c:\windows\system32\drivers\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ----a-w c:\windows\system32\drivers\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\system32\drivers\rndismpx.sys
    + 2004-08-04 03:29:52 166,912 ------w c:\windows\system32\drivers\s3gnbm.sys
    - 2004-08-04 04:59:42 96,256 ----a-w c:\windows\system32\drivers\scsiport.sys
    + 2008-04-13 18:40:30 96,384 ----a-w c:\windows\system32\drivers\scsiport.sys
    - 2004-08-04 05:07:48 67,584 ----a-w c:\windows\system32\drivers\sdbus.sys
    + 2008-04-13 18:36:44 79,232 ----a-w c:\windows\system32\drivers\sdbus.sys
    - 2004-07-17 17:36:38 27,440 ----a-w c:\windows\system32\drivers\secdrv.sys
    + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\system32\drivers\secdrv.sys
    - 2004-08-04 04:59:08 15,488 ----a-w c:\windows\system32\drivers\serenum.sys
    + 2008-04-13 18:40:12 15,744 ----a-w c:\windows\system32\drivers\serenum.sys
    - 2004-08-04 05:15:54 64,896 ----a-w c:\windows\system32\drivers\serial.sys
    + 2008-04-13 19:15:45 64,512 ----a-w c:\windows\system32\drivers\serial.sys
    - 2004-08-04 04:59:56 11,136 ----a-w c:\windows\system32\drivers\sffdisk.sys
    + 2008-04-13 18:40:47 11,904 ----a-w c:\windows\system32\drivers\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\system32\drivers\sffp_mmc.sys
    - 2004-08-04 04:59:56 10,240 ----a-w c:\windows\system32\drivers\sffp_sd.sys
    + 2008-04-13 18:40:47 11,008 ----a-w c:\windows\system32\drivers\sffp_sd.sys
    - 2004-08-04 04:59:56 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-13 18:40:48 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-14 00:12:05 3,901 ------w c:\windows\system32\drivers\siint5.dll
    - 2004-08-04 07:05:44 41,088 ----a-w c:\windows\system32\drivers\sisagp.sys
    + 2008-04-13 18:36:39 40,960 ----a-w c:\windows\system32\drivers\sisagp.sys
    + 2004-08-04 03:41:42 129,535 ------w c:\windows\system32\drivers\slnt7554.sys
    + 2004-08-04 03:41:44 404,990 ------w c:\windows\system32\drivers\slntamr.sys
    + 2004-08-04 03:41:46 95,424 ------w c:\windows\system32\drivers\slnthal.sys
    + 2004-08-04 03:41:46 13,240 ------w c:\windows\system32\drivers\slwdmsup.sys
    + 2008-04-13 18:36:34 5,888 ------w c:\windows\system32\drivers\smbali.sys
    - 2004-08-04 07:05:44 25,472 ----a-w c:\windows\system32\drivers\sonydcam.sys
    + 2008-04-13 18:46:07 25,344 ----a-w c:\windows\system32\drivers\sonydcam.sys
    - 2004-08-04 04:07:48 6,400 ----a-w c:\windows\system32\drivers\splitter.sys
    + 2008-04-13 18:45:07 6,272 ----a-w c:\windows\system32\drivers\splitter.sys
    - 2004-08-04 10:00:00 73,472 ----a-w c:\windows\system32\drivers\sr.sys
    + 2008-04-13 18:36:52 73,472 ----a-w c:\windows\system32\drivers\sr.sys
    - 2004-08-04 05:14:46 336,256 ----a-w c:\windows\system32\drivers\srv.sys
    + 2008-12-11 10:57:09 333,952 ----a-w c:\windows\system32\drivers\srv.sys
    - 2004-08-04 07:05:44 48,640 ----a-w c:\windows\system32\drivers\stream.sys
    + 2008-04-13 18:45:15 49,408 ----a-w c:\windows\system32\drivers\stream.sys
    - 2004-08-04 07:05:44 4,352 ----a-w c:\windows\system32\drivers\swenum.sys
    + 2008-04-13 18:39:53 4,352 ----a-w c:\windows\system32\drivers\swenum.sys
    - 2001-08-23 13:00:00 54,272 ----a-w c:\windows\system32\drivers\swmidi.sys
    + 2008-04-13 18:45:09 56,576 ----a-w c:\windows\system32\drivers\swmidi.sys
    - 2004-08-04 07:05:44 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-13 19:15:55 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys
    - 2004-08-04 05:00:00 14,976 ----a-w c:\windows\system32\drivers\tape.sys
    + 2008-04-13 18:40:50 14,976 ----a-w c:\windows\system32\drivers\tape.sys
    - 2004-08-04 05:14:42 359,040 ----a-w c:\windows\system32\drivers\tcpip.sys
    + 2008-04-13 19:20:16 361,344 ----a-w c:\windows\system32\drivers\tcpip.sys
    - 2004-08-04 05:07:46 223,616 ----a-w c:\windows\system32\drivers\tcpip6.sys
    + 2008-04-13 19:00:02 225,664 ----a-w c:\windows\system32\drivers\tcpip6.sys
    - 2004-08-04 05:07:50 18,560 ----a-w c:\windows\system32\drivers\tdi.sys
    + 2008-04-13 19:00:05 19,072 ----a-w c:\windows\system32\drivers\tdi.sys
    - 2004-08-04 10:00:00 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys
    + 2008-04-14 00:13:20 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys
    - 2004-08-04 10:00:00 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys
    + 2008-04-14 00:13:21 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys
    - 2004-08-04 05:01:08 40,840 ----a-w c:\windows\system32\drivers\termdd.sys
    + 2008-04-14 00:13:20 40,840 ----a-w c:\windows\system32\drivers\termdd.sys
    - 2004-08-04 07:05:44 12,416 ----a-w c:\windows\system32\drivers\tunmp.sys
    + 2008-04-13 18:56:01 12,288 ----a-w c:\windows\system32\drivers\tunmp.sys
    - 2004-08-04 07:05:44 44,672 ----a-w c:\windows\system32\drivers\uagp35.sys
    + 2008-04-13 18:36:40 44,672 ----a-w c:\windows\system32\drivers\uagp35.sys
    - 2004-08-04 05:00:32 66,176 ----a-w c:\windows\system32\drivers\udfs.sys
    + 2008-04-13 18:32:36 66,048 ----a-w c:\windows\system32\drivers\udfs.sys
    - 2004-08-04 04:58:34 209,408 ----a-w c:\windows\system32\drivers\update.sys
    + 2008-04-13 18:39:46 384,768 ----a-w c:\windows\system32\drivers\update.sys
    - 2004-08-04 05:04:34 12,672 ----a-w c:\windows\system32\drivers\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ----a-w c:\windows\system32\drivers\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\system32\drivers\usb8023x.sys
    - 2001-08-23 13:00:00 23,808 ----a-w c:\windows\system32\drivers\usbcamd.sys
    + 2008-04-13 18:45:40 25,600 ----a-w c:\windows\system32\drivers\usbcamd.sys
    - 2001-08-23 13:00:00 23,936 ----a-w c:\windows\system32\drivers\usbcamd2.sys
    + 2008-04-13 18:45:41 25,728 ----a-w c:\windows\system32\drivers\usbcamd2.sys
    - 2004-08-04 05:08:48 31,616 ----a-w c:\windows\system32\drivers\usbccgp.sys
    + 2008-04-13 18:45:39 32,128 ----a-w c:\windows\system32\drivers\usbccgp.sys
    - 2004-08-04 05:08:38 26,624 ----a-w c:\windows\system32\drivers\usbehci.sys
    + 2008-04-13 18:45:35 30,208 ----a-w c:\windows\system32\drivers\usbehci.sys
    - 2004-08-04 05:08:44 57,600 ----a-w c:\windows\system32\drivers\usbhub.sys
    + 2008-04-13 18:45:37 59,520 ----a-w c:\windows\system32\drivers\usbhub.sys
    - 2004-08-04 07:05:44 16,000 ----a-w c:\windows\system32\drivers\usbintel.sys
    + 2008-04-13 18:45:43 15,872 ----a-w c:\windows\system32\drivers\usbintel.sys
    - 2004-08-04 05:08:44 142,976 ----a-w c:\windows\system32\drivers\usbport.sys
    + 2008-04-13 18:45:36 143,872 ----a-w c:\windows\system32\drivers\usbport.sys
    - 2004-08-04 04:01:26 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
    + 2008-04-13 18:47:37 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys
    - 2004-08-04 02:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
    + 2008-04-13 18:45:34 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys
    - 2004-08-04 05:08:48 26,496 ----a-w c:\windows\system32\drivers\usbstor.sys
    + 2008-04-13 18:45:38 26,368 ----a-w c:\windows\system32\drivers\usbstor.sys
    - 2004-08-04 05:08:38 20,480 ----a-w c:\windows\system32\drivers\usbuhci.sys
    + 2008-04-13 18:45:35 20,608 ----a-w c:\windows\system32\drivers\usbuhci.sys
    + 2008-04-13 18:46:20 121,984 ------w c:\windows\system32\drivers\usbvideo.sys
    + 2008-04-14 00:12:08 11,325 ------w c:\windows\system32\drivers\vchnt5.dll
    - 2004-08-04 05:07:08 20,992 ----a-w c:\windows\system32\drivers\vga.sys
    + 2008-04-13 18:44:40 20,992 ----a-w c:\windows\system32\drivers\vga.sys
    - 2004-08-04 07:05:44 42,240 ----a-w c:\windows\system32\drivers\viaagp.sys
    + 2008-04-13 18:36:40 42,240 ----a-w c:\windows\system32\drivers\viaagp.sys
    - 2004-08-04 05:07:06 79,744 ----a-w c:\windows\system32\drivers\videoprt.sys
    + 2008-04-13 18:44:40 81,664 ----a-w c:\windows\system32\drivers\videoprt.sys
     
    scorpion657,
    #14
  16. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    - 2004-08-04 05:00:18 52,352 ----a-w c:\windows\system32\drivers\volsnap.sys
    + 2008-04-13 18:41:01 52,352 ----a-w c:\windows\system32\drivers\volsnap.sys
    + 2008-04-13 18:43:55 14,208 ------w c:\windows\system32\drivers\wacompen.sys
    + 2004-08-04 03:29:40 11,807 ------w c:\windows\system32\drivers\wadv07nt.sys
    + 2004-08-04 03:29:40 11,295 ------w c:\windows\system32\drivers\wadv08nt.sys
    + 2004-08-04 03:29:42 11,871 ------w c:\windows\system32\drivers\wadv09nt.sys
    + 2004-08-04 03:29:42 11,935 ------w c:\windows\system32\drivers\wadv11nt.sys
    - 2004-08-04 05:04:58 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys
    + 2008-04-13 18:57:21 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys
    + 2004-08-04 03:29:46 22,271 ------w c:\windows\system32\drivers\watv06nt.sys
    + 2004-08-04 03:29:46 25,471 ------w c:\windows\system32\drivers\watv10nt.sys
    - 2004-08-04 07:05:44 82,944 ----a-w c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-13 19:17:18 83,072 ----a-w c:\windows\system32\drivers\wdmaud.sys
    - 2004-08-04 07:05:44 8,832 ----a-w c:\windows\system32\drivers\wmiacpi.sys
    + 2008-04-13 18:36:38 8,832 ----a-w c:\windows\system32\drivers\wmiacpi.sys
    - 2004-08-04 06:57:06 299,520 ----a-w c:\windows\system32\drmclien.dll
    + 2008-04-14 00:13:00 299,520 ----a-w c:\windows\system32\drmclien.dll
    - 2004-08-04 06:56:44 87,040 ----a-w c:\windows\system32\drmstor.dll
    + 2008-04-14 00:11:52 87,040 ----a-w c:\windows\system32\drmstor.dll
    - 2004-08-04 06:57:04 695,296 ----a-w c:\windows\system32\drmv2clt.dll
    + 2008-04-14 00:12:57 695,808 ----a-w c:\windows\system32\drmv2clt.dll
    - 2004-08-04 06:56:44 14,336 ----a-w c:\windows\system32\drprov.dll
    + 2008-04-14 00:11:52 14,336 ----a-w c:\windows\system32\drprov.dll
    - 2004-08-04 06:56:44 16,384 ----a-w c:\windows\system32\ds32gt.dll
    + 2008-04-14 00:11:52 16,384 ----a-w c:\windows\system32\ds32gt.dll
    - 2004-08-04 06:56:44 181,760 ----a-w c:\windows\system32\dsdmo.dll
    + 2008-04-14 00:11:52 181,248 ----a-w c:\windows\system32\dsdmo.dll
    - 2004-08-04 06:56:44 71,680 ----a-w c:\windows\system32\dsdmoprp.dll
    + 2008-04-14 00:11:52 71,680 ----a-w c:\windows\system32\dsdmoprp.dll
    - 2004-08-04 06:56:44 92,672 ----a-w c:\windows\system32\dskquota.dll
    + 2008-04-14 00:11:52 92,672 ----a-w c:\windows\system32\dskquota.dll
    - 2001-08-23 13:00:00 144,384 ----a-w c:\windows\system32\dskquoui.dll
    + 2008-04-14 00:11:52 155,648 ----a-w c:\windows\system32\dskquoui.dll
    - 2004-08-04 06:56:44 367,616 ----a-w c:\windows\system32\dsound.dll
    + 2008-04-14 00:11:52 367,616 ----a-w c:\windows\system32\dsound.dll
    - 2004-08-04 06:56:44 1,294,336 ----a-w c:\windows\system32\dsound3d.dll
    + 2008-04-14 00:11:52 1,293,824 ----a-w c:\windows\system32\dsound3d.dll
    - 2004-08-04 06:56:44 142,336 ----a-w c:\windows\system32\dsprop.dll
    + 2008-04-14 00:11:52 142,848 ----a-w c:\windows\system32\dsprop.dll
    - 2004-08-04 06:56:06 4,096 ----a-w c:\windows\system32\dsprpres.dll
    + 2008-04-13 17:09:30 4,096 ----a-w c:\windows\system32\dsprpres.dll
    - 2004-08-04 06:56:44 239,104 ----a-w c:\windows\system32\dsquery.dll
    + 2008-04-14 00:11:52 239,104 ----a-w c:\windows\system32\dsquery.dll
    - 2004-08-04 06:56:44 51,200 ----a-w c:\windows\system32\dssec.dll
    + 2008-04-14 00:11:52 51,200 ----a-w c:\windows\system32\dssec.dll
    - 2004-08-04 04:31:44 137,216 ----a-w c:\windows\system32\dssenh.dll
    + 2008-04-13 17:37:57 138,752 ----a-w c:\windows\system32\dssenh.dll
    - 2004-08-04 06:56:44 113,152 ----a-w c:\windows\system32\dsuiext.dll
    + 2008-04-14 00:11:52 113,152 ----a-w c:\windows\system32\dsuiext.dll
    - 2004-08-04 06:56:44 19,456 ----a-w c:\windows\system32\dswave.dll
    + 2008-04-14 00:11:52 19,456 ----a-w c:\windows\system32\dswave.dll
    - 2004-08-04 06:56:50 10,752 ----a-w c:\windows\system32\dumprep.exe
    + 2008-04-14 00:12:18 10,752 ----a-w c:\windows\system32\dumprep.exe
    - 2004-08-04 06:56:44 304,128 ----a-w c:\windows\system32\duser.dll
    + 2008-04-14 00:11:52 304,128 ----a-w c:\windows\system32\duser.dll
    - 2004-08-04 06:56:50 17,920 ----a-w c:\windows\system32\dvdupgrd.exe
    + 2008-04-14 00:12:18 17,920 ----a-w c:\windows\system32\dvdupgrd.exe
    - 2004-08-04 06:56:50 180,224 ----a-w c:\windows\system32\dwwin.exe
    + 2008-04-14 00:12:18 180,224 ----a-w c:\windows\system32\dwwin.exe
    - 2004-08-04 06:56:44 619,008 ----a-w c:\windows\system32\dx7vb.dll
    + 2008-04-14 00:11:52 619,008 ----a-w c:\windows\system32\dx7vb.dll
    - 2004-08-04 06:56:44 1,227,264 ----a-w c:\windows\system32\dx8vb.dll
    + 2008-04-14 00:11:52 1,227,264 ----a-w c:\windows\system32\dx8vb.dll
    - 2004-08-04 06:56:50 1,298,432 ----a-w c:\windows\system32\dxdiag.exe
    + 2008-04-14 00:12:18 1,298,432 ----a-w c:\windows\system32\dxdiag.exe
    - 2004-08-04 06:56:44 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll
    + 2008-04-14 00:11:52 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll
    - 2004-08-04 06:56:44 498,205 ----a-w c:\windows\system32\dxmasf.dll
    + 2008-04-14 00:11:52 498,742 ----a-w c:\windows\system32\dxmasf.dll
    - 2004-08-04 06:56:44 357,888 ----a-w c:\windows\system32\dxtmsft.dll
    + 2008-04-14 00:11:52 357,888 ----a-w c:\windows\system32\dxtmsft.dll
    - 2004-08-04 06:56:44 201,728 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-04-14 00:11:52 205,312 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\system32\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\system32\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\system32\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\system32\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\system32\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\system32\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\system32\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\system32\eapsvc.dll
    - 2004-08-04 06:56:44 26,624 ----a-w c:\windows\system32\efsadu.dll
    + 2008-04-14 00:11:52 26,624 ----a-w c:\windows\system32\efsadu.dll
    - 2004-08-04 06:56:44 183,296 ----a-w c:\windows\system32\els.dll
    + 2008-04-14 00:11:53 183,296 ----a-w c:\windows\system32\els.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\system32\en\microsoft.managementconsole.resources.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\system32\en\mmcex.resources.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\system32\en\mmcfxcommon.resources.dll
    - 2004-08-04 06:56:44 20,480 ----a-w c:\windows\system32\encapi.dll
    + 2008-04-14 00:11:53 20,480 ----a-w c:\windows\system32\encapi.dll
    - 2004-08-04 06:56:44 186,368 ----a-w c:\windows\system32\encdec.dll
    + 2008-04-14 00:11:53 186,880 ----a-w c:\windows\system32\encdec.dll
    - 2004-08-04 06:56:44 23,040 ----a-w c:\windows\system32\ersvc.dll
    + 2008-04-14 00:11:53 23,040 ----a-w c:\windows\system32\ersvc.dll
    - 2004-08-04 06:56:44 243,200 ----a-w c:\windows\system32\es.dll
    + 2008-04-14 00:11:53 246,272 ----a-w c:\windows\system32\es.dll
    - 2004-08-04 06:56:44 1,082,368 ----a-w c:\windows\system32\esent.dll
    + 2008-04-14 00:11:53 1,082,368 ----a-w c:\windows\system32\esent.dll
    - 2004-08-04 06:56:50 193,024 ----a-w c:\windows\system32\eudcedit.exe
    + 2008-04-14 00:12:19 193,024 ----a-w c:\windows\system32\eudcedit.exe
    - 2004-08-04 06:56:50 50,176 ----a-w c:\windows\system32\eventcreate.exe
    + 2008-04-14 00:12:19 50,688 ----a-w c:\windows\system32\eventcreate.exe
    - 2004-08-04 06:56:44 55,808 ----a-w c:\windows\system32\eventlog.dll
    + 2008-04-14 00:11:53 56,320 ----a-w c:\windows\system32\eventlog.dll
    - 2001-08-23 13:00:00 77,824 ----a-w c:\windows\system32\eventtriggers.exe
    + 2008-04-14 00:12:19 82,944 ----a-w c:\windows\system32\eventtriggers.exe
    - 2004-08-04 06:56:44 380,957 ----a-w c:\windows\system32\expsrv.dll
    + 2008-04-14 00:11:53 380,445 ----a-w c:\windows\system32\expsrv.dll
    - 2004-08-04 06:56:44 55,808 ----a-w c:\windows\system32\extmgr.dll
    + 2008-04-14 00:11:53 55,808 ----a-w c:\windows\system32\extmgr.dll
    - 2004-08-04 06:56:50 45,568 ----a-w c:\windows\system32\extrac32.exe
    + 2008-04-14 00:12:19 24,064 ----a-w c:\windows\system32\extrac32.exe
    - 2001-08-23 13:00:00 121,856 ----a-w c:\windows\system32\exts.dll
    + 2008-04-14 00:11:53 125,952 ----a-w c:\windows\system32\exts.dll
    - 2004-08-04 06:56:44 80,384 ----a-w c:\windows\system32\faultrep.dll
    + 2008-04-14 00:11:53 80,384 ----a-w c:\windows\system32\faultrep.dll
    - 2004-08-04 07:56:49 20,992 ----a-w c:\windows\system32\faxpatch.exe
    + 2008-04-14 00:12:20 20,992 ----a-w c:\windows\system32\faxpatch.exe
    - 2001-08-23 13:00:00 117,760 ----a-w c:\windows\system32\fde.dll
    + 2008-04-14 00:11:53 124,928 ----a-w c:\windows\system32\fde.dll
    - 2004-08-04 06:56:44 73,728 ----a-w c:\windows\system32\fdeploy.dll
    + 2008-04-14 00:11:53 73,728 ----a-w c:\windows\system32\fdeploy.dll
    - 2004-08-04 06:56:44 21,504 ----a-w c:\windows\system32\feclient.dll
    + 2008-04-14 00:11:53 21,504 ----a-w c:\windows\system32\feclient.dll
    - 2004-08-04 06:56:44 337,920 ----a-w c:\windows\system32\filemgmt.dll
    + 2008-04-14 00:11:53 337,920 ----a-w c:\windows\system32\filemgmt.dll
    - 2004-08-04 07:56:49 27,136 ----a-w c:\windows\system32\findstr.exe
    + 2008-04-14 00:12:20 27,136 ----a-w c:\windows\system32\findstr.exe
    - 2004-08-04 06:56:44 87,552 ----a-w c:\windows\system32\fldrclnr.dll
    + 2008-04-14 00:11:53 87,552 ----a-w c:\windows\system32\fldrclnr.dll
    - 2004-08-04 06:56:44 16,896 ----a-w c:\windows\system32\fltlib.dll
    + 2008-04-14 00:11:53 16,896 ----a-w c:\windows\system32\fltlib.dll
    - 2004-08-04 06:56:50 22,528 ----a-w c:\windows\system32\fltMc.exe
    + 2008-04-14 00:12:20 23,040 ----a-w c:\windows\system32\fltmc.exe
    - 2009-02-17 20:29:31 249,496 ----a-w c:\windows\system32\FNTCACHE.DAT
    + 2009-02-18 14:15:01 250,288 ----a-w c:\windows\system32\FNTCACHE.DAT
    - 2004-08-04 06:56:44 382,976 ----a-w c:\windows\system32\fontext.dll
    + 2008-04-14 00:11:53 382,976 ----a-w c:\windows\system32\fontext.dll
    - 2001-08-23 13:00:00 79,360 ----a-w c:\windows\system32\fontsub.dll
    + 2008-04-14 00:11:53 80,896 ----a-w c:\windows\system32\fontsub.dll
    - 2004-08-04 06:56:50 20,992 ----a-w c:\windows\system32\fontview.exe
    + 2008-04-14 00:12:20 20,992 ----a-w c:\windows\system32\fontview.exe
    - 2001-08-23 12:00:00 7,168 ----a-w c:\windows\system32\forcedos.exe
    + 2008-04-14 00:12:20 7,680 ----a-w c:\windows\system32\forcedos.exe
    - 2001-08-23 13:00:00 25,600 ----a-w c:\windows\system32\format.com
    + 2008-04-14 00:12:42 29,696 ----a-w c:\windows\system32\format.com
    - 2004-08-04 06:56:08 9,344 ----a-w c:\windows\system32\framebuf.dll
    + 2008-04-14 00:09:33 9,344 ----a-w c:\windows\system32\framebuf.dll
    - 2004-08-04 06:56:50 193,024 ----a-w c:\windows\system32\fsquirt.exe
    + 2008-04-14 00:12:20 193,024 ----a-w c:\windows\system32\fsquirt.exe
    - 2004-08-04 06:56:50 42,496 ----a-w c:\windows\system32\ftp.exe
    + 2008-04-14 00:12:20 42,496 ----a-w c:\windows\system32\ftp.exe
    - 2004-08-04 06:56:44 60,416 ----a-w c:\windows\system32\fwcfg.dll
    + 2008-04-14 00:11:53 60,416 ----a-w c:\windows\system32\fwcfg.dll
    - 2004-08-04 06:56:44 278,016 ----a-w c:\windows\system32\gdi32.dll
    + 2008-04-14 00:11:54 285,184 ----a-w c:\windows\system32\gdi32.dll
    - 2001-08-23 13:00:00 55,296 ----a-w c:\windows\system32\getmac.exe
    + 2008-04-14 00:12:21 59,904 ----a-w c:\windows\system32\getmac.exe
    - 2004-08-04 06:56:44 122,880 ----a-w c:\windows\system32\glu32.dll
    + 2008-04-14 00:11:54 122,880 ----a-w c:\windows\system32\glu32.dll
    - 2004-08-04 06:56:08 566,784 ----a-w c:\windows\system32\gpedit.dll
    + 2008-04-14 00:09:35 566,784 ----a-w c:\windows\system32\gpedit.dll
    - 2004-08-04 06:56:08 9,728 ----a-w c:\windows\system32\gpkrsrc.dll
    + 2006-12-31 01:26:44 9,728 ----a-w c:\windows\system32\gpkrsrc.dll
    - 2004-08-04 06:56:50 119,808 ----a-w c:\windows\system32\gpresult.exe
    + 2008-04-14 00:12:21 120,832 ----a-w c:\windows\system32\gpresult.exe
    - 2004-08-04 06:56:44 198,656 ----a-w c:\windows\system32\gptext.dll
    + 2008-04-14 00:11:54 199,680 ----a-w c:\windows\system32\gptext.dll
    - 2004-08-04 06:56:50 39,424 ----a-w c:\windows\system32\grpconv.exe
    + 2008-04-14 00:12:21 39,424 ----a-w c:\windows\system32\grpconv.exe
    - 2004-08-04 06:56:44 614,912 ----a-w c:\windows\system32\h323msp.dll
    + 2008-04-14 00:11:54 614,912 ----a-w c:\windows\system32\h323msp.dll
    - 2004-08-04 04:59:14 134,400 ----a-w c:\windows\system32\hal.dll
    + 2008-04-13 18:31:28 134,400 ----a-w c:\windows\system32\HAL.DLL
    - 2004-08-04 06:56:44 7,168 ----a-w c:\windows\system32\hccoin.dll
    + 2008-04-14 00:11:54 7,168 ----a-w c:\windows\system32\hccoin.dll
    - 2001-08-23 12:00:00 14,848 ----a-w c:\windows\system32\help.exe
    + 2008-04-14 00:12:21 15,872 ----a-w c:\windows\system32\help.exe
    - 2004-08-04 06:56:44 38,912 ----a-w c:\windows\system32\hhsetup.dll
    + 2008-04-14 00:11:54 41,472 ----a-w c:\windows\system32\hhsetup.dll
    - 2004-08-04 07:05:44 20,992 ----a-w c:\windows\system32\hid.dll
    + 2008-04-14 00:11:54 20,992 ----a-w c:\windows\system32\hid.dll
    - 2001-08-23 13:00:00 77,850 ----a-w c:\windows\system32\hlink.dll
    + 2008-04-14 00:11:54 72,704 ----a-w c:\windows\system32\hlink.dll
    - 2004-08-04 06:56:44 344,064 ----a-w c:\windows\system32\hnetcfg.dll
    + 2008-04-14 00:11:54 344,064 ----a-w c:\windows\system32\hnetcfg.dll
    - 2004-08-04 06:56:44 330,752 ----a-w c:\windows\system32\hnetwiz.dll
    + 2008-04-14 00:11:54 330,752 ----a-w c:\windows\system32\hnetwiz.dll
    - 2004-08-04 06:56:44 144,896 ----a-w c:\windows\system32\hotplug.dll
    + 2008-04-14 00:11:54 144,896 ----a-w c:\windows\system32\hotplug.dll
    - 2004-08-04 06:56:44 24,576 ----a-w c:\windows\system32\httpapi.dll
    + 2008-04-14 00:11:54 24,576 ----a-w c:\windows\system32\httpapi.dll
    - 2004-08-04 06:56:44 41,984 ----a-w c:\windows\system32\htui.dll
    + 2008-04-14 00:11:54 41,984 ----a-w c:\windows\system32\htui.dll
    - 2004-08-04 06:56:44 345,088 ----a-w c:\windows\system32\hypertrm.dll
    + 2008-04-14 00:11:54 347,136 ----a-w c:\windows\system32\hypertrm.dll
    - 2004-08-04 06:56:44 119,808 ----a-w c:\windows\system32\iasrad.dll
    + 2008-04-14 00:11:54 119,808 ----a-w c:\windows\system32\iasrad.dll
    - 2004-08-04 10:00:00 11,264 ----a-w c:\windows\system32\icaapi.dll
    + 2008-04-14 00:11:54 11,264 ----a-w c:\windows\system32\icaapi.dll
    - 2004-08-04 06:56:44 80,384 ----a-w c:\windows\system32\iccvid.dll
    + 2008-04-14 00:11:54 80,384 ----a-w c:\windows\system32\iccvid.dll
    - 2004-08-04 06:56:44 253,952 ----a-w c:\windows\system32\icm32.dll
    + 2008-04-14 00:11:54 254,976 ----a-w c:\windows\system32\icm32.dll
    - 2004-08-04 06:56:08 3,584 ----a-w c:\windows\system32\icmp.dll
    + 2008-04-14 00:09:40 3,584 ----a-w c:\windows\system32\icmp.dll
    - 2004-08-04 10:00:00 73,728 ----a-w c:\windows\system32\icwdial.dll
    + 2008-04-14 00:11:54 73,728 ----a-w c:\windows\system32\icwdial.dll
    - 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\icwphbk.dll
    + 2008-04-14 00:11:54 65,536 ----a-w c:\windows\system32\icwphbk.dll
    - 2004-08-04 06:56:44 120,832 ----a-w c:\windows\system32\idq.dll
    + 2008-04-14 00:11:54 120,832 ----a-w c:\windows\system32\idq.dll
    - 2004-08-04 06:56:52 34,304 ----a-w c:\windows\system32\ie4uinit.exe
    + 2008-04-14 00:12:22 34,304 ----a-w c:\windows\system32\ie4uinit.exe
    - 2004-08-04 06:56:44 139,264 ----a-w c:\windows\system32\ieakeng.dll
    + 2008-04-14 00:11:54 143,360 ----a-w c:\windows\system32\ieakeng.dll
    - 2004-08-04 06:56:44 216,576 ----a-w c:\windows\system32\ieaksie.dll
    + 2008-04-14 00:11:54 216,576 ----a-w c:\windows\system32\ieaksie.dll
    - 2004-08-04 06:56:44 323,584 ----a-w c:\windows\system32\iedkcs32.dll
    + 2008-04-14 00:11:54 323,584 ----a-w c:\windows\system32\iedkcs32.dll
    - 2004-08-04 06:56:44 81,920 ----a-w c:\windows\system32\ieencode.dll
    + 2008-04-14 00:11:54 81,920 ----a-w c:\windows\system32\ieencode.dll
    - 2004-08-04 06:56:44 249,344 ----a-w c:\windows\system32\iepeers.dll
    + 2008-04-14 00:11:54 251,904 ----a-w c:\windows\system32\iepeers.dll
    - 2004-08-04 06:56:44 48,640 ----a-w c:\windows\system32\iernonce.dll
    + 2008-04-14 00:11:54 48,640 ----a-w c:\windows\system32\iernonce.dll
    - 2004-08-04 06:56:44 62,976 ----a-w c:\windows\system32\iesetup.dll
    + 2008-04-14 00:11:54 62,976 ----a-w c:\windows\system32\iesetup.dll
    - 2004-08-04 06:56:52 114,688 ----a-w c:\windows\system32\iexpress.exe
    + 2008-04-14 00:12:22 114,688 ----a-w c:\windows\system32\iexpress.exe
    - 2004-08-04 06:56:44 135,680 ----a-w c:\windows\system32\ifmon.dll
    + 2008-04-14 00:11:54 135,680 ----a-w c:\windows\system32\ifmon.dll
    - 2004-08-04 06:56:44 8,192 ----a-w c:\windows\system32\igmpagnt.dll
    + 2008-04-14 00:11:54 8,192 ----a-w c:\windows\system32\igmpagnt.dll
    - 2004-08-04 10:00:00 81,920 ----a-w c:\windows\system32\ils.dll
    + 2008-04-14 00:11:54 81,920 ----a-w c:\windows\system32\ils.dll
    - 2004-08-04 06:56:44 144,384 ----a-w c:\windows\system32\imagehlp.dll
    + 2008-04-14 00:11:54 144,384 ----a-w c:\windows\system32\imagehlp.dll
    - 2004-08-04 06:56:52 150,016 ----a-w c:\windows\system32\imapi.exe
    + 2008-04-14 00:12:22 150,528 ----a-w c:\windows\system32\imapi.exe
    - 2004-08-04 06:56:44 36,921 ----a-w c:\windows\system32\imeshare.dll
    + 2008-04-14 00:11:54 36,921 ----a-w c:\windows\system32\imeshare.dll
    - 2004-08-04 06:56:44 35,840 ----a-w c:\windows\system32\imgutil.dll
    + 2008-04-14 00:11:54 35,840 ----a-w c:\windows\system32\imgutil.dll
    - 2004-08-04 06:56:44 110,080 ----a-w c:\windows\system32\imm32.dll
    + 2008-04-14 00:11:54 110,080 ----a-w c:\windows\system32\imm32.dll
    - 2004-08-04 10:00:00 274,432 ----a-w c:\windows\system32\inetcfg.dll
    + 2008-04-14 00:11:54 274,432 ----a-w c:\windows\system32\inetcfg.dll
    - 2004-08-04 06:56:44 678,400 ----a-w c:\windows\system32\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ----a-w c:\windows\system32\inetcomm.dll
    - 2004-08-04 06:56:44 33,280 ----a-w c:\windows\system32\inetmib1.dll
    + 2008-04-14 00:11:55 32,768 ----a-w c:\windows\system32\inetmib1.dll
    - 2004-08-04 06:56:44 75,264 ----a-w c:\windows\system32\inetpp.dll
    + 2008-04-14 00:11:55 75,264 ----a-w c:\windows\system32\inetpp.dll
    - 2004-08-04 06:56:44 15,872 ----a-w c:\windows\system32\inetppui.dll
    + 2008-04-14 00:11:55 15,872 ----a-w c:\windows\system32\inetppui.dll
    - 2004-08-04 10:00:00 48,128 ----a-w c:\windows\system32\inetres.dll
    + 2008-04-13 16:22:12 48,128 ----a-w c:\windows\system32\inetres.dll
    + 2008-04-14 00:12:05 221,696 ------w c:\windows\system32\inetsrv\seo.dll
    + 2008-04-14 00:12:06 189,440 ------w c:\windows\system32\inetsrv\smtpadm.dll
    + 2008-04-14 00:12:06 2,134,528 ------w c:\windows\system32\inetsrv\smtpsnap.dll
    - 2004-08-04 06:56:44 147,456 ----a-w c:\windows\system32\initpki.dll
    + 2008-04-14 00:11:55 147,456 ----a-w c:\windows\system32\initpki.dll
    - 2004-08-04 06:56:44 123,392 ----a-w c:\windows\system32\input.dll
    + 2008-04-14 00:11:55 123,392 ----a-w c:\windows\system32\input.dll
    - 2004-08-04 06:56:44 96,256 ----a-w c:\windows\system32\inseng.dll
    + 2008-04-14 00:11:55 96,256 ----a-w c:\windows\system32\inseng.dll
    - 2004-08-04 06:56:52 55,808 ----a-w c:\windows\system32\ipconfig.exe
    + 2008-04-14 00:12:22 55,808 ----a-w c:\windows\system32\ipconfig.exe
    - 2004-08-04 06:56:44 94,720 ----a-w c:\windows\system32\iphlpapi.dll
    + 2008-04-14 00:11:55 94,720 ----a-w c:\windows\system32\iphlpapi.dll
    - 2001-08-23 13:00:00 154,112 ----a-w c:\windows\system32\ipmontr.dll
    + 2008-04-14 00:11:55 161,280 ----a-w c:\windows\system32\ipmontr.dll
    - 2004-08-04 06:56:44 331,264 ----a-w c:\windows\system32\ipnathlp.dll
    + 2008-04-14 00:11:55 331,264 ----a-w c:\windows\system32\ipnathlp.dll
    - 2004-08-04 06:56:44 330,752 ----a-w c:\windows\system32\ippromon.dll
    + 2008-04-14 00:11:55 330,752 ----a-w c:\windows\system32\ippromon.dll
    - 2001-08-23 13:00:00 169,984 ----a-w c:\windows\system32\iprtrmgr.dll
    + 2008-04-14 00:11:55 177,152 ----a-w c:\windows\system32\iprtrmgr.dll
    - 2004-08-04 06:56:44 349,696 ----a-w c:\windows\system32\ipsecsnp.dll
    + 2008-04-14 00:11:55 349,696 ----a-w c:\windows\system32\ipsecsnp.dll
    - 2004-08-04 06:56:44 182,784 ----a-w c:\windows\system32\ipsecsvc.dll
    + 2008-04-14 00:11:55 183,808 ----a-w c:\windows\system32\ipsecsvc.dll
    - 2004-08-04 06:56:44 384,000 ----a-w c:\windows\system32\ipsmsnap.dll
    + 2008-04-14 00:11:55 384,000 ----a-w c:\windows\system32\ipsmsnap.dll
    - 2004-08-04 06:56:52 53,248 ----a-w c:\windows\system32\ipv6.exe
    + 2008-04-14 00:12:23 53,248 ----a-w c:\windows\system32\ipv6.exe
    - 2004-08-04 06:56:44 59,904 ----a-w c:\windows\system32\ipv6mon.dll
    + 2008-04-14 00:11:55 59,904 ----a-w c:\windows\system32\ipv6mon.dll
    - 2004-08-04 06:56:52 23,552 ----a-w c:\windows\system32\ipxroute.exe
    + 2008-04-14 00:12:23 23,552 ----a-w c:\windows\system32\ipxroute.exe
    - 2001-08-23 13:00:00 20,992 ----a-w c:\windows\system32\ipxwan.dll
    + 2008-04-14 00:11:55 22,016 ----a-w c:\windows\system32\ipxwan.dll
    - 2004-08-04 06:56:44 120,320 ----a-w c:\windows\system32\ir41_qc.dll
    + 2008-04-14 00:11:55 120,320 ----a-w c:\windows\system32\ir41_qc.dll
    - 2004-08-04 06:56:44 338,432 ----a-w c:\windows\system32\ir41_qcx.dll
    + 2008-04-14 00:11:55 338,432 ----a-w c:\windows\system32\ir41_qcx.dll
    - 2004-08-04 06:56:44 755,200 ----a-w c:\windows\system32\ir50_32.dll
    + 2008-04-14 00:11:55 755,200 ----a-w c:\windows\system32\ir50_32.dll
    - 2004-08-04 06:56:44 200,192 ----a-w c:\windows\system32\ir50_qc.dll
    + 2008-04-14 00:11:55 200,192 ----a-w c:\windows\system32\ir50_qc.dll
    - 2004-08-04 06:56:44 183,808 ----a-w c:\windows\system32\ir50_qcx.dll
    + 2008-04-14 00:11:55 183,808 ----a-w c:\windows\system32\ir50_qcx.dll
    - 2004-08-04 10:00:00 81,920 ----a-w c:\windows\system32\isign32.dll
    + 2008-04-14 00:11:55 81,920 ----a-w c:\windows\system32\isign32.dll
    - 2004-08-04 10:00:00 32,768 ----a-w c:\windows\system32\isrdbg32.dll
    + 2008-04-14 00:11:55 32,768 ----a-w c:\windows\system32\isrdbg32.dll
    - 2004-08-04 06:56:44 143,872 ----a-w c:\windows\system32\itircl.dll
    + 2008-04-14 00:11:55 155,136 ----a-w c:\windows\system32\itircl.dll
    - 2004-08-04 06:56:44 134,144 ----a-w c:\windows\system32\itss.dll
    + 2008-04-14 00:11:55 138,240 ----a-w c:\windows\system32\itss.dll
    - 2004-08-04 06:56:44 192,000 ----a-w c:\windows\system32\iuengine.dll
    + 2008-04-14 00:11:55 191,488 ----a-w c:\windows\system32\iuengine.dll
    - 2004-08-04 06:56:44 54,272 ----a-w c:\windows\system32\ixsso.dll
    + 2008-04-14 00:11:55 54,272 ----a-w c:\windows\system32\ixsso.dll
    - 2004-08-04 07:05:44 47,616 ----a-w c:\windows\system32\iyuv_32.dll
    + 2008-04-14 00:11:55 47,616 ----a-w c:\windows\system32\iyuv_32.dll
    - 2001-08-23 13:00:00 144,896 ----a-w c:\windows\system32\jgdw400.dll
    + 2008-04-14 00:11:55 163,840 ----a-w c:\windows\system32\jgdw400.dll
    - 2001-08-23 13:00:00 42,496 ----a-w c:\windows\system32\jgpl400.dll
    + 2008-04-14 00:11:55 27,648 ----a-w c:\windows\system32\jgpl400.dll
    - 2004-08-04 06:56:44 450,560 ----a-w c:\windows\system32\jscript.dll
    + 2008-04-14 00:11:56 512,000 ----a-w c:\windows\system32\jscript.dll
    - 2004-08-04 06:56:44 15,872 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-04-14 00:11:56 15,872 ----a-w c:\windows\system32\jsproxy.dll
    - 2004-08-04 06:56:12 7,168 ----a-w c:\windows\system32\kbdfi1.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\system32\kbdfi1.dll
    - 2004-08-04 06:56:12 6,144 ----a-w c:\windows\system32\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\system32\kbdinbe1.dll
    - 2004-08-04 06:56:12 6,656 ----a-w c:\windows\system32\kbdinben.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\system32\kbdinben.dll
    - 2004-08-04 06:56:12 6,656 ----a-w c:\windows\system32\kbdinmal.dll
    + 2008-04-14 00:09:55 6,656 ----a-w c:\windows\system32\kbdinmal.dll
    - 2004-08-04 06:56:12 5,632 ----a-w c:\windows\system32\kbdmaori.dll
    + 2008-04-14 00:09:55 5,632 ----a-w c:\windows\system32\kbdmaori.dll
    - 2004-08-04 06:56:12 6,144 ----a-w c:\windows\system32\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\system32\kbdmlt47.dll
    - 2004-08-04 06:56:12 6,144 ----a-w c:\windows\system32\kbdmlt48.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\system32\kbdmlt48.dll
    - 2001-08-23 13:00:00 7,168 ----a-w c:\windows\system32\kbdnec.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\system32\kbdnec.dll
    - 2004-08-04 06:56:12 7,168 ----a-w c:\windows\system32\kbdno1.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\system32\kbdno1.dll
    - 2004-08-04 06:56:12 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll
    - 2004-08-04 06:56:12 7,680 ----a-w c:\windows\system32\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,680 ----a-w c:\windows\system32\kbdsmsno.dll
    - 2004-08-04 06:56:12 7,168 ----a-w c:\windows\system32\kbdukx.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\system32\kbdukx.dll
    - 2004-08-04 04:59:24 7,424 ----a-w c:\windows\system32\kd1394.dll
    + 2008-04-13 18:31:35 7,424 ----a-w c:\windows\system32\kd1394.dll
    - 2004-08-04 06:56:44 294,400 ----a-w c:\windows\system32\kerberos.dll
    + 2008-04-14 00:11:56 299,520 ----a-w c:\windows\system32\kerberos.dll
    - 2004-08-04 06:56:44 983,552 ----a-w c:\windows\system32\kernel32.dll
    + 2008-04-14 00:11:56 989,696 ----a-w c:\windows\system32\kernel32.dll
    - 2004-08-04 06:56:44 150,528 ----a-w c:\windows\system32\keymgr.dll
    + 2008-04-14 00:11:56 150,528 ----a-w c:\windows\system32\keymgr.dll
    - 2004-08-04 04:56:44 4,096 ----a-w c:\windows\system32\ksuser.dll
    + 2008-04-14 00:11:56 4,096 ----a-w c:\windows\system32\ksuser.dll
    - 2004-08-04 06:56:44 6,656 ----a-w c:\windows\system32\laprxy.dll
    + 2008-04-14 00:11:56 6,656 ----a-w c:\windows\system32\laprxy.dll
    - 2004-08-04 06:56:44 423,936 ----a-w c:\windows\system32\licdll.dll
    + 2008-04-14 10:41:58 423,936 ----a-w c:\windows\system32\licdll.dll
    - 2004-08-04 06:56:44 22,016 ----a-w c:\windows\system32\licmgr10.dll
    + 2008-04-14 00:11:56 22,016 ----a-w c:\windows\system32\licmgr10.dll
    - 2004-08-04 10:00:00 58,880 ----a-w c:\windows\system32\licwmi.dll
    + 2008-04-14 00:11:56 58,880 ----a-w c:\windows\system32\licwmi.dll
    - 2004-08-04 06:56:44 18,944 ----a-w c:\windows\system32\linkinfo.dll
    + 2008-04-14 00:11:56 19,968 ----a-w c:\windows\system32\linkinfo.dll
    - 2004-08-04 06:56:44 13,824 ----a-w c:\windows\system32\lmhsvc.dll
    + 2008-04-14 00:11:56 13,824 ----a-w c:\windows\system32\lmhsvc.dll
    - 2004-08-04 06:56:44 399,872 ----a-w c:\windows\system32\lmrt.dll
    + 2008-04-14 00:11:56 399,872 ----a-w c:\windows\system32\lmrt.dll
    - 2004-08-04 06:56:44 97,280 ----a-w c:\windows\system32\loadperf.dll
    + 2008-04-14 00:11:56 97,280 ----a-w c:\windows\system32\loadperf.dll
    - 2004-08-04 06:56:44 221,696 ----a-w c:\windows\system32\localsec.dll
    + 2008-04-14 00:11:56 221,696 ----a-w c:\windows\system32\localsec.dll
    - 2004-08-04 06:56:44 341,504 ----a-w c:\windows\system32\localspl.dll
    + 2008-04-14 00:11:56 343,040 ----a-w c:\windows\system32\localspl.dll
    - 2004-08-04 06:56:44 11,776 ----a-w c:\windows\system32\localui.dll
    + 2008-04-14 00:11:56 11,776 ----a-w c:\windows\system32\localui.dll
    - 2004-08-04 06:56:52 75,264 ----a-w c:\windows\system32\locator.exe
    + 2008-04-14 00:12:24 75,264 ----a-w c:\windows\system32\locator.exe
    - 2004-08-04 06:56:52 103,936 ----a-w c:\windows\system32\logagent.exe
    + 2008-04-14 00:12:24 103,936 ----a-w c:\windows\system32\logagent.exe
    - 2004-08-04 06:56:52 59,392 ----a-w c:\windows\system32\logman.exe
    + 2008-04-14 00:12:24 59,392 ----a-w c:\windows\system32\logman.exe
    - 2004-08-04 06:56:58 220,672 ----a-w c:\windows\system32\logon.scr
    + 2008-04-14 00:12:43 220,672 ----a-w c:\windows\system32\logon.scr
    - 2004-08-04 06:56:52 514,560 ----a-w c:\windows\system32\logonui.exe
    + 2008-04-14 00:12:24 514,560 ----a-w c:\windows\system32\logonui.exe
    - 2004-08-04 06:56:44 22,016 ----a-w c:\windows\system32\lpk.dll
    + 2008-04-14 00:11:56 22,016 ----a-w c:\windows\system32\lpk.dll
    - 2004-08-04 06:56:44 10,240 ----a-w c:\windows\system32\lprhelp.dll
    + 2008-04-14 00:11:56 10,240 ----a-w c:\windows\system32\lprhelp.dll
    - 2004-08-04 06:56:44 721,920 ----a-w c:\windows\system32\lsasrv.dll
    + 2008-04-14 00:11:56 728,064 ----a-w c:\windows\system32\lsasrv.dll
    - 2004-08-04 06:56:52 13,312 ----a-w c:\windows\system32\lsass.exe
    + 2008-04-14 00:12:24 13,312 ----a-w c:\windows\system32\lsass.exe
    - 2004-08-04 06:56:52 72,704 ----a-w c:\windows\system32\magnify.exe
    + 2008-04-14 00:12:24 72,704 ----a-w c:\windows\system32\magnify.exe
    - 2004-08-04 06:56:52 85,504 ----a-w c:\windows\system32\makecab.exe
    + 2008-04-14 00:12:25 57,344 ----a-w c:\windows\system32\makecab.exe
    - 2004-08-04 06:56:44 14,848 ----a-w c:\windows\system32\mcastmib.dll
    + 2008-04-14 00:11:56 14,336 ----a-w c:\windows\system32\mcastmib.dll
    - 2004-08-04 06:56:44 84,480 ----a-w c:\windows\system32\mciavi32.dll
    + 2008-04-14 00:11:56 84,480 ----a-w c:\windows\system32\mciavi32.dll
    - 2004-08-04 06:56:44 35,328 ----a-w c:\windows\system32\mciqtz32.dll
    + 2008-04-14 00:11:56 35,328 ----a-w c:\windows\system32\mciqtz32.dll
    - 2004-08-04 06:56:44 23,040 ----a-w c:\windows\system32\mciseq.dll
    + 2008-04-14 00:11:56 23,040 ----a-w c:\windows\system32\mciseq.dll
    - 2004-08-04 06:56:44 23,552 ----a-w c:\windows\system32\mciwave.dll
    + 2008-04-14 00:11:56 23,552 ----a-w c:\windows\system32\mciwave.dll
    - 2004-03-22 20:17:06 24,816 ----a-w c:\windows\system32\mdimon.dll
    + 2007-04-09 18:23:54 28,040 ----a-w c:\windows\system32\mdimon.dll
    - 2004-08-04 06:56:44 118,272 ----a-w c:\windows\system32\mdminst.dll
    + 2008-04-14 00:11:56 118,272 ----a-w c:\windows\system32\mdminst.dll
    - 2004-08-04 06:56:44 39,936 ----a-w c:\windows\system32\mf3216.dll
    + 2008-04-14 00:11:56 40,960 ----a-w c:\windows\system32\mf3216.dll
    - 2001-08-23 13:00:00 924,432 ----a-w c:\windows\system32\mfc40u.dll
    + 2008-04-14 00:11:56 927,504 ----a-w c:\windows\system32\mfc40u.dll
    - 2004-08-04 06:56:44 1,028,096 ----a-w c:\windows\system32\mfc42.dll
    + 2008-04-14 00:11:56 1,028,096 ----a-w c:\windows\system32\mfc42.dll
    - 2004-08-04 06:56:44 1,024,000 ----a-w c:\windows\system32\mfc42u.dll
    + 2006-10-14 08:13:25 981,760 ----a-w c:\windows\system32\mfc42u.dll
    - 2004-08-04 06:56:44 22,528 ----a-w c:\windows\system32\mfcsubs.dll
    + 2008-04-14 00:11:56 22,528 ----a-w c:\windows\system32\mfcsubs.dll
    - 2004-08-04 06:56:44 14,848 ----a-w c:\windows\system32\mgmtapi.dll
    + 2008-04-14 00:11:56 14,848 ----a-w c:\windows\system32\mgmtapi.dll
     
