1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Get pop ups when starting IE 7, even with pop up blocker active

Discussion in 'Malware and Virus Removal Archive' started by Topnotch, 2010/08/30.

Page 1 of 3
  1. 2010/08/30
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    [Resolved] Get pop ups when starting IE 7, even with pop up blocker active

    A couple of days ago I got the Win32:Rootkit-gen virus and thought I had gotten rid of everything. I used Malwarebytes and Avast and also Ad-aware. Eventually everything was coming up clean but now I get random pop ups when starting IE 7. I am including the DDS info.

    Thanks for any help you can give me, Andy

    DDS (Ver_10-03-17.01) - NTFSx86
    Run by Andy at 18:07:36.00 on Mon 08/30/2010
    Internet Explorer: 7.0.5730.13
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2476 [GMT -6:00]

    AV: avast! antivirus 4.8.1368 [VPS 100830-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

    ============== Running Processes ===============

    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Lexmark 5000 Series\lxdmmon.exe
    C:\Program Files\Lexmark 5000 Series\lxdmamon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
    C:\Program Files\Southwest Airlines\Ding\Ding.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\Program Files\Logitech\MouseWare\system\em_exec.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\system32\lxdmcoms.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Documents and Settings\Andy\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://my.earthlink.net/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.5.5126.1836\swg.dll
    BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
    TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\CLIStart.exe "
    mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe "
    mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\10.0\sharedcom\RoxWatchTray10.exe "
    mRun: [Logitech Utility] Logi_MwX.Exe
    mRun: [lxdmmon.exe] "c:\program files\lexmark 5000 series\lxdmmon.exe "
    mRun: [lxdmamon] "c:\program files\lexmark 5000 series\lxdmamon.exe "
    mRun: [Lexmark 5000 Series Fax Server] "c:\program files\lexmark 5000 series\fm3032.exe" /s
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [WinampAgent] "c:\program files\winamp\winampa.exe "
    mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
    mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
    StartupFolder: c:\docume~1\andy\startm~1\programs\startup\ding!.lnk - c:\program files\southwest airlines\ding\Ding.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ncprot~1.lnk - c:\program files\sec\natural color pro\NCProTray.exe
    uPolicies-explorer: <NO NAME> =
    IE: &Search
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {26B2A5DA-BFD6-422F-A89A-28A54C74B12B} - hxxp://www.costcophotocenter.com/upload/activex/v3_0_0_4/PhotoCenter_ActiveX_Control.cab
    DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1283021253187
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1283021241203
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    DPF: {EFD1E13D-1CB3-4545-B754-CA410FE7734F} - hxxp://www.costcophotocenter.com/upload/activex/v3_0_0_2/PhotoCenter_ActiveX_Control.cab?
    Notify: AtiExtEvent - Ati2evxx.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ============= SERVICES / DRIVERS ===============

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-9-7 114768]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-9-7 20560]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-9-7 138680]
    R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2010-8-12 1355416]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-1-31 135664]
    S2 RoxLiveShare10;LiveShare P2P Server 10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxLiveShare10.exe [2008-5-14 309744]
    S2 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxWatch10.exe [2008-5-14 166384]
    S2 SessionLauncher;SessionLauncher;c:\docume~1\admini~1\locals~1\temp\dx9\sessionlauncher.exe --> c:\docume~1\admini~1\locals~1\temp\dx9\SessionLauncher.exe [?]
    S3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-9-7 254040]
    S3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-9-7 352920]
    S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2010-8-12 15008]
    S3 RoxMediaDB10;RoxMediaDB10;c:\program files\common files\roxio shared\10.0\sharedcom\RoxMediaDB10.exe [2008-5-14 1120752]

    =============== Created Last 30 ================

    2010-08-30 01:29:49 0 d-----w- c:\program files\Trend Micro
    2010-08-30 00:48:43 15880 ----a-w- c:\windows\system32\lsdelete.exe
    2010-08-29 23:34:59 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
    2010-08-29 23:12:48 0 dc-h--w- c:\docume~1\alluse~1\applic~1\{ECC164E0-3133-4C70-A831-F08DB2940F70}
    2010-08-29 23:12:32 0 d-----w- c:\program files\Lavasoft
    2010-08-29 20:18:57 0 d-----w- c:\windows\system32\wbem\Repository
    2010-08-29 19:58:09 664 ----a-w- c:\windows\system32\d3d9caps.dat
    2010-08-29 07:34:41 120 ----a-w- c:\windows\Uwarikic.dat
    2010-08-29 07:34:41 0 ----a-w- c:\windows\Gkakecah.bin
    2010-08-28 19:45:54 0 d-----w- c:\program files\Cisco Systems
    2010-08-28 19:21:11 0 d-----w- c:\windows\system32\scripting
    2010-08-28 19:21:11 0 d-----w- c:\windows\l2schemas
    2010-08-28 19:21:10 0 d-----w- c:\windows\system32\en
    2010-08-28 19:21:10 0 d-----w- c:\windows\system32\bits
    2010-08-28 19:09:59 685056 ------w- c:\windows\system32\drivers\hsfcxts2.sys
    2010-08-28 18:48:16 15064 ----a-w- c:\windows\system32\wuapi.dll.mui
    2010-08-28 18:46:31 0 d-----w- c:\docume~1\alluse~1\applic~1\Cisco Systems
    2010-08-15 20:08:58 0 d-----w- c:\temp\ObeoTour_514342_369

    ==================== Find3M ====================
     
    Topnotch,
    #1
  2. 2010/08/30
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 12/6/2008 10:37:27 AM
    System Uptime: 8/30/2010 5:30:59 PM (1 hours ago)

    Motherboard: Dell Inc. | | 0RY007
    Processor: Intel(R) Core(TM)2 Duo CPU E7300 @ 2.66GHz | Socket 775 | 2660/266mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 466 GiB total, 425.339 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    F: is Removable
    G: is Removable
    H: is Removable
    I: is Removable
    N: is Removable

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP441: 6/1/2010 5:04:55 PM - System Checkpoint
    RP442: 6/2/2010 5:05:06 PM - System Checkpoint
    RP443: 6/3/2010 6:31:58 PM - System Checkpoint
    RP444: 6/5/2010 8:50:28 AM - System Checkpoint
    RP445: 6/6/2010 9:41:24 AM - System Checkpoint
    RP446: 6/7/2010 5:23:57 PM - System Checkpoint
    RP447: 6/8/2010 6:03:53 PM - System Checkpoint
    RP448: 6/9/2010 6:40:08 PM - System Checkpoint
    RP449: 6/10/2010 7:36:04 PM - System Checkpoint
    RP450: 6/11/2010 8:17:12 PM - System Checkpoint
    RP451: 6/13/2010 8:14:08 AM - System Checkpoint
    RP452: 6/14/2010 7:29:34 PM - System Checkpoint
    RP453: 6/15/2010 8:07:41 PM - System Checkpoint
    RP454: 6/16/2010 8:41:03 PM - System Checkpoint
    RP455: 6/20/2010 6:27:39 PM - System Checkpoint
    RP456: 6/21/2010 8:16:59 PM - System Checkpoint
    RP457: 6/22/2010 8:56:51 PM - System Checkpoint
    RP458: 6/25/2010 2:58:55 PM - System Checkpoint
    RP459: 6/27/2010 8:25:08 PM - System Checkpoint
    RP460: 7/5/2010 5:21:08 PM - System Checkpoint
    RP461: 7/6/2010 6:23:50 PM - System Checkpoint
    RP462: 7/9/2010 5:51:09 PM - System Checkpoint
    RP463: 7/10/2010 9:31:07 PM - System Checkpoint
    RP464: 7/12/2010 9:21:20 PM - System Checkpoint
    RP465: 7/14/2010 5:37:19 PM - System Checkpoint
    RP466: 7/15/2010 8:02:30 PM - System Checkpoint
    RP467: 7/16/2010 9:41:41 PM - System Checkpoint
    RP468: 7/18/2010 7:41:07 AM - System Checkpoint
    RP469: 7/19/2010 9:47:18 AM - System Checkpoint
    RP470: 7/20/2010 7:20:29 PM - System Checkpoint
    RP471: 7/21/2010 9:52:31 PM - System Checkpoint
    RP472: 7/24/2010 9:30:57 AM - System Checkpoint
    RP473: 7/25/2010 10:42:01 AM - System Checkpoint
    RP474: 7/26/2010 5:25:06 PM - System Checkpoint
    RP475: 7/28/2010 6:37:12 PM - System Checkpoint
    RP476: 7/30/2010 8:58:41 AM - System Checkpoint
    RP477: 7/31/2010 9:25:08 AM - System Checkpoint
    RP478: 8/1/2010 2:55:12 PM - System Checkpoint
    RP479: 8/3/2010 10:22:01 AM - System Checkpoint
    RP480: 8/4/2010 10:45:21 AM - System Checkpoint
    RP481: 8/5/2010 11:57:07 AM - System Checkpoint
    RP482: 8/6/2010 12:36:11 PM - System Checkpoint
    RP483: 8/7/2010 1:39:11 PM - System Checkpoint
    RP484: 8/8/2010 2:28:12 PM - System Checkpoint
    RP485: 8/9/2010 3:01:33 PM - System Checkpoint
    RP486: 8/10/2010 3:37:57 PM - System Checkpoint
    RP487: 8/11/2010 12:55:03 PM - Software Distribution Service 3.0
    RP488: 8/12/2010 1:19:25 PM - System Checkpoint
    RP489: 8/13/2010 1:37:58 PM - System Checkpoint
    RP490: 8/14/2010 1:58:12 PM - System Checkpoint
    RP491: 8/15/2010 2:51:21 PM - System Checkpoint
    RP492: 8/16/2010 2:53:44 PM - System Checkpoint
    RP493: 8/17/2010 2:59:29 PM - System Checkpoint
    RP494: 8/18/2010 3:40:04 PM - System Checkpoint
    RP495: 8/22/2010 3:20:01 PM - System Checkpoint
    RP496: 8/23/2010 3:45:45 PM - System Checkpoint
    RP497: 8/24/2010 5:07:12 PM - System Checkpoint
    RP498: 8/25/2010 5:26:05 PM - System Checkpoint
    RP499: 8/26/2010 5:44:32 PM - System Checkpoint
    RP500: 8/28/2010 1:11:22 PM - Software Distribution Service 3.0
    RP501: 8/28/2010 1:30:23 PM - Installed Connect Service
    RP502: 8/29/2010 2:18:06 PM - Restore Operation
    RP503: 8/29/2010 2:22:15 PM - Installed Connect Service
    RP504: 8/29/2010 3:51:45 PM - All Good new cisco router

    ==== Installed Programs ======================

    3ivx MPEG-4 5.0.3 (remove only)
    ABBYY FineReader 6.0 Sprint
    Acrobat.com
    Ad-Aware
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe PhotoDeluxe Home Edition 3.0
    Adobe Reader 9.3
    Apple Software Update
    ArcSoft MediaImpression for Kodak
    ATI Catalyst Control Center
    ATI Display Driver
    avast! Antivirus
    Browser Address Error Redirector
    Cisco Connect
    City Navigator North America v7
    Compatibility Pack for the 2007 Office system
    Dell Driver Reset Tool
    Dell Resource CD
    Dell Support Center
    DING!
    DirectXInstallService
    Facebook Plug-In
    Garmin City Navigator North America v8
    Garmin MapSource
    Google Toolbar for Internet Explorer
    Google Update Helper
    High Definition Audio Driver Package - KB835221
    High Definition Audio Driver Package - KB888111
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB953955)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB970653-v3)
    Intel(R) PRO Network Connections Drivers
    Java(TM) 6 Update 15
    Java(TM) 6 Update 7
    Lexmark 5000 Series
    Lexmark Toolbar
    LimeWire 5.4.8
    Logitech MouseWare 9.79.1
    Malwarebytes' Anti-Malware
    MapSource
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2000 Disc 2
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Professional Edition 2003
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Works
    MSXML 4.0 SP2 (KB954430)
    MSXML 6 Service Pack 2 (KB954459)
    Natural Color Pro
    QuickTime
    Realtek High Definition Audio Driver
    Roxio Activation Module
    Roxio CinePlayer Decoder Pack
    Roxio Creator Audio
    Roxio Creator Copy
    Roxio Creator Data
    Roxio Creator Premier
    Roxio Creator Premier 10
    Roxio Creator Tools
    Roxio Express Labeler
    Roxio Update Manager
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB974455)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB936782)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953838)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371-v2)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972260)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Tweak UI
    Update for Windows XP (KB951618-v2)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB973815)
    Visual C++ 2008 x86 Runtime - (v9.0.30729)
    Visual C++ 2008 x86 Runtime - v9.0.30729.01
    WebFldrs XP
    Webshots!
    Winamp
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Imaging Component
    Windows Installer 3.1 (KB893803)
    Windows Internet Explorer 7
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows XP Service Pack 3
    Yahoo! Messenger

    ==== Event Viewer Messages From Past Week ========

    8/29/2010 8:45:48 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 AFD aswSP aswTdi Fips intelppm IPSec MRxSmb NCPro NetBIOS NetBT RasAcd Rdbss Tcpip
    8/29/2010 8:45:48 AM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    8/29/2010 8:45:48 AM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
    8/29/2010 8:45:48 AM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    8/29/2010 8:45:48 AM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
    8/29/2010 8:45:00 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    8/29/2010 8:44:58 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    8/29/2010 8:25:18 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor NCPro
    8/29/2010 8:24:59 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume.
    8/29/2010 7:59:48 AM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
    8/29/2010 7:59:48 AM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
    8/29/2010 3:35:57 PM, error: Dhcp [1002] - The IP address lease 192.168.1.132 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    8/29/2010 3:34:13 PM, error: Dhcp [1002] - The IP address lease 192.168.1.106 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    8/29/2010 2:51:57 PM, error: Service Control Manager [7000] - The MagicTune service failed to start due to the following error: The system cannot find the file specified.
    8/29/2010 2:11:29 PM, error: Dhcp [1002] - The IP address lease 192.168.1.110 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    8/29/2010 2:04:55 PM, error: Dhcp [1002] - The IP address lease 192.168.1.116 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
    8/29/2010 11:11:59 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments " " in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    8/28/2010 11:51:14 AM, error: Dhcp [1002] - The IP address lease 192.168.0.3 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 72.19.128.200 (The DHCP Server sent a DHCPNACK message).
    8/26/2010 11:40:02 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the lxdmCATSCustConnectService service to connect.
    8/25/2010 7:09:34 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: NCPro
    8/25/2010 7:09:34 AM, error: Service Control Manager [7000] - The SessionLauncher service failed to start due to the following error: The system cannot find the path specified.
    8/25/2010 7:09:34 AM, error: Service Control Manager [7000] - The lxdmCATSCustConnectService service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    8/23/2010 1:35:20 PM, error: Dhcp [1002] - The IP address lease 192.168.0.4 for the Network Card with network address 00219B078F19 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
     
    Topnotch,
    #2


  3. to hide this advert.

  4. 2010/08/30
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    I see you have P2P software ( Azures, Limewire, BitTorrent, uTorrent etc…) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

    Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares and their infections.

    References for the risk of these programs are here, and here.

    I would strongly recommend that you uninstall them, and read the links above for educational value!

    Note: Please be advised that continued use of these programs after being warned of the danger of infections from them, may result in the discontinued help of future cleaning of your system here at WindowsBBS Malware and Virus removal.

    A Malware expert will have a look at your log in due course.
     
    Admin.,
    #3
  5. 2010/08/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    STEP 1. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/mbam.php to your desktop.
    (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform Quick Scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt


    STEP 2. Download GMER: http://www.gmer.net/files.php, by clicking on Download EXE button.
    Alternative downloads:
    - http://majorgeeks.com/GMER_d5198.html
    - http://www.softpedia.com/get/Interne...ers/GMER.shtml
    Double click on downloaded .exe file, select Rootkit tab and click the Scan button.
    Do NOT use the computer while GMER is running!
    When scan is completed, click Save button, and save the results as gmer.log
    Warning ! Please, do not select the "Show all" checkbox during the scan.
    Post the log to your next reply.