    scorpion657,
    #15
  17. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    - 2004-08-04 06:56:44 18,944 ----a-w c:\windows\system32\midimap.dll
    + 2008-04-14 00:11:57 18,944 ----a-w c:\windows\system32\midimap.dll
    - 2004-08-04 06:56:44 60,928 ----a-w c:\windows\system32\miglibnt.dll
    + 2008-04-14 00:11:57 60,928 ----a-w c:\windows\system32\miglibnt.dll
    - 2001-08-23 13:00:00 18,944 ----a-w c:\windows\system32\mimefilt.dll
    + 2008-04-14 00:11:57 29,696 ----a-w c:\windows\system32\mimefilt.dll
    - 2004-08-04 06:56:44 586,240 ----a-w c:\windows\system32\mlang.dll
    + 2008-04-14 00:11:57 586,240 ----a-w c:\windows\system32\mlang.dll
    - 2004-08-04 06:56:52 815,104 ----a-w c:\windows\system32\mmc.exe
    + 2008-04-14 00:12:25 1,414,656 ----a-w c:\windows\system32\mmc.exe
    - 2004-08-04 06:56:44 70,656 ----a-w c:\windows\system32\mmcbase.dll
    + 2008-04-14 00:11:57 163,328 ----a-w c:\windows\system32\mmcbase.dll
    - 2004-08-04 06:56:44 1,192,960 ----a-w c:\windows\system32\mmcndmgr.dll
    + 2008-04-14 00:11:57 1,872,896 ----a-w c:\windows\system32\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\system32\mmcperf.exe
    - 2004-08-04 06:56:44 50,688 ----a-w c:\windows\system32\mmcshext.dll
    + 2008-04-14 00:11:57 61,440 ----a-w c:\windows\system32\mmcshext.dll
    - 2004-08-04 10:00:00 17,408 ----a-w c:\windows\system32\mmfutil.dll
    + 2008-04-14 00:11:57 17,408 ----a-w c:\windows\system32\mmfutil.dll
    - 2004-08-04 10:00:00 34,560 ----a-w c:\windows\system32\mnmdd.dll
    + 2008-04-14 00:11:57 34,560 ----a-w c:\windows\system32\mnmdd.dll
    - 2004-08-04 06:56:52 32,768 ----a-w c:\windows\system32\mnmsrvc.exe
    + 2008-04-14 00:12:25 32,768 ----a-w c:\windows\system32\mnmsrvc.exe
    - 2004-08-04 06:56:44 207,360 ----a-w c:\windows\system32\mobsync.dll
    + 2008-04-14 00:11:57 207,360 ----a-w c:\windows\system32\mobsync.dll
    - 2004-08-04 06:56:52 143,360 ----a-w c:\windows\system32\mobsync.exe
    + 2008-04-14 00:12:26 143,360 ----a-w c:\windows\system32\mobsync.exe
    - 2004-08-04 06:56:44 153,600 ----a-w c:\windows\system32\modemui.dll
    + 2008-04-14 00:11:57 153,600 ----a-w c:\windows\system32\modemui.dll
    - 2001-08-23 13:00:00 15,872 ----a-w c:\windows\system32\more.com
    + 2008-04-14 00:12:42 16,896 ----a-w c:\windows\system32\more.com
    - 2004-08-04 06:56:12 216,064 ----a-w c:\windows\system32\moricons.dll
    + 2008-04-13 16:45:30 216,064 ----a-w c:\windows\system32\moricons.dll
    - 2004-08-04 06:56:44 310,272 ----a-w c:\windows\system32\mp43dmod.dll
    + 2008-04-14 00:11:57 310,272 ----a-w c:\windows\system32\mp43dmod.dll
    - 2004-08-04 06:56:44 384,512 ----a-w c:\windows\system32\mp4sdmod.dll
    + 2008-04-14 00:11:57 384,512 ----a-w c:\windows\system32\mp4sdmod.dll
    - 2004-08-04 06:56:44 240,640 ----a-w c:\windows\system32\mpg4dmod.dll
    + 2008-04-14 00:11:57 240,640 ----a-w c:\windows\system32\mpg4dmod.dll
    - 2004-08-04 06:56:54 123,392 ----a-w c:\windows\system32\mplay32.exe
    + 2008-04-14 00:12:27 123,392 ----a-w c:\windows\system32\mplay32.exe
    - 2004-08-04 06:56:44 59,904 ----a-w c:\windows\system32\mpr.dll
    + 2008-04-14 00:11:57 59,904 ----a-w c:\windows\system32\mpr.dll
    - 2004-08-04 06:56:44 87,040 ----a-w c:\windows\system32\mprapi.dll
    + 2008-04-14 00:11:57 87,040 ----a-w c:\windows\system32\mprapi.dll
    - 2001-08-23 13:00:00 49,152 ----a-w c:\windows\system32\mprdim.dll
    + 2008-04-14 00:11:57 53,248 ----a-w c:\windows\system32\mprdim.dll
    - 2004-08-04 06:56:44 138,240 ----a-w c:\windows\system32\mqad.dll
    + 2008-04-14 00:11:57 138,240 ----a-w c:\windows\system32\mqad.dll
    - 2004-08-04 06:56:54 19,968 ----a-w c:\windows\system32\mqbkup.exe
    + 2008-04-14 00:12:27 19,968 ----a-w c:\windows\system32\mqbkup.exe
    - 2004-08-04 06:56:44 47,104 ----a-w c:\windows\system32\mqdscli.dll
    + 2008-04-14 00:11:57 47,616 ----a-w c:\windows\system32\mqdscli.dll
    - 2004-08-04 06:56:44 16,896 ----a-w c:\windows\system32\mqise.dll
    + 2008-04-14 00:11:57 16,896 ----a-w c:\windows\system32\mqise.dll
    - 2004-08-04 06:56:44 89,088 ----a-w c:\windows\system32\mqlogmgr.dll
    + 2008-04-14 00:11:57 89,088 ----a-w c:\windows\system32\mqlogmgr.dll
    - 2004-08-04 06:56:44 225,280 ----a-w c:\windows\system32\mqoa.dll
    + 2008-04-14 00:11:57 225,280 ----a-w c:\windows\system32\mqoa.dll
    - 2004-08-04 06:56:44 660,992 ----a-w c:\windows\system32\mqqm.dll
    + 2008-04-14 00:11:57 663,040 ----a-w c:\windows\system32\mqqm.dll
    - 2004-08-04 06:56:44 177,152 ----a-w c:\windows\system32\mqrt.dll
    + 2008-04-14 00:11:57 177,152 ----a-w c:\windows\system32\mqrt.dll
    - 2004-08-04 06:56:44 123,392 ----a-w c:\windows\system32\mqrtdep.dll
    + 2008-04-14 00:11:57 123,904 ----a-w c:\windows\system32\mqrtdep.dll
    - 2004-08-04 06:56:44 95,744 ----a-w c:\windows\system32\mqsec.dll
    + 2008-04-14 00:11:57 95,744 ----a-w c:\windows\system32\mqsec.dll
    - 2004-08-04 06:56:44 517,632 ----a-w c:\windows\system32\mqsnap.dll
    + 2008-04-14 00:11:58 517,632 ----a-w c:\windows\system32\mqsnap.dll
    - 2004-08-04 06:56:54 4,608 ----a-w c:\windows\system32\mqsvc.exe
    + 2008-04-14 00:12:27 4,608 ----a-w c:\windows\system32\mqsvc.exe
    - 2004-08-04 06:56:54 117,248 ----a-w c:\windows\system32\mqtgsvc.exe
    + 2008-04-14 00:12:27 117,248 ----a-w c:\windows\system32\mqtgsvc.exe
    - 2004-08-04 06:56:44 186,880 ----a-w c:\windows\system32\mqtrig.dll
    + 2008-04-14 00:11:58 187,392 ----a-w c:\windows\system32\mqtrig.dll
    - 2004-08-04 06:56:44 48,640 ----a-w c:\windows\system32\mqupgrd.dll
    + 2008-04-14 00:11:58 49,152 ----a-w c:\windows\system32\mqupgrd.dll
    - 2004-08-04 06:56:44 471,552 ----a-w c:\windows\system32\mqutil.dll
    + 2008-04-14 00:11:58 471,552 ----a-w c:\windows\system32\mqutil.dll
    - 2004-08-04 06:56:44 71,680 ----a-w c:\windows\system32\msacm32.dll
    + 2008-04-14 00:11:58 71,680 ----a-w c:\windows\system32\msacm32.dll
    - 2004-08-04 06:56:14 3,584 ----a-w c:\windows\system32\msafd.dll
    + 2008-04-14 00:10:06 3,584 ----a-w c:\windows\system32\msafd.dll
    - 2004-08-04 06:56:44 86,016 ----a-w c:\windows\system32\msapsspc.dll
    + 2008-04-14 00:11:58 86,016 ----a-w c:\windows\system32\msapsspc.dll
    - 2004-08-04 06:56:44 57,344 ----a-w c:\windows\system32\msasn1.dll
    + 2008-04-14 00:11:58 57,344 ----a-w c:\windows\system32\msasn1.dll
    - 2004-08-04 06:56:44 73,728 ----a-w c:\windows\system32\mscms.dll
    + 2008-04-14 00:11:58 73,728 ----a-w c:\windows\system32\mscms.dll
    - 2004-08-04 10:00:00 69,632 ----a-w c:\windows\system32\msconf.dll
    + 2008-04-14 00:11:58 69,632 ----a-w c:\windows\system32\msconf.dll
    - 2004-08-04 06:56:14 12,288 ----a-w c:\windows\system32\mscpx32r.dLL
    + 2008-04-13 17:26:07 12,288 ----a-w c:\windows\system32\mscpx32r.dll
    - 2004-08-04 06:56:44 36,864 ----a-w c:\windows\system32\mscpxl32.dLL
    + 2008-04-14 00:11:58 36,864 ----a-w c:\windows\system32\mscpxl32.dll
    - 2004-08-04 06:56:44 294,400 ----a-w c:\windows\system32\MSCTF.dll
    + 2008-04-14 00:11:58 297,984 ----a-w c:\windows\system32\msctf.dll
    - 2004-08-04 06:56:44 69,120 ----a-w c:\windows\system32\MSCTFP.dll
    + 2008-04-14 00:11:58 68,608 ----a-w c:\windows\system32\msctfp.dll
    - 2004-08-04 06:56:44 118,784 ----a-w c:\windows\system32\msdadiag.dll
    + 2008-04-14 00:11:58 118,784 ----a-w c:\windows\system32\msdadiag.dll
    - 2004-08-04 06:56:44 151,552 ----a-w c:\windows\system32\msdart.dll
    + 2008-04-14 00:11:59 151,552 ----a-w c:\windows\system32\msdart.dll
    - 2004-08-04 06:56:44 14,336 ----a-w c:\windows\system32\msdmo.dll
    + 2008-04-14 00:11:59 14,336 ----a-w c:\windows\system32\msdmo.dll
    - 2004-08-04 06:56:54 6,144 ----a-w c:\windows\system32\msdtc.exe
    + 2008-04-14 00:12:27 6,144 ----a-w c:\windows\system32\msdtc.exe
    - 2004-08-04 10:00:00 58,880 ----a-w c:\windows\system32\msdtclog.dll
    + 2008-04-14 00:11:59 58,880 ----a-w c:\windows\system32\msdtclog.dll
    - 2004-08-04 06:56:44 425,472 ----a-w c:\windows\system32\msdtcprx.dll
    + 2008-04-14 00:11:59 427,008 ----a-w c:\windows\system32\msdtcprx.dll
    - 2004-08-04 06:56:44 949,248 ----a-w c:\windows\system32\msdtctm.dll
    + 2008-04-14 00:11:59 956,928 ----a-w c:\windows\system32\msdtctm.dll
    - 2004-08-04 06:56:44 161,280 ----a-w c:\windows\system32\msdtcuiu.dll
    + 2008-04-14 00:11:59 161,792 ----a-w c:\windows\system32\msdtcuiu.dll
    - 2004-08-04 06:56:14 4,126 ----a-w c:\windows\system32\msdxmlc.dll
    + 2008-04-14 00:10:08 4,126 ----a-w c:\windows\system32\msdxmlc.dll
    - 2004-08-04 06:56:44 512,029 ----a-w c:\windows\system32\msexch40.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\system32\msexch40.dll
    - 2004-08-04 06:56:44 319,517 ----a-w c:\windows\system32\msexcl40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\system32\msexcl40.dll
    - 2004-08-04 06:56:44 537,088 ----a-w c:\windows\system32\msftedit.dll
    + 2008-04-14 00:11:59 539,136 ----a-w c:\windows\system32\msftedit.dll
    - 2004-08-04 06:56:44 994,304 ----a-w c:\windows\system32\msgina.dll
    + 2008-04-14 00:11:59 997,376 ----a-w c:\windows\system32\msgina.dll
    - 2004-08-04 06:56:44 33,792 ----a-w c:\windows\system32\msgsvc.dll
    + 2008-04-14 00:11:59 33,792 ----a-w c:\windows\system32\msgsvc.dll
    - 2004-08-04 10:00:00 188,416 ----a-w c:\windows\system32\msh261.drv
    + 2008-04-14 00:12:45 188,416 ----a-w c:\windows\system32\msh261.drv
    - 2004-08-04 07:05:44 294,912 ----a-w c:\windows\system32\msh263.drv
    + 2008-04-14 00:12:45 294,912 ----a-w c:\windows\system32\msh263.drv
    - 2004-08-04 06:56:54 29,184 ----a-w c:\windows\system32\mshta.exe
    + 2008-04-14 00:12:27 29,184 ----a-w c:\windows\system32\mshta.exe
    - 2004-08-04 06:56:44 3,003,392 ----a-w c:\windows\system32\mshtml.dll
    + 2008-12-12 17:01:00 3,067,904 ----a-w c:\windows\system32\mshtml.dll
    - 2004-08-04 06:56:44 448,512 ----a-w c:\windows\system32\mshtmled.dll
    + 2008-04-14 00:11:59 449,024 ----a-w c:\windows\system32\mshtmled.dll
    - 2004-08-04 06:56:16 56,832 ----a-w c:\windows\system32\mshtmler.dll
    + 2008-04-13 16:26:26 56,832 ----a-w c:\windows\system32\mshtmler.dll
    - 2005-05-04 19:45:32 2,890,240 ----a-w c:\windows\system32\msi.dll
    + 2008-04-14 00:11:59 2,843,136 ----a-w c:\windows\system32\msi.dll
    - 2004-08-04 06:56:44 51,712 ----a-w c:\windows\system32\msident.dll
    + 2008-04-14 00:11:59 51,712 ----a-w c:\windows\system32\msident.dll
    - 2004-08-04 06:56:44 6,656 ----a-w c:\windows\system32\msidle.dll
    + 2008-04-14 00:11:59 6,656 ----a-w c:\windows\system32\msidle.dll
    - 2004-08-04 06:56:44 248,832 ----a-w c:\windows\system32\msieftp.dll
    + 2008-04-14 00:11:59 248,832 ----a-w c:\windows\system32\msieftp.dll
    - 2005-05-04 19:45:36 78,848 ----a-w c:\windows\system32\msiexec.exe
    + 2008-04-14 00:12:28 78,848 ----a-w c:\windows\system32\msiexec.exe
    - 2005-05-04 19:45:36 271,360 ----a-w c:\windows\system32\msihnd.dll
    + 2008-04-14 00:11:59 271,360 ----a-w c:\windows\system32\msihnd.dll
    - 2004-08-04 06:56:44 4,608 ----a-w c:\windows\system32\msimg32.dll
    + 2008-04-14 00:11:59 4,608 ----a-w c:\windows\system32\msimg32.dll
    - 2005-05-04 19:45:36 884,736 ----a-w c:\windows\system32\msimsg.dll
    + 2008-04-13 15:39:43 884,736 ----a-w c:\windows\system32\msimsg.dll
    - 2004-08-04 06:56:44 159,232 ----a-w c:\windows\system32\MSIMTF.dll
    + 2008-04-14 00:11:59 159,232 ----a-w c:\windows\system32\msimtf.dll
    - 2004-08-04 06:56:54 40,960 ----a-w c:\windows\system32\msiregmv.exe
    + 2008-04-14 00:12:28 40,960 ----a-w c:\windows\system32\msiregmv.exe
    - 2005-05-04 19:45:36 15,360 ----a-w c:\windows\system32\msisip.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\system32\msisip.dll
    - 2004-08-04 06:56:44 1,507,356 ----a-w c:\windows\system32\msjet40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\system32\msjet40.dll
    - 2004-07-17 17:34:48 358,976 ----a-w c:\windows\system32\msjetoledb40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\system32\msjetoledb40.dll
    - 2004-08-04 06:56:44 151,583 ----a-w c:\windows\system32\msjint40.dll
    + 2008-04-14 00:12:00 151,583 ----a-w c:\windows\system32\msjint40.dll
    - 2004-08-04 06:56:44 53,279 ----a-w c:\windows\system32\msjter40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\system32\msjter40.dll
    - 2004-08-04 06:56:44 241,693 ----a-w c:\windows\system32\msjtes40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\system32\msjtes40.dll
    - 2004-08-04 06:56:44 25,088 ----a-w c:\windows\system32\mslbui.dll
    + 2008-04-14 00:12:00 25,088 ----a-w c:\windows\system32\mslbui.dll
    - 2004-08-04 06:56:44 213,023 ----a-w c:\windows\system32\msltus40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\system32\msltus40.dll
    - 2004-08-04 06:57:02 259,072 ----a-w c:\windows\system32\msnetobj.dll
    + 2008-04-14 00:12:55 259,072 ----a-w c:\windows\system32\msnetobj.dll
    - 2004-08-04 06:56:44 290,816 ----a-w c:\windows\system32\msnsspc.dll
    + 2008-04-14 00:12:00 290,816 ----a-w c:\windows\system32\msnsspc.dll
    - 2004-08-04 10:00:00 252,928 ----a-w c:\windows\system32\msoeacct.dll
    + 2008-04-14 00:12:00 252,928 ----a-w c:\windows\system32\msoeacct.dll
    - 2004-08-04 10:00:00 105,984 ----a-w c:\windows\system32\msoert2.dll
    + 2008-04-14 00:12:00 105,984 ----a-w c:\windows\system32\msoert2.dll
    - 2004-08-04 06:56:20 20,480 ----a-w c:\windows\system32\msorc32r.dll
    + 2008-04-13 17:24:14 20,480 ----a-w c:\windows\system32\msorc32r.dll
    - 2004-08-04 06:56:44 143,360 ----a-w c:\windows\system32\msorcl32.dll
    + 2008-04-14 00:12:00 143,360 ----a-w c:\windows\system32\msorcl32.dll
    - 2004-08-04 06:56:54 343,040 ----a-w c:\windows\system32\mspaint.exe
    + 2008-04-14 00:12:28 343,040 ----a-w c:\windows\system32\mspaint.exe
    - 2004-08-04 06:56:44 30,208 ----a-w c:\windows\system32\mspatcha.dll
    + 2008-04-14 00:12:00 29,696 ----a-w c:\windows\system32\mspatcha.dll
    - 2004-08-04 06:56:44 348,189 ----a-w c:\windows\system32\mspbde40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\system32\mspbde40.dll
    - 2004-08-04 06:56:44 52,224 ----a-w c:\windows\system32\mspmsnsv.dll
    + 2008-04-14 00:12:00 52,224 ----a-w c:\windows\system32\mspmsnsv.dll
    - 2004-08-04 06:56:44 201,728 ----a-w c:\windows\system32\mspmsp.dll
    + 2008-04-14 00:12:00 201,728 ----a-w c:\windows\system32\mspmsp.dll
    - 2004-08-04 06:56:20 48,128 ----a-w c:\windows\system32\msprivs.dll
    + 2008-04-13 16:23:31 48,128 ----a-w c:\windows\system32\msprivs.dll
    - 2004-08-04 06:56:44 146,432 ----a-w c:\windows\system32\msrating.dll
    + 2008-04-14 00:12:00 146,432 ----a-w c:\windows\system32\msrating.dll
    - 2004-08-04 06:56:44 421,919 ----a-w c:\windows\system32\msrd2x40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\system32\msrd2x40.dll
    - 2004-08-04 06:56:44 315,423 ----a-w c:\windows\system32\msrd3x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\system32\msrd3x40.dll
    - 2004-08-04 06:56:44 552,989 ----a-w c:\windows\system32\msrepl40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\system32\msrepl40.dll
    - 2004-08-04 06:56:44 11,264 ----a-w c:\windows\system32\msrle32.dll
    + 2008-04-14 00:12:00 11,264 ----a-w c:\windows\system32\msrle32.dll
    - 2004-08-04 06:56:44 134,656 ----a-w c:\windows\system32\mssap.dll
    + 2008-04-14 00:12:00 134,656 ----a-w c:\windows\system32\mssap.dll
    - 2004-08-04 06:57:02 356,352 ----a-w c:\windows\system32\msscp.dll
    + 2008-04-14 00:12:56 356,352 ----a-w c:\windows\system32\msscp.dll
    - 2004-08-04 10:00:00 274,944 ----a-w c:\windows\system32\mstask.dll
    + 2008-04-14 00:12:00 274,944 ----a-w c:\windows\system32\mstask.dll
    - 2004-08-04 06:56:44 258,077 ----a-w c:\windows\system32\mstext40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\system32\mstext40.dll
    - 2004-08-04 06:56:44 530,432 ----a-w c:\windows\system32\mstime.dll
    + 2008-04-14 00:12:00 532,480 ----a-w c:\windows\system32\mstime.dll
    - 2004-08-04 06:56:54 12,288 ----a-w c:\windows\system32\mstinit.exe
    + 2008-04-14 00:12:29 12,288 ----a-w c:\windows\system32\mstinit.exe
    - 2004-08-04 06:56:44 115,712 ----a-w c:\windows\system32\mstlsapi.dll
    + 2008-04-14 00:12:00 116,224 ----a-w c:\windows\system32\mstlsapi.dll
    - 2004-08-04 10:00:00 655,360 ----a-w c:\windows\system32\mstscax.dll
    + 2008-04-14 00:11:56 2,061,824 ----a-w c:\windows\system32\mstscax.dll
    - 2004-08-04 06:56:44 195,072 ----a-w c:\windows\system32\msutb.dll
    + 2008-04-14 00:12:00 195,072 ----a-w c:\windows\system32\msutb.dll
    - 2004-08-04 06:56:44 129,536 ----a-w c:\windows\system32\msv1_0.dll
    + 2008-04-14 00:12:00 132,608 ----a-w c:\windows\system32\msv1_0.dll
    - 2004-08-04 06:56:44 1,392,671 ----a-w c:\windows\system32\msvbvm60.dll
    + 2008-04-14 00:12:00 1,384,479 ----a-w c:\windows\system32\msvbvm60.dll
    - 2004-08-04 06:56:44 54,784 ----a-w c:\windows\system32\msvcirt.dll
    + 2008-04-14 00:12:01 57,344 ----a-w c:\windows\system32\msvcirt.dll
    - 2004-08-04 06:56:44 413,696 ----a-w c:\windows\system32\msvcp60.dll
    + 2008-04-14 00:12:01 413,696 ----a-w c:\windows\system32\msvcp60.dll
    - 2004-08-04 06:56:44 343,040 ----a-w c:\windows\system32\msvcrt.dll
    + 2008-04-14 00:12:01 343,040 ----a-w c:\windows\system32\msvcrt.dll
    - 2004-08-04 04:58:26 61,440 ----a-w c:\windows\system32\msvcrt40.dll
    + 2008-04-13 18:30:46 61,440 ----a-w c:\windows\system32\msvcrt40.dll
    - 2004-08-04 06:56:44 120,832 ----a-w c:\windows\system32\msvfw32.dll
    + 2008-04-14 00:12:01 121,344 ----a-w c:\windows\system32\msvfw32.dll
    - 2004-08-04 06:56:44 1,428,480 ----a-w c:\windows\system32\msvidctl.dll
    + 2008-04-14 00:12:01 1,428,992 ----a-w c:\windows\system32\msvidctl.dll
    - 2004-08-04 06:56:44 72,704 ----a-w c:\windows\system32\msw3prt.dll
    + 2008-04-14 00:12:01 72,704 ----a-w c:\windows\system32\msw3prt.dll
    - 2004-08-04 06:56:46 831,519 ----a-w c:\windows\system32\mswdat10.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\system32\mswdat10.dll
    - 2004-08-04 06:56:46 204,288 ----a-w c:\windows\system32\mswebdvd.dll
    + 2008-04-14 00:12:01 203,776 ----a-w c:\windows\system32\mswebdvd.dll
    - 2004-08-04 06:56:46 245,760 ----a-w c:\windows\system32\mswmdm.dll
    + 2008-04-14 00:12:01 245,760 ----a-w c:\windows\system32\mswmdm.dll
    - 2004-08-04 06:56:46 245,248 ----a-w c:\windows\system32\mswsock.dll
    + 2008-04-14 00:12:01 245,248 ----a-w c:\windows\system32\mswsock.dll
    - 2004-08-04 06:56:46 614,429 ----a-w c:\windows\system32\mswstr10.dll
    + 2007-12-10 12:41:14 621,344 ----a-w c:\windows\system32\mswstr10.dll
    - 2004-08-04 06:56:46 348,189 ----a-w c:\windows\system32\msxbde40.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\system32\msxbde40.dll
    - 2004-08-04 06:56:46 506,368 ----a-w c:\windows\system32\msxml.dll
    + 2008-04-14 00:12:01 506,368 ----a-w c:\windows\system32\msxml.dll
    - 2004-08-04 06:56:46 701,440 ----a-w c:\windows\system32\msxml2.dll
    + 2008-04-14 00:12:01 701,440 ----a-w c:\windows\system32\msxml2.dll
    - 2004-08-04 06:56:46 1,236,480 ----a-w c:\windows\system32\msxml3.dll
    + 2008-09-04 17:15:04 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    + 2008-04-14 00:12:01 1,306,624 ------w c:\windows\system32\msxml6.dll
    + 2008-04-13 17:27:18 79,872 ------w c:\windows\system32\msxml6r.dll
    - 2004-08-04 07:05:44 17,408 ----a-w c:\windows\system32\msyuv.dll
    + 2008-04-14 00:12:01 16,896 ----a-w c:\windows\system32\msyuv.dll
    - 2001-08-23 12:00:00 111,104 ----a-w c:\windows\system32\mtstocom.exe
    + 2008-04-14 00:12:29 119,808 ----a-w c:\windows\system32\mtstocom.exe
    - 2004-08-04 06:56:46 66,560 ----a-w c:\windows\system32\mtxclu.dll
    + 2008-04-14 00:12:01 66,560 ----a-w c:\windows\system32\mtxclu.dll
    - 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\mtxdm.dll
    + 2008-04-14 00:12:01 30,720 ----a-w c:\windows\system32\mtxdm.dll