    IMPORTANT! If for some reason GMER refuses to run, try again.
    If it still fails, try to UN-check "Devices" in right pane.
    If still no joy, try to run it from Safe Mode.


    STEP 3. Download MBRCheck to your desktop

    Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
    It will show a black screen with some data on it.
    A report called MBRcheckxxxx.txt will be on your desktop
    Open this report and post its content in your next reply.



    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #4
  6. 2010/08/30
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org

    Database version: 4511

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 7.0.5730.13

    8/30/2010 8:50:36 PM
    mbam-log-2010-08-30 (20-50-36).txt

    Scan type: Quick scan
    Objects scanned: 164569
    Time elapsed: 10 minute(s), 33 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Documents and Settings\Andy\Local Settings\Temp\71.tmp (Rootkit.Agent) -> Quarantined and deleted successfully.
     
    Topnotch,
    #5
  7. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    Broni,

    I have tried several times to run the GMER. The last time it ran for 14 hours and it was near the end I think because it was on the Windows files and then the computer re-booted on it's own. So I do not have that report for you, but I do have the MBR Check report for you. Thanks for your help.

    MBRCheck, version 1.2.3
    (c) 2010, AD

    Command-line:
    Windows Version: Windows XP Professional
    Windows Information: Service Pack 3 (build 2600)
    Logical Drives Mask: 0x000021fc

    Kernel Drivers (total 123):
    0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
    0x806E4000 \WINDOWS\system32\hal.dll
    0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
    0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
    0xB9F79000 ACPI.sys
    0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
    0xB9F68000 pci.sys
    0xBA0A8000 isapnp.sys
    0xBA670000 pciide.sys
    0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
    0xBA0B8000 MountMgr.sys
    0xB9F49000 ftdisk.sys
    0xBA5AC000 dmload.sys
    0xB9F23000 dmio.sys
    0xBA330000 PartMgr.sys
    0xBA0C8000 VolSnap.sys
    0xB9F0B000 atapi.sys
    0xB9E44000 iaStor.sys
    0xBA0D8000 disk.sys
    0xBA0E8000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
    0xB9E24000 fltmgr.sys
    0xB9E12000 sr.sys
    0xBA0F8000 PxHelp20.sys
    0xB9DFB000 KSecDD.sys
    0xB9D6E000 Ntfs.sys
    0xB9D41000 NDIS.sys
    0xB9D27000 Mup.sys
    0xBA2C8000 \SystemRoot\system32\DRIVERS\intelppm.sys
    0xB8EB3000 \SystemRoot\system32\DRIVERS\ati2mtag.sys
    0xB8E9F000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
    0xB8E77000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
    0xB8E36000 \SystemRoot\system32\DRIVERS\e1e5132.sys
    0xBA380000 \SystemRoot\system32\DRIVERS\usbuhci.sys
    0xB8E12000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
    0xBA388000 \SystemRoot\system32\DRIVERS\usbehci.sys
    0xBA390000 \SystemRoot\system32\DRIVERS\fdc.sys
    0xBA2E8000 \SystemRoot\system32\DRIVERS\imapi.sys
    0xBA398000 \SystemRoot\system32\drivers\Afc.sys
    0xBA2F8000 \SystemRoot\system32\DRIVERS\cdrom.sys
    0xBA308000 \SystemRoot\system32\DRIVERS\redbook.sys
    0xB8DEF000 \SystemRoot\system32\DRIVERS\ks.sys
    0xBA7C3000 \SystemRoot\system32\DRIVERS\audstub.sys
    0xBA318000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
    0xB9CF7000 \SystemRoot\system32\DRIVERS\ndistapi.sys
    0xB8DD8000 \SystemRoot\system32\DRIVERS\ndiswan.sys
    0xBA128000 \SystemRoot\system32\DRIVERS\raspppoe.sys
    0xB93D3000 \SystemRoot\system32\DRIVERS\raspptp.sys
    0xBA3A0000 \SystemRoot\system32\DRIVERS\TDI.SYS
    0xB8DC7000 \SystemRoot\system32\DRIVERS\psched.sys
    0xB93C3000 \SystemRoot\system32\DRIVERS\msgpc.sys
    0xBA3A8000 \SystemRoot\system32\DRIVERS\ptilink.sys
    0xBA3B0000 \SystemRoot\system32\DRIVERS\raspti.sys
    0xB8D97000 \SystemRoot\system32\DRIVERS\rdpdr.sys
    0xB93B3000 \SystemRoot\system32\DRIVERS\termdd.sys
    0xBA3C8000 \SystemRoot\system32\DRIVERS\kbdclass.sys
    0xBA3D0000 \SystemRoot\system32\DRIVERS\mouclass.sys
    0xBA5EC000 \SystemRoot\system32\DRIVERS\swenum.sys
    0xB8D39000 \SystemRoot\system32\DRIVERS\update.sys
    0xBA544000 \SystemRoot\system32\DRIVERS\mssmbios.sys
    0xBA178000 \SystemRoot\System32\Drivers\NDProxy.SYS
    0xABFF0000 \SystemRoot\system32\drivers\AtiHdmi.sys
    0xABFCC000 \SystemRoot\system32\drivers\portcls.sys
    0xBA1E8000 \SystemRoot\system32\drivers\drmk.sys
    0xBA1F8000 \SystemRoot\system32\DRIVERS\usbhub.sys
    0xBA5FA000 \SystemRoot\system32\DRIVERS\USBD.SYS
    0xA9E0E000 \SystemRoot\system32\drivers\RtkHDAud.sys
    0xABEAD000 \SystemRoot\System32\Drivers\i2omgmt.SYS
    0xBA636000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
    0xBA760000 \SystemRoot\System32\Drivers\Null.SYS
    0xBA638000 \SystemRoot\System32\Drivers\Beep.SYS
    0xAB0F5000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    0xAB0ED000 \SystemRoot\System32\drivers\vga.sys
    0xBA63A000 \SystemRoot\System32\Drivers\mnmdd.SYS
    0xBA63C000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
    0xAB0E5000 \SystemRoot\System32\Drivers\Msfs.SYS
    0xAB0DD000 \SystemRoot\System32\Drivers\Npfs.SYS
    0xABEA5000 \SystemRoot\system32\DRIVERS\rasacd.sys
    0xA9D53000 \SystemRoot\system32\DRIVERS\ipsec.sys
    0xA9CFA000 \SystemRoot\system32\DRIVERS\tcpip.sys
    0xAB646000 \SystemRoot\System32\Drivers\aswTdi.SYS
    0xA9CD4000 \SystemRoot\system32\DRIVERS\ipnat.sys
    0xA9CAC000 \SystemRoot\system32\DRIVERS\netbt.sys
    0xAB636000 \SystemRoot\system32\DRIVERS\wanarp.sys
    0xA9C79000 \SystemRoot\System32\drivers\afd.sys
    0xAB626000 \SystemRoot\system32\DRIVERS\netbios.sys
    0xA9C4E000 \SystemRoot\system32\DRIVERS\rdbss.sys
    0xA9BDE000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
    0xAB606000 \SystemRoot\System32\Drivers\Fips.SYS
    0xA9B6D000 \SystemRoot\System32\Drivers\aswSP.SYS
    0xAB0CD000 \SystemRoot\System32\Drivers\Aavmker4.SYS
    0xA9DFA000 \SystemRoot\system32\DRIVERS\hidusb.sys
    0xABC62000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    0xA8E94000 \SystemRoot\system32\DRIVERS\usbccgp.sys
    0xA654D000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
    0xA6535000 \SystemRoot\system32\DRIVERS\LHidFlt2.Sys
    0xA733F000 \SystemRoot\system32\DRIVERS\mouhid.sys
    0xA5C01000 \SystemRoot\system32\DRIVERS\LMouFlt2.Sys
    0xA5622000 \SystemRoot\system32\DRIVERS\usbprint.sys
    0x9FD73000 \SystemRoot\system32\DRIVERS\kbdhid.sys
    0x9F96E000 \SystemRoot\system32\DRIVERS\usbscan.sys
    0x9FF17000 \SystemRoot\System32\Drivers\Cdfs.SYS
    0xBF800000 \SystemRoot\System32\win32k.sys
    0x9EF82000 \SystemRoot\System32\drivers\Dxapi.sys
    0x9F383000 \SystemRoot\System32\watchdog.sys
    0xBF000000 \SystemRoot\System32\drivers\dxg.sys
    0xBA6DF000 \SystemRoot\System32\drivers\dxgthk.sys
    0xBF012000 \SystemRoot\System32\ati2dvag.dll
    0xBF060000 \SystemRoot\System32\ati2cqag.dll
    0xBF0E6000 \SystemRoot\System32\atikvmag.dll
    0xBF146000 \SystemRoot\System32\atiok3x2.dll
    0xBF185000 \SystemRoot\System32\ati3duag.dll
    0xBF494000 \SystemRoot\System32\ativvaxx.dll
    0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
    0xABA04000 \SystemRoot\system32\DRIVERS\aswFsBlk.sys
    0x9F956000 \SystemRoot\system32\DRIVERS\ndisuio.sys
    0x9AE8F000 \SystemRoot\System32\Drivers\aswMon2.SYS
    0x9ABAA000 \SystemRoot\system32\drivers\wdmaud.sys
    0xA419B000 \SystemRoot\system32\drivers\sysaudio.sys
    0x9A975000 \SystemRoot\system32\DRIVERS\mrxdav.sys
    0x9A8AB000 \SystemRoot\system32\DRIVERS\srv.sys
    0x9A4A3000 \SystemRoot\System32\Drivers\aswRdr.SYS
    0x9A2A2000 \SystemRoot\System32\Drivers\HTTP.sys
    0x7C900000 \WINDOWS\system32\ntdll.dll

    Processes (total 45):
    0 System Idle Process
    4 System
    656 C:\WINDOWS\system32\smss.exe
    712 csrss.exe
    744 C:\WINDOWS\system32\winlogon.exe
    792 C:\WINDOWS\system32\services.exe
    804 C:\WINDOWS\system32\lsass.exe
    988 C:\WINDOWS\system32\ati2evxx.exe
    1012 C:\WINDOWS\system32\svchost.exe
    1084 svchost.exe
    1200 C:\WINDOWS\system32\svchost.exe
    1304 svchost.exe
    1460 C:\WINDOWS\system32\ati2evxx.exe
    1480 svchost.exe
    1592 C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    1616 C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    1680 C:\Program Files\Alwil Software\Avast4\ashServ.exe
    1828 C:\WINDOWS\explorer.exe
    156 C:\Program Files\Lexmark 5000 Series\lxdmmon.exe
    184 C:\Program Files\Lexmark 5000 Series\lxdmamon.exe
    204 C:\Program Files\Winamp\winampa.exe
    212 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    260 C:\Program Files\Messenger\msmsgs.exe
    268 C:\WINDOWS\system32\ctfmon.exe
    296 C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
    304 C:\Program Files\Southwest Airlines\Ding\Ding.exe
    336 C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    640 C:\Program Files\Logitech\MouseWare\system\EM_EXEC.EXE
    1368 C:\WINDOWS\system32\spoolsv.exe
    2096 svchost.exe
    2128 C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    2200 C:\Program Files\Java\jre6\bin\jqs.exe
    2364 C:\WINDOWS\system32\lxdmcoms.exe
    2664 C:\WINDOWS\system32\svchost.exe
    3276 C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    3412 unsecapp.exe
    3420 C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    3444 C:\WINDOWS\system32\wscntfy.exe
    3796 wmiprvse.exe
    4000 alg.exe
    2620 C:\WINDOWS\system32\svchost.exe
    2416 C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    496 C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    3516 C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
    2460 C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\A3YXJLVB\MBRCheck[1].exe

    \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`03ec1000 (NTFS)

    PhysicalDrive0 Model Number: ST3500620AS, Rev: DE12

    Size Device Name MBR Status
    --------------------------------------------
    465 GB \\.\PhysicalDrive0 Windows XP MBR code detected
    SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A
     
    Topnotch,
    #6
  8. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    Another question, while I was running the GMER it took about 4 hours just to get through C/documents and settings/Andy/ Local settings/Temporary Internet Files/Content IE5. But when I look for this file I do not see it, I want to delete all this but can't find it.
     
    Topnotch,
    #7
  9. 2010/09/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Don't worry about GMER for now.

    MBRCheck log looks good:)

    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    [color= "Blue"]**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**[/color]
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on [color= "Red"]this link[/color] to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • [color= "Red"]WARNING:[/color] Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #8
  10. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    ComboFix 10-09-01.02 - Andy 09/01/2010 18:02:55.2.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2791 [GMT -6:00]
    Running from: c:\documents and settings\Andy\Desktop\ComboFix.exe
    AV: avast! antivirus 4.8.1368 [VPS 100901-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Andy\Local Settings\Application Data\{9DDB5501-0AFB-4CCE-8A06-2DBC13C74A7B}
    c:\documents and settings\Andy\Local Settings\Application Data\{9DDB5501-0AFB-4CCE-8A06-2DBC13C74A7B}\chrome\content\_cfg.js
    c:\documents and settings\Andy\Local Settings\Application Data\{9DDB5501-0AFB-4CCE-8A06-2DBC13C74A7B}\chrome\content\overlay.xul
    c:\documents and settings\Andy\Local Settings\Application Data\{9DDB5501-0AFB-4CCE-8A06-2DBC13C74A7B}\install.rdf
    c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf

    Infected copy of c:\windows\system32\drivers\atapi.sys was found and disinfected
    Restored copy from - Kitty had a snack :p
    .
    ((((((((((((((((((((((((( Files Created from 2010-08-02 to 2010-09-02 )))))))))))))))))))))))))))))))
    .

    2010-08-30 01:29 . 2010-08-30 01:29 -------- d-----w- c:\program files\Trend Micro
    2010-08-30 00:48 . 2010-08-12 12:15 15880 ----a-w- c:\windows\system32\lsdelete.exe
    2010-08-29 23:34 . 2010-08-29 23:34 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
    2010-08-29 23:13 . 2010-08-29 23:13 -------- d-----w- c:\documents and settings\Andy\Local Settings\Application Data\Sunbelt Software
    2010-08-29 23:12 . 2010-08-29 23:12 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{ECC164E0-3133-4C70-A831-F08DB2940F70}
    2010-08-29 23:12 . 2010-08-12 12:16 2979848 -c--a-w- c:\documents and settings\All Users\Application Data\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe
    2010-08-29 23:12 . 2010-08-29 23:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
    2010-08-29 23:12 . 2010-08-29 23:12 -------- d-----w- c:\program files\Lavasoft
    2010-08-29 21:37 . 2010-08-29 21:37 6476416 ----a-w- c:\documents and settings\All Users\Application Data\Cisco Systems\Cisco Connect\Update\Connect.exe
    2010-08-29 21:37 . 2010-08-29 21:37 4096 ----a-w- c:\documents and settings\All Users\Application Data\Cisco Systems\Cisco Connect\Update\._Setup.exe
    2010-08-29 21:37 . 2010-08-29 21:37 4096 ----a-w- c:\documents and settings\All Users\Application Data\Cisco Systems\Cisco Connect\Update\._Connect.exe
    2010-08-29 20:18 . 2010-08-29 20:18 -------- d-----w- c:\windows\system32\wbem\Repository
    2010-08-29 19:58 . 2010-09-01 12:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
    2010-08-29 07:34 . 2010-08-29 07:34 120 ----a-w- c:\windows\Uwarikic.dat
    2010-08-29 07:34 . 2010-08-29 07:34 0 ----a-w- c:\windows\Gkakecah.bin
    2010-08-28 19:45 . 2010-08-29 21:46 -------- d-----w- c:\program files\Cisco Systems
    2010-08-28 19:21 . 2010-08-28 19:21 -------- d-----w- c:\windows\system32\scripting
    2010-08-28 19:21 . 2010-08-28 19:21 -------- d-----w- c:\windows\l2schemas
    2010-08-28 19:21 . 2010-08-28 19:21 -------- d-----w- c:\windows\system32\en
    2010-08-28 19:21 . 2010-08-28 19:21 -------- d-----w- c:\windows\system32\bits
    2010-08-28 19:09 . 2008-04-14 00:11 32285 ------w- c:\windows\system32\hsfcisp2.dll
    2010-08-28 18:46 . 2010-08-28 18:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Cisco Systems
    2010-08-15 20:08 . 2010-08-15 20:08 -------- d-----w- c:\temp\ObeoTour_514342_369