    - 2004-08-04 10:00:00 4,096 ----a-w c:\windows\system32\mtxex.dll
    + 2008-04-14 00:12:01 4,096 ----a-w c:\windows\system32\mtxex.dll
    - 2004-08-04 10:00:00 25,088 ----a-w c:\windows\system32\mtxlegih.dll
    + 2008-04-14 00:12:01 34,304 ----a-w c:\windows\system32\mtxlegih.dll
    - 2004-08-04 06:56:46 90,112 ----a-w c:\windows\system32\mtxoci.dll
    + 2008-04-14 00:12:01 91,648 ----a-w c:\windows\system32\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\system32\mtxparhd.dll
    - 2004-08-04 06:56:22 393,728 ----a-w c:\windows\system32\mui\0401\xpob2res.dll
    + 2008-04-13 18:40:07 393,728 ----a-w c:\windows\system32\mui\0401\xpob2res.dll
    - 2004-08-04 06:56:30 186,880 ----a-w c:\windows\system32\mui\0401\xpsp1res.dll
    + 2008-04-13 18:35:06 186,880 ----a-w c:\windows\system32\mui\0401\xpsp1res.dll
    - 2004-08-04 06:56:30 2,869,248 ----a-w c:\windows\system32\mui\0401\xpsp2res.dll
    + 2008-04-13 18:35:49 2,869,248 ----a-w c:\windows\system32\mui\0401\xpsp2res.dll
    + 2008-04-13 18:39:02 656,896 ------w c:\windows\system32\mui\0401\xpsp3res.dll
    - 2004-08-04 06:56:30 189,440 ----a-w c:\windows\system32\mui\0402\xpsp1res.dll
    + 2008-04-13 18:35:08 189,440 ----a-w c:\windows\system32\mui\0402\xpsp1res.dll
    - 2004-08-04 06:56:22 212,480 ----a-w c:\windows\system32\mui\0404\xpob2res.dll
    + 2008-04-13 18:40:23 212,480 ----a-w c:\windows\system32\mui\0404\xpob2res.dll
    - 2004-08-04 06:56:30 161,280 ----a-w c:\windows\system32\mui\0404\xpsp1res.dll
    + 2008-04-13 18:35:09 161,280 ----a-w c:\windows\system32\mui\0404\xpsp1res.dll
    - 2004-08-04 06:56:30 477,696 ----a-w c:\windows\system32\mui\0404\xpsp2res.dll
    + 2008-04-13 18:36:10 477,696 ----a-w c:\windows\system32\mui\0404\xpsp2res.dll
    + 2008-04-13 18:39:13 327,680 ------w c:\windows\system32\mui\0404\xpsp3res.dll
    - 2004-08-04 06:56:22 428,032 ----a-w c:\windows\system32\mui\0405\xpob2res.dll
    + 2008-04-13 18:40:24 428,032 ----a-w c:\windows\system32\mui\0405\xpob2res.dll
    - 2004-08-04 06:56:30 188,928 ----a-w c:\windows\system32\mui\0405\xpsp1res.dll
    + 2008-04-13 18:35:09 188,928 ----a-w c:\windows\system32\mui\0405\xpsp1res.dll
    - 2004-08-04 06:56:30 734,720 ----a-w c:\windows\system32\mui\0405\xpsp2res.dll
    + 2008-04-13 18:36:10 734,720 ----a-w c:\windows\system32\mui\0405\xpsp2res.dll
    + 2008-04-13 18:39:02 601,088 ------w c:\windows\system32\mui\0405\xpsp3res.dll
    - 2004-08-04 06:56:22 418,816 ----a-w c:\windows\system32\mui\0406\xpob2res.dll
    + 2008-04-13 18:40:27 418,816 ----a-w c:\windows\system32\mui\0406\xpob2res.dll
    - 2004-08-04 06:56:30 192,512 ----a-w c:\windows\system32\mui\0406\xpsp1res.dll
    + 2008-04-13 18:35:09 192,000 ----a-w c:\windows\system32\mui\0406\xpsp1res.dll
    - 2004-08-04 06:56:30 742,912 ----a-w c:\windows\system32\mui\0406\xpsp2res.dll
    + 2008-04-13 18:36:10 742,912 ----a-w c:\windows\system32\mui\0406\xpsp2res.dll
    + 2008-04-13 18:39:12 605,696 ------w c:\windows\system32\mui\0406\xpsp3res.dll
    - 2004-08-04 06:56:22 403,456 ----a-w c:\windows\system32\mui\0407\xpob2res.dll
    + 2008-04-13 18:40:34 403,456 ----a-w c:\windows\system32\mui\0407\xpob2res.dll
    - 2004-08-04 06:56:30 199,680 ----a-w c:\windows\system32\mui\0407\xpsp1res.dll
    + 2008-04-13 18:35:21 199,680 ----a-w c:\windows\system32\mui\0407\xpsp1res.dll
    - 2004-08-04 06:56:30 788,992 ----a-w c:\windows\system32\mui\0407\xpsp2res.dll
    + 2008-04-13 18:37:03 788,480 ----a-w c:\windows\system32\mui\0407\xpsp2res.dll
    + 2008-04-13 18:39:19 663,552 ------w c:\windows\system32\mui\0407\xpsp3res.dll
    - 2004-08-04 06:56:22 419,328 ----a-w c:\windows\system32\mui\0408\xpob2res.dll
    + 2008-04-13 18:40:30 419,328 ----a-w c:\windows\system32\mui\0408\xpob2res.dll
    - 2004-08-04 06:56:30 197,632 ----a-w c:\windows\system32\mui\0408\xpsp1res.dll
    + 2008-04-13 18:35:11 197,632 ----a-w c:\windows\system32\mui\0408\xpsp1res.dll
    - 2004-08-04 06:56:30 801,280 ----a-w c:\windows\system32\mui\0408\xpsp2res.dll
    + 2008-04-13 18:36:35 801,280 ----a-w c:\windows\system32\mui\0408\xpsp2res.dll
    + 2008-04-13 18:39:12 679,936 ------w c:\windows\system32\mui\0408\xpsp3res.dll
    - 2004-08-04 06:56:22 405,504 ----a-w c:\windows\system32\mui\040b\xpob2res.dll
    + 2008-04-13 18:40:32 405,504 ----a-w c:\windows\system32\mui\040b\xpob2res.dll
    - 2004-08-04 06:56:30 186,368 ----a-w c:\windows\system32\mui\040b\xpsp1res.dll
    + 2008-04-13 18:35:11 186,368 ----a-w c:\windows\system32\mui\040b\xpsp1res.dll
    - 2004-08-04 06:56:30 729,088 ----a-w c:\windows\system32\mui\040b\xpsp2res.dll
    + 2008-04-13 18:36:39 729,088 ----a-w c:\windows\system32\mui\040b\xpsp2res.dll
    + 2008-04-13 18:39:17 604,672 ------w c:\windows\system32\mui\040b\xpsp3res.dll
    - 2004-08-04 06:56:24 410,624 ----a-w c:\windows\system32\mui\040C\xpob2res.dll
    + 2008-04-13 18:40:33 410,624 ----a-w c:\windows\system32\mui\040C\xpob2res.dll
    - 2004-08-04 06:56:30 197,632 ----a-w c:\windows\system32\mui\040C\xpsp1res.dll
    + 2008-04-13 18:35:20 197,632 ----a-w c:\windows\system32\mui\040C\xpsp1res.dll
    - 2004-08-04 06:56:30 793,600 ----a-w c:\windows\system32\mui\040C\xpsp2res.dll
    + 2008-04-13 18:36:55 793,088 ----a-w c:\windows\system32\mui\040C\xpsp2res.dll
    + 2008-04-13 18:39:20 663,040 ------w c:\windows\system32\mui\040C\xpsp3res.dll
    - 2004-08-04 06:56:24 384,000 ----a-w c:\windows\system32\mui\040D\xpob2res.dll
    + 2008-04-13 18:40:32 384,000 ----a-w c:\windows\system32\mui\040D\xpob2res.dll
    - 2004-08-04 06:56:30 181,760 ----a-w c:\windows\system32\mui\040D\xpsp1res.dll
    + 2008-04-13 18:35:21 181,760 ----a-w c:\windows\system32\mui\040D\xpsp1res.dll
    - 2004-08-04 06:56:30 2,842,112 ----a-w c:\windows\system32\mui\040D\xpsp2res.dll
    + 2008-04-13 18:37:07 2,842,112 ----a-w c:\windows\system32\mui\040D\xpsp2res.dll
    + 2008-04-13 18:39:28 620,544 ------w c:\windows\system32\mui\040D\xpsp3res.dll
    - 2004-08-04 06:56:24 434,176 ----a-w c:\windows\system32\mui\040e\xpob2res.dll
    + 2008-04-13 18:40:39 434,176 ----a-w c:\windows\system32\mui\040e\xpob2res.dll
    - 2004-08-04 06:56:30 195,584 ----a-w c:\windows\system32\mui\040e\xpsp1res.dll
    + 2008-04-13 18:35:23 195,584 ----a-w c:\windows\system32\mui\040e\xpsp1res.dll
    - 2004-08-04 06:56:30 769,536 ----a-w c:\windows\system32\mui\040e\xpsp2res.dll
    + 2008-04-13 18:37:22 769,536 ----a-w c:\windows\system32\mui\040e\xpsp2res.dll
    + 2008-04-13 18:39:28 645,120 ------w c:\windows\system32\mui\040e\xpsp3res.dll
    - 2004-08-04 06:56:24 413,696 ----a-w c:\windows\system32\mui\0410\xpob2res.dll
    + 2008-04-13 18:40:39 413,696 ----a-w c:\windows\system32\mui\0410\xpob2res.dll
    - 2004-08-04 06:56:30 195,072 ----a-w c:\windows\system32\mui\0410\xpsp1res.dll
    + 2008-04-13 18:35:23 195,072 ----a-w c:\windows\system32\mui\0410\xpsp1res.dll
    - 2004-08-04 06:56:30 769,536 ----a-w c:\windows\system32\mui\0410\xpsp2res.dll
    + 2008-04-13 18:37:22 769,536 ----a-w c:\windows\system32\mui\0410\xpsp2res.dll
    + 2008-04-13 18:39:28 658,432 ------w c:\windows\system32\mui\0410\xpsp3res.dll
    - 2004-08-04 06:56:24 275,456 ----a-w c:\windows\system32\mui\0411\xpob2res.dll
    + 2008-04-13 18:40:44 275,456 ----a-w c:\windows\system32\mui\0411\xpob2res.dll
    - 2004-08-04 06:56:30 171,008 ----a-w c:\windows\system32\mui\0411\xpsp1res.dll
    + 2008-04-13 18:35:23 171,008 ----a-w c:\windows\system32\mui\0411\xpsp1res.dll
    - 2004-08-04 06:56:30 562,688 ----a-w c:\windows\system32\mui\0411\xpsp2res.dll
    + 2008-04-13 18:37:34 562,688 ----a-w c:\windows\system32\mui\0411\xpsp2res.dll
    + 2008-04-13 18:39:49 412,672 ------w c:\windows\system32\mui\0411\xpsp3res.dll
    - 2004-08-04 06:56:24 306,688 ----a-w c:\windows\system32\mui\0412\xpob2res.dll
    + 2008-04-13 18:40:48 306,688 ----a-w c:\windows\system32\mui\0412\xpob2res.dll
    - 2004-08-04 06:56:30 167,936 ----a-w c:\windows\system32\mui\0412\xpsp1res.dll
    + 2008-04-13 18:35:23 167,936 ----a-w c:\windows\system32\mui\0412\xpsp1res.dll
    - 2004-08-04 06:56:30 543,744 ----a-w c:\windows\system32\mui\0412\xpsp2res.dll
    + 2008-04-13 18:37:37 543,744 ----a-w c:\windows\system32\mui\0412\xpsp2res.dll
    + 2008-04-13 18:39:49 392,704 ------w c:\windows\system32\mui\0412\xpsp3res.dll
    - 2004-08-04 06:56:24 401,920 ----a-w c:\windows\system32\mui\0413\xpob2res.dll
    + 2008-04-13 18:40:44 401,920 ----a-w c:\windows\system32\mui\0413\xpob2res.dll
    - 2004-08-04 06:56:30 196,096 ----a-w c:\windows\system32\mui\0413\xpsp1res.dll
    + 2008-04-13 18:35:25 196,096 ----a-w c:\windows\system32\mui\0413\xpsp1res.dll
    - 2004-08-04 06:56:30 769,024 ----a-w c:\windows\system32\mui\0413\xpsp2res.dll
    + 2008-04-13 18:38:00 769,024 ----a-w c:\windows\system32\mui\0413\xpsp2res.dll
    + 2008-04-13 18:39:47 645,120 ------w c:\windows\system32\mui\0413\xpsp3res.dll
    - 2004-08-04 06:56:24 353,792 ----a-w c:\windows\system32\mui\0414\xpob2res.dll
    + 2008-04-13 18:40:44 353,792 ----a-w c:\windows\system32\mui\0414\xpob2res.dll
    - 2004-08-04 06:56:30 189,440 ----a-w c:\windows\system32\mui\0414\xpsp1res.dll
    + 2008-04-13 18:35:25 189,440 ----a-w c:\windows\system32\mui\0414\xpsp1res.dll
    - 2004-08-04 06:56:30 716,288 ----a-w c:\windows\system32\mui\0414\xpsp2res.dll
    + 2008-04-13 18:38:02 716,288 ----a-w c:\windows\system32\mui\0414\xpsp2res.dll
    + 2008-04-13 18:39:48 591,872 ------w c:\windows\system32\mui\0414\xpsp3res.dll
    - 2004-08-04 06:56:24 391,680 ----a-w c:\windows\system32\mui\0415\xpob2res.dll
    + 2008-04-13 18:40:47 391,680 ----a-w c:\windows\system32\mui\0415\xpob2res.dll
    - 2004-08-04 06:56:30 194,560 ----a-w c:\windows\system32\mui\0415\xpsp1res.dll
    + 2008-04-13 18:35:26 194,560 ----a-w c:\windows\system32\mui\0415\xpsp1res.dll
    - 2004-08-04 06:56:30 759,808 ----a-w c:\windows\system32\mui\0415\xpsp2res.dll
    + 2008-04-13 18:38:05 759,808 ----a-w c:\windows\system32\mui\0415\xpsp2res.dll
    + 2008-04-13 18:39:52 641,024 ------w c:\windows\system32\mui\0415\xpsp3res.dll
    - 2004-08-04 06:56:24 409,600 ----a-w c:\windows\system32\mui\0416\xpob2res.dll
    + 2008-04-13 18:40:10 409,600 ----a-w c:\windows\system32\mui\0416\xpob2res.dll
    - 2004-08-04 06:56:30 192,512 ----a-w c:\windows\system32\mui\0416\xpsp1res.dll
    + 2008-04-13 18:35:08 192,512 ----a-w c:\windows\system32\mui\0416\xpsp1res.dll
    - 2004-08-04 06:56:30 752,128 ----a-w c:\windows\system32\mui\0416\xpsp2res.dll
    + 2008-04-13 18:35:43 752,128 ----a-w c:\windows\system32\mui\0416\xpsp2res.dll
    + 2008-04-13 18:38:56 620,032 ------w c:\windows\system32\mui\0416\xpsp3res.dll
    - 2004-08-04 06:56:30 190,464 ----a-w c:\windows\system32\mui\0418\xpsp1res.dll
    + 2008-04-13 18:35:27 190,464 ----a-w c:\windows\system32\mui\0418\xpsp1res.dll
    - 2004-08-04 06:56:24 427,008 ----a-w c:\windows\system32\mui\0419\xpob2res.dll
    + 2008-04-13 18:40:50 427,008 ----a-w c:\windows\system32\mui\0419\xpob2res.dll
    - 2004-08-04 06:56:30 192,512 ----a-w c:\windows\system32\mui\0419\xpsp1res.dll
    + 2008-04-13 18:35:27 192,512 ----a-w c:\windows\system32\mui\0419\xpsp1res.dll
    - 2004-08-04 06:56:30 736,768 ----a-w c:\windows\system32\mui\0419\xpsp2res.dll
    + 2008-04-13 18:38:28 736,768 ----a-w c:\windows\system32\mui\0419\xpsp2res.dll
    + 2008-04-13 18:39:56 627,200 ------w c:\windows\system32\mui\0419\xpsp3res.dll
    - 2004-08-04 06:56:30 188,928 ----a-w c:\windows\system32\mui\041a\xpsp1res.dll
    + 2008-04-13 18:35:21 188,928 ----a-w c:\windows\system32\mui\041a\xpsp1res.dll
    - 2004-08-04 06:56:24 405,504 ----a-w c:\windows\system32\mui\041b\xpob2res.dll
    + 2008-04-13 18:40:52 405,504 ----a-w c:\windows\system32\mui\041b\xpob2res.dll
    - 2004-08-04 06:56:30 193,024 ----a-w c:\windows\system32\mui\041b\xpsp1res.dll
    + 2008-04-13 18:35:28 192,512 ----a-w c:\windows\system32\mui\041b\xpsp1res.dll
    - 2004-08-04 06:56:30 757,248 ----a-w c:\windows\system32\mui\041b\xpsp2res.dll
    + 2008-04-13 18:38:37 757,248 ----a-w c:\windows\system32\mui\041b\xpsp2res.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\system32\mui\041b\xpsp3res.dll
    - 2004-08-04 06:56:24 363,520 ----a-w c:\windows\system32\mui\041D\xpob2res.dll
    + 2008-04-13 18:40:56 363,008 ----a-w c:\windows\system32\mui\041D\xpob2res.dll
    - 2004-08-04 06:56:30 188,928 ----a-w c:\windows\system32\mui\041D\xpsp1res.dll
    + 2008-04-13 18:35:28 188,928 ----a-w c:\windows\system32\mui\041D\xpsp1res.dll
    - 2004-08-04 06:56:30 724,992 ----a-w c:\windows\system32\mui\041D\xpsp2res.dll
    + 2008-04-13 18:38:47 724,480 ----a-w c:\windows\system32\mui\041D\xpsp2res.dll
    + 2008-04-13 18:40:05 590,848 ------w c:\windows\system32\mui\041D\xpsp3res.dll
    - 2004-08-04 06:56:30 188,416 ----a-w c:\windows\system32\mui\041e\xpsp1res.dll
    + 2008-04-13 18:35:29 188,416 ----a-w c:\windows\system32\mui\041e\xpsp1res.dll
    - 2004-08-04 06:56:24 390,144 ----a-w c:\windows\system32\mui\041f\xpob2res.dll
    + 2008-04-13 18:41:00 390,144 ----a-w c:\windows\system32\mui\041f\xpob2res.dll
    - 2004-08-04 06:56:30 188,928 ----a-w c:\windows\system32\mui\041f\xpsp1res.dll
    + 2008-04-13 18:35:30 188,928 ----a-w c:\windows\system32\mui\041f\xpsp1res.dll
    - 2004-08-04 06:56:32 724,480 ----a-w c:\windows\system32\mui\041f\xpsp2res.dll
    + 2008-04-13 18:38:51 724,480 ----a-w c:\windows\system32\mui\041f\xpsp2res.dll
    + 2008-04-13 18:40:09 592,896 ------w c:\windows\system32\mui\041f\xpsp3res.dll
    - 2004-08-04 06:56:24 408,576 ----a-w c:\windows\system32\mui\0424\xpob2res.dll
    + 2008-04-13 18:40:56 408,576 ----a-w c:\windows\system32\mui\0424\xpob2res.dll
    - 2004-08-04 06:56:30 192,512 ----a-w c:\windows\system32\mui\0424\xpsp1res.dll
    + 2008-04-13 18:35:28 192,512 ----a-w c:\windows\system32\mui\0424\xpsp1res.dll
    - 2004-08-04 06:56:32 732,160 ----a-w c:\windows\system32\mui\0424\xpsp2res.dll
    + 2008-04-13 18:38:36 732,160 ----a-w c:\windows\system32\mui\0424\xpsp2res.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\system32\mui\0424\xpsp3res.dll
    - 2004-08-04 06:56:30 187,392 ----a-w c:\windows\system32\mui\0425\xpsp1res.dll
    + 2008-04-13 18:35:11 186,880 ----a-w c:\windows\system32\mui\0425\xpsp1res.dll
    - 2004-08-04 06:56:30 188,928 ----a-w c:\windows\system32\mui\0426\xpsp1res.dll
    + 2008-04-13 18:35:24 188,928 ----a-w c:\windows\system32\mui\0426\xpsp1res.dll
    - 2004-08-04 06:56:30 189,952 ----a-w c:\windows\system32\mui\0427\xpsp1res.dll
    + 2008-04-13 18:35:24 189,952 ----a-w c:\windows\system32\mui\0427\xpsp1res.dll
    - 2004-08-04 06:56:24 270,336 ----a-w c:\windows\system32\mui\0804\xpob2res.dll
    + 2008-04-13 18:40:24 270,336 ----a-w c:\windows\system32\mui\0804\xpob2res.dll
    - 2004-08-04 06:56:30 161,280 ----a-w c:\windows\system32\mui\0804\xpsp1res.dll
    + 2008-04-13 18:35:06 161,280 ----a-w c:\windows\system32\mui\0804\xpsp1res.dll
    - 2004-08-04 06:56:32 470,016 ----a-w c:\windows\system32\mui\0804\xpsp2res.dll
    + 2008-04-13 18:35:54 470,016 ----a-w c:\windows\system32\mui\0804\xpsp2res.dll
    + 2008-04-13 18:39:03 322,560 ------w c:\windows\system32\mui\0804\xpsp3res.dll
    - 2004-08-04 06:56:24 435,200 ----a-w c:\windows\system32\mui\0816\xpob2res.dll
    + 2008-04-13 18:40:48 435,200 ----a-w c:\windows\system32\mui\0816\xpob2res.dll
    - 2004-08-04 06:56:30 194,560 ----a-w c:\windows\system32\mui\0816\xpsp1res.dll
    + 2008-04-13 18:35:26 194,560 ----a-w c:\windows\system32\mui\0816\xpsp1res.dll
    - 2004-08-04 06:56:32 751,616 ----a-w c:\windows\system32\mui\0816\xpsp2res.dll
    + 2008-04-13 18:38:06 751,616 ----a-w c:\windows\system32\mui\0816\xpsp2res.dll
    + 2008-04-13 18:39:53 639,488 ------w c:\windows\system32\mui\0816\xpsp3res.dll
    - 2004-08-04 06:56:24 446,464 ----a-w c:\windows\system32\mui\0C0A\xpob2res.dll
    + 2008-04-13 18:40:30 446,464 ----a-w c:\windows\system32\mui\0C0A\xpob2res.dll
    - 2004-08-04 06:56:30 196,096 ----a-w c:\windows\system32\mui\0C0A\xpsp1res.dll
    + 2008-04-13 18:35:11 196,096 ----a-w c:\windows\system32\mui\0C0A\xpsp1res.dll
    - 2004-08-04 06:56:32 773,632 ----a-w c:\windows\system32\mui\0C0A\xpsp2res.dll
    + 2008-04-13 18:36:38 773,632 ----a-w c:\windows\system32\mui\0C0A\xpsp2res.dll
    + 2008-04-13 18:39:13 648,704 ------w c:\windows\system32\mui\0C0A\xpsp3res.dll
    - 2004-08-04 06:56:46 90,624 ----a-w c:\windows\system32\mydocs.dll
    + 2008-04-14 00:12:01 90,624 ----a-w c:\windows\system32\mydocs.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\system32\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\system32\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\system32\napstat.exe
    - 2004-08-04 06:56:56 53,760 ----a-w c:\windows\system32\narrator.exe
    + 2008-04-14 00:12:29 53,760 ----a-w c:\windows\system32\narrator.exe
    - 2004-08-04 06:56:46 36,352 ----a-w c:\windows\system32\ncobjapi.dll
    + 2008-04-14 00:12:01 36,352 ----a-w c:\windows\system32\ncobjapi.dll
    - 2004-08-04 06:56:46 17,920 ----a-w c:\windows\system32\nddeapi.dll
    + 2008-04-14 00:12:01 17,920 ----a-w c:\windows\system32\nddeapi.dll
    - 2004-08-04 07:56:54 4,096 ----a-w c:\windows\system32\nddeapir.exe
    + 2008-04-14 00:12:29 4,096 ----a-w c:\windows\system32\nddeapir.exe
    - 2004-08-04 06:56:46 18,944 ----a-w c:\windows\system32\nddenb32.dll
    + 2008-04-14 00:12:01 18,944 ----a-w c:\windows\system32\nddenb32.dll
    - 2004-08-04 07:56:54 42,496 ----a-w c:\windows\system32\net.exe
    + 2008-04-14 00:12:29 42,496 ----a-w c:\windows\system32\net.exe
    - 2004-08-04 06:56:56 124,928 ----a-w c:\windows\system32\net1.exe
    + 2008-04-14 00:12:29 124,928 ----a-w c:\windows\system32\net1.exe
    - 2004-08-04 06:56:46 332,288 ----a-w c:\windows\system32\netapi32.dll
    + 2008-10-15 16:34:24 337,408 ----a-w c:\windows\system32\netapi32.dll
    - 2004-08-04 06:56:46 622,080 ----a-w c:\windows\system32\netcfgx.dll
    + 2008-04-14 00:12:01 622,592 ----a-w c:\windows\system32\netcfgx.dll
    - 2004-08-04 07:56:54 111,104 ----a-w c:\windows\system32\netdde.exe
    + 2008-04-14 00:12:29 111,104 ----a-w c:\windows\system32\netdde.exe
    - 2004-08-04 06:56:46 139,264 ----a-w c:\windows\system32\netid.dll
    + 2008-04-14 00:12:01 139,264 ----a-w c:\windows\system32\netid.dll
    - 2004-08-04 06:56:46 407,040 ----a-w c:\windows\system32\netlogon.dll
    + 2008-04-14 00:12:01 407,040 ----a-w c:\windows\system32\netlogon.dll
    - 2004-08-04 06:56:46 198,144 ----a-w c:\windows\system32\netman.dll
    + 2008-04-14 00:12:01 198,144 ----a-w c:\windows\system32\netman.dll
    - 2004-08-04 06:56:46 875,008 ----a-w c:\windows\system32\netplwiz.dll
    + 2008-04-14 00:12:01 875,008 ----a-w c:\windows\system32\netplwiz.dll
    - 2004-08-04 06:56:46 12,288 ----a-w c:\windows\system32\netrap.dll
    + 2008-04-14 00:12:01 11,776 ----a-w c:\windows\system32\netrap.dll
    - 2004-08-04 07:02:46 329,728 ----a-w c:\windows\system32\netsetup.exe
    + 2008-04-14 00:16:51 329,728 ----a-w c:\windows\system32\netsetup.exe
    - 2004-08-04 06:56:56 86,016 ----a-w c:\windows\system32\netsh.exe
    + 2008-04-14 00:12:29 86,016 ----a-w c:\windows\system32\netsh.exe
    - 2004-08-04 06:56:46 1,708,032 ----a-w c:\windows\system32\netshell.dll
    + 2008-04-14 00:12:02 1,703,936 ----a-w c:\windows\system32\netshell.dll
    - 2004-08-04 06:56:56 36,864 ----a-w c:\windows\system32\netstat.exe
    + 2008-04-14 00:12:29 36,864 ----a-w c:\windows\system32\netstat.exe
    - 2004-08-04 06:56:46 80,896 ----a-w c:\windows\system32\netui0.dll
    + 2008-04-14 00:12:02 80,896 ----a-w c:\windows\system32\netui0.dll
    - 2004-08-04 06:56:46 245,760 ----a-w c:\windows\system32\netui1.dll
    + 2008-04-14 00:12:02 245,760 ----a-w c:\windows\system32\netui1.dll
    - 2004-08-04 06:56:46 248,832 ----a-w c:\windows\system32\newdev.dll
    + 2008-04-14 00:12:02 247,808 ----a-w c:\windows\system32\newdev.dll
    - 2004-08-04 06:56:46 103,936 ----a-w c:\windows\system32\nlhtml.dll
     
    scorpion657,
    #16
  18. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    + 2008-04-14 00:12:02 98,304 ----a-w c:\windows\system32\nlhtml.dll
    - 2004-08-04 10:00:00 28,672 ----a-w c:\windows\system32\nmmkcert.dll
    + 2008-04-14 00:12:02 28,672 ----a-w c:\windows\system32\nmmkcert.dll
    - 2004-08-04 07:56:54 69,120 ----a-w c:\windows\system32\notepad.exe
    + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\system32\notepad.exe
    - 2004-08-04 06:56:46 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
    + 2008-04-14 00:12:01 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
    - 2004-08-04 06:56:56 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
    + 2008-04-14 00:12:29 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
    - 2004-08-04 06:56:46 54,784 ----a-w c:\windows\system32\npptools.dll
    + 2008-04-14 00:12:02 54,784 ----a-w c:\windows\system32\npptools.dll
    - 2004-08-04 06:56:56 76,800 ----a-w c:\windows\system32\nslookup.exe
    + 2008-04-14 00:12:29 76,800 ----a-w c:\windows\system32\nslookup.exe
    - 2004-08-04 06:56:56 1,200,128 ----a-w c:\windows\system32\ntbackup.exe
    + 2008-04-14 00:12:30 1,200,640 ----a-w c:\windows\system32\ntbackup.exe
    - 2004-08-04 06:56:38 708,096 ----a-w c:\windows\system32\ntdll.dll
    + 2008-04-14 00:11:24 706,048 ----a-w c:\windows\system32\ntdll.dll
    - 2004-08-04 06:56:46 67,072 ----a-w c:\windows\system32\ntdsapi.dll
    + 2008-04-14 00:12:02 67,072 ----a-w c:\windows\system32\ntdsapi.dll
    - 2004-08-04 07:05:44 2,015,232 ----a-w c:\windows\system32\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,023,936 ----a-w c:\windows\system32\ntkrnlpa.exe
    - 2004-08-04 06:56:46 43,520 ----a-w c:\windows\system32\ntlanman.dll
    + 2008-04-14 00:12:02 44,032 ----a-w c:\windows\system32\ntlanman.dll
    - 2004-08-04 06:56:46 8,192 ----a-w c:\windows\system32\ntlsapi.dll
    + 2008-04-14 00:12:02 8,192 ----a-w c:\windows\system32\ntlsapi.dll
    - 2004-08-04 06:56:46 118,784 ----a-w c:\windows\system32\ntmarta.dll
    + 2008-04-14 00:12:02 118,784 ----a-w c:\windows\system32\ntmarta.dll
    - 2004-08-04 06:56:46 40,960 ----a-w c:\windows\system32\ntmsapi.dll
    + 2008-04-14 00:12:02 40,960 ----a-w c:\windows\system32\ntmsapi.dll
    - 2004-08-04 06:56:46 179,712 ----a-w c:\windows\system32\ntmsdba.dll
    + 2008-04-14 00:12:02 179,200 ----a-w c:\windows\system32\ntmsdba.dll
    - 2004-08-04 06:56:46 488,448 ----a-w c:\windows\system32\ntmsmgr.dll
    + 2008-04-14 00:12:02 488,448 ----a-w c:\windows\system32\ntmsmgr.dll
    - 2004-08-04 06:56:46 435,200 ----a-w c:\windows\system32\ntmssvc.dll
    + 2008-04-14 00:12:02 435,200 ----a-w c:\windows\system32\ntmssvc.dll
    - 2004-08-04 05:18:32 2,148,352 ----a-w c:\windows\system32\ntoskrnl.exe
    + 2008-08-14 10:09:26 2,145,280 ----a-w c:\windows\system32\ntoskrnl.exe
    - 2004-08-04 06:56:46 91,136 ----a-w c:\windows\system32\ntprint.dll
    + 2008-04-14 00:12:02 91,136 ----a-w c:\windows\system32\ntprint.dll
    - 2004-08-04 06:56:46 143,872 ----a-w c:\windows\system32\ntshrui.dll
    + 2008-04-14 00:12:02 143,360 ----a-w c:\windows\system32\ntshrui.dll
    - 2004-08-04 07:56:54 419,840 ----a-w c:\windows\system32\ntvdm.exe
    + 2008-04-14 00:12:30 420,864 ----a-w c:\windows\system32\ntvdm.exe
    - 2001-08-23 13:00:00 13,312 ----a-w c:\windows\system32\ntvdmd.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\system32\nv4_disp.dll
    - 2001-08-23 13:00:00 58,880 ----a-w c:\windows\system32\nwapi32.dll
    + 2008-04-14 00:12:02 64,000 ----a-w c:\windows\system32\nwapi32.dll
    - 2004-08-04 06:56:46 144,384 ----a-w c:\windows\system32\nwprovau.dll
    + 2008-04-14 00:12:02 142,336 ----a-w c:\windows\system32\nwprovau.dll
    - 2004-08-04 06:56:46 64,000 ----a-w c:\windows\system32\nwwks.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\nwwks.dll
    - 2004-08-04 06:56:46 266,752 ----a-w c:\windows\system32\oakley.dll
    + 2008-04-14 00:12:02 270,336 ----a-w c:\windows\system32\oakley.dll
    - 2004-08-04 06:56:46 285,696 ----a-w c:\windows\system32\objsel.dll
    + 2008-04-14 00:12:02 286,208 ----a-w c:\windows\system32\objsel.dll
    - 2004-08-04 06:56:46 96,256 ----a-w c:\windows\system32\occache.dll
    + 2008-04-14 00:12:02 96,256 ----a-w c:\windows\system32\occache.dll
    - 2001-08-23 13:00:00 60,928 ----a-w c:\windows\system32\ocmanage.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\ocmanage.dll
    - 2004-08-04 06:56:46 249,856 ----a-w c:\windows\system32\odbc32.dll
    + 2008-04-14 00:12:02 249,856 ----a-w c:\windows\system32\odbc32.dll
    - 2004-08-04 06:56:46 16,384 ----a-w c:\windows\system32\odbc32gt.dll
    + 2008-04-14 00:12:02 16,384 ----a-w c:\windows\system32\odbc32gt.dll
    - 2004-08-04 06:56:56 32,768 ----a-w c:\windows\system32\odbcad32.exe
    + 2008-04-14 00:12:30 32,768 ----a-w c:\windows\system32\odbcad32.exe
    - 2004-08-04 06:56:46 24,576 ----a-w c:\windows\system32\odbcbcp.dll
    + 2008-04-14 00:12:02 24,576 ----a-w c:\windows\system32\odbcbcp.dll
    - 2004-08-04 06:56:46 135,168 ----a-w c:\windows\system32\odbcconf.dll
    + 2008-04-14 00:12:02 135,168 ----a-w c:\windows\system32\odbcconf.dll
    - 2004-08-04 06:56:56 69,632 ----a-w c:\windows\system32\odbcconf.exe
    + 2008-04-14 00:12:30 69,632 ----a-w c:\windows\system32\odbcconf.exe
    - 2004-08-04 06:56:46 106,496 ----a-w c:\windows\system32\odbccp32.dll
    + 2008-04-14 00:12:02 106,496 ----a-w c:\windows\system32\odbccp32.dll
    - 2004-08-04 06:56:46 65,536 ----a-w c:\windows\system32\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccr32.dll
    - 2004-08-04 06:56:46 65,536 ----a-w c:\windows\system32\odbccu32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccu32.dll
    - 2004-08-04 06:56:24 94,208 ----a-w c:\windows\system32\odbcint.dll
    + 2008-04-13 17:26:05 94,208 ----a-w c:\windows\system32\odbcint.dll
    - 2004-08-04 06:56:24 53,279 ----a-w c:\windows\system32\odbcji32.dll
    + 2008-04-14 00:10:31 53,279 ----a-w c:\windows\system32\odbcji32.dll
    - 2004-08-04 06:56:46 278,559 ----a-w c:\windows\system32\odbcjt32.dll
    + 2008-04-14 00:12:02 278,559 ----a-w c:\windows\system32\odbcjt32.dll
    - 2004-08-04 06:56:24 12,288 ----a-w c:\windows\system32\odbcp32r.dll
    + 2008-04-13 17:26:05 12,288 ----a-w c:\windows\system32\odbcp32r.dll
    - 2004-08-04 06:56:46 147,456 ----a-w c:\windows\system32\odbctrac.dll
    + 2008-04-14 00:12:02 147,456 ----a-w c:\windows\system32\odbctrac.dll
    - 2004-08-04 06:56:46 20,511 ----a-w c:\windows\system32\oddbse32.dll
    + 2008-04-14 00:12:02 20,511 ----a-w c:\windows\system32\oddbse32.dll
    - 2004-08-04 06:56:46 20,510 ----a-w c:\windows\system32\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odexl32.dll
    - 2004-08-04 06:56:46 20,510 ----a-w c:\windows\system32\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odfox32.dll
    - 2004-08-04 06:56:46 20,510 ----a-w c:\windows\system32\odpdx32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odpdx32.dll
    - 2004-08-04 06:56:46 20,511 ----a-w c:\windows\system32\odtext32.dll
    + 2008-04-14 00:12:02 20,511 ----a-w c:\windows\system32\odtext32.dll
    - 2004-08-04 06:56:46 120,832 ----a-w c:\windows\system32\offfilt.dll
    + 2008-04-14 00:12:02 192,000 ----a-w c:\windows\system32\offfilt.dll
    - 2004-08-04 06:56:46 1,281,536 ----a-w c:\windows\system32\ole32.dll
    + 2008-04-14 00:12:02 1,287,168 ----a-w c:\windows\system32\ole32.dll
    - 2004-08-04 06:56:46 553,472 ----a-w c:\windows\system32\oleaut32.dll
    + 2008-04-14 00:12:02 551,936 ----a-w c:\windows\system32\oleaut32.dll
    - 2001-08-23 13:00:00 68,608 ----a-w c:\windows\system32\olecli32.dll
    + 2008-04-14 00:12:02 74,752 ----a-w c:\windows\system32\olecli32.dll
    - 2001-08-23 13:00:00 34,304 ----a-w c:\windows\system32\olecnv32.dll
    + 2008-04-14 00:12:02 37,376 ----a-w c:\windows\system32\olecnv32.dll
    - 2001-08-23 13:00:00 117,760 ----a-w c:\windows\system32\oledlg.dll
    + 2008-04-14 00:12:02 122,880 ----a-w c:\windows\system32\oledlg.dll
    - 2004-08-04 06:56:46 107,008 ----a-w c:\windows\system32\oleprn.dll
    + 2008-04-14 00:12:02 107,008 ----a-w c:\windows\system32\oleprn.dll
    - 2004-08-04 06:56:46 83,456 ----a-w c:\windows\system32\olepro32.dll
    + 2008-04-14 00:12:02 84,992 ----a-w c:\windows\system32\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\system32\onex.dll
    - 2004-08-04 10:00:00 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll
    + 2008-04-14 00:12:00 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll
    - 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
    + 2008-04-14 00:12:00 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
    - 2004-08-04 10:00:00 561,664 ----a-w c:\windows\system32\oobe\msobmain.dll
    + 2008-04-14 00:12:00 565,248 ----a-w c:\windows\system32\oobe\msobmain.dll
    - 2004-08-04 10:00:00 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
    + 2008-04-14 00:12:00 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
    - 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\oobe\msobweb.dll
    + 2008-04-14 00:12:00 19,456 ----a-w c:\windows\system32\oobe\msobweb.dll
    - 2001-08-23 13:00:00 28,160 ----a-w c:\windows\system32\oobe\msoobe.exe
    + 2008-04-14 00:12:28 29,184 ----a-w c:\windows\system32\oobe\msoobe.exe
    - 2004-08-04 06:56:56 51,200 ----a-w c:\windows\system32\oobe\oobebaln.exe
    + 2008-04-14 00:12:31 51,200 ----a-w c:\windows\system32\oobe\oobebaln.exe
    - 2004-08-04 06:56:56 67,584 ----a-w c:\windows\system32\openfiles.exe
    + 2008-04-14 00:12:31 67,584 ----a-w c:\windows\system32\openfiles.exe
    - 2004-08-04 06:56:46 713,728 ----a-w c:\windows\system32\opengl32.dll
    + 2008-04-14 00:12:02 713,728 ----a-w c:\windows\system32\opengl32.dll
    - 2004-08-04 06:56:56 215,552 ----a-w c:\windows\system32\osk.exe
    + 2008-04-14 00:12:31 215,552 ----a-w c:\windows\system32\osk.exe
    - 2004-08-04 06:56:46 67,584 ----a-w c:\windows\system32\osuninst.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\osuninst.dll
    - 2004-08-04 06:56:46 116,224 ----a-w c:\windows\system32\p2p.dll
    + 2008-04-14 00:12:02 153,600 ----a-w c:\windows\system32\p2p.dll
    - 2004-08-04 06:56:46 86,016 ----a-w c:\windows\system32\p2pgasvc.dll
    + 2008-04-14 00:12:02 105,472 ----a-w c:\windows\system32\p2pgasvc.dll
    - 2004-08-04 06:56:46 312,320 ----a-w c:\windows\system32\p2pgraph.dll
    + 2008-04-14 00:12:02 313,856 ----a-w c:\windows\system32\p2pgraph.dll
    - 2004-08-04 06:56:46 88,064 ----a-w c:\windows\system32\p2pnetsh.dll
    + 2008-04-14 00:12:02 115,712 ----a-w c:\windows\system32\p2pnetsh.dll
    - 2004-08-04 06:56:46 526,848 ----a-w c:\windows\system32\p2psvc.dll
    + 2008-04-14 00:12:02 554,496 ----a-w c:\windows\system32\p2psvc.dll
    - 2004-08-04 06:56:56 58,368 ----a-w c:\windows\system32\packager.exe
    + 2008-04-14 00:12:31 58,368 ----a-w c:\windows\system32\packager.exe
    - 2004-08-04 06:56:46 62,976 ----a-w c:\windows\system32\pautoenr.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\pautoenr.dll
    - 2004-08-04 06:56:46 283,648 ----a-w c:\windows\system32\pdh.dll
    + 2008-04-14 00:12:02 284,160 ----a-w c:\windows\system32\pdh.dll
    - 2009-02-18 05:22:17 37,256 ----a-w c:\windows\system32\perfc009.dat
    + 2009-02-18 14:20:11 37,256 ----a-w c:\windows\system32\perfc009.dat
    - 2004-08-04 06:56:46 39,936 ----a-w c:\windows\system32\perfctrs.dll
    + 2008-04-14 00:12:02 39,936 ----a-w c:\windows\system32\perfctrs.dll
    - 2004-08-04 06:56:46 26,624 ----a-w c:\windows\system32\perfdisk.dll
    + 2008-04-14 00:12:02 26,624 ----a-w c:\windows\system32\perfdisk.dll
    - 2009-02-18 05:22:17 302,446 ----a-w c:\windows\system32\perfh009.dat
    + 2009-02-18 14:20:11 302,446 ----a-w c:\windows\system32\perfh009.dat
    - 2004-08-04 07:56:55 15,872 ----a-w c:\windows\system32\perfmon.exe
    + 2008-04-14 00:12:31 15,872 ----a-w c:\windows\system32\perfmon.exe
    - 2001-08-23 13:00:00 16,896 ----a-w c:\windows\system32\perfnet.dll
    + 2008-04-14 00:12:02 17,920 ----a-w c:\windows\system32\perfnet.dll
    - 2004-08-04 06:56:46 25,088 ----a-w c:\windows\system32\perfos.dll
    + 2008-04-14 00:12:02 25,088 ----a-w c:\windows\system32\perfos.dll
    - 2004-08-04 06:56:46 34,816 ----a-w c:\windows\system32\perfproc.dll
    + 2008-04-14 00:12:02 34,816 ----a-w c:\windows\system32\perfproc.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\system32\photometadatahandler.dll
    - 2004-08-04 06:56:46 176,128 ----a-w c:\windows\system32\photowiz.dll
    + 2008-04-14 00:12:02 176,128 ----a-w c:\windows\system32\photowiz.dll
    - 2004-08-04 07:05:44 35,328 ----a-w c:\windows\system32\pid.dll
    + 2008-04-14 00:12:02 35,328 ----a-w c:\windows\system32\pid.dll
    - 2004-08-04 06:56:36 24,064 ----a-w c:\windows\system32\pidgen.dll
    + 2008-04-14 00:11:09 24,064 ----a-w c:\windows\system32\pidgen.dll
    - 2004-08-04 06:56:56 17,920 ----a-w c:\windows\system32\ping.exe
    + 2008-04-14 00:12:31 17,920 ----a-w c:\windows\system32\ping.exe
    - 2004-08-04 07:05:44 15,360 ----a-w c:\windows\system32\pjlmon.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\pjlmon.dll
    - 2004-08-04 06:56:46 39,424 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-04-14 00:12:02 39,424 ----a-w c:\windows\system32\pngfilt.dll
    - 2004-08-04 06:56:46 48,640 ----a-w c:\windows\system32\pnrpnsp.dll
    + 2008-04-14 00:12:02 58,880 ----a-w c:\windows\system32\pnrpnsp.dll
    - 2004-08-04 06:56:46 105,472 ----a-w c:\windows\system32\polstore.dll
    + 2008-04-14 00:12:02 105,472 ----a-w c:\windows\system32\polstore.dll
    - 2004-08-04 06:56:56 49,152 ----a-w c:\windows\system32\powercfg.exe
    + 2008-04-14 00:12:31 49,152 ----a-w c:\windows\system32\powercfg.exe
    - 2004-08-04 06:56:46 17,408 ----a-w c:\windows\system32\powrprof.dll
    + 2008-04-14 00:12:03 17,408 ----a-w c:\windows\system32\powrprof.dll
    - 2004-08-04 06:56:46 560,640 ----a-w c:\windows\system32\printui.dll
    + 2008-04-14 00:12:03 560,640 ----a-w c:\windows\system32\printui.dll
    - 2004-08-04 06:56:46 27,648 ----a-w c:\windows\system32\profmap.dll
    + 2008-04-14 00:12:03 27,648 ----a-w c:\windows\system32\profmap.dll
    - 2004-08-04 06:56:56 109,568 ----a-w c:\windows\system32\progman.exe
    + 2008-04-14 00:12:31 109,568 ----a-w c:\windows\system32\progman.exe
    - 2004-08-04 06:56:56 50,176 ----a-w c:\windows\system32\proquota.exe
    + 2008-04-14 00:12:32 50,176 ----a-w c:\windows\system32\proquota.exe
    - 2004-08-04 06:56:56 9,216 ----a-w c:\windows\system32\proxycfg.exe
    + 2008-04-14 00:12:32 9,216 ----a-w c:\windows\system32\proxycfg.exe
    - 2004-08-04 06:56:46 23,040 ----a-w c:\windows\system32\psapi.dll
    + 2008-04-14 00:12:03 23,040 ----a-w c:\windows\system32\psapi.dll
    - 2004-08-04 06:56:46 96,768 ----a-w c:\windows\system32\psbase.dll
    + 2008-04-14 00:12:03 96,768 ----a-w c:\windows\system32\psbase.dll
    - 2004-08-04 06:56:46 43,520 ----a-w c:\windows\system32\pstorec.dll
    + 2008-04-14 00:12:03 43,520 ----a-w c:\windows\system32\pstorec.dll
    - 2004-08-04 06:56:46 34,304 ----a-w c:\windows\system32\pstorsvc.dll
    + 2008-04-14 00:12:03 34,304 ----a-w c:\windows\system32\pstorsvc.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\system32\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\system32\qagentrt.dll
    - 2004-08-04 06:56:46 237,568 ----a-w c:\windows\system32\qasf.dll
    + 2008-04-14 00:12:03 237,568 ----a-w c:\windows\system32\qasf.dll
    - 2004-08-04 06:56:46 192,512 ----a-w c:\windows\system32\qcap.dll
    + 2008-04-14 00:12:03 192,512 ----a-w c:\windows\system32\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\system32\qcliprov.dll
    - 2004-08-04 06:56:46 279,040 ----a-w c:\windows\system32\qdv.dll
    + 2008-04-14 00:12:03 279,040 ----a-w c:\windows\system32\qdv.dll
    - 2004-08-04 06:56:46 385,024 ----a-w c:\windows\system32\qdvd.dll
    + 2008-04-14 00:12:03 386,048 ----a-w c:\windows\system32\qdvd.dll
    - 2004-08-04 06:56:46 562,176 ----a-w c:\windows\system32\qedit.dll
    + 2008-04-14 00:12:03 562,176 ----a-w c:\windows\system32\qedit.dll
    - 2004-08-04 06:56:26 733,696 ----a-w c:\windows\system32\qedwipes.dll
    + 2008-04-13 17:21:32 733,696 ----a-w c:\windows\system32\qedwipes.dll
    - 2004-08-04 10:00:00 382,464 ----a-w c:\windows\system32\qmgr.dll
    + 2008-04-14 00:12:03 409,088 ----a-w c:\windows\system32\qmgr.dll
    - 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
    + 2008-04-14 00:12:03 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
    - 2004-08-04 06:56:56 20,480 ----a-w c:\windows\system32\qprocess.exe
    + 2008-04-14 00:12:32 19,968 ----a-w c:\windows\system32\qprocess.exe
    - 2004-08-04 06:56:46 1,287,680 ----a-w c:\windows\system32\quartz.dll
    + 2008-04-14 00:12:03 1,288,192 ----a-w c:\windows\system32\quartz.dll
    - 2004-08-04 06:56:46 1,435,648 ----a-w c:\windows\system32\query.dll
    + 2008-04-14 00:12:03 1,435,648 ----a-w c:\windows\system32\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\system32\qutil.dll
    - 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\racpldlg.dll
    + 2008-04-14 00:12:03 43,520 ----a-w c:\windows\system32\racpldlg.dll
    - 2004-08-04 06:56:46 8,192 ----a-w c:\windows\system32\rasadhlp.dll
    + 2008-04-14 00:12:03 7,680 ----a-w c:\windows\system32\rasadhlp.dll
    - 2004-08-04 06:56:46 236,544 ----a-w c:\windows\system32\rasapi32.dll
    + 2008-04-14 00:12:03 237,056 ----a-w c:\windows\system32\rasapi32.dll
    - 2004-08-04 06:56:46 89,088 ----a-w c:\windows\system32\rasauto.dll
    + 2008-04-14 00:12:03 88,576 ----a-w c:\windows\system32\rasauto.dll
    - 2004-08-04 06:56:46 69,632 ----a-w c:\windows\system32\raschap.dll
    + 2008-04-14 00:12:03 79,872 ----a-w c:\windows\system32\raschap.dll
    - 2004-08-04 06:56:46 657,920 ----a-w c:\windows\system32\rasdlg.dll
    + 2008-04-14 00:12:03 658,432 ----a-w c:\windows\system32\rasdlg.dll
    - 2004-08-04 06:56:46 61,440 ----a-w c:\windows\system32\rasman.dll
    + 2008-04-14 00:12:03 61,440 ----a-w c:\windows\system32\rasman.dll
    - 2004-08-04 06:56:46 174,080 ----a-w c:\windows\system32\rasmans.dll
    + 2008-04-14 00:12:03 186,368 ----a-w c:\windows\system32\rasmans.dll
    - 2004-08-04 06:56:56 56,832 ----a-w c:\windows\system32\rasphone.exe
    + 2008-04-14 00:12:32 56,832 ----a-w c:\windows\system32\rasphone.exe
    - 2004-08-04 06:56:46 206,336 ----a-w c:\windows\system32\rasppp.dll
    + 2008-04-14 00:12:03 210,944 ----a-w c:\windows\system32\rasppp.dll
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\system32\rasqec.dll
    - 2004-08-04 06:56:46 16,896 ----a-w c:\windows\system32\rassapi.dll
    + 2008-04-14 00:12:03 16,384 ----a-w c:\windows\system32\rassapi.dll
    - 2004-08-04 06:56:46 58,880 ----a-w c:\windows\system32\rastapi.dll
    + 2008-04-14 00:12:03 58,368 ----a-w c:\windows\system32\rastapi.dll
    - 2004-08-04 06:56:46 112,128 ----a-w c:\windows\system32\rastls.dll
    + 2008-04-14 00:12:03 150,016 ----a-w c:\windows\system32\rastls.dll
    - 2004-08-04 06:56:46 102,400 ----a-w c:\windows\system32\rcbdyctl.dll
    + 2008-04-14 00:12:03 102,400 ----a-w c:\windows\system32\rcbdyctl.dll
    - 2004-08-04 06:56:56 35,840 ----a-w c:\windows\system32\rcimlby.exe
    + 2008-04-14 00:12:32 35,840 ----a-w c:\windows\system32\rcimlby.exe
    - 2004-08-04 06:56:56 21,504 ----a-w c:\windows\system32\rcp.exe
    + 2008-04-14 00:12:32 21,504 ----a-w c:\windows\system32\rcp.exe
    - 2004-08-04 10:00:00 147,968 ----a-w c:\windows\system32\rdchost.dll
    + 2008-04-14 00:12:03 147,968 ----a-w c:\windows\system32\rdchost.dll
    - 2004-08-04 06:56:56 62,464 ----a-w c:\windows\system32\rdpclip.exe
    + 2008-04-14 00:12:32 62,976 ----a-w c:\windows\system32\rdpclip.exe
    - 2004-08-04 07:01:08 92,168 ----a-w c:\windows\system32\rdpdd.dll
    + 2008-04-14 00:13:22 92,424 ----a-w c:\windows\system32\rdpdd.dll
    - 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\rdpsnd.dll
    + 2008-04-14 00:12:04 19,968 ----a-w c:\windows\system32\rdpsnd.dll
    - 2004-08-04 10:00:00 87,176 ----a-w c:\windows\system32\rdpwsx.dll
    + 2008-04-14 00:13:22 87,176 ----a-w c:\windows\system32\rdpwsx.dll
    - 2004-08-04 06:56:56 13,824 ----a-w c:\windows\system32\rdsaddin.exe
    + 2008-04-14 00:12:32 13,824 ----a-w c:\windows\system32\rdsaddin.exe
    - 2004-08-04 06:56:56 67,072 ----a-w c:\windows\system32\rdshost.exe
    + 2008-04-14 00:12:32 67,072 ----a-w c:\windows\system32\rdshost.exe
    - 2004-08-04 06:56:56 50,176 ----a-w c:\windows\system32\reg.exe
    + 2008-04-14 00:12:32 50,176 ----a-w c:\windows\system32\reg.exe
    - 2004-08-04 06:56:46 49,664 ----a-w c:\windows\system32\regapi.dll
    + 2008-04-14 00:12:04 49,664 ----a-w c:\windows\system32\regapi.dll
    - 2004-08-04 06:56:46 59,904 ----a-w c:\windows\system32\regsvc.dll
    + 2008-04-14 00:12:04 59,904 ----a-w c:\windows\system32\regsvc.dll
    - 2004-08-04 06:56:56 11,776 ----a-w c:\windows\system32\regsvr32.exe
    + 2008-04-14 00:12:32 11,776 ----a-w c:\windows\system32\regsvr32.exe
    - 2004-08-04 06:56:46 397,824 ----a-w c:\windows\system32\regwizc.dll
    + 2008-04-14 00:12:04 397,824 ----a-w c:\windows\system32\regwizc.dll
    + 2004-08-04 04:59:20 36,096 ----a-w c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\intelppm.sys
    + 2004-08-04 04:59:20 36,096 ----a-w c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\intelppm.sys
    + 2004-08-12 21:45:54 137,728 ----a-w c:\windows\system32\ReinstallBackups\0015\DriverFiles\hdaudbus.sys
    - 2004-08-04 10:00:00 60,416 ----a-w c:\windows\system32\remotepg.dll
    + 2008-04-14 00:12:04 60,416 ----a-w c:\windows\system32\remotepg.dll
    - 2004-08-04 06:56:56 380,416 ----a-w c:\windows\system32\Restore\rstrui.exe
    + 2008-04-14 00:12:33 380,416 ----a-w c:\windows\system32\Restore\rstrui.exe
    - 2004-08-04 06:56:46 58,880 ----a-w c:\windows\system32\resutils.dll
    + 2008-04-14 00:12:04 58,880 ----a-w c:\windows\system32\resutils.dll
    - 2004-08-04 06:56:56 13,824 ----a-w c:\windows\system32\rexec.exe
    + 2008-04-14 00:12:33 13,824 ----a-w c:\windows\system32\rexec.exe
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\system32\rhttpaa.dll
    - 2004-08-04 06:56:46 431,616 ----a-w c:\windows\system32\riched20.dll
    + 2008-04-14 00:12:04 433,664 ----a-w c:\windows\system32\riched20.dll
    - 2004-08-04 06:56:46 581,120 ----a-w c:\windows\system32\rpcrt4.dll
    + 2008-04-14 00:12:04 584,704 ----a-w c:\windows\system32\rpcrt4.dll
    - 2004-08-04 06:56:46 395,776 ----a-w c:\windows\system32\rpcss.dll
    + 2008-04-14 00:12:04 399,360 ----a-w c:\windows\system32\rpcss.dll
    - 2004-08-04 04:31:44 152,576 ----a-w c:\windows\system32\rsaenh.dll
    + 2008-04-13 17:37:57 208,384 ----a-w c:\windows\system32\rsaenh.dll
    - 2004-08-04 06:56:56 14,848 ----a-w c:\windows\system32\rsh.exe
    + 2008-04-14 00:12:33 14,848 ----a-w c:\windows\system32\rsh.exe
    - 2004-08-04 06:56:46 39,936 ----a-w c:\windows\system32\rshx32.dll
    + 2008-04-14 00:12:04 39,936 ----a-w c:\windows\system32\rshx32.dll
    - 2004-08-04 06:56:46 18,944 ----a-w c:\windows\system32\rsmps.dll
    + 2008-04-14 00:12:04 18,944 ----a-w c:\windows\system32\rsmps.dll
    - 2004-08-04 06:56:56 107,520 ----a-w c:\windows\system32\rsnotify.exe
    + 2008-04-14 00:12:33 107,520 ----a-w c:\windows\system32\rsnotify.exe
    - 2001-08-23 13:00:00 90,112 ----a-w c:\windows\system32\rsvpsp.dll
    + 2008-04-14 00:12:04 92,672 ----a-w c:\windows\system32\rsvpsp.dll
    - 2004-08-04 06:56:56 77,312 ----a-w c:\windows\system32\rtcshare.exe
    + 2008-04-14 00:12:33 77,312 ----a-w c:\windows\system32\rtcshare.exe
    - 2004-08-04 06:56:46 31,744 ----a-w c:\windows\system32\rtipxmib.dll
    + 2008-04-14 00:12:04 31,744 ----a-w c:\windows\system32\rtipxmib.dll
    - 2004-08-04 06:56:46 44,032 ----a-w c:\windows\system32\rtutils.dll
    + 2008-04-14 00:12:04 44,032 ----a-w c:\windows\system32\rtutils.dll
    - 2004-08-04 06:56:56 33,280 ----a-w c:\windows\system32\rundll32.exe
    + 2008-04-14 00:12:33 33,280 ----a-w c:\windows\system32\rundll32.exe
    - 2004-08-04 06:56:56 14,336 ----a-w c:\windows\system32\runonce.exe
    + 2008-04-14 00:12:33 14,336 ----a-w c:\windows\system32\runonce.exe
    + 2008-04-14 00:12:04 397,056 ------w c:\windows\system32\s3gnb.dll
    - 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\safrcdlg.dll
    + 2008-04-14 00:12:04 43,520 ----a-w c:\windows\system32\safrcdlg.dll
    - 2004-08-04 10:00:00 29,696 ----a-w c:\windows\system32\safrdm.dll
    + 2008-04-14 00:12:04 29,696 ----a-w c:\windows\system32\safrdm.dll
    - 2004-08-04 10:00:00 45,568 ----a-w c:\windows\system32\safrslv.dll
    + 2008-04-14 00:12:04 45,568 ----a-w c:\windows\system32\safrslv.dll
    - 2004-08-04 06:56:46 64,000 ----a-w c:\windows\system32\samlib.dll
    + 2008-04-14 00:12:04 64,000 ----a-w c:\windows\system32\samlib.dll
    - 2004-08-04 06:56:46 415,744 ----a-w c:\windows\system32\samsrv.dll
    + 2008-04-14 00:12:04 415,744 ----a-w c:\windows\system32\samsrv.dll
    - 2004-08-04 06:56:56 13,312 ----a-w c:\windows\system32\savedump.exe
    + 2008-04-14 00:12:33 13,312 ----a-w c:\windows\system32\savedump.exe
    - 2004-08-04 06:56:46 270,848 ----a-w c:\windows\system32\sbe.dll
    + 2008-04-14 00:12:04 270,848 ----a-w c:\windows\system32\sbe.dll
    - 2004-08-04 06:56:46 159,232 ----a-w c:\windows\system32\sbeio.dll
    + 2008-04-14 00:12:04 159,232 ----a-w c:\windows\system32\sbeio.dll
    - 2004-08-04 06:56:46 69,632 ----a-w c:\windows\system32\scarddlg.dll
    + 2008-04-14 00:12:04 69,632 ----a-w c:\windows\system32\scarddlg.dll
    - 2004-08-04 06:56:56 95,744 ----a-w c:\windows\system32\scardsvr.exe
    + 2008-04-14 00:12:33 95,744 ----a-w c:\windows\system32\scardsvr.exe
    - 2004-08-04 06:56:46 171,008 ----a-w c:\windows\system32\sccsccp.dll
    + 2008-04-14 00:12:05 171,008 ----a-w c:\windows\system32\sccsccp.dll
    - 2004-08-04 06:56:46 180,224 ----a-w c:\windows\system32\scecli.dll