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-29 20:22 . 2009-06-14 23:45 -------- d--h--w- c:\documents and settings\All Users\Application Data\ArcSoft
    2010-08-29 20:22 . 2008-12-01 11:54 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-08-28 19:30 . 2008-12-01 11:57 86520 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2010-08-12 17:01 . 2010-04-12 02:50 -------- d-----w- c:\program files\Microsoft Silverlight
    2010-08-08 19:02 . 2009-04-25 20:29 -------- d-----w- c:\documents and settings\Andy\Application Data\LimeWire
    2010-08-06 22:31 . 2009-10-03 13:12 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-09-07_21.19.38 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-08-28 19:09 . 2008-04-14 00:12 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
    + 2008-07-29 14:05 . 2008-07-29 14:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
    + 2008-07-29 12:07 . 2008-07-29 12:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
    + 2008-07-29 12:07 . 2008-07-29 12:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
    + 2008-07-29 12:07 . 2008-07-29 12:07 80896 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90ud.dll
    + 2008-07-29 12:07 . 2008-07-29 12:07 80896 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90d.dll
    - 2008-12-01 11:48 . 2007-01-19 20:15 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2008-09-30 22:45 . 2008-09-30 22:45 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50688 c:\windows\twain_32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50688 c:\windows\twain_32.dll
    + 2010-09-02 00:02 . 2010-09-02 00:02 16384 c:\windows\temp\Perflib_Perfdata_63c.dat
    + 2010-09-02 00:02 . 2010-09-02 00:02 16384 c:\windows\temp\Perflib_Perfdata_1bc.dat
    + 2004-08-11 22:11 . 2008-04-14 00:12 11776 c:\windows\system32\xolehlp.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 11776 c:\windows\system32\xolehlp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50176 c:\windows\system32\xmlprovi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50176 c:\windows\system32\xmlprovi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 30720 c:\windows\system32\xcopy.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 30720 c:\windows\system32\xcopy.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 91648 c:\windows\system32\xactsrv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 91648 c:\windows\system32\xactsrv.dll
    + 2004-08-04 05:56 . 2008-04-14 00:12 52736 c:\windows\system32\wzcsapi.dll
    + 2008-10-16 21:09 . 2009-08-07 01:24 44768 c:\windows\system32\wups2.dll
    + 2004-08-11 22:12 . 2009-08-07 01:24 35552 c:\windows\system32\wups.dll
    + 2004-08-11 22:12 . 2009-08-07 01:24 53472 c:\windows\system32\wuauclt.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 18432 c:\windows\system32\wtsapi32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18432 c:\windows\system32\wtsapi32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50688 c:\windows\system32\wstdecod.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50688 c:\windows\system32\wstdecod.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 22528 c:\windows\system32\wsock32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 22528 c:\windows\system32\wsock32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 41984 c:\windows\system32\wsnmp32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 19456 c:\windows\system32\wshtcpip.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 11264 c:\windows\system32\wshrm.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\wship6.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14336 c:\windows\system32\wship6.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 90112 c:\windows\system32\wshext.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 36864 c:\windows\system32\wshcon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 80896 c:\windows\system32\wscsvc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 13824 c:\windows\system32\wscntfy.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13824 c:\windows\system32\wscntfy.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 19968 c:\windows\system32\ws2help.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 19968 c:\windows\system32\ws2help.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 82432 c:\windows\system32\ws2_32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 11264 c:\windows\system32\wpnpinst.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 32256 c:\windows\system32\wpabaln.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 32256 c:\windows\system32\wpabaln.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\wmpui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\wmpui.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\wmpcore.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\wmpcore.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\wmpcd.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\wmpcd.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 92672 c:\windows\system32\wlnotify.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 92672 c:\windows\system32\wlnotify.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 69120 c:\windows\system32\wlanapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 53760 c:\windows\system32\winsta.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 53760 c:\windows\system32\winsta.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17408 c:\windows\system32\winshfhc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17408 c:\windows\system32\winshfhc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 99328 c:\windows\system32\winscard.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 99328 c:\windows\system32\winscard.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 16896 c:\windows\system32\winrnr.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 16896 c:\windows\system32\winrnr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 32256 c:\windows\system32\winipsec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 75776 c:\windows\system32\wiascr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 75776 c:\windows\system32\wiascr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 65024 c:\windows\system32\wextract.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 68096 c:\windows\system32\webclnt.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 23552 c:\windows\system32\wdmaud.drv
    + 2004-08-04 05:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud.drv
    + 2004-08-11 22:00 . 2009-06-25 08:25 54272 c:\windows\system32\wdigest.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 95232 c:\windows\system32\wbem\wmiutils.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 95232 c:\windows\system32\wbem\wmiutils.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 41472 c:\windows\system32\wbem\wmipsess.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 41472 c:\windows\system32\wbem\wmipsess.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 62464 c:\windows\system32\wbem\wmipjobj.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 61952 c:\windows\system32\wbem\wmipiprt.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 60928 c:\windows\system32\wbem\wmicookr.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 60928 c:\windows\system32\wbem\wmicookr.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 88576 c:\windows\system32\wbem\wmiaprpl.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 43520 c:\windows\system32\wbem\wbemsvc.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 43520 c:\windows\system32\wbem\wbemsvc.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 18944 c:\windows\system32\wbem\wbemprox.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 18944 c:\windows\system32\wbem\wbemprox.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 43008 c:\windows\system32\wbem\wbemperf.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 43008 c:\windows\system32\wbem\wbemperf.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 86528 c:\windows\system32\wbem\stdprov.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 86528 c:\windows\system32\wbem\stdprov.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 36352 c:\windows\system32\wbem\scrcons.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 92672 c:\windows\system32\wbem\policman.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 92672 c:\windows\system32\wbem\policman.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 47104 c:\windows\system32\wbem\ncprov.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 47104 c:\windows\system32\wbem\ncprov.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 16384 c:\windows\system32\wbem\mofcomp.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 16384 c:\windows\system32\wbem\mofcomp.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 21504 c:\windows\system32\wbem\evntrprv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 45056 c:\windows\system32\wbem\cmdevtgprov.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17664 c:\windows\system32\watchdog.sys
    + 2004-08-11 22:00 . 2008-04-13 18:44 17664 c:\windows\system32\watchdog.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 15872 c:\windows\system32\w3ssl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 15872 c:\windows\system32\w3ssl.dll
     