    + 2008-04-14 00:12:05 181,248 ----a-w c:\windows\system32\scecli.dll
    - 2004-08-04 06:56:46 313,856 ----a-w c:\windows\system32\scesrv.dll
    + 2008-04-14 00:12:05 314,880 ----a-w c:\windows\system32\scesrv.dll
    - 2004-08-04 06:56:46 144,896 ----a-w c:\windows\system32\schannel.dll
    + 2008-04-14 00:12:05 144,384 ----a-w c:\windows\system32\schannel.dll
    - 2004-08-04 10:00:00 190,976 ----a-w c:\windows\system32\schedsvc.dll
    + 2008-04-14 00:12:05 192,512 ----a-w c:\windows\system32\schedsvc.dll
    - 2004-08-04 06:56:56 121,856 ----a-w c:\windows\system32\schtasks.exe
    + 2008-04-14 00:12:34 121,856 ----a-w c:\windows\system32\schtasks.exe
    - 2004-08-04 06:56:46 20,992 ----a-w c:\windows\system32\sclgntfy.dll
    + 2008-04-14 00:12:05 20,480 ----a-w c:\windows\system32\sclgntfy.dll
    - 2004-08-04 06:56:58 9,216 ----a-w c:\windows\system32\scrnsave.scr
    + 2008-04-14 00:12:43 9,216 ----a-w c:\windows\system32\scrnsave.scr
    - 2004-08-04 06:56:46 159,744 ----a-w c:\windows\system32\scrobj.dll
    + 2008-04-14 00:12:05 180,224 ----a-w c:\windows\system32\scrobj.dll
    - 2004-08-04 06:56:46 151,552 ----a-w c:\windows\system32\scrrun.dll
    + 2008-04-14 00:12:05 172,032 ----a-w c:\windows\system32\scrrun.dll
    - 2004-08-04 06:56:56 77,312 ----a-w c:\windows\system32\sdbinst.exe
    + 2008-04-14 00:12:34 77,312 ----a-w c:\windows\system32\sdbinst.exe
    - 2004-08-04 06:56:46 29,184 ----a-w c:\windows\system32\sdhcinst.dll
    + 2008-04-14 00:12:05 29,184 ----a-w c:\windows\system32\sdhcinst.dll
    - 2004-08-04 06:56:56 18,432 ----a-w c:\windows\system32\secedit.exe
    + 2008-04-14 00:12:34 18,944 ----a-w c:\windows\system32\secedit.exe
    - 2004-08-04 06:56:46 18,944 ----a-w c:\windows\system32\seclogon.dll
    + 2008-04-14 00:12:05 18,944 ----a-w c:\windows\system32\seclogon.dll
    - 2004-08-04 06:56:46 55,808 ----a-w c:\windows\system32\secur32.dll
    + 2008-04-14 00:12:05 56,320 ----a-w c:\windows\system32\secur32.dll
    - 2004-08-04 06:56:46 5,632 ----a-w c:\windows\system32\security.dll
    + 2008-04-14 00:12:05 5,632 ----a-w c:\windows\system32\security.dll
    - 2004-08-04 06:56:46 29,184 ----a-w c:\windows\system32\sendcmsg.dll
    + 2008-04-14 00:12:05 29,184 ----a-w c:\windows\system32\sendcmsg.dll
    - 2004-08-04 06:56:46 55,296 ----a-w c:\windows\system32\sendmail.dll
    + 2008-04-14 00:12:05 54,784 ----a-w c:\windows\system32\sendmail.dll
    - 2004-08-04 06:56:46 38,912 ----a-w c:\windows\system32\sens.dll
    + 2008-04-14 00:12:05 39,424 ----a-w c:\windows\system32\sens.dll
    - 2004-08-04 06:56:46 6,656 ----a-w c:\windows\system32\sensapi.dll
    + 2008-04-14 00:12:05 7,168 ----a-w c:\windows\system32\sensapi.dll
    - 2004-08-04 10:00:00 56,320 ----a-w c:\windows\system32\servdeps.dll
    + 2008-04-14 00:12:05 56,320 ----a-w c:\windows\system32\servdeps.dll
    - 2004-08-04 06:56:56 108,032 ----a-w c:\windows\system32\services.exe
    + 2008-04-14 00:12:34 108,544 ----a-w c:\windows\system32\services.exe
    - 2004-08-04 06:56:58 140,800 ----a-w c:\windows\system32\sessmgr.exe
    + 2008-04-14 00:12:34 141,312 ----a-w c:\windows\system32\sessmgr.exe
    - 2004-08-04 06:56:58 31,232 ----a-w c:\windows\system32\sethc.exe
    + 2008-04-14 00:12:34 31,232 ----a-w c:\windows\system32\sethc.exe
    - 2004-08-04 06:56:58 23,040 ----a-w c:\windows\system32\setup.exe
    + 2008-04-14 00:12:34 23,040 ----a-w c:\windows\system32\setup.exe
    - 2001-08-23 13:00:00 259,584 ----a-w c:\windows\system32\Setup\comsetup.dll
    + 2008-04-14 00:11:51 274,944 ----a-w c:\windows\system32\Setup\comsetup.dll
    - 2004-08-04 06:56:44 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
    + 2008-04-14 00:11:53 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
    - 2004-08-04 06:56:44 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
    + 2008-04-14 00:11:54 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
    - 2004-08-04 06:56:44 505,344 ----a-w c:\windows\system32\Setup\iis.dll
    + 2008-04-14 00:11:54 505,344 ----a-w c:\windows\system32\Setup\iis.dll
    - 2001-08-23 13:00:00 115,712 ----a-w c:\windows\system32\Setup\imsinsnt.dll
    + 2008-04-14 00:11:54 123,392 ----a-w c:\windows\system32\Setup\imsinsnt.dll
    + 2008-04-14 00:11:56 8,192 ----a-w c:\windows\system32\Setup\koc.dll
    - 2004-08-04 06:56:44 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
    + 2008-04-14 00:11:56 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
    - 2001-08-23 13:00:00 82,432 ----a-w c:\windows\system32\Setup\msdtcstp.dll
    + 2008-04-14 00:11:59 90,112 ----a-w c:\windows\system32\Setup\msdtcstp.dll
    - 2004-08-04 06:56:44 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
    - 2004-08-04 06:56:44 169,984 ----a-w c:\windows\system32\Setup\msmqocm.dll
    + 2008-04-14 00:12:00 170,496 ----a-w c:\windows\system32\Setup\msmqocm.dll
    - 2004-08-04 06:56:46 77,312 ----a-w c:\windows\system32\Setup\netoc.dll
    + 2008-04-14 00:12:01 77,312 ----a-w c:\windows\system32\Setup\netoc.dll
    - 2004-08-04 06:56:46 62,976 ----a-w c:\windows\system32\Setup\ntoc.dll
    + 2008-04-14 00:12:02 62,976 ----a-w c:\windows\system32\Setup\ntoc.dll
    - 2004-08-04 06:56:46 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\Setup\ocgen.dll
    - 2004-08-04 06:56:46 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
    + 2008-04-14 00:12:02 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
    - 2004-08-04 06:56:46 101,376 ----a-w c:\windows\system32\Setup\setupqry.dll
    + 2008-04-14 00:12:05 101,376 ----a-w c:\windows\system32\Setup\setupqry.dll
    - 2004-08-04 06:56:48 33,792 ----a-w c:\windows\system32\Setup\tabletoc.dll
    + 2008-04-14 00:12:07 33,792 ----a-w c:\windows\system32\Setup\tabletoc.dll
    - 2004-08-04 06:56:48 121,856 ----a-w c:\windows\system32\Setup\tsoc.dll
    + 2008-04-14 00:12:07 130,048 ----a-w c:\windows\system32\Setup\tsoc.dll
    - 2004-08-04 06:56:46 983,552 ----a-w c:\windows\system32\setupapi.dll
    + 2008-04-14 10:42:06 985,088 ----a-w c:\windows\system32\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\system32\setupn.exe
    - 2004-08-04 06:56:46 5,120 ----a-w c:\windows\system32\sfc.dll
    + 2008-04-14 00:12:05 5,120 ----a-w c:\windows\system32\sfc.dll
    - 2004-08-04 06:56:46 140,288 ----a-w c:\windows\system32\sfc_os.dll
    + 2008-04-14 00:12:05 140,288 ----a-w c:\windows\system32\sfc_os.dll
    - 2004-08-04 06:56:46 1,580,544 ----a-w c:\windows\system32\sfcfiles.dll
    + 2008-04-14 00:12:05 1,614,848 ----a-w c:\windows\system32\sfcfiles.dll
    - 2004-08-04 06:56:28 549,376 ----a-w c:\windows\system32\shdoclc.dll
    + 2008-04-13 17:03:19 549,376 ----a-w c:\windows\system32\shdoclc.dll
    - 2004-08-04 06:56:46 1,483,264 ----a-w c:\windows\system32\shdocvw.dll
    + 2008-10-16 01:00:10 1,499,136 ----a-w c:\windows\system32\shdocvw.dll
    - 2004-08-04 06:56:46 8,384,000 ----a-w c:\windows\system32\shell32.dll
    + 2008-04-14 00:12:05 8,461,312 ----a-w c:\windows\system32\shell32.dll
    - 2004-08-04 06:56:46 25,088 ----a-w c:\windows\system32\shfolder.dll
    + 2008-04-14 00:12:05 25,088 ----a-w c:\windows\system32\shfolder.dll
    - 2004-08-04 06:56:46 68,096 ----a-w c:\windows\system32\shgina.dll
    + 2008-04-14 00:12:05 68,096 ----a-w c:\windows\system32\shgina.dll
    - 2004-08-04 06:56:46 65,536 ----a-w c:\windows\system32\shimeng.dll
    + 2008-04-14 00:12:05 65,024 ----a-w c:\windows\system32\shimeng.dll
    - 2004-08-04 06:56:46 438,272 ----a-w c:\windows\system32\shimgvw.dll
    + 2008-04-14 00:12:05 438,272 ----a-w c:\windows\system32\shimgvw.dll
    - 2004-08-04 06:56:46 473,600 ----a-w c:\windows\system32\shlwapi.dll
    + 2008-04-14 00:12:05 474,112 ----a-w c:\windows\system32\shlwapi.dll
    - 2004-08-04 06:56:46 151,552 ----a-w c:\windows\system32\shmedia.dll
    + 2008-04-14 00:12:05 152,064 ----a-w c:\windows\system32\shmedia.dll
    - 2004-08-04 06:56:58 42,496 ----a-w c:\windows\system32\shmgrate.exe
    + 2008-04-14 00:12:35 45,056 ----a-w c:\windows\system32\shmgrate.exe
    - 2004-08-04 06:56:58 77,824 ----a-w c:\windows\system32\shrpubw.exe
    + 2008-04-14 00:12:35 77,824 ----a-w c:\windows\system32\shrpubw.exe
    - 2004-08-04 06:56:46 27,648 ----a-w c:\windows\system32\shscrap.dll
    + 2008-04-14 00:12:05 27,648 ----a-w c:\windows\system32\shscrap.dll
    - 2004-08-04 06:56:46 134,656 ----a-w c:\windows\system32\shsvcs.dll
    + 2008-04-14 00:12:05 135,168 ----a-w c:\windows\system32\shsvcs.dll
    - 2004-08-04 06:56:58 19,456 ----a-w c:\windows\system32\shutdown.exe
    + 2008-04-14 00:12:35 19,456 ----a-w c:\windows\system32\shutdown.exe
    - 2004-08-04 06:56:46 13,312 ----a-w c:\windows\system32\sigtab.dll
    + 2008-04-14 00:12:05 13,312 ----a-w c:\windows\system32\sigtab.dll
    - 2004-08-04 06:56:58 70,144 ----a-w c:\windows\system32\sigverif.exe
    + 2008-04-14 00:12:35 70,144 ----a-w c:\windows\system32\sigverif.exe
    - 2004-08-04 06:56:58 26,112 ----a-w c:\windows\system32\skeys.exe
    + 2008-04-14 00:12:35 26,112 ----a-w c:\windows\system32\skeys.exe
    - 2004-08-04 06:56:46 25,088 ----a-w c:\windows\system32\slayerxp.dll
    + 2008-04-14 00:12:06 25,088 ----a-w c:\windows\system32\slayerxp.dll
    - 2004-08-04 06:56:46 98,304 ----a-w c:\windows\system32\slbiop.dll
    + 2008-04-14 00:12:06 98,304 ----a-w c:\windows\system32\slbiop.dll
    + 2008-04-14 00:12:06 73,832 ------w c:\windows\system32\slcoinst.dll
    + 2008-04-14 00:12:06 286,792 ------w c:\windows\system32\slextspk.dll
    + 2008-04-14 00:12:06 188,508 ------w c:\windows\system32\slgen.dll
    - 2004-08-04 07:56:56 32,866 ----a-w c:\windows\system32\slrundll.exe
    + 2008-04-14 00:12:35 32,866 ----a-w c:\windows\system32\slrundll.exe
    - 2004-08-04 07:56:56 73,796 ----a-w c:\windows\system32\slserv.exe
    + 2008-04-14 00:12:35 73,796 ----a-w c:\windows\system32\slserv.exe
    - 2004-08-04 06:56:58 8,192 ----a-w c:\windows\system32\smbinst.exe
    + 2008-04-14 00:12:35 8,192 ----a-w c:\windows\system32\smbinst.exe
    - 2004-08-04 06:56:46 363,008 ----a-w c:\windows\system32\smlogcfg.dll
    + 2008-04-14 00:12:06 362,496 ----a-w c:\windows\system32\smlogcfg.dll
    - 2004-08-04 06:56:58 89,600 ----a-w c:\windows\system32\smlogsvc.exe
    + 2008-04-14 00:12:35 89,600 ----a-w c:\windows\system32\smlogsvc.exe
    - 2004-08-04 06:56:58 50,688 ----a-w c:\windows\system32\smss.exe
    + 2008-04-14 00:12:36 50,688 ----a-w c:\windows\system32\smss.exe
    - 2004-08-04 06:56:58 131,584 ----a-w c:\windows\system32\sndrec32.exe
    + 2008-04-14 00:12:36 131,584 ----a-w c:\windows\system32\sndrec32.exe
    - 2004-08-04 06:56:46 18,944 ----a-w c:\windows\system32\snmpapi.dll
    + 2008-04-14 00:12:06 18,944 ----a-w c:\windows\system32\snmpapi.dll
    - 2004-08-04 06:56:46 182,272 ----a-w c:\windows\system32\snmpsnap.dll
    + 2008-04-14 00:12:06 182,272 ----a-w c:\windows\system32\snmpsnap.dll
    - 2001-08-23 12:00:00 23,552 ----a-w c:\windows\system32\sort.exe
    + 2008-04-14 00:12:36 24,576 ----a-w c:\windows\system32\sort.exe
    - 2004-08-04 07:56:56 8,192 ----a-w c:\windows\system32\spdwnwxp.exe
    + 2008-04-14 00:12:36 7,680 ----a-w c:\windows\system32\spdwnwxp.exe
    - 2004-08-04 06:56:58 538,624 ----a-w c:\windows\system32\spider.exe
    + 2008-04-14 00:12:36 538,624 ----a-w c:\windows\system32\spider.exe
    - 2004-08-04 04:59:36 12,800 ----a-w c:\windows\system32\spiisupd.exe
    + 2008-04-13 18:43:31 12,800 ----a-w c:\windows\system32\spiisupd.exe
    - 2007-11-30 12:39:22 17,272 ----a-w c:\windows\system32\spmsg.dll
    + 2007-11-30 11:18:51 17,272 ------w c:\windows\system32\spmsg.dll
    - 2004-08-04 06:56:58 11,776 ----a-w c:\windows\system32\spnpinst.exe
    + 2008-04-14 10:42:38 11,264 ----a-w c:\windows\system32\spnpinst.exe
    - 2004-08-04 05:56:44 87,552 ----a-w c:\windows\system32\spool\drivers\w32x86\3\HPFUD50.DLL
    + 2008-04-14 00:11:54 87,552 ----a-w c:\windows\system32\spool\drivers\w32x86\3\hpfud50.dll
    - 2004-03-22 20:17:04 765,680 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
    + 2007-04-09 18:24:04 758,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
    - 2004-03-22 20:17:10 42,224 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
    + 2007-04-09 18:23:58 46,472 ----a-w c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
    - 2004-08-04 17:26:48 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRV.DLL
    + 2008-04-14 00:12:07 373,248 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll
    - 2004-08-04 17:26:48 197,120 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
    + 2008-04-14 00:12:07 744,448 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll
    - 2004-08-04 17:26:36 619,520 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UNIRES.DLL
    + 2007-05-15 08:08:53 761,344 ----a-w c:\windows\system32\spool\drivers\w32x86\3\unires.dll
    + 2007-04-09 18:24:04 758,664 ----a-w c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
    + 2007-04-09 18:23:58 46,472 ----a-w c:\windows\system32\spool\drivers\w32x86\mdiui.dll
    - 2004-03-22 20:17:08 25,840 ----a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    + 2007-04-09 18:23:54 28,552 ----a-w c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    - 2004-08-04 06:56:46 74,752 ----a-w c:\windows\system32\spoolss.dll
    + 2008-04-14 00:12:06 75,264 ----a-w c:\windows\system32\spoolss.dll
    - 2004-08-04 06:56:58 57,856 ----a-w c:\windows\system32\spoolsv.exe
    + 2008-04-14 00:12:36 57,856 ----a-w c:\windows\system32\spoolsv.exe
    - 2006-09-25 21:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe
    + 2007-08-11 01:46:18 26,488 ----a-w c:\windows\system32\spupdsvc.exe
    - 2004-08-04 07:56:57 21,504 ----a-w c:\windows\system32\spupdwxp.exe
    + 2008-04-14 00:12:36 20,992 ----a-w c:\windows\system32\spupdwxp.exe
    - 2004-08-04 06:56:46 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
    + 2008-04-14 00:12:06 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
    - 2004-08-04 06:56:46 180,800 ----a-w c:\windows\system32\sqlunirl.dll
    + 2008-04-14 00:12:06 180,800 ----a-w c:\windows\system32\sqlunirl.dll
    - 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\srclient.dll
    + 2008-04-14 00:12:07 67,584 ----a-w c:\windows\system32\srclient.dll
    - 2004-08-04 10:00:00 239,104 ----a-w c:\windows\system32\srrstr.dll
    + 2008-04-14 00:12:07 239,104 ----a-w c:\windows\system32\srrstr.dll
    - 2004-08-04 10:00:00 170,496 ----a-w c:\windows\system32\srsvc.dll
    + 2008-04-14 00:12:07 171,008 ----a-w c:\windows\system32\srsvc.dll
    - 2004-08-04 06:56:46 96,768 ----a-w c:\windows\system32\srvsvc.dll
    + 2008-04-14 00:12:07 96,768 ----a-w c:\windows\system32\srvsvc.dll
    - 2004-08-04 06:56:58 704,512 ----a-w c:\windows\system32\ss3dfo.scr
    + 2008-04-14 00:12:43 704,512 ----a-w c:\windows\system32\ss3dfo.scr
    - 2004-08-04 06:56:58 19,968 ----a-w c:\windows\system32\ssbezier.scr
    + 2008-04-14 00:12:43 19,968 ----a-w c:\windows\system32\ssbezier.scr
    - 2004-08-04 06:56:46 34,816 ----a-w c:\windows\system32\ssdpapi.dll
    + 2008-04-14 00:12:07 34,816 ----a-w c:\windows\system32\ssdpapi.dll
    - 2004-08-04 06:56:46 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
    + 2008-04-14 00:12:07 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
    - 2004-08-04 06:56:58 393,216 ----a-w c:\windows\system32\ssflwbox.scr
    + 2008-04-14 00:12:43 393,216 ----a-w c:\windows\system32\ssflwbox.scr
    - 2004-08-04 06:56:58 20,992 ----a-w c:\windows\system32\ssmarque.scr
    + 2008-04-14 00:12:44 20,992 ----a-w c:\windows\system32\ssmarque.scr
    - 2004-08-04 06:56:58 47,104 ----a-w c:\windows\system32\ssmypics.scr
    + 2008-04-14 00:12:44 47,104 ----a-w c:\windows\system32\ssmypics.scr
    - 2004-08-04 06:56:58 18,944 ----a-w c:\windows\system32\ssmyst.scr
    + 2008-04-14 00:12:44 18,944 ----a-w c:\windows\system32\ssmyst.scr
    - 2004-08-04 06:56:58 610,304 ----a-w c:\windows\system32\sspipes.scr
    + 2008-04-14 00:12:44 610,304 ----a-w c:\windows\system32\sspipes.scr
    - 2004-08-04 06:56:58 14,336 ----a-w c:\windows\system32\ssstars.scr
    + 2008-04-14 00:12:44 14,336 ----a-w c:\windows\system32\ssstars.scr
    - 2004-08-04 06:56:58 679,936 ----a-w c:\windows\system32\sstext3d.scr
    + 2008-04-14 00:12:44 679,936 ----a-w c:\windows\system32\sstext3d.scr
    - 2004-08-04 10:00:00 54,272 ----a-w c:\windows\system32\stclient.dll
    + 2008-04-14 00:12:07 59,392 ----a-w c:\windows\system32\stclient.dll
    - 2004-08-04 06:56:46 67,584 ----a-w c:\windows\system32\sti.dll
    + 2008-04-14 00:12:07 68,096 ----a-w c:\windows\system32\sti.dll
    - 2004-08-04 06:56:46 136,704 ----a-w c:\windows\system32\sti_ci.dll
    + 2008-04-14 00:12:07 136,704 ----a-w c:\windows\system32\sti_ci.dll
    - 2004-08-04 06:56:58 14,848 ----a-w c:\windows\system32\stimon.exe
    + 2008-04-14 00:12:36 14,848 ----a-w c:\windows\system32\stimon.exe
    - 2004-08-04 06:56:46 121,856 ----a-w c:\windows\system32\stobject.dll
    + 2008-04-14 00:12:07 121,856 ----a-w c:\windows\system32\stobject.dll
    - 2004-08-04 00:56:46 74,752 ----a-w c:\windows\system32\storprop.dll
    + 2008-04-14 00:12:07 74,752 ----a-w c:\windows\system32\storprop.dll
    - 2004-08-04 06:56:46 246,302 ----a-w c:\windows\system32\strmdll.dll
    + 2008-10-03 10:02:42 247,326 ----a-w c:\windows\system32\strmdll.dll
    - 2004-08-04 06:56:46 75,776 ----a-w c:\windows\system32\strmfilt.dll
    + 2008-04-14 00:12:07 75,776 ----a-w c:\windows\system32\strmfilt.dll
    - 2004-08-04 06:56:58 14,336 ----a-w c:\windows\system32\svchost.exe
    + 2008-04-14 00:12:36 14,336 ----a-w c:\windows\system32\svchost.exe
    - 2004-08-04 06:56:48 713,216 ----a-w c:\windows\system32\sxs.dll
    + 2008-04-14 00:12:07 713,216 ----a-w c:\windows\system32\sxs.dll
    - 2004-08-04 06:56:48 57,856 ----a-w c:\windows\system32\synceng.dll
    + 2008-04-14 00:12:07 57,856 ----a-w c:\windows\system32\synceng.dll
    - 2004-08-04 06:56:48 191,488 ----a-w c:\windows\system32\syncui.dll
    + 2008-04-14 00:12:07 191,488 ----a-w c:\windows\system32\syncui.dll
    - 2004-08-04 06:56:58 105,984 ----a-w c:\windows\system32\sysocmgr.exe
    + 2008-04-14 00:12:37 106,496 ----a-w c:\windows\system32\sysocmgr.exe
    - 2004-08-04 06:56:48 984,576 ----a-w c:\windows\system32\syssetup.dll
    + 2008-04-14 00:12:07 990,208 ----a-w c:\windows\system32\syssetup.dll
    - 2001-08-23 13:00:00 68,096 ----a-w c:\windows\system32\systeminfo.exe
    + 2008-04-14 00:12:36 71,680 ----a-w c:\windows\system32\systeminfo.exe
    - 2004-08-04 06:56:48 210,432 ----a-w c:\windows\system32\t2embed.dll
    + 2008-04-14 00:12:07 117,760 ----a-w c:\windows\system32\t2embed.dll
    - 2004-08-04 06:56:48 858,624 ----a-w c:\windows\system32\tapi3.dll
    + 2008-04-14 00:12:07 858,624 ----a-w c:\windows\system32\tapi3.dll
    - 2004-08-04 06:56:48 181,760 ----a-w c:\windows\system32\tapi32.dll
    + 2008-04-14 00:12:07 181,760 ----a-w c:\windows\system32\tapi32.dll
    - 2004-08-04 06:56:48 246,272 ----a-w c:\windows\system32\tapisrv.dll
    + 2008-04-14 00:12:07 249,856 ----a-w c:\windows\system32\tapisrv.dll
    - 2001-08-23 13:00:00 72,192 ----a-w c:\windows\system32\taskkill.exe
    + 2008-04-14 00:12:37 76,288 ----a-w c:\windows\system32\taskkill.exe
    - 2001-08-23 13:00:00 72,192 ----a-w c:\windows\system32\tasklist.exe
    + 2008-04-14 00:12:37 77,824 ----a-w c:\windows\system32\tasklist.exe
    - 2004-08-04 06:56:58 135,680 ----a-w c:\windows\system32\taskmgr.exe
    + 2008-04-14 00:12:37 135,680 ----a-w c:\windows\system32\taskmgr.exe
    - 2004-08-04 06:56:48 14,848 ----a-w c:\windows\system32\tcpmib.dll
    + 2008-04-14 00:12:07 14,848 ----a-w c:\windows\system32\tcpmib.dll
    - 2004-08-04 06:56:48 45,568 ----a-w c:\windows\system32\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ----a-w c:\windows\system32\tcpmon.dll
    - 2004-08-04 06:56:48 45,568 ----a-w c:\windows\system32\tcpmonui.dll
    + 2008-04-14 00:12:07 45,568 ----a-w c:\windows\system32\tcpmonui.dll
    - 2004-08-04 06:56:58 75,264 ----a-w c:\windows\system32\telnet.exe
    + 2008-04-14 00:12:37 75,776 ----a-w c:\windows\system32\telnet.exe
    - 2004-08-04 06:56:48 358,400 ----a-w c:\windows\system32\termmgr.dll
    + 2008-04-14 00:12:07 358,400 ----a-w c:\windows\system32\termmgr.dll
    - 2004-08-04 10:00:00 295,424 ----a-w c:\windows\system32\termsrv.dll
    + 2008-04-14 00:12:07 295,424 ----a-w c:\windows\system32\termsrv.dll
    - 2004-08-04 06:56:48 385,536 ----a-w c:\windows\system32\themeui.dll
    + 2008-04-14 00:12:07 385,536 ----a-w c:\windows\system32\themeui.dll
    - 2004-08-04 06:56:58 61,440 ----a-w c:\windows\system32\tlntadmn.exe
    + 2008-04-14 00:12:37 61,440 ----a-w c:\windows\system32\tlntadmn.exe
    - 2004-08-04 06:56:58 78,336 ----a-w c:\windows\system32\tlntsess.exe
    + 2008-04-14 00:12:37 78,336 ----a-w c:\windows\system32\tlntsess.exe
    - 2004-08-04 06:56:58 73,216 ----a-w c:\windows\system32\tlntsvr.exe
    + 2008-04-14 00:12:38 73,216 ----a-w c:\windows\system32\tlntsvr.exe
    - 2004-08-04 06:56:48 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
    + 2008-04-14 00:12:07 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
    - 2004-08-04 06:56:58 347,136 ----a-w c:\windows\system32\tourstart.exe
    + 2008-04-14 00:12:38 347,136 ----a-w c:\windows\system32\tourstart.exe
    - 2004-08-04 06:56:58 259,584 ----a-w c:\windows\system32\tracerpt.exe
    + 2008-04-14 00:12:38 259,584 ----a-w c:\windows\system32\tracerpt.exe
    - 2004-08-04 06:56:58 12,288 ----a-w c:\windows\system32\tracert.exe
    + 2008-04-14 00:12:38 12,288 ----a-w c:\windows\system32\tracert.exe
    - 2001-08-23 13:00:00 11,264 ----a-w c:\windows\system32\tree.com
    + 2008-04-14 00:12:42 12,800 ----a-w c:\windows\system32\tree.com
    - 2004-08-04 06:56:48 90,624 ----a-w c:\windows\system32\trkwks.dll
    + 2008-04-14 00:12:07 90,112 ----a-w c:\windows\system32\trkwks.dll
    - 2004-08-04 10:00:00 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
    + 2008-04-14 00:12:07 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
    - 2004-08-04 07:01:08 12,168 ----a-w c:\windows\system32\tsddd.dll
    + 2008-04-14 00:13:21 12,168 ----a-w c:\windows\system32\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\system32\tsgqec.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\system32\tspkg.dll
    - 2004-08-04 06:56:48 44,032 ----a-w c:\windows\system32\twext.dll
    + 2008-04-14 00:12:07 57,856 ----a-w c:\windows\system32\twext.dll
    - 2004-08-04 06:56:48 101,376 ----a-w c:\windows\system32\txflog.dll
    + 2008-04-14 00:12:07 101,376 ----a-w c:\windows\system32\txflog.dll
    - 2007-11-13 11:31:11 60,416 ----a-w c:\windows\system32\tzchange.exe
    + 2008-10-23 10:06:59 62,976 ----a-w c:\windows\system32\tzchange.exe
    - 2004-08-04 06:56:48 25,600 ----a-w c:\windows\system32\udhisapi.dll
    + 2008-04-14 00:12:07 26,624 ----a-w c:\windows\system32\udhisapi.dll
    - 2004-08-04 06:56:48 275,456 ----a-w c:\windows\system32\ulib.dll
    + 2008-04-14 00:12:07 275,456 ----a-w c:\windows\system32\ulib.dll
    - 2004-08-04 06:56:48 35,840 ----a-w c:\windows\system32\umandlg.dll
    + 2008-04-14 00:12:07 35,840 ----a-w c:\windows\system32\umandlg.dll
    - 2004-08-04 06:56:48 118,272 ----a-w c:\windows\system32\umpnpmgr.dll
    + 2008-04-14 00:12:07 123,392 ----a-w c:\windows\system32\umpnpmgr.dll
    - 2004-08-04 06:56:48 74,240 ----a-w c:\windows\system32\unimdmat.dll
    + 2008-04-14 00:12:07 74,240 ----a-w c:\windows\system32\unimdmat.dll
    - 2004-08-04 06:56:48 13,824 ----a-w c:\windows\system32\uniplat.dll
    + 2008-04-14 00:12:07 13,824 ----a-w c:\windows\system32\uniplat.dll
    - 2004-08-04 06:56:48 316,416 ----a-w c:\windows\system32\untfs.dll
    + 2008-04-14 00:12:07 316,416 ----a-w c:\windows\system32\untfs.dll
    - 2004-08-04 06:56:48 132,608 ----a-w c:\windows\system32\upnp.dll
    + 2008-04-14 00:12:08 133,632 ----a-w c:\windows\system32\upnp.dll
    - 2004-08-04 06:56:58 16,896 ----a-w c:\windows\system32\upnpcont.exe
    + 2008-04-14 00:12:38 16,896 ----a-w c:\windows\system32\upnpcont.exe
    - 2004-08-04 06:56:48 185,344 ----a-w c:\windows\system32\upnphost.dll
    + 2008-04-14 00:12:08 185,856 ----a-w c:\windows\system32\upnphost.dll
    - 2004-08-04 06:56:48 239,616 ----a-w c:\windows\system32\upnpui.dll
    + 2008-04-14 00:12:08 239,616 ----a-w c:\windows\system32\upnpui.dll
    - 2004-08-04 07:56:57 18,432 ----a-w c:\windows\system32\ups.exe
    + 2008-04-14 00:12:38 18,432 ----a-w c:\windows\system32\ups.exe
    - 2004-08-04 06:56:48 37,888 ----a-w c:\windows\system32\url.dll
    + 2008-04-14 00:12:08 37,888 ----a-w c:\windows\system32\url.dll
    - 2004-08-04 06:56:48 601,088 ----a-w c:\windows\system32\urlmon.dll
    + 2008-10-16 01:00:11 619,520 ----a-w c:\windows\system32\urlmon.dll
    - 2004-08-04 06:56:48 16,896 ----a-w c:\windows\system32\usbmon.dll
    + 2008-04-14 00:12:08 16,896 ----a-w c:\windows\system32\usbmon.dll
    - 2004-08-04 07:05:44 74,240 ----a-w c:\windows\system32\usbui.dll
    + 2008-04-14 00:12:08 74,240 ----a-w c:\windows\system32\usbui.dll
    - 2004-08-04 06:56:48 577,024 ----a-w c:\windows\system32\user32.dll
    + 2008-04-14 00:12:08 578,560 ----a-w c:\windows\system32\user32.dll
    - 2004-08-04 06:56:48 723,456 ----a-w c:\windows\system32\userenv.dll
    + 2008-04-14 00:12:08 727,040 ----a-w c:\windows\system32\userenv.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\system32\usmt\cobramsg.dll
    - 2004-08-04 06:56:44 123,904 ----a-w c:\windows\system32\usmt\guitrn.dll
    + 2008-04-14 00:11:54 133,120 ----a-w c:\windows\system32\usmt\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\system32\usmt\guitrna.dll
    - 2004-08-04 06:56:44 4,096 ----a-w c:\windows\system32\usmt\iconlib.dll
    + 2008-04-13 16:44:29 2,560 ----a-w c:\windows\system32\usmt\iconlib.dll
    - 2004-08-04 06:56:44 19,968 ----a-w c:\windows\system32\usmt\log.dll
    + 2008-04-14 00:11:56 19,968 ----a-w c:\windows\system32\usmt\log.dll
     
    scorpion657,
    #17
  19. 2009/02/18
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    - 2004-08-04 06:56:44 201,216 ----a-w c:\windows\system32\usmt\migism.dll
    + 2008-04-14 00:11:57 274,432 ----a-w c:\windows\system32\usmt\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\system32\usmt\migisma.dll
    - 2004-08-04 06:56:52 103,424 ----a-w c:\windows\system32\usmt\migload.exe
    + 2008-04-14 00:12:25 103,936 ----a-w c:\windows\system32\usmt\migload.exe
    - 2004-08-04 06:56:52 240,128 ----a-w c:\windows\system32\usmt\migwiz.exe
    + 2008-04-14 00:12:25 245,248 ----a-w c:\windows\system32\usmt\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\system32\usmt\migwiza.exe
    - 2004-08-04 06:56:46 202,752 ----a-w c:\windows\system32\usmt\script.dll
    + 2008-04-14 00:12:05 215,552 ----a-w c:\windows\system32\usmt\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\system32\usmt\scripta.dll
    - 2004-08-04 06:56:48 168,960 ----a-w c:\windows\system32\usmt\sysmod.dll
    + 2008-04-14 00:12:07 193,024 ----a-w c:\windows\system32\usmt\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\system32\usmt\sysmoda.dll
    - 2004-08-04 06:56:48 406,528 ----a-w c:\windows\system32\usp10.dll
    + 2008-04-14 00:12:08 406,016 ----a-w c:\windows\system32\usp10.dll
    - 2004-08-04 06:56:58 50,176 ----a-w c:\windows\system32\utilman.exe
    + 2008-04-14 00:12:38 50,176 ----a-w c:\windows\system32\utilman.exe
    - 2004-08-04 06:56:48 218,624 ----a-w c:\windows\system32\uxtheme.dll
    + 2008-04-14 00:12:08 218,624 ----a-w c:\windows\system32\uxtheme.dll
    - 2004-08-04 06:56:48 30,749 ----a-w c:\windows\system32\vbajet32.dll
    + 2008-04-14 00:12:08 30,749 ----a-w c:\windows\system32\vbajet32.dll
    - 2004-08-04 06:56:48 417,792 ----a-w c:\windows\system32\vbscript.dll
    + 2008-04-14 00:12:08 434,176 ----a-w c:\windows\system32\vbscript.dll
    - 2004-08-04 06:56:48 26,112 ----a-w c:\windows\system32\vdmdbg.dll
    + 2008-04-14 00:12:08 26,112 ----a-w c:\windows\system32\vdmdbg.dll
    - 2004-08-04 06:56:48 51,712 ----a-w c:\windows\system32\vdmredir.dll
    + 2008-04-14 00:12:08 51,712 ----a-w c:\windows\system32\vdmredir.dll
    - 2006-03-17 00:38:01 28,672 ----a-w c:\windows\system32\verclsid.exe
    + 2008-04-14 00:12:38 28,672 ----a-w c:\windows\system32\verclsid.exe
    - 2001-08-23 13:00:00 13,312 ----a-w c:\windows\system32\verifier.dll
    + 2008-04-14 00:12:08 26,624 ----a-w c:\windows\system32\verifier.dll
    - 2004-08-04 06:56:48 18,944 ----a-w c:\windows\system32\version.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\version.dll
    - 2004-08-04 06:56:48 430,592 ----a-w c:\windows\system32\vssapi.dll
    + 2008-04-14 00:12:08 430,592 ----a-w c:\windows\system32\vssapi.dll
    - 2004-08-04 06:56:58 289,792 ----a-w c:\windows\system32\vssvc.exe
    + 2008-04-14 00:12:38 289,792 ----a-w c:\windows\system32\vssvc.exe
    - 2004-08-04 06:56:48 174,592 ----a-w c:\windows\system32\w32time.dll
    + 2008-04-14 00:12:08 175,104 ----a-w c:\windows\system32\w32time.dll
    - 2004-08-04 06:56:48 15,872 ----a-w c:\windows\system32\w3ssl.dll
    + 2008-04-14 00:12:08 15,872 ----a-w c:\windows\system32\w3ssl.dll
    - 2004-08-04 05:07:34 17,664 ----a-w c:\windows\system32\watchdog.sys
    + 2008-04-13 18:44:59 17,664 ----a-w c:\windows\system32\watchdog.sys
    - 2001-08-23 13:00:00 208,896 ----a-w c:\windows\system32\wavemsp.dll
    + 2008-04-14 00:12:08 215,552 ----a-w c:\windows\system32\wavemsp.dll
    - 2004-08-04 10:00:00 1,352,192 ----a-w c:\windows\system32\wbem\cimwin32.dll
    + 2008-04-14 00:11:50 1,358,848 ----a-w c:\windows\system32\wbem\cimwin32.dll
    - 2004-08-04 06:56:44 45,568 ----a-w c:\windows\system32\wbem\CmdEvTgProv.dll
    + 2008-04-14 00:11:53 45,056 ----a-w c:\windows\system32\wbem\cmdevtgprov.dll
    - 2004-08-04 10:00:00 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
    + 2008-04-14 00:11:53 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
    - 2004-08-04 06:56:44 22,016 ----a-w c:\windows\system32\wbem\evntrprv.dll
    + 2008-04-14 00:11:53 21,504 ----a-w c:\windows\system32\wbem\evntrprv.dll
    - 2004-08-04 10:00:00 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
    + 2008-04-14 00:11:53 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
    - 2004-08-04 10:00:00 185,856 ----a-w c:\windows\system32\wbem\framedyn.dll
    + 2008-04-14 00:11:53 185,344 ----a-w c:\windows\system32\wbem\framedyn.dll
    - 2004-08-04 10:00:00 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
    + 2008-04-14 00:11:56 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
    - 2004-08-04 06:56:52 16,384 ----a-w c:\windows\system32\wbem\mofcomp.exe
    + 2008-04-14 00:12:26 16,384 ----a-w c:\windows\system32\wbem\mofcomp.exe
    - 2004-08-04 10:00:00 123,904 ----a-w c:\windows\system32\wbem\mofd.dll
    + 2008-04-14 00:11:57 123,904 ----a-w c:\windows\system32\wbem\mofd.dll
    - 2004-08-04 10:00:00 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
    + 2008-04-14 00:12:01 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
    - 2004-08-04 10:00:00 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
    + 2008-04-14 00:12:02 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
    - 2004-08-04 10:00:00 92,672 ----a-w c:\windows\system32\wbem\policman.dll
    + 2008-04-14 00:12:02 92,672 ----a-w c:\windows\system32\wbem\policman.dll
    - 2004-08-04 10:00:00 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
    + 2008-04-14 00:12:03 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
    - 2004-08-04 10:00:00 177,152 ----a-w c:\windows\system32\wbem\repdrvfs.dll
    + 2008-04-14 00:12:04 178,176 ----a-w c:\windows\system32\wbem\repdrvfs.dll
    - 2004-08-04 06:56:56 36,864 ----a-w c:\windows\system32\wbem\scrcons.exe
    + 2008-04-14 00:12:34 36,352 ----a-w c:\windows\system32\wbem\scrcons.exe
    - 2004-08-04 10:00:00 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
    + 2008-04-14 00:12:07 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
    - 2004-08-04 10:00:00 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
    + 2008-04-14 00:12:08 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
    - 2004-08-04 10:00:00 196,608 ----a-w c:\windows\system32\wbem\wbemcntl.dll
    + 2008-04-14 00:12:08 196,608 ----a-w c:\windows\system32\wbem\wbemcntl.dll
    - 2004-08-04 10:00:00 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
    + 2008-04-14 00:12:08 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
    - 2004-08-04 10:00:00 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
    + 2008-04-14 00:12:08 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
    - 2004-08-04 10:00:00 530,944 ----a-w c:\windows\system32\wbem\wbemcore.dll
    + 2008-04-14 00:12:08 531,456 ----a-w c:\windows\system32\wbem\wbemcore.dll
    - 2004-08-04 10:00:00 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
    + 2008-04-14 00:12:08 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
    - 2004-08-04 10:00:00 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
    + 2008-04-14 00:12:08 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
    - 2004-08-04 06:56:48 43,008 ----a-w c:\windows\system32\wbem\wbemperf.dll
    + 2008-04-14 00:12:08 43,008 ----a-w c:\windows\system32\wbem\wbemperf.dll
    - 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
    - 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
    + 2008-04-14 00:12:08 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
    - 2004-08-04 06:56:58 116,224 ----a-w c:\windows\system32\wbem\wbemtest.exe
    + 2008-04-14 00:12:39 116,224 ----a-w c:\windows\system32\wbem\wbemtest.exe
    - 2004-08-04 10:00:00 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
    + 2008-04-14 00:12:08 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
    - 2004-08-04 06:56:58 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
    + 2008-04-14 00:12:40 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
    - 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\wbem\wmiapres.dll
    + 2008-04-13 17:10:20 6,656 ----a-w c:\windows\system32\wbem\wmiapres.dll
    - 2004-08-04 10:00:00 89,088 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
    + 2008-04-14 00:12:09 88,576 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
    - 2004-08-04 06:56:58 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
    + 2008-04-14 00:12:40 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
    - 2004-08-04 06:56:58 358,912 ----a-w c:\windows\system32\wbem\wmic.exe
    + 2008-04-14 00:12:40 358,912 ----a-w c:\windows\system32\wbem\wmic.exe
    - 2004-08-04 10:00:00 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
    + 2008-04-14 00:12:09 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
    - 2004-08-04 10:00:00 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
    + 2008-04-14 00:12:09 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
    - 2004-08-04 10:00:00 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
    + 2008-04-14 00:12:09 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
    - 2004-08-04 10:00:00 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
    + 2008-04-14 00:12:09 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
    - 2004-08-04 10:00:00 62,464 ----a-w c:\windows\system32\wbem\wmipiprt.dll
    + 2008-04-14 00:12:09 61,952 ----a-w c:\windows\system32\wbem\wmipiprt.dll
    - 2004-08-04 10:00:00 62,976 ----a-w c:\windows\system32\wbem\wmipjobj.dll
    + 2008-04-14 00:12:09 62,464 ----a-w c:\windows\system32\wbem\wmipjobj.dll
    - 2004-08-04 10:00:00 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
    - 2004-08-04 10:00:00 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
    + 2008-04-14 00:12:09 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
    - 2004-08-04 06:56:58 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
    + 2008-04-14 00:12:40 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
    - 2004-08-04 10:00:00 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
    + 2008-04-14 00:12:09 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
    - 2004-08-04 10:00:00 144,896 ----a-w c:\windows\system32\wbem\wmisvc.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmisvc.dll
    - 2004-08-04 10:00:00 95,232 ----a-w c:\windows\system32\wbem\wmiutils.dll
    + 2008-04-14 00:12:09 95,232 ----a-w c:\windows\system32\wbem\wmiutils.dll
    - 2004-08-04 06:56:48 49,152 ----a-w c:\windows\system32\wdigest.dll
    + 2008-04-14 00:12:08 49,152 ----a-w c:\windows\system32\wdigest.dll
    - 2004-08-04 07:05:44 23,552 ----a-w c:\windows\system32\wdmaud.drv
    + 2008-04-14 00:12:45 23,552 ----a-w c:\windows\system32\wdmaud.drv
    - 2004-08-04 06:56:48 276,480 ----a-w c:\windows\system32\webcheck.dll
    + 2008-04-14 00:12:08 276,480 ----a-w c:\windows\system32\webcheck.dll
    - 2004-08-04 06:56:48 67,584 ----a-w c:\windows\system32\webclnt.dll
    + 2008-04-14 00:12:08 68,096 ----a-w c:\windows\system32\webclnt.dll
    - 2004-08-04 06:56:48 135,680 ----a-w c:\windows\system32\webvw.dll
    + 2008-04-14 00:12:08 135,680 ----a-w c:\windows\system32\webvw.dll
    - 2004-08-04 06:56:58 65,536 ----a-w c:\windows\system32\wextract.exe
    + 2008-04-14 00:12:39 65,024 ----a-w c:\windows\system32\wextract.exe
    - 2004-08-04 06:56:58 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
    + 2008-04-14 00:12:39 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
    - 2004-08-04 06:56:48 463,360 ----a-w c:\windows\system32\wiadefui.dll
    + 2008-04-14 00:12:08 463,360 ----a-w c:\windows\system32\wiadefui.dll
    - 2004-08-04 06:56:48 124,416 ----a-w c:\windows\system32\wiadss.dll
    + 2008-04-14 00:12:08 124,416 ----a-w c:\windows\system32\wiadss.dll
    - 2004-08-04 06:56:48 75,776 ----a-w c:\windows\system32\wiascr.dll
    + 2008-04-14 00:12:08 75,776 ----a-w c:\windows\system32\wiascr.dll
    - 2004-08-04 06:56:48 333,312 ----a-w c:\windows\system32\wiaservc.dll
    + 2008-04-14 00:12:08 333,824 ----a-w c:\windows\system32\wiaservc.dll
    - 2004-08-04 06:56:48 589,312 ----a-w c:\windows\system32\wiashext.dll
    + 2008-04-14 00:12:08 589,312 ----a-w c:\windows\system32\wiashext.dll
    - 2004-08-04 06:56:48 111,104 ----a-w c:\windows\system32\wiavideo.dll
    + 2008-04-14 00:12:08 111,104 ----a-w c:\windows\system32\wiavideo.dll
    - 2004-08-04 05:17:42 1,835,904 ----a-w c:\windows\system32\win32k.sys
    + 2008-09-15 12:12:56 1,846,400 ----a-w c:\windows\system32\win32k.sys
    - 2004-08-04 06:56:48 101,888 ----a-w c:\windows\system32\win32spl.dll
    + 2008-04-14 00:12:08 102,400 ----a-w c:\windows\system32\win32spl.dll
    - 2004-08-04 06:56:36 937,984 ----a-w c:\windows\system32\winbrand.dll
    + 2008-04-13 16:48:53 1,647,616 ----a-w c:\windows\system32\winbrand.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\system32\windowscodecs.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\system32\windowscodecsext.dll
    - 2004-08-04 06:56:48 351,232 ----a-w c:\windows\system32\winhttp.dll
    + 2008-04-14 00:12:08 354,304 ----a-w c:\windows\system32\winhttp.dll
    - 2004-08-04 06:56:48 656,384 ----a-w c:\windows\system32\wininet.dll
    + 2008-10-16 01:00:11 666,112 ----a-w c:\windows\system32\wininet.dll
    - 2004-08-04 06:56:48 32,768 ----a-w c:\windows\system32\winipsec.dll
    + 2008-04-14 00:12:09 32,256 ----a-w c:\windows\system32\winipsec.dll
    - 2004-08-04 06:56:58 502,272 ----a-w c:\windows\system32\winlogon.exe
    + 2008-04-14 00:12:39 507,904 ----a-w c:\windows\system32\winlogon.exe
    - 2004-08-04 06:56:48 176,128 ----a-w c:\windows\system32\winmm.dll
    + 2008-04-14 00:12:09 176,128 ----a-w c:\windows\system32\winmm.dll
    - 2004-08-04 06:56:36 764,928 ----a-w c:\windows\system32\winntbbu.dll
    + 2008-04-14 00:11:11 756,224 ----a-w c:\windows\system32\winntbbu.dll
    - 2004-08-04 06:56:48 16,896 ----a-w c:\windows\system32\winrnr.dll
    + 2008-04-14 00:12:09 16,896 ----a-w c:\windows\system32\winrnr.dll
    - 2004-08-04 06:56:48 99,328 ----a-w c:\windows\system32\winscard.dll
    + 2008-04-14 00:12:09 99,328 ----a-w c:\windows\system32\winscard.dll
    - 2004-08-04 06:56:48 17,408 ----a-w c:\windows\system32\winshfhc.dll
    + 2008-04-14 00:12:09 17,408 ----a-w c:\windows\system32\winshfhc.dll
    - 2004-08-04 06:56:58 146,432 ----a-w c:\windows\system32\winspool.drv
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system32\winspool.drv
    - 2004-08-04 06:56:48 290,816 ----a-w c:\windows\system32\winsrv.dll
    + 2008-04-14 00:12:09 293,376 ----a-w c:\windows\system32\winsrv.dll
    - 2004-08-04 06:56:48 53,760 ----a-w c:\windows\system32\winsta.dll
    + 2008-04-14 00:12:09 53,760 ----a-w c:\windows\system32\winsta.dll
    - 2004-08-04 06:56:48 176,640 ----a-w c:\windows\system32\wintrust.dll
    + 2008-04-14 00:12:09 176,640 ----a-w c:\windows\system32\wintrust.dll
    - 2004-08-04 07:56:57 5,632 ----a-w c:\windows\system32\winver.exe
    + 2008-04-14 00:12:40 5,632 ----a-w c:\windows\system32\winver.exe
    - 2004-08-04 06:56:48 132,096 ----a-w c:\windows\system32\wkssvc.dll
    + 2008-04-14 00:12:09 132,096 ----a-w c:\windows\system32\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\system32\wlanapi.dll
    - 2004-08-04 06:56:48 172,032 ----a-w c:\windows\system32\wldap32.dll
    + 2008-04-14 00:12:09 172,032 ----a-w c:\windows\system32\wldap32.dll
    - 2004-08-04 06:56:48 92,672 ----a-w c:\windows\system32\wlnotify.dll
    + 2008-04-14 00:12:09 92,672 ----a-w c:\windows\system32\wlnotify.dll
    - 2004-08-04 06:56:48 408,064 ----a-w c:\windows\system32\wmadmod.dll
    + 2008-04-14 00:12:09 408,064 ----a-w c:\windows\system32\wmadmod.dll
    - 2004-08-04 06:56:48 670,720 ----a-w c:\windows\system32\wmadmoe.dll
    + 2008-04-14 00:12:09 670,720 ----a-w c:\windows\system32\wmadmoe.dll
    - 2004-08-04 06:56:48 230,400 ----a-w c:\windows\system32\wmasf.dll
    + 2008-04-14 00:12:09 230,912 ----a-w c:\windows\system32\wmasf.dll
    - 2004-08-04 06:56:48 27,136 ----a-w c:\windows\system32\wmdmlog.dll
    + 2008-04-14 00:12:09 27,136 ----a-w c:\windows\system32\wmdmlog.dll
    - 2004-08-04 06:56:48 23,552 ----a-w c:\windows\system32\wmdmps.dll
    + 2008-04-14 00:12:09 23,552 ----a-w c:\windows\system32\wmdmps.dll
    - 2004-08-04 06:56:36 168,448 ----a-w c:\windows\system32\wmerror.dll
    + 2008-04-13 17:23:24 168,448 ----a-w c:\windows\system32\wmerror.dll
    - 2004-08-04 06:56:36 5,632 ----a-w c:\windows\system32\wmi.dll
    + 2008-04-14 00:11:15 5,632 ----a-w c:\windows\system32\wmi.dll
    - 2004-08-04 06:56:48 151,552 ----a-w c:\windows\system32\wmidx.dll
    + 2008-04-14 00:12:09 151,552 ----a-w c:\windows\system32\wmidx.dll
    - 2004-08-04 06:56:48 1,050,624 ----a-w c:\windows\system32\wmnetmgr.dll
    + 2008-04-14 00:12:09 1,053,184 ----a-w c:\windows\system32\wmnetmgr.dll
    - 2004-08-04 06:56:48 4,874,240 ----a-w c:\windows\system32\wmp.dll
    + 2008-04-14 00:12:09 4,874,240 ----a-w c:\windows\system32\wmp.dll
    - 2004-08-04 06:56:48 114,688 ----a-w c:\windows\system32\wmpasf.dll
    + 2008-04-14 00:12:09 114,688 ----a-w c:\windows\system32\wmpasf.dll
    - 2004-08-04 06:56:48 20,480 ----a-w c:\windows\system32\wmpcd.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcd.dll
    - 2004-08-04 06:56:48 20,480 ----a-w c:\windows\system32\wmpcore.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcore.dll
    - 2004-08-04 06:56:48 233,472 ----a-w c:\windows\system32\wmpdxm.dll
    + 2008-04-14 00:12:09 233,472 ----a-w c:\windows\system32\wmpdxm.dll
    - 2004-08-04 06:56:38 2,940,928 ----a-w c:\windows\system32\wmploc.dll
    + 2008-04-13 17:28:21 2,940,928 ----a-w c:\windows\system32\wmploc.dll
    - 2004-08-04 10:00:00 221,184 ----a-w c:\windows\system32\wmpns.dll
    + 2008-04-14 00:12:09 221,184 ----a-w c:\windows\system32\wmpns.dll
    - 2004-08-04 06:56:48 102,400 ----a-w c:\windows\system32\wmpshell.dll
    + 2008-04-14 00:12:09 102,400 ----a-w c:\windows\system32\wmpshell.dll
    - 2004-08-04 06:56:48 20,480 ----a-w c:\windows\system32\wmpui.dll
    + 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpui.dll
    - 2004-08-04 06:56:48 759,296 ----a-w c:\windows\system32\wmsdmod.dll
    + 2008-04-14 00:12:09 759,296 ----a-w c:\windows\system32\wmsdmod.dll
    - 2004-08-04 06:56:48 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
    + 2008-04-14 00:12:09 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
    - 2004-08-04 06:56:48 1,119,744 ----a-w c:\windows\system32\wmsdmoe2.dll
    + 2008-04-14 00:12:09 1,119,744 ----a-w c:\windows\system32\wmsdmoe2.dll
    - 2004-08-04 06:56:48 484,864 ----a-w c:\windows\system32\wmspdmod.dll
    + 2008-04-14 00:12:09 485,376 ----a-w c:\windows\system32\wmspdmod.dll
    - 2004-08-04 06:56:48 896,512 ----a-w c:\windows\system32\wmspdmoe.dll
    + 2008-04-14 00:12:10 897,024 ----a-w c:\windows\system32\wmspdmoe.dll
    - 2004-08-04 06:56:48 303,616 ----a-w c:\windows\system32\wmstream.dll
    + 2008-04-14 00:12:10 303,616 ----a-w c:\windows\system32\wmstream.dll
    - 2004-08-04 06:57:04 2,105,344 ----a-w c:\windows\system32\wmvcore.dll
    + 2008-04-14 00:12:58 2,109,440 ----a-w c:\windows\system32\wmvcore.dll
    - 2004-08-04 06:56:48 809,984 ----a-w c:\windows\system32\wmvdmod.dll
    + 2008-04-14 00:12:10 809,984 ----a-w c:\windows\system32\wmvdmod.dll
    - 2004-08-04 06:56:48 1,001,472 ----a-w c:\windows\system32\wmvdmoe2.dll
    + 2008-04-14 00:12:10 1,001,472 ----a-w c:\windows\system32\wmvdmoe2.dll
    - 2004-08-04 06:56:48 264,192 ----a-w c:\windows\system32\wow32.dll
    + 2008-04-14 00:12:10 264,192 ----a-w c:\windows\system32\wow32.dll
    - 2004-08-04 06:56:58 32,256 ----a-w c:\windows\system32\wpabaln.exe
    + 2008-04-14 00:12:40 32,256 ----a-w c:\windows\system32\wpabaln.exe
    - 2004-08-04 06:56:58 32,256 ----a-w c:\windows\system32\wpnpinst.exe
    + 2008-04-14 00:12:41 11,264 ----a-w c:\windows\system32\wpnpinst.exe
    - 2004-08-04 06:56:48 82,944 ----a-w c:\windows\system32\ws2_32.dll
    + 2008-04-14 00:12:10 82,432 ----a-w c:\windows\system32\ws2_32.dll
    - 2004-08-04 06:56:48 19,968 ----a-w c:\windows\system32\ws2help.dll
    + 2008-04-14 00:12:10 19,968 ----a-w c:\windows\system32\ws2help.dll
    - 2004-08-04 06:56:58 13,824 ----a-w c:\windows\system32\wscntfy.exe
    + 2008-04-14 00:12:41 13,824 ----a-w c:\windows\system32\wscntfy.exe
    - 2004-08-04 06:56:58 114,688 ----a-w c:\windows\system32\wscript.exe
    + 2008-04-14 00:12:41 155,648 ----a-w c:\windows\system32\wscript.exe
    - 2004-08-04 06:56:48 81,408 ----a-w c:\windows\system32\wscsvc.dll
    + 2008-04-14 00:12:10 80,896 ----a-w c:\windows\system32\wscsvc.dll
    - 2004-08-04 06:56:48 596,992 ----a-w c:\windows\system32\wsecedit.dll
    + 2008-04-14 00:12:10 604,160 ----a-w c:\windows\system32\wsecedit.dll
    - 2004-08-04 06:56:48 108,032 ----a-w c:\windows\system32\wshbth.dll
    + 2008-04-14 00:12:10 108,032 ----a-w c:\windows\system32\wshbth.dll
    - 2004-08-04 06:56:48 28,672 ----a-w c:\windows\system32\wshcon.dll
    + 2008-04-14 00:12:10 36,864 ----a-w c:\windows\system32\wshcon.dll
    - 2004-08-04 06:56:48 65,536 ----a-w c:\windows\system32\wshext.dll
    + 2008-04-14 00:12:10 90,112 ----a-w c:\windows\system32\wshext.dll
    - 2004-08-04 06:56:48 14,336 ----a-w c:\windows\system32\wship6.dll
    + 2008-04-14 00:12:10 14,336 ----a-w c:\windows\system32\wship6.dll
    - 2004-08-04 06:56:48 11,776 ----a-w c:\windows\system32\WshRm.dll
    + 2008-04-14 00:12:10 11,264 ----a-w c:\windows\system32\wshrm.dll
    - 2004-08-04 06:56:48 19,968 ----a-w c:\windows\system32\wshtcpip.dll
    + 2008-04-14 00:12:10 19,456 ----a-w c:\windows\system32\wshtcpip.dll
    - 2004-08-04 06:56:48 42,496 ----a-w c:\windows\system32\wsnmp32.dll
    + 2008-04-14 00:12:10 41,984 ----a-w c:\windows\system32\wsnmp32.dll
    - 2004-08-04 06:56:48 22,528 ----a-w c:\windows\system32\wsock32.dll
    + 2008-04-14 00:12:10 22,528 ----a-w c:\windows\system32\wsock32.dll
    - 2004-08-04 06:56:48 50,688 ----a-w c:\windows\system32\wstdecod.dll
    + 2008-04-14 00:12:10 50,688 ----a-w c:\windows\system32\wstdecod.dll
    - 2004-08-04 06:56:48 18,432 ----a-w c:\windows\system32\wtsapi32.dll
    + 2008-04-14 00:12:10 18,432 ----a-w c:\windows\system32\wtsapi32.dll
    - 2004-08-04 06:56:58 165,888 ----a-w c:\windows\system32\wuauclt1.exe
    + 2008-04-14 00:12:41 165,888 ----a-w c:\windows\system32\wuauclt1.exe
    - 2004-08-04 10:00:00 183,296 ----a-w c:\windows\system32\wuaueng1.dll
    + 2008-04-14 00:12:11 183,296 ----a-w c:\windows\system32\wuaueng1.dll
    - 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\wuauserv.dll
    + 2008-04-14 00:12:11 6,656 ----a-w c:\windows\system32\wuauserv.dll
    - 2004-08-04 06:56:48 378,368 ----a-w c:\windows\system32\wzcdlg.dll
    + 2008-04-14 00:12:11 383,488 ----a-w c:\windows\system32\wzcdlg.dll
    - 2004-08-04 07:05:44 51,712 ----a-w c:\windows\system32\wzcsapi.dll
    + 2008-04-14 00:12:11 52,736 ----a-w c:\windows\system32\wzcsapi.dll
    - 2004-08-04 07:05:44 359,936 ----a-w c:\windows\system32\wzcsvc.dll
    + 2008-04-14 00:12:11 483,840 ----a-w c:\windows\system32\wzcsvc.dll
    - 2004-08-04 06:56:48 91,648 ----a-w c:\windows\system32\xactsrv.dll
    + 2008-04-14 00:12:11 91,648 ----a-w c:\windows\system32\xactsrv.dll
    - 2004-08-04 07:56:57 30,720 ----a-w c:\windows\system32\xcopy.exe
    + 2008-04-14 00:12:41 30,720 ----a-w c:\windows\system32\xcopy.exe
    - 2006-07-14 15:51:51 121,856 ----a-w c:\windows\system32\xmllite.dll
    + 2008-04-14 00:12:11 121,856 ----a-w c:\windows\system32\xmllite.dll
    - 2004-08-04 06:56:48 129,536 ----a-w c:\windows\system32\xmlprov.dll
    + 2008-04-14 00:12:11 129,024 ----a-w c:\windows\system32\xmlprov.dll
    - 2004-08-04 06:56:48 50,176 ----a-w c:\windows\system32\xmlprovi.dll
    + 2008-04-14 00:12:11 50,176 ----a-w c:\windows\system32\xmlprovi.dll
    - 2004-08-04 06:56:48 11,776 ----a-w c:\windows\system32\xolehlp.dll
    + 2008-04-14 00:12:11 11,776 ----a-w c:\windows\system32\xolehlp.dll
    - 2004-08-04 06:56:38 438,784 ----a-w c:\windows\system32\xpob2res.dll
    + 2008-04-13 17:39:29 438,784 ----a-w c:\windows\system32\xpob2res.dll
    - 2004-08-04 06:56:38 187,392 ----a-w c:\windows\system32\xpsp1res.dll
    + 2008-04-13 17:39:22 187,392 ----a-w c:\windows\system32\xpsp1res.dll
    - 2004-08-04 06:56:38 2,897,920 ----a-w c:\windows\system32\xpsp2res.dll
    + 2008-04-13 17:39:24 2,897,920 ----a-w c:\windows\system32\xpsp2res.dll
    - 2008-04-17 10:37:04 351,744 ----a-w c:\windows\system32\xpsp3res.dll
    + 2008-04-13 17:39:26 689,152 ----a-w c:\windows\system32\xpsp3res.dll
    - 2004-08-04 06:56:48 337,920 ----a-w c:\windows\system32\zipfldr.dll
    + 2008-04-14 00:12:11 338,432 ----a-w c:\windows\system32\zipfldr.dll
    + 2009-02-18 14:15:41 16,384 ----atw c:\windows\temp\Perflib_Perfdata_648.dat
    - 2004-08-04 06:56:48 50,688 ----a-w c:\windows\twain_32.dll
    + 2008-04-14 00:12:07 50,688 ----a-w c:\windows\twain_32.dll
    - 2004-08-04 06:56:58 283,648 ----a-w c:\windows\winhlp32.exe
    + 2008-04-14 00:12:39 283,648 ----a-w c:\windows\winhlp32.exe
    - 2007-01-19 20:15:24 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2008-04-14 00:12:50 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    - 2007-01-19 20:15:24 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    + 2008-04-14 00:12:50 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
    - 2007-01-19 20:15:24 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    + 2008-04-14 00:12:50 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
    - 2007-01-19 20:15:24 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2008-04-14 00:12:50 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
    + 2008-04-14 00:12:51 1,054,208 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
    + 2008-04-14 00:12:51 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2008-04-14 00:12:51 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
    + 2008-04-14 00:12:47 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
    - 2004-08-04 06:57:00 853,504 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    + 2008-04-14 00:12:49 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
    - 2004-08-04 06:57:00 991,232 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    + 2008-04-14 00:12:50 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
    - 2004-08-04 06:55:58 132,096 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    + 2008-04-13 18:26:33 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-06-19 68856]
    "ctfmon.exe "= "c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
    "SpybotSD TeaTimer "= "c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
    "msnmsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched "= "c:\program files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 144784]
    "avast! "= "c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008]
    "HP Software Update "= "c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
    "TkBellExe "= "c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-01-22 185872]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "tscuninstall "= "c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 288472]