    Topnotch,
    #9
  11. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\version.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\version.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26624 c:\windows\system32\verifier.dll
    - 2008-12-01 11:54 . 2006-03-17 00:38 28672 c:\windows\system32\verclsid.exe
    + 2008-12-01 11:54 . 2008-04-14 00:12 28672 c:\windows\system32\verclsid.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 51712 c:\windows\system32\vdmredir.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 51712 c:\windows\system32\vdmredir.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26112 c:\windows\system32\vdmdbg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 26112 c:\windows\system32\vdmdbg.dll
    + 1998-12-24 20:23 . 1998-12-24 20:23 40960 c:\windows\system32\VBAME.DLL
    - 1998-12-24 18:23 . 1998-12-24 18:23 40960 c:\windows\system32\VBAME.DLL
    - 2004-08-11 22:00 . 2004-08-04 10:00 30749 c:\windows\system32\vbajet32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 30749 c:\windows\system32\vbajet32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50176 c:\windows\system32\utilman.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 50176 c:\windows\system32\utilman.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 19968 c:\windows\system32\usmt\log.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19968 c:\windows\system32\usmt\log.dll
    + 2010-08-28 19:09 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26112 c:\windows\system32\userinit.exe
    + 2004-08-11 22:08 . 2008-04-14 00:12 74240 c:\windows\system32\usbui.dll
    - 2004-08-11 22:08 . 2004-08-04 05:56 74240 c:\windows\system32\usbui.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 16896 c:\windows\system32\usbmon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 16896 c:\windows\system32\usbmon.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18432 c:\windows\system32\ups.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 18432 c:\windows\system32\ups.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 16896 c:\windows\system32\upnpcont.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 16896 c:\windows\system32\upnpcont.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13824 c:\windows\system32\uniplat.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 13824 c:\windows\system32\uniplat.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 74240 c:\windows\system32\unimdmat.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 74240 c:\windows\system32\unimdmat.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 35840 c:\windows\system32\umandlg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 35840 c:\windows\system32\umandlg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26624 c:\windows\system32\udhisapi.dll
    + 2008-12-01 11:50 . 2009-07-14 11:03 46080 c:\windows\system32\tzchange.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 57856 c:\windows\system32\twext.dll
    + 2008-07-30 03:10 . 2008-07-30 03:10 26112 c:\windows\system32\TsWpfWrp.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 50688 c:\windows\system32\tspkg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 53248 c:\windows\system32\tsgqec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 12168 c:\windows\system32\tsddd.dll
    + 2004-08-11 22:00 . 2008-04-14 00:13 12168 c:\windows\system32\tsddd.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 93696 c:\windows\system32\tscfgwmi.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 93696 c:\windows\system32\tscfgwmi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 90112 c:\windows\system32\trkwks.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 12800 c:\windows\system32\tree.com
    - 2004-08-11 22:00 . 2004-08-04 10:00 12288 c:\windows\system32\tracert.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 12288 c:\windows\system32\tracert.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 73216 c:\windows\system32\tlntsvr.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 73216 c:\windows\system32\tlntsvr.exe
    + 2004-08-11 22:00 . 2009-06-12 12:31 80896 c:\windows\system32\tlntsess.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 61440 c:\windows\system32\tlntadmn.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 61440 c:\windows\system32\tlntadmn.exe
    + 2004-08-11 22:00 . 2009-06-12 12:31 76288 c:\windows\system32\telnet.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 45568 c:\windows\system32\tcpmonui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmonui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmon.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 45568 c:\windows\system32\tcpmon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14848 c:\windows\system32\tcpmib.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 14848 c:\windows\system32\tcpmib.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 77824 c:\windows\system32\tasklist.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 76288 c:\windows\system32\taskkill.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 71680 c:\windows\system32\systeminfo.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 57856 c:\windows\system32\synceng.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 57856 c:\windows\system32\synceng.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14336 c:\windows\system32\svchost.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\svchost.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 75776 c:\windows\system32\strmfilt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 75776 c:\windows\system32\strmfilt.dll
    + 2004-08-11 22:07 . 2008-04-14 00:12 74752 c:\windows\system32\storprop.dll
    - 2004-08-11 22:07 . 2004-08-04 05:56 74752 c:\windows\system32\storprop.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14848 c:\windows\system32\stimon.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 14848 c:\windows\system32\stimon.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 68096 c:\windows\system32\sti.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 59392 c:\windows\system32\stclient.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14336 c:\windows\system32\ssstars.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\ssstars.scr
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\ssmyst.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\ssmyst.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 47104 c:\windows\system32\ssmypics.scr
    + 2004-08-11 22:00 . 2008-04-14 00:12 47104 c:\windows\system32\ssmypics.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\system32\ssmarque.scr
    + 2004-08-11 22:00 . 2008-04-14 00:12 20992 c:\windows\system32\ssmarque.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 71680 c:\windows\system32\ssdpsrv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 71680 c:\windows\system32\ssdpsrv.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 34816 c:\windows\system32\ssdpapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 34816 c:\windows\system32\ssdpapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19968 c:\windows\system32\ssbezier.scr
    + 2004-08-11 22:00 . 2008-04-14 00:12 19968 c:\windows\system32\ssbezier.scr
    + 2004-08-11 22:00 . 2008-04-14 00:12 96768 c:\windows\system32\srvsvc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 96768 c:\windows\system32\srvsvc.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 67584 c:\windows\system32\srclient.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 67584 c:\windows\system32\srclient.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20992 c:\windows\system32\spupdwxp.exe
    + 2008-12-01 11:57 . 2007-08-11 02:46 26488 c:\windows\system32\spupdsvc.exe
    - 2004-08-11 22:00 . 2005-06-10 23:53 57856 c:\windows\system32\spoolsv.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 57856 c:\windows\system32\spoolsv.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 75264 c:\windows\system32\spoolss.dll
    + 2010-02-21 22:11 . 2003-06-19 00:31 18944 c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    + 2009-09-19 05:44 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
    + 2010-02-21 22:11 . 2003-06-19 00:31 35328 c:\windows\system32\spool\drivers\w32x86\mdiui.dll
    + 2010-02-21 22:11 . 2003-06-19 00:31 35328 c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 26624 c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
    + 2004-08-11 22:00 . 2008-04-14 11:42 11264 c:\windows\system32\spnpinst.exe
    + 2009-07-15 01:32 . 2008-07-08 13:02 17272 c:\windows\system32\spmsg.dll
    + 2004-08-11 22:00 . 2008-04-13 18:43 12800 c:\windows\system32\spiisupd.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 12800 c:\windows\system32\spiisupd.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 24576 c:\windows\system32\sort.exe
    + 2010-08-28 18:48 . 2009-08-07 01:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
    + 2010-08-28 18:48 . 2009-08-07 01:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\snmpapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\snmpapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 10752 c:\windows\system32\smtpapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50688 c:\windows\system32\smss.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 50688 c:\windows\system32\smss.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 89600 c:\windows\system32\smlogsvc.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 89600 c:\windows\system32\smlogsvc.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 73796 c:\windows\system32\slserv.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 32866 c:\windows\system32\slrundll.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 73832 c:\windows\system32\slcoinst.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 98304 c:\windows\system32\slbiop.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 98304 c:\windows\system32\slbiop.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\slayerxp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\slayerxp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26112 c:\windows\system32\skeys.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 26112 c:\windows\system32\skeys.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 70144 c:\windows\system32\sigverif.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 70144 c:\windows\system32\sigverif.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13312 c:\windows\system32\sigtab.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 13312 c:\windows\system32\sigtab.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 19456 c:\windows\system32\shutdown.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\system32\shutdown.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 27648 c:\windows\system32\shscrap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 27648 c:\windows\system32\shscrap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 77824 c:\windows\system32\shrpubw.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 77824 c:\windows\system32\shrpubw.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 45056 c:\windows\system32\shmgrate.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 65024 c:\windows\system32\shimeng.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 68096 c:\windows\system32\shgina.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 68096 c:\windows\system32\shgina.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\shfolder.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\shfolder.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\system32\setupn.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 33792 c:\windows\system32\Setup\tabletoc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 33792 c:\windows\system32\Setup\tabletoc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17408 c:\windows\system32\Setup\ocmsn.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 15360 c:\windows\system32\Setup\ocgen.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 62976 c:\windows\system32\Setup\ntoc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 62976 c:\windows\system32\Setup\ntoc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 77312 c:\windows\system32\Setup\netoc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 77312 c:\windows\system32\Setup\netoc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 90112 c:\windows\system32\Setup\msdtcstp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 16896 c:\windows\system32\Setup\medctroc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 16896 c:\windows\system32\Setup\medctroc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 32828 c:\windows\system32\Setup\fp40ext.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 23040 c:\windows\system32\setup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 23040 c:\windows\system32\setup.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 31232 c:\windows\system32\sethc.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 31232 c:\windows\system32\sethc.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 56320 c:\windows\system32\servdeps.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 56320 c:\windows\system32\servdeps.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 39424 c:\windows\system32\sens.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 54784 c:\windows\system32\sendmail.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 29184 c:\windows\system32\sendcmsg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 29184 c:\windows\system32\sendcmsg.dll
    + 2004-08-11 22:00 . 2009-06-25 08:25 56832 c:\windows\system32\secur32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\seclogon.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\seclogon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\secedit.exe
    + 2004-08-04 05:56 . 2008-04-14 00:12 29184 c:\windows\system32\sdhcinst.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 29184 c:\windows\system32\sdhcinst.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 77312 c:\windows\system32\sdbinst.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 77312 c:\windows\system32\sdbinst.exe
    + 1998-03-25 05:54 . 1998-03-25 05:54 15872 c:\windows\system32\SCP32.DLL
    - 1996-11-17 07:00 . 1996-11-17 07:00 15872 c:\windows\system32\SCP32.DLL
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\sclgntfy.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 95744 c:\windows\system32\scardsvr.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 95744 c:\windows\system32\scardsvr.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 69632 c:\windows\system32\scarddlg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 69632 c:\windows\system32\scarddlg.dll
    + 2004-08-11 22:00 . 2009-02-06 10:39 35328 c:\windows\system32\sc.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13312 c:\windows\system32\savedump.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 13312 c:\windows\system32\savedump.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 64000 c:\windows\system32\samlib.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 64000 c:\windows\system32\samlib.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 45568 c:\windows\system32\safrslv.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 45568 c:\windows\system32\safrslv.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 29696 c:\windows\system32\safrdm.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 29696 c:\windows\system32\safrdm.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 43520 c:\windows\system32\safrcdlg.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 43520 c:\windows\system32\safrcdlg.dll
     
    Topnotch,
    #10
  12. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\runonce.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 14336 c:\windows\system32\runonce.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 33280 c:\windows\system32\rundll32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 33280 c:\windows\system32\rundll32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 44032 c:\windows\system32\rtutils.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 44032 c:\windows\system32\rtutils.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 31744 c:\windows\system32\rtipxmib.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 31744 c:\windows\system32\rtipxmib.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 77312 c:\windows\system32\rtcshare.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 77312 c:\windows\system32\rtcshare.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 92672 c:\windows\system32\rsvpsp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\rsmps.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\rsmps.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 39936 c:\windows\system32\rshx32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 39936 c:\windows\system32\rshx32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14848 c:\windows\system32\rsh.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 14848 c:\windows\system32\rsh.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 13824 c:\windows\system32\rexec.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13824 c:\windows\system32\rexec.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 58880 c:\windows\system32\resutils.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 58880 c:\windows\system32\resutils.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 60416 c:\windows\system32\remotepg.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 60416 c:\windows\system32\remotepg.dll
    + 2010-08-28 19:16 . 2004-08-04 10:00 36096 c:\windows\system32\ReinstallBackups\0020\DriverFiles\i386\intelppm.sys
    + 2010-08-28 19:16 . 2004-08-04 10:00 36096 c:\windows\system32\ReinstallBackups\0019\DriverFiles\i386\intelppm.sys
    + 2004-08-11 22:00 . 2008-04-14 00:12 11776 c:\windows\system32\regsvr32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 11776 c:\windows\system32\regsvr32.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 59904 c:\windows\system32\regsvc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 59904 c:\windows\system32\regsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 49664 c:\windows\system32\regapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 49664 c:\windows\system32\regapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50176 c:\windows\system32\reg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 50176 c:\windows\system32\reg.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 67072 c:\windows\system32\rdshost.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 67072 c:\windows\system32\rdshost.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 13824 c:\windows\system32\rdsaddin.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 13824 c:\windows\system32\rdsaddin.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 87176 c:\windows\system32\rdpwsx.dll
    + 2004-08-11 22:11 . 2008-04-14 00:13 87176 c:\windows\system32\rdpwsx.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 19968 c:\windows\system32\rdpsnd.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 19968 c:\windows\system32\rdpsnd.dll
    + 2004-08-11 22:00 . 2008-04-14 00:13 92424 c:\windows\system32\rdpdd.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 62976 c:\windows\system32\rdpclip.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 21504 c:\windows\system32\rcp.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 21504 c:\windows\system32\rcp.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 35840 c:\windows\system32\rcimlby.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 35840 c:\windows\system32\rcimlby.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 58368 c:\windows\system32\rastapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 16384 c:\windows\system32\rassapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 61952 c:\windows\system32\rasqec.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 56832 c:\windows\system32\rasphone.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 56832 c:\windows\system32\rasphone.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 61440 c:\windows\system32\rasman.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 61440 c:\windows\system32\rasman.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 79872 c:\windows\system32\raschap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 88576 c:\windows\system32\rasauto.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 43520 c:\windows\system32\racpldlg.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 43520 c:\windows\system32\racpldlg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 76800 c:\windows\system32\qutil.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 19968 c:\windows\system32\qprocess.exe
    + 2004-08-11 22:12 . 2008-04-14 00:12 18944 c:\windows\system32\qmgrprxy.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 18944 c:\windows\system32\qmgrprxy.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 62464 c:\windows\system32\qcliprov.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 34304 c:\windows\system32\pstorsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 34304 c:\windows\system32\pstorsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 43520 c:\windows\system32\pstorec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 43520 c:\windows\system32\pstorec.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 96768 c:\windows\system32\psbase.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 96768 c:\windows\system32\psbase.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 23040 c:\windows\system32\psapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 23040 c:\windows\system32\psapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50176 c:\windows\system32\proquota.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 50176 c:\windows\system32\proquota.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 27648 c:\windows\system32\profmap.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 27648 c:\windows\system32\profmap.dll
    + 2008-07-30 01:59 . 2008-07-30 01:59 43544 c:\windows\system32\PresentationHostProxy.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17408 c:\windows\system32\powrprof.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17408 c:\windows\system32\powrprof.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 49152 c:\windows\system32\powercfg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 49152 c:\windows\system32\powercfg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 58880 c:\windows\system32\pnrpnsp.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 44544 c:\windows\system32\pngfilt.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 15360 c:\windows\system32\pjlmon.dll
    + 2004-08-04 05:56 . 2008-04-14 00:12 15360 c:\windows\system32\pjlmon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17920 c:\windows\system32\ping.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 17920 c:\windows\system32\ping.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 24064 c:\windows\system32\pidgen.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24064 c:\windows\system32\pidgen.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 35328 c:\windows\system32\pid.dll
    + 2004-08-04 05:56 . 2008-04-14 00:12 35328 c:\windows\system32\pid.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 34816 c:\windows\system32\perfproc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 34816 c:\windows\system32\perfproc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\perfos.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\perfos.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17920 c:\windows\system32\perfnet.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15872 c:\windows\system32\perfmon.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 15872 c:\windows\system32\perfmon.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 26624 c:\windows\system32\perfdisk.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 26624 c:\windows\system32\perfdisk.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 39936 c:\windows\system32\perfctrs.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 39936 c:\windows\system32\perfctrs.dll
    + 2004-08-11 22:00 . 2010-08-28 19:30 75312 c:\windows\system32\perfc009.dat
    + 2004-08-11 22:00 . 2008-04-14 00:12 67584 c:\windows\system32\pautoenr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 58368 c:\windows\system32\packager.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 58368 c:\windows\system32\packager.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 67584 c:\windows\system32\osuninst.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 67584 c:\windows\system32\osuninst.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 67584 c:\windows\system32\openfiles.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 67584 c:\windows\system32\openfiles.exe
    - 2004-08-11 22:12 . 2004-08-04 10:00 51200 c:\windows\system32\oobe\oobebaln.exe
    + 2004-08-11 22:12 . 2008-04-14 00:12 51200 c:\windows\system32\oobe\oobebaln.exe
    + 2004-08-11 22:12 . 2008-04-14 00:12 29184 c:\windows\system32\oobe\msoobe.exe
    + 2004-08-11 22:12 . 2008-04-14 00:12 19456 c:\windows\system32\oobe\msobweb.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 30720 c:\windows\system32\oobe\msobshel.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 30720 c:\windows\system32\oobe\msobshel.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 16384 c:\windows\system32\oobe\msobdl.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 16384 c:\windows\system32\oobe\msobdl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 84992 c:\windows\system32\olepro32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 37376 c:\windows\system32\olecnv32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 74752 c:\windows\system32\olecli32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20511 c:\windows\system32\odtext32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20511 c:\windows\system32\odtext32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20510 c:\windows\system32\odpdx32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20510 c:\windows\system32\odpdx32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20510 c:\windows\system32\odfox32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20510 c:\windows\system32\odfox32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20510 c:\windows\system32\odexl32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20510 c:\windows\system32\odexl32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20511 c:\windows\system32\oddbse32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20511 c:\windows\system32\oddbse32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 12288 c:\windows\system32\odbcp32r.dll