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
    "NoSetActiveDesktop "= 1 (0x1)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcCuTKd]
    [BU]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=lyisps.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISTray]
    --a------ 2008-08-25 12:36 1168264 c:\program files\Spyware Doctor\pctsTray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
    --a------ 2007-10-18 10:34 5724184 c:\program files\Windows Live\Messenger\msnmsgr.exe

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe "=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe "=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "1963:UDP "= 1963:UDP:Windows Media Format SDK (RecordingManager.exe)
    "1962:UDP "= 1962:UDP:Windows Media Format SDK (RecordingManager.exe)

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-09-28 78416]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-09-28 20560]
    R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
    S3 bhndkgep;bhndkgep;\??\c:\windows\System32\Drivers\bhndkgep.sys --> c:\windows\System32\Drivers\bhndkgep.sys [?]
    S3 boegvfnz;boegvfnz;\??\c:\windows\System32\Drivers\boegvfnz.sys --> c:\windows\System32\Drivers\boegvfnz.sys [?]
    S3 btruqvla;btruqvla;\??\c:\windows\System32\Drivers\btruqvla.sys --> c:\windows\System32\Drivers\btruqvla.sys [?]
    S3 cphouhsa;cphouhsa;\??\c:\windows\System32\Drivers\cphouhsa.sys --> c:\windows\System32\Drivers\cphouhsa.sys [?]
    S3 favmetnc;favmetnc;\??\c:\windows\System32\Drivers\favmetnc.sys --> c:\windows\System32\Drivers\favmetnc.sys [?]
    S3 fqofkgeo;fqofkgeo;\??\c:\windows\System32\Drivers\fqofkgeo.sys --> c:\windows\System32\Drivers\fqofkgeo.sys [?]
    S3 fucoeuga;fucoeuga;\??\c:\windows\System32\Drivers\fucoeuga.sys --> c:\windows\System32\Drivers\fucoeuga.sys [?]
    S3 fvyiyeib;fvyiyeib;\??\c:\windows\System32\Drivers\fvyiyeib.sys --> c:\windows\System32\Drivers\fvyiyeib.sys [?]
    S3 hcsglqlz;hcsglqlz;\??\c:\windows\System32\Drivers\hcsglqlz.sys --> c:\windows\System32\Drivers\hcsglqlz.sys [?]
    S3 hhdposka;hhdposka;\??\c:\windows\System32\Drivers\hhdposka.sys --> c:\windows\System32\Drivers\hhdposka.sys [?]
    S3 iyazocfh;iyazocfh;\??\c:\windows\System32\Drivers\iyazocfh.sys --> c:\windows\System32\Drivers\iyazocfh.sys [?]
    S3 jqcqpooa;jqcqpooa;\??\c:\windows\System32\Drivers\jqcqpooa.sys --> c:\windows\System32\Drivers\jqcqpooa.sys [?]
    S3 kjbfcymr;kjbfcymr;\??\c:\windows\System32\Drivers\kjbfcymr.sys --> c:\windows\System32\Drivers\kjbfcymr.sys [?]
    S3 kqrhwzvd;kqrhwzvd;\??\c:\windows\System32\Drivers\kqrhwzvd.sys --> c:\windows\System32\Drivers\kqrhwzvd.sys [?]
    S3 ktiwrfyx;ktiwrfyx;\??\c:\windows\System32\Drivers\ktiwrfyx.sys --> c:\windows\System32\Drivers\ktiwrfyx.sys [?]
    S3 lsxkspwk;lsxkspwk;\??\c:\windows\System32\Drivers\lsxkspwk.sys --> c:\windows\System32\Drivers\lsxkspwk.sys [?]
    S3 mflbcayo;mflbcayo;\??\c:\windows\System32\Drivers\mflbcayo.sys --> c:\windows\System32\Drivers\mflbcayo.sys [?]
    S3 mlytiexq;mlytiexq;\??\c:\windows\System32\Drivers\mlytiexq.sys --> c:\windows\System32\Drivers\mlytiexq.sys [?]
    S3 mpsxhluh;mpsxhluh;\??\c:\windows\System32\Drivers\mpsxhluh.sys --> c:\windows\System32\Drivers\mpsxhluh.sys [?]
    S3 ocgkgmkn;ocgkgmkn;\??\c:\windows\System32\Drivers\ocgkgmkn.sys --> c:\windows\System32\Drivers\ocgkgmkn.sys [?]
    S3 ptshozee;ptshozee;\??\c:\windows\System32\Drivers\ptshozee.sys --> c:\windows\System32\Drivers\ptshozee.sys [?]
    S3 raqcfxvf;raqcfxvf;\??\c:\windows\System32\Drivers\raqcfxvf.sys --> c:\windows\System32\Drivers\raqcfxvf.sys [?]
    S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-02-17 356920]
    S3 upppdrns;upppdrns;\??\c:\windows\System32\Drivers\upppdrns.sys --> c:\windows\System32\Drivers\upppdrns.sys [?]
    S3 vlmxkazj;vlmxkazj;\??\c:\windows\System32\Drivers\vlmxkazj.sys --> c:\windows\System32\Drivers\vlmxkazj.sys [?]
    S3 vyprrjlw;vyprrjlw;\??\c:\windows\System32\Drivers\vyprrjlw.sys --> c:\windows\System32\Drivers\vyprrjlw.sys [?]
    S3 wqspplfo;wqspplfo;\??\c:\windows\System32\Drivers\wqspplfo.sys --> c:\windows\System32\Drivers\wqspplfo.sys [?]
    S3 wxmyukfq;wxmyukfq;\??\c:\windows\System32\Drivers\wxmyukfq.sys --> c:\windows\System32\Drivers\wxmyukfq.sys [?]
    S3 xboxlsvp;xboxlsvp;\??\c:\windows\System32\Drivers\xboxlsvp.sys --> c:\windows\System32\Drivers\xboxlsvp.sys [?]
    S3 xdadavrf;xdadavrf;\??\c:\windows\System32\Drivers\xdadavrf.sys --> c:\windows\System32\Drivers\xdadavrf.sys [?]
    S3 xskeqmlf;xskeqmlf;\??\c:\windows\System32\Drivers\xskeqmlf.sys --> c:\windows\System32\Drivers\xskeqmlf.sys [?]
    S3 yjsbzscp;yjsbzscp;\??\c:\windows\System32\Drivers\yjsbzscp.sys --> c:\windows\System32\Drivers\yjsbzscp.sys [?]
    S3 zrhawwbg;zrhawwbg;\??\c:\windows\System32\Drivers\zrhawwbg.sys --> c:\windows\System32\Drivers\zrhawwbg.sys [?]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
    \Shell\AutoRun\command - E:\setup.exe
    .
    Contents of the 'Scheduled Tasks' folder

    2008-12-25 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    2009-02-18 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
    - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]

    2009-02-18 c:\windows\Tasks\MP Scheduled Scan.job
    - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]

    2009-01-21 c:\windows\Tasks\Norton PC Checkup WeekDay Scanner.job
    - c:\program files\norton pc checkup\PC_Checkup.exe [2009-01-10 19:45]

    2009-01-24 c:\windows\Tasks\Norton PC Checkup Weekend Scanner.job
    - c:\program files\norton pc checkup\PC_Checkup.exe [2009-01-10 19:45]
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{FF9839F1-4E20-4A00-851C-D388276CC965} - (no file)


    .
    ------- Supplementary Scan -------
    .
    uSearch Page = hxxp://www.google.com
    uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
    uSearch Bar = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\BTMS09\Application Data\Mozilla\Firefox\Profiles\vno2yfhx.default\
    FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
    FF - plugin: c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-02-18 09:23:23
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2009-02-18 9:25:29
    ComboFix-quarantined-files.txt 2009-02-18 14:25:27
    ComboFix2.txt 2009-02-18 05:36:13
    ComboFix3.txt 2008-09-28 06:14:38

    Pre-Run: 11,878,825,984 bytes free
    Post-Run: 11,900,813,312 bytes free

    Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
    5480 --- E O F --- 2009-02-18 14:09:52
     
    scorpion657,
    #18
  20. 2009/02/19
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK please do this.

    Highlight and copy the contents of the code box below and paste it into a blank Notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.
    Click here to see how to use CFScript.txt
    Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log.

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

    **NOTE - Allow ComboFix to update if prompted.
    Code:
    File::
c:\windows\DUMPd1e7.tmp
c:\windows\DUMPd969.tmp
c:\windows\DUMPd310.tmp
c:\windows\DUMPe427.tmp
c:\windows\DUMPe8bb.tmp
c:\windows\System32\Drivers\bhndkgep.sys 
c:\windows\System32\Drivers\boegvfnz.sys 
c:\windows\System32\Drivers\btruqvla.sys 
c:\windows\System32\Drivers\cphouhsa.sys
c:\windows\System32\Drivers\favmetnc.sys 
c:\windows\System32\Drivers\fqofkgeo.sys
c:\windows\System32\Drivers\fucoeuga.sys
c:\windows\System32\Drivers\fvyiyeib.sys 
c:\windows\System32\Drivers\hcsglqlz.sys
c:\windows\System32\Drivers\hhdposka.sys
c:\windows\System32\Drivers\iyazocfh.sys
c:\windows\System32\Drivers\jqcqpooa.sys 
c:\windows\System32\Drivers\kjbfcymr.sys 
c:\windows\System32\Drivers\kqrhwzvd.sys 
c:\windows\System32\Drivers\ktiwrfyx.sys 
c:\windows\System32\Drivers\lsxkspwk.sys 
c:\windows\System32\Drivers\mflbcayo.sys 
c:\windows\System32\Drivers\mlytiexq.sys 
c:\windows\System32\Drivers\mpsxhluh.sys 
c:\windows\System32\Drivers\ocgkgmkn.sys 
c:\windows\System32\Drivers\ptshozee.sys 
c:\windows\System32\Drivers\raqcfxvf.sys 
c:\windows\System32\Drivers\upppdrns.sys 
c:\windows\System32\Drivers\vlmxkazj.sys
c:\windows\System32\Drivers\vyprrjlw.sys 
c:\windows\System32\Drivers\wqspplfo.sys 
c:\windows\System32\Drivers\wxmyukfq.sys 
c:\windows\System32\Drivers\xboxlsvp.sys 
c:\windows\System32\Drivers\xdadavrf.sys
c:\windows\System32\Drivers\xskeqmlf.sys
c:\windows\System32\Drivers\yjsbzscp.sys 
c:\windows\System32\Drivers\zrhawwbg.sys

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcCuTKd]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
 "AppInit_DLLs "=" "

Driver::
bhndkgep
boegvfnz
btruqvla
cphouhsa
favmetnc
fqofkgeo
fucoeuga
fvyiyeib
hcsglqlz
hhdposka
iyazocfh
jqcqpooa
kjbfcymr
kqrhwzvd
ktiwrfyx.
lsxkspwk
mflbcayo
mlytiexq
mpsxhluh
ocgkgmkn
ptshozee.
raqcfxvf.
upppdrns
vlmxkazj
vyprrjlw
wqspplfo
wxmyukfq
xboxlsvp
xdadavrf
xskeqmlf
yjsbzscp
zrhawwbg
    Thanks
    Geri
     
    Geri,
    #19
  21. 2009/02/20
    scorpion657

    scorpion657 Inactive Thread Starter

    Joined:
    2008/04/03
    Messages:
    78
    Likes Received:
    0
    Hey Geri,
    here is the log:

    ComboFix 09-02-19.01 - BTMS09 2009-02-20 11:51:37.4 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.598 [GMT -5:00]
    Running from: c:\documents and settings\BTMS09\Desktop\ComboFix.exe
    Command switches used :: c:\documents and settings\BTMS09\Desktop\CFScript.txt
    AV: avast! antivirus 4.8.1335 [VPS 090219-0] *On-access scanning disabled* (Updated)
    * Created a new restore point

    FILE ::
    c:\windows\DUMPd1e7.tmp
    c:\windows\DUMPd310.tmp
    c:\windows\DUMPd969.tmp
    c:\windows\DUMPe427.tmp
    c:\windows\DUMPe8bb.tmp
    c:\windows\System32\Drivers\bhndkgep.sys
    c:\windows\System32\Drivers\boegvfnz.sys
    c:\windows\System32\Drivers\btruqvla.sys
    c:\windows\System32\Drivers\cphouhsa.sys
    c:\windows\System32\Drivers\favmetnc.sys
    c:\windows\System32\Drivers\fqofkgeo.sys
    c:\windows\System32\Drivers\fucoeuga.sys
    c:\windows\System32\Drivers\fvyiyeib.sys
    c:\windows\System32\Drivers\hcsglqlz.sys
    c:\windows\System32\Drivers\hhdposka.sys
    c:\windows\System32\Drivers\iyazocfh.sys
    c:\windows\System32\Drivers\jqcqpooa.sys
    c:\windows\System32\Drivers\kjbfcymr.sys
    c:\windows\System32\Drivers\kqrhwzvd.sys
    c:\windows\System32\Drivers\ktiwrfyx.sys
    c:\windows\System32\Drivers\lsxkspwk.sys
    c:\windows\System32\Drivers\mflbcayo.sys
    c:\windows\System32\Drivers\mlytiexq.sys
    c:\windows\System32\Drivers\mpsxhluh.sys
    c:\windows\System32\Drivers\ocgkgmkn.sys
    c:\windows\System32\Drivers\ptshozee.sys
    c:\windows\System32\Drivers\raqcfxvf.sys
    c:\windows\System32\Drivers\upppdrns.sys
    c:\windows\System32\Drivers\vlmxkazj.sys
    c:\windows\System32\Drivers\vyprrjlw.sys
    c:\windows\System32\Drivers\wqspplfo.sys
    c:\windows\System32\Drivers\wxmyukfq.sys
    c:\windows\System32\Drivers\xboxlsvp.sys
    c:\windows\System32\Drivers\xdadavrf.sys
    c:\windows\System32\Drivers\xskeqmlf.sys
    c:\windows\System32\Drivers\yjsbzscp.sys
    c:\windows\System32\Drivers\zrhawwbg.sys
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\DUMPd1e7.tmp
    c:\windows\DUMPd310.tmp
    c:\windows\DUMPd969.tmp
    c:\windows\DUMPe427.tmp
    c:\windows\DUMPe8bb.tmp
    c:\windows\IE4 Error Log.txt

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_BHNDKGEP
    -------\Legacy_BOEGVFNZ
    -------\Legacy_BTRUQVLA
    -------\Legacy_CPHOUHSA
    -------\Legacy_FAVMETNC
    -------\Legacy_FQOFKGEO
    -------\Legacy_FUCOEUGA
    -------\Legacy_FVYIYEIB
    -------\Legacy_HCSGLQLZ
    -------\Legacy_HHDPOSKA
    -------\Legacy_IYAZOCFH
    -------\Legacy_JQCQPOOA
    -------\Legacy_KJBFCYMR
    -------\Legacy_KQRHWZVD
    -------\Legacy_LSXKSPWK
    -------\Legacy_MFLBCAYO
    -------\Legacy_MLYTIEXQ
    -------\Legacy_MPSXHLUH
    -------\Legacy_OCGKGMKN
    -------\Legacy_UPPPDRNS
    -------\Legacy_VLMXKAZJ
    -------\Legacy_VYPRRJLW
    -------\Legacy_WQSPPLFO
    -------\Legacy_WXMYUKFQ
    -------\Legacy_XBOXLSVP
    -------\Legacy_XDADAVRF
    -------\Legacy_XSKEQMLF
    -------\Legacy_YJSBZSCP
    -------\Legacy_ZRHAWWBG
    -------\Service_bhndkgep
    -------\Service_boegvfnz
    -------\Service_btruqvla
    -------\Service_cphouhsa
    -------\Service_favmetnc
    -------\Service_fqofkgeo
    -------\Service_fucoeuga
    -------\Service_fvyiyeib
    -------\Service_hcsglqlz
    -------\Service_hhdposka
    -------\Service_iyazocfh
    -------\Service_jqcqpooa
    -------\Service_kjbfcymr
    -------\Service_kqrhwzvd
    -------\Service_lsxkspwk
    -------\Service_mflbcayo
    -------\Service_mlytiexq
    -------\Service_mpsxhluh
    -------\Service_ocgkgmkn
    -------\Service_upppdrns
    -------\Service_vlmxkazj
    -------\Service_vyprrjlw
    -------\Service_wqspplfo
    -------\Service_wxmyukfq
    -------\Service_xboxlsvp
    -------\Service_xdadavrf
    -------\Service_xskeqmlf
    -------\Service_yjsbzscp
    -------\Service_zrhawwbg


    ((((((((((((((((((((((((( Files Created from 2009-01-20 to 2009-02-20 )))))))))))))))))))))))))))))))
    .

    2009-02-19 17:27 . 2009-02-19 17:28 94,084 --a------ c:\windows\hpqins07.dat
    2009-02-19 17:25 . 2009-02-19 17:25 116,734 --------- c:\windows\hpoins11.dat.temp
    2009-02-19 17:25 . 2007-04-19 18:14 11,634 --------- c:\windows\hpomdl11.dat.temp
    2009-02-18 11:54 . 2009-02-18 11:54 268 --ah----- C:\sqmdata19.sqm
    2009-02-18 11:54 . 2009-02-18 11:54 244 --ah----- C:\sqmnoopt19.sqm
    2009-02-18 11:46 . 2009-02-18 11:46 <DIR> d-------- c:\windows\system32\XPSViewer
    2009-02-18 11:46 . 2009-02-18 11:46 <DIR> d-------- c:\program files\MSBuild
    2009-02-18 11:45 . 2009-02-18 11:45 <DIR> d-------- c:\program files\Reference Assemblies
    2009-02-18 11:45 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll
    2009-02-18 11:45 . 2008-07-06 07:06 1,676,288 -----c--- c:\windows\system32\dllcache\xpssvcs.dll
    2009-02-18 11:45 . 2008-07-06 05:50 597,504 -----c--- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    2009-02-18 11:45 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\xpsshhdr.dll
    2009-02-18 11:45 . 2008-07-06 07:06 575,488 -----c--- c:\windows\system32\dllcache\xpsshhdr.dll
    2009-02-18 11:45 . 2008-07-06 07:06 117,760 --------- c:\windows\system32\prntvpt.dll
    2009-02-18 11:45 . 2008-07-06 07:06 89,088 -----c--- c:\windows\system32\dllcache\filterpipelineprintproc.dll
    2009-02-18 10:48 . 2009-02-18 10:48 410,984 --a------ c:\windows\system32\deploytk.dll
    2009-02-18 10:27 . 2009-02-18 10:27 268 --ah----- C:\sqmdata18.sqm
    2009-02-18 10:27 . 2009-02-18 10:27 244 --ah----- C:\sqmnoopt18.sqm
    2009-02-18 10:19 . 2008-12-20 18:15 6,066,688 -----c--- c:\windows\system32\dllcache\ieframe.dll
    2009-02-18 10:19 . 2007-04-17 04:32 2,455,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dat
    2009-02-18 10:19 . 2007-03-08 00:10 991,232 -----c--- c:\windows\system32\dllcache\ieframe.dll.mui
    2009-02-18 10:19 . 2008-12-20 18:15 459,264 -----c--- c:\windows\system32\dllcache\msfeeds.dll
    2009-02-18 10:19 . 2008-12-20 18:15 383,488 -----c--- c:\windows\system32\dllcache\ieapfltr.dll
    2009-02-18 10:19 . 2008-12-20 18:15 267,776 -----c--- c:\windows\system32\dllcache\iertutil.dll
    2009-02-18 10:19 . 2008-12-20 18:15 63,488 -----c--- c:\windows\system32\dllcache\icardie.dll
    2009-02-18 10:19 . 2008-12-20 18:15 52,224 -----c--- c:\windows\system32\dllcache\msfeedsbs.dll
    2009-02-18 10:19 . 2008-12-19 04:10 13,824 -----c--- c:\windows\system32\dllcache\ieudinit.exe
    2009-02-18 09:27 . 2009-02-18 09:27 244 --ah----- C:\sqmnoopt17.sqm
    2009-02-18 09:27 . 2009-02-18 09:27 232 --ah----- C:\sqmdata17.sqm
    2009-02-18 09:13 . 2009-02-18 09:13 268 --ah----- C:\sqmdata16.sqm
    2009-02-18 09:13 . 2009-02-18 09:13 244 --ah----- C:\sqmnoopt16.sqm
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\scripting
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\en
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\system32\bits
    2009-02-18 02:12 . 2009-02-18 02:12 <DIR> d-------- c:\windows\l2schemas
    2009-02-18 02:08 . 2009-02-18 02:12 <DIR> d-------- c:\windows\ServicePackFiles
    2009-02-18 01:49 . 2009-02-18 01:49 268 --ah----- C:\sqmdata15.sqm
    2009-02-18 01:49 . 2009-02-18 01:49 244 --ah----- C:\sqmnoopt15.sqm
    2009-02-18 01:29 . 2009-02-18 01:29 <DIR> d-------- C:\Office2003SP3Changes
    2009-02-18 01:24 . 2009-02-18 01:24 <DIR> d-------- c:\program files\Microsoft.NET
    2009-02-18 01:23 . 2009-02-18 01:24 <DIR> d-------- c:\windows\SHELLNEW
    2009-02-18 00:14 . 2009-02-18 00:14 268 --ah----- C:\sqmdata14.sqm
    2009-02-18 00:14 . 2009-02-18 00:14 244 --ah----- C:\sqmnoopt14.sqm
    2009-02-17 23:55 . 2004-03-24 10:04 851,968 --a------ c:\windows\system32\nvdspsch.exe
    2009-02-17 23:48 . 2001-08-23 07:00 15,872 --a------ c:\windows\system32\expand.exe
    2009-02-17 23:24 . 2009-02-18 00:07 <DIR> d-------- C:\SDFix
    2009-02-17 21:38 . 2009-02-17 21:38 244 --ah----- C:\sqmnoopt13.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 244 --ah----- C:\sqmnoopt12.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 232 --ah----- C:\sqmdata13.sqm
    2009-02-17 21:38 . 2009-02-17 21:38 232 --ah----- C:\sqmdata12.sqm
    2009-02-17 19:30 . 2004-07-17 12:45 613,334 -----c--- c:\windows\system32\dllcache\wmplayer.chm
    2009-02-17 19:30 . 2008-04-13 19:12 276,992 --------- c:\windows\system32\wmphoto.dll
    2009-02-17 19:30 . 2004-08-04 05:00 172,196 -----c--- c:\windows\system32\dllcache\wmpaud9.wav
    2009-02-17 19:30 . 2006-04-25 10:10 69,612 -----c--- c:\windows\system32\dllcache\wmplayer.adm
    2009-02-17 19:30 . 2004-07-17 23:54 23,195 -----c--- c:\windows\system32\dllcache\wmplay.chm
    2009-02-17 19:30 . 2004-08-04 05:00 10,457 -----c--- c:\windows\system32\dllcache\wmptour.hta
    2009-02-17 19:30 . 2004-08-04 05:00 1,771 -----c--- c:\windows\system32\dllcache\wmptour.css
    2009-02-17 19:30 . 2004-08-03 23:51 855 -----c--- c:\windows\system32\dllcache\wmpocm.inf
    2009-02-17 19:30 . 2004-08-04 05:00 420 -----c--- c:\windows\system32\dllcache\wmploc.js
    2009-02-17 19:28 . 2008-04-13 19:10 294,912 -----c--- c:\windows\system32\dllcache\msaud32.acm
    2009-02-17 19:28 . 2008-04-13 19:12 155,136 --------- c:\windows\system32\mssha.dll
    2009-02-17 19:28 . 2008-04-13 19:11 106,496 --------- c:\windows\system32\mmcfxcommon.dll
    2009-02-17 19:28 . 2001-08-23 08:00 97,117 -----c--- c:\windows\system32\dllcache\mplayer2.hlp
    2009-02-17 19:28 . 2008-04-13 13:14 76,800 --------- c:\windows\system32\msshavmsg.dll
    2009-02-17 19:28 . 2004-08-03 23:51 18,286 -----c--- c:\windows\system32\dllcache\mplayer2.inf
    2009-02-17 19:28 . 2004-08-04 05:00 2,778 -----c--- c:\windows\system32\dllcache\mplogoh.gif
    2009-02-17 19:28 . 2004-08-04 05:00 2,545 -----c--- c:\windows\system32\dllcache\mplogo.gif
    2009-02-17 19:28 . 2001-08-23 08:00 1,885 -----c--- c:\windows\system32\dllcache\mplayer2.cnt
    2009-02-17 19:27 . 2004-08-04 05:00 457,607 -----c--- c:\windows\system32\dllcache\mdlib.wmv
    2009-02-17 19:27 . 2008-04-13 19:11 397,312 --------- c:\windows\system32\mmcex.dll
    2009-02-17 19:27 . 2008-04-13 19:09 290,816 -----c--- c:\windows\system32\dllcache\l3codeca.acm
    2009-02-17 19:27 . 2008-04-13 19:11 184,320 --------- c:\windows\system32\microsoft.managementconsole.dll
    2009-02-17 19:27 . 2008-04-13 19:11 61,440 --------- c:\windows\system32\kmsvc.dll
    2009-02-17 19:27 . 2008-04-13 19:11 37,376 --------- c:\windows\system32\l2gpstore.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdpash.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdnepr.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdiultn.dll
    2009-02-17 19:27 . 2008-04-13 19:09 6,144 --------- c:\windows\system32\kbdbhc.dll
    2009-02-17 19:26 . 2004-08-03 22:41 1,041,536 --------- c:\windows\system32\drivers\hsfdpsp2.sys
    2009-02-17 19:26 . 2004-08-03 22:41 685,056 --------- c:\windows\system32\drivers\hsfcxts2.sys
    2009-02-17 19:26 . 2004-08-03 22:41 220,032 --------- c:\windows\system32\drivers\hsfbs2s2.sys
    2009-02-17 19:26 . 2008-04-13 13:45 46,592 --------- c:\windows\system32\drivers\irbus.sys
    2009-02-17 19:26 . 2008-04-13 19:11 32,285 --------- c:\windows\system32\hsfcisp2.dll
    2009-02-17 19:26 . 2008-04-13 13:46 25,600 --------- c:\windows\system32\drivers\hidbth.sys
    2009-02-17 19:26 . 2008-04-13 13:45 19,200 --------- c:\windows\system32\drivers\hidir.sys
    2009-02-17 19:26 . 2007-06-21 00:52 974 --------- c:\windows\system32\pid.inf
    2009-02-17 19:24 . 2008-04-13 19:11 1,888,992 --------- c:\windows\system32\ati3duag.dll
    2009-02-17 18:43 . 2008-10-15 20:00 1,499,136 -----c--- c:\windows\system32\dllcache\shdocvw.dll
    2009-02-17 18:43 . 2008-12-20 18:15 1,160,192 -----c--- c:\windows\system32\dllcache\urlmon.dll
    2009-02-17 18:43 . 2008-12-20 18:15 826,368 -----c--- c:\windows\system32\dllcache\wininet.dll
    2009-02-17 18:43 . 2008-06-13 06:05 272,128 -----c--- c:\windows\system32\dllcache\bthport.sys
    2009-02-17 18:43 . 2008-08-14 05:04 138,496 -----c--- c:\windows\system32\dllcache\afd.sys
    2009-02-17 18:42 . 2008-09-15 07:12 1,846,400 -----c--- c:\windows\system32\dllcache\win32k.sys
    2009-02-17 18:41 . 2009-01-16 21:35 3,594,752 -----c--- c:\windows\system32\dllcache\mshtml.dll
    2009-02-17 18:41 . 2008-08-14 05:11 2,189,184 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
    2009-02-17 18:41 . 2008-08-14 05:09 2,145,280 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
    2009-02-17 18:41 . 2008-08-14 04:33 2,066,048 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
    2009-02-17 18:41 . 2008-08-14 04:33 2,023,936 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
    2009-02-17 18:40 . 2008-09-04 12:15 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
    2009-02-17 18:40 . 2008-04-11 14:04 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll
    2009-02-17 18:40 . 2008-10-24 06:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
    2009-02-17 18:40 . 2008-10-15 11:34 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
    2009-02-17 18:40 . 2008-12-11 05:57 333,952 -----c--- c:\windows\system32\dllcache\srv.sys
    2009-02-17 18:40 . 2008-05-01 09:33 331,776 -----c--- c:\windows\system32\dllcache\msadce.dll
    2009-02-17 18:40 . 2008-05-08 09:02 203,136 -----c--- c:\windows\system32\dllcache\rmcast.sys
    2009-02-17 18:36 . 2006-07-14 16:03 139,264 --a------ c:\windows\system32\igfxres.dll
    2009-02-17 18:11 . 2009-02-17 18:11 268 --ah----- C:\sqmdata11.sqm
    2009-02-17 18:11 . 2009-02-17 18:11 244 --ah----- C:\sqmnoopt11.sqm
    2009-02-17 18:03 . 2009-02-17 18:03 <DIR> d-------- c:\program files\Windows Defender
    2009-02-17 17:58 . 2009-02-17 17:58 268 --ah----- C:\sqmdata10.sqm
    2009-02-17 17:58 . 2009-02-17 17:58 244 --ah----- C:\sqmnoopt10.sqm
    2009-02-17 17:14 . 2009-02-17 17:14 268 --ah----- C:\sqmdata09.sqm
    2009-02-17 17:14 . 2009-02-17 17:14 244 --ah----- C:\sqmnoopt09.sqm
    2009-02-17 15:41 . 2009-02-17 15:41 2,444 --a------ c:\windows\system32\wpa.bak
    2009-02-17 15:25 . 2008-04-13 19:11 571,392 --a--c--- c:\windows\system32\dllcache\tintlgnt.ime
    2009-02-17 15:24 . 2008-04-13 19:09 13,463,552 --a--c--- c:\windows\system32\dllcache\hwxjpn.dll
    2009-02-17 15:23 . 2001-08-23 08:00 10,096,640 --a--c--- c:\windows\system32\dllcache\hwxcht.dll
    2009-02-17 15:22 . 2001-08-23 08:00 169,984 --a--c--- c:\windows\system32\dllcache\iisui.dll
    2009-02-17 15:22 . 2001-08-23 08:00 94,720 --a--c--- c:\windows\system32\dllcache\certmap.ocx
    2009-02-17 15:22 . 2001-08-23 08:00 19,968 --a--c--- c:\windows\system32\dllcache\inetsloc.dll
    2009-02-17 15:22 . 2001-08-23 08:00 14,336 --a--c--- c:\windows\system32\dllcache\iisreset.exe
    2009-02-17 15:22 . 2001-08-23 08:00 7,680 --a--c--- c:\windows\system32\dllcache\inetmgr.exe
    2009-02-17 15:22 . 2001-08-23 08:00 6,144 --a--c--- c:\windows\system32\dllcache\ftpsapi2.dll
    2009-02-17 15:22 . 2001-08-23 08:00 5,632 --a--c--- c:\windows\system32\dllcache\iisrstap.dll
    2009-02-17 15:18 . 2008-04-13 19:12 677,888 --a------ c:\windows\system32\mstsc.exe

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-19 22:27 --------- d-----w c:\program files\HP
    2009-02-18 17:23 --------- d-----w c:\program files\Windows Media Connect 2
    2009-02-18 16:16 --------- d-----w c:\program files\Microsoft Plus!
    2009-02-18 15:57 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2009-02-18 15:57 --------- d-----w c:\program files\Google
    2009-02-18 15:53 --------- d-----w c:\program files\GmoteServer
    2009-02-18 15:53 --------- d-----w c:\documents and settings\BTMS09\Application Data\Gmote
    2009-02-18 15:48 --------- d-----w c:\program files\Java
    2009-02-18 06:50 --------- d-----w c:\program files\Yahoo!
    2009-02-18 05:23 2,923,321 ----a-r C:\ComboFix.exe
    2009-02-17 23:51 --------- d-----w c:\program files\Common Files\Symantec Shared
    2009-02-17 22:16 --------- d-----w c:\program files\Spybot - Search & Destroy
    2009-02-17 21:37 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-02-17 01:24 --------- d-----w c:\program files\Windows Live Toolbar
    2009-02-17 01:21 --------- d-----w c:\program files\QuickTime
    2009-02-17 01:12 --------- d-----w c:\program files\LimeWire
    2009-02-17 01:02 --------- d-----w c:\program files\eSignal
    2009-01-31 23:05 --------- d-----w c:\documents and settings\BTMS09\Application Data\LimeWire
    2009-01-23 04:23 --------- d-----w c:\program files\Common Files\Real
    2009-01-18 00:06 --------- d--h--w c:\program files\InstallJammer Registry
    2009-01-12 00:05 --------- d-----w c:\program files\NCH Software
    2009-01-12 00:02 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Software
    2009-01-11 23:49 --------- d-----w c:\documents and settings\BTMS09\Application Data\HP
    2009-01-11 00:45 --------- d-----w c:\program files\Norton PC Checkup
    2009-01-08 12:56 --------- d-----w c:\documents and settings\All Users\Application Data\HP Product Assistant
    2009-01-06 03:36 --------- d-----w c:\documents and settings\All Users\Application Data\HP
    2009-01-06 03:33 --------- d-----w c:\program files\Common Files\Sonic Shared
    2009-01-06 03:33 --------- d-----w c:\documents and settings\All Users\Application Data\Sonic
    2009-01-06 03:32 --------- d-----w c:\program files\Common Files\HP
    2009-01-06 03:27 --------- d-----w c:\program files\Hewlett-Packard
    2009-01-06 03:26 --------- d-----w c:\program files\Common Files\Hewlett-Packard
    2008-12-23 18:04 --------- d-----w c:\documents and settings\BTMS09\Application Data\Apple Computer
    .

    ((((((((((((((((((((((((((((( SnapShot_2009-02-18_ 9.24.06.76 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    - 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    - 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    - 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    - 2006-05-25 14:29:04 213,216 -c--a-w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
    + 2006-05-25 15:29:04 213,216 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
    - 2006-05-25 14:29:04 371,424 -c--a-w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
    + 2006-05-25 15:29:04 371,424 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
    - 2006-05-24 16:32:48 213,216 -c--a-w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
    + 2006-05-24 17:32:48 213,216 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
    - 2006-05-24 16:32:48 371,424 -c--a-w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
    + 2006-05-24 17:32:48 371,424 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
    - 2008-06-11 20:31:34 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-02-18 16:50:05 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2008-06-11 20:31:41 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-02-18 16:50:10 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-02-18 16:45:57 163,840 ----a-w c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2008-06-11 20:31:42 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-02-18 16:50:18 4,546,560 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-02-18 16:46:02 4,210,688 ----a-w c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2008-06-11 20:31:42 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-02-18 16:50:21 486,400 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2008-06-11 20:31:39 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-02-18 16:50:23 2,933,248 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2008-06-11 20:31:30 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-02-18 16:50:13 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2008-06-11 20:31:30 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2009-02-18 16:50:13 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2009-02-18 16:46:03 368,640 ----a-w c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2008-06-11 20:31:46 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-02-18 16:50:12 261,632 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2008-06-11 20:31:37 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-02-18 16:49:58 5,242,880 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2008-06-11 20:31:33 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-02-18 16:50:05 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2008-06-11 20:31:30 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-02-18 16:49:59 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2008-06-11 20:31:31 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-02-18 16:50:05 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2008-06-11 20:31:40 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-02-18 16:50:06 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2008-06-11 20:31:40 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-02-18 16:50:07 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2008-06-11 20:31:41 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-02-18 16:50:07 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-02-18 16:47:20 106,496 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
    - 2008-06-11 20:31:32 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-02-18 16:50:15 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-02-18 16:47:20 733,184 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2008-06-11 20:31:32 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-02-18 16:50:16 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-02-18 16:47:21 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-02-18 16:47:21 802,816 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
    - 2008-06-11 20:31:33 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-02-18 16:50:17 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-02-18 16:47:21 94,208 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    - 2008-06-11 20:31:33 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-02-18 16:50:18 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2008-06-11 20:31:31 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-02-18 16:50:10 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-02-18 16:45:56 397,312 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2008-06-11 20:31:48 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2009-02-18 16:50:10 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2008-06-11 20:31:47 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-02-18 16:50:09 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2008-06-11 20:31:28 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-02-18 16:50:12 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2008-06-11 20:31:47 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-02-18 16:50:08 659,456 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-02-18 16:47:20 41,984 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    - 2008-06-11 20:31:48 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-02-18 16:50:20 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2008-06-11 20:31:30 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-02-18 16:50:12 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2008-06-11 20:31:29 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-02-18 16:50:08 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2008-06-11 20:31:29 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-02-18 16:50:07 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-02-18 16:46:07 598,016 ----a-w c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2009-02-18 16:46:01 32,768 ----a-w c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2009-02-18 16:46:07 46,104 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
    + 2009-02-18 16:46:09 196,608 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2009-02-18 16:46:10 139,264 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2009-02-18 16:46:10 397,312 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2009-02-18 16:46:10 163,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2009-02-18 16:51:20 5,283,840 ----a-w c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2009-02-18 16:46:11 864,256 ----a-w c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2009-02-18 16:46:03 528,384 ----a-w c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2009-02-18 16:47:22 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
    + 2009-02-18 16:45:57 110,592 ----a-w c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    - 2008-06-11 20:31:44 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-02-18 16:50:20 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-02-18 16:47:23 45,056 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2009-02-18 16:47:23 163,840 ----a-w c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2009-02-18 16:47:30 57,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2008-06-11 20:31:34 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-02-18 16:50:21 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2008-06-11 20:31:45 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-02-18 16:50:22 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-02-18 16:47:24 667,648 ----a-w c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
    + 2009-02-18 16:47:24 53,248 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2009-02-18 16:47:24 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2009-02-18 16:47:25 2,879,488 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2009-02-18 16:47:18 684,032 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2009-02-18 16:51:54 294,912 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2009-02-18 16:47:17 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    + 2009-02-18 16:51:54 442,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
    - 2008-06-11 20:31:43 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-02-18 16:50:23 745,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2008-06-11 20:31:31 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-02-18 16:50:24 970,752 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2008-06-11 20:31:39 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-02-18 16:50:03 5,062,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-02-18 16:47:18 286,720 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2008-06-11 20:31:36 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2009-02-18 16:50:04 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2008-06-11 20:31:35 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-02-18 16:50:11 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2008-06-11 20:31:36 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-02-18 16:50:02 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2008-06-11 20:31:45 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-02-18 16:50:16 626,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-02-18 16:46:12 126,976 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2009-02-18 16:45:58 430,080 ----a-w c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2009-02-18 16:45:58 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2009-02-18 16:47:27 143,360 ----a-w c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    - 2008-06-11 20:31:43 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-02-18 16:50:17 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2008-06-11 20:31:46 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-02-18 16:50:16 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-02-18 16:47:30 233,472 ----a-w c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2008-06-11 20:31:43 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-02-18 16:50:15 303,104 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2008-06-11 20:31:44 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-02-18 16:50:14 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-02-18 16:45:58 966,656 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2008-06-11 20:31:34 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-02-18 16:50:13 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-02-18 16:46:01 73,728 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2009-02-18 16:46:01 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2009-02-18 16:47:16 569,344 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    + 2009-02-18 16:51:17 5,931,008 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2008-06-11 20:31:36 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-02-18 16:50:09 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-02-18 16:46:07 688,128 ----a-w c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2009-02-18 16:47:32 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    + 2009-02-18 16:47:32 32,768 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2009-02-18 16:51:55 229,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    + 2009-02-18 16:47:28 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    + 2009-02-18 16:51:55 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2009-02-18 16:47:33 335,872 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    + 2009-02-18 16:51:55 1,277,952 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    - 2008-06-11 20:31:47 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-02-18 16:50:00 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2008-06-11 20:31:37 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-02-18 16:50:01 77,824 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-02-18 16:47:34 61,440 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    - 2008-06-11 20:31:37 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-02-18 16:50:00 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2008-06-11 20:31:38 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-02-18 16:50:02 5,025,792 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-02-18 16:47:29 12,288 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2009-02-18 16:46:05 1,138,688 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2009-02-18 16:46:06 1,630,208 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2009-02-18 16:46:06 540,672 ----a-w c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    + 2009-02-18 16:47:16 507,904 ----a-w c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    + 2009-02-18 16:47:29 139,264 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
    - 2008-06-11 20:31:38 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-02-18 16:50:25 2,048,000 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2008-06-11 20:31:45 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-02-18 16:50:24 3,149,824 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-02-18 16:46:08 167,936 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2009-02-18 16:46:09 385,024 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2009-02-18 16:46:04 40,960 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2009-02-18 16:46:04 98,304 ----a-w c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2009-02-18 16:46:05 1,245,184 ----a-w c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2009-02-18 16:46:09 94,208 ----a-w c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2009-02-18 17:14:33 25,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
    + 2009-02-18 17:14:36 842,240 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b5b2feadc3943e3976daebc0bcd2b5e2\AspNetMMCExt.ni.dll
    + 2009-02-18 17:14:22 410,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\12629e2f3e315459bee67cbbaac85cb2\ComSvcConfig.ni.exe
    + 2009-02-18 17:14:47 220,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9bea05938bee3555c5aa8763d89a68f9\CustomMarshalers.ni.dll
    + 2009-02-18 17:14:37 14,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
    + 2009-02-18 17:14:48 222,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\9b321ebf67587237f576df6104a32588\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2009-02-18 17:14:40 1,888,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6cfe582681724965fb817e8ece5f0909\Microsoft.Build.Engine.ni.dll
    + 2009-02-18 17:14:49 839,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\96825c34d7e1f7df1923ff2123bed8da\Microsoft.Build.Engine.ni.dll
    + 2009-02-18 17:14:39 74,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
    + 2009-02-18 17:14:49 65,024 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
    + 2009-02-18 17:14:55 1,966,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\a47100d8f4574bed2d49d83d0ab8964e\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2009-02-18 17:14:52 1,620,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\bd241492d96db39f20e758c13c845033\Microsoft.Build.Tasks.ni.dll
    + 2009-02-18 17:14:56 175,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4217124db1ea5de5f1a1f3eea75e8d32\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2009-02-18 17:14:55 144,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\55b9eff9e23359faed4351386c062238\Microsoft.Build.Utilities.ni.dll
    + 2009-02-18 17:16:04 2,332,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b261961046545831aa60963e84905968\Microsoft.JScript.ni.dll
    + 2009-02-18 17:14:26 386,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1820d6a012fc0e16c3e1d29d973cd2d0\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2009-02-18 17:14:24 1,093,120 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6b2f62f5e981913fce1d223f645d9ddf\Microsoft.Transactions.Bridge.ni.dll
    + 2009-02-18 17:14:58 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\1c86afc399d0fdd8e069266ffbe748d1\Microsoft.VisualBasic.ni.dll
    + 2009-02-18 17:16:05 55,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
    + 2009-02-18 17:14:38 133,632 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\6d38e317128608bc4516ea46ab94590e\MSBuild.ni.exe
    + 2009-02-18 16:51:08 11,486,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6d667f19d687361886990f3ca0f49816\mscorlib.ni.dll
    + 2009-02-18 16:51:29 1,451,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\e634bc4c4a00635a0a254febab0e2e2c\PresentationBuildTasks.ni.dll
    + 2009-02-18 16:51:30 39,424 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
    + 2009-02-18 16:52:20 12,216,320 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\956375d487cbef36165b3250030e3574\PresentationCore.ni.dll
    + 2009-02-18 16:52:24 47,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
    + 2009-02-18 16:52:59 258,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2c980c9a5051d723c6ec2a78a3d0e2b3\PresentationFramework.Royale.ni.dll
    + 2009-02-18 16:52:57 368,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\59a67874d8d8475faa5be1d993083d12\PresentationFramework.Aero.ni.dll
    + 2009-02-18 16:52:58 539,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8003abaf6bcf70f7eb620d06837e897b\PresentationFramework.Luna.ni.dll
    + 2009-02-18 16:52:55 14,327,808 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96e710f47c601cba3f2348a8d11ddede\PresentationFramework.ni.dll
    + 2009-02-18 16:52:58 224,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f475294d8c7dc2dd4febeef27bc0417e\PresentationFramework.Classic.ni.dll
    + 2009-02-18 16:53:03 1,657,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\6bafb1a2a73794ddb9761cb321c9e7e2\PresentationUI.ni.dll
    + 2009-02-18 16:53:05 2,128,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\4bfb3048bf200a6a8592d1b4ba861a7f\ReachFramework.ni.dll
    + 2009-02-18 17:14:28 320,512 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\10a0c9707876fc1f65e64b811a28b020\ServiceModelReg.ni.exe
    + 2009-02-18 17:14:29 256,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9790551187e294b4ed3aaa1c221891c7\SMDiagnostics.ni.dll
    + 2009-02-18 17:14:30 366,080 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\045dd501b7257b1cc26083538ae69045\SMSvcHost.ni.exe
    + 2009-02-18 17:15:00 82,944 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
    + 2009-02-18 17:15:00 633,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ce984d754e3c0b6be4504b785cc43574\System.AddIn.ni.dll
    + 2009-02-18 17:15:02 94,208 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
    + 2009-02-18 17:16:00 141,312 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\de514e484e49b04b016949d57ffac03e\System.Configuration.Install.ni.dll
    + 2009-02-18 17:14:42 971,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\b82c00e2d24305ad6cb08556e3779b75\System.Configuration.ni.dll
    + 2009-02-18 16:53:09 2,295,296 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\47d87251e93256c635eb73403b8db33e\System.Core.ni.dll
    + 2009-02-18 17:15:03 135,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\1db495ff00bbd14df4af6680c4de0653\System.Data.DataSetExtensions.ni.dll
    + 2009-02-18 17:15:45 756,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\392de34573f9f8ec885714f2f3e7f07f\System.Data.Entity.Design.ni.dll
    + 2009-02-18 17:15:42 9,924,096 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6479f975b105808a8d9e7a7fdc762551\System.Data.Entity.ni.dll
    + 2009-02-18 16:53:20 2,516,480 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\0bbec79460b1137df5313f9baf7b246f\System.Data.Linq.ni.dll
    + 2009-02-18 17:15:52 354,816 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1cf3acad6553d6c59df576794f4e8bd6\System.Data.Services.Design.ni.dll
    + 2009-02-18 17:15:51 939,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a4b887f476fa4b8746a93a9fc2208560\System.Data.Services.Client.ni.dll
    + 2009-02-18 17:15:49 1,328,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\956a513dcbd44d5a6801840ef2b0b47b\System.Data.Services.ni.dll
    + 2009-02-18 17:14:45 2,510,336 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\826b09ab0d0e36f4d631b4cd335df511\System.Data.SqlXml.ni.dll
    + 2009-02-18 16:53:15 6,616,576 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c70731047b0022638b3f9fb158948a03\System.Data.ni.dll
    + 2009-02-18 17:15:53 1,801,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\a6b58624486714fa71e5e35186850ff0\System.Deployment.ni.dll
    + 2009-02-18 16:53:30 10,683,392 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8ee220bc3cce4f7bbd7818946519ed7f\System.Design.ni.dll
    + 2009-02-18 17:15:54 1,116,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\543aced762f6b0c3f8e037955941afc6\System.DirectoryServices.ni.dll
    + 2009-02-18 17:15:56 881,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8b3bb7a2c2f3ffe94c866283f1cd5957\System.DirectoryServices.AccountManagement.ni.dll
    + 2009-02-18 17:15:57 455,680 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c434a07332ce490711c27fd0edb7562f\System.DirectoryServices.Protocols.ni.dll
    + 2009-02-18 16:53:33 208,384 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\18bbe2b6717e7f1d1dd672526e9889ee\System.Drawing.Design.ni.dll
    + 2009-02-18 16:53:32 1,587,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3da96ee075bab9202626ae44c18d226c\System.Drawing.ni.dll
    + 2009-02-18 17:15:58 627,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.ni.dll
    + 2009-02-18 17:15:58 280,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4267bd908175603006c6c90bb5d900c7\System.EnterpriseServices.Wrapper.dll
    + 2009-02-18 17:13:46 212,992 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\68e71147704ef0d34d9a4bece7767fc5\System.IdentityModel.Selectors.ni.dll
    + 2009-02-18 17:13:45 1,056,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c2de8479e54852f56996f79bc93acb13\System.IdentityModel.ni.dll
    + 2009-02-18 17:13:48 381,440 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7c367a96b10d626ec8cbf8149272d845\System.IO.Log.ni.dll
    + 2009-02-18 17:15:59 330,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1d3fbbd23ce1e8637ef4f40a8d23cd32\System.Management.Instrumentation.ni.dll
    + 2009-02-18 17:16:02 998,400 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\8642fdfbf02a6cb6f01169fe6fdb5d11\System.Management.ni.dll
    + 2009-02-18 17:16:06 621,056 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\519d9c618341b136f9b963ffb7495308\System.Net.ni.dll
     
    scorpion657,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...