    + 2004-08-11 22:00 . 2008-04-13 17:26 12288 c:\windows\system32\odbcp32r.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 53279 c:\windows\system32\odbcji32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:10 53279 c:\windows\system32\odbcji32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 94208 c:\windows\system32\odbcint.dll
    + 2004-08-11 22:00 . 2008-04-13 17:26 94208 c:\windows\system32\odbcint.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 65536 c:\windows\system32\odbccu32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 65536 c:\windows\system32\odbccu32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 65536 c:\windows\system32\odbccr32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 65536 c:\windows\system32\odbccr32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 69632 c:\windows\system32\odbcconf.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 69632 c:\windows\system32\odbcconf.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 24576 c:\windows\system32\odbcbcp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24576 c:\windows\system32\odbcbcp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 32768 c:\windows\system32\odbcad32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 32768 c:\windows\system32\odbcad32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 16384 c:\windows\system32\odbc32gt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 16384 c:\windows\system32\odbc32gt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 67584 c:\windows\system32\ocmanage.dll
    - 2004-08-11 22:00 . 2006-10-13 12:35 65536 c:\windows\system32\nwwks.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 65536 c:\windows\system32\nwwks.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 64000 c:\windows\system32\nwapi32.dll
    - 2004-08-11 22:00 . 2006-10-13 12:35 64000 c:\windows\system32\nwapi32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 15360 c:\windows\system32\ntvdmd.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 91136 c:\windows\system32\ntprint.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 91136 c:\windows\system32\ntprint.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 40960 c:\windows\system32\ntmsapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 40960 c:\windows\system32\ntmsapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 44032 c:\windows\system32\ntlanman.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 67072 c:\windows\system32\ntdsapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 67072 c:\windows\system32\ntdsapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 76800 c:\windows\system32\nslookup.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 76800 c:\windows\system32\nslookup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 54784 c:\windows\system32\npptools.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 54784 c:\windows\system32\npptools.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15360 c:\windows\system32\npp\nppagent.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 15360 c:\windows\system32\npp\nppagent.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 57344 c:\windows\system32\npp\ndisnpp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 57344 c:\windows\system32\npp\ndisnpp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 69120 c:\windows\system32\notepad.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 69120 c:\windows\system32\notepad.exe
    + 2006-06-29 15:05 . 2006-06-29 15:05 23552 c:\windows\system32\normaliz.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 28672 c:\windows\system32\nmmkcert.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 28672 c:\windows\system32\nmmkcert.dll
    + 2006-06-29 00:59 . 2006-06-29 00:59 24576 c:\windows\system32\nlsdl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 98304 c:\windows\system32\nlhtml.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 80896 c:\windows\system32\netui0.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 80896 c:\windows\system32\netui0.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 36864 c:\windows\system32\netstat.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 36864 c:\windows\system32\netstat.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 86016 c:\windows\system32\netsh.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 86016 c:\windows\system32\netsh.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 11776 c:\windows\system32\netrap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 42496 c:\windows\system32\net.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 42496 c:\windows\system32\net.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\nddenb32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 18944 c:\windows\system32\nddenb32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17920 c:\windows\system32\nddeapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17920 c:\windows\system32\nddeapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 36352 c:\windows\system32\ncobjapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 36352 c:\windows\system32\ncobjapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 53760 c:\windows\system32\narrator.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 53760 c:\windows\system32\narrator.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 30208 c:\windows\system32\napipsec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 90624 c:\windows\system32\mydocs.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 90624 c:\windows\system32\mydocs.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 15360 c:\windows\system32\mui\0409\mscorees.dll
    + 2004-08-11 22:11 . 2008-06-12 14:23 91648 c:\windows\system32\mtxoci.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 34304 c:\windows\system32\mtxlegih.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 30720 c:\windows\system32\mtxdm.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 66560 c:\windows\system32\mtxclu.dll
    + 2004-08-11 22:00 . 2008-06-12 14:23 66560 c:\windows\system32\mtxclu.dll
    + 2004-08-04 05:56 . 2008-04-14 00:12 16896 c:\windows\system32\msyuv.dll
    + 2010-08-28 19:10 . 2008-04-13 17:27 79872 c:\windows\system32\msxml6r.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 72704 c:\windows\system32\msw3prt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 72704 c:\windows\system32\msw3prt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 61440 c:\windows\system32\msvcrt40.dll
    + 2004-08-11 22:00 . 2008-04-13 18:30 61440 c:\windows\system32\msvcrt40.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 57344 c:\windows\system32\msvcirt.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 12288 c:\windows\system32\mstinit.exe
    - 2004-08-11 22:12 . 2004-08-04 10:00 12288 c:\windows\system32\mstinit.exe
    + 1998-08-09 19:07 . 1998-08-09 19:07 94208 c:\windows\system32\MSSTKPRP.DLL
    - 1998-08-09 17:07 . 1998-08-09 17:07 94208 c:\windows\system32\MSSTKPRP.DLL
    + 2010-08-28 19:10 . 2008-04-13 18:14 76800 c:\windows\system32\msshavmsg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 11264 c:\windows\system32\msrle32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 11264 c:\windows\system32\msrle32.dll
    + 2004-08-11 22:00 . 2008-04-13 16:23 48128 c:\windows\system32\msprivs.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 48128 c:\windows\system32\msprivs.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 29696 c:\windows\system32\mspatcha.dll
    + 2004-08-11 22:00 . 2008-04-13 17:24 20480 c:\windows\system32\msorc32r.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\msorc32r.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\mslbui.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\mslbui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 15360 c:\windows\system32\msisip.dll
    - 2004-08-11 22:00 . 2005-05-04 17:45 15360 c:\windows\system32\msisip.dll
    + 1997-07-11 07:00 . 1997-07-11 07:00 14336 c:\windows\system32\MSIMRT.DLL
    - 1996-11-17 07:00 . 1996-11-17 07:00 14336 c:\windows\system32\MSIMRT.DLL
    + 2004-08-11 22:00 . 2008-04-14 00:12 78848 c:\windows\system32\msiexec.exe
    - 2004-08-11 22:00 . 2005-05-04 17:45 78848 c:\windows\system32\msiexec.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 51712 c:\windows\system32\msident.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 51712 c:\windows\system32\msident.dll
    + 2004-08-11 22:00 . 2007-08-14 01:01 48128 c:\windows\system32\mshtmler.dll
    + 2004-08-11 22:00 . 2007-08-14 01:32 45568 c:\windows\system32\mshta.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 33792 c:\windows\system32\msgsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 33792 c:\windows\system32\msgsvc.dll
    + 2007-08-14 01:36 . 2007-08-14 01:36 12288 c:\windows\system32\msfeedssync.exe
    + 2007-08-14 01:54 . 2009-08-29 07:36 52224 c:\windows\system32\msfeedsbs.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 58880 c:\windows\system32\msdtclog.dll
    + 2004-08-11 22:11 . 2008-06-12 14:23 58880 c:\windows\system32\msdtclog.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\msdmo.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 14336 c:\windows\system32\msdmo.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 68608 c:\windows\system32\msctfp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 36864 c:\windows\system32\mscpxl32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 36864 c:\windows\system32\mscpxl32.dLL
    + 2004-08-11 22:00 . 2008-04-13 17:26 12288 c:\windows\system32\mscpx32r.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 12288 c:\windows\system32\mscpx32r.dLL
    + 2008-07-25 17:16 . 2008-07-25 17:16 83968 c:\windows\system32\mscories.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 69632 c:\windows\system32\msconf.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 69632 c:\windows\system32\msconf.dll
    - 2004-08-11 22:00 . 2008-06-24 16:23 74240 c:\windows\system32\mscms.dll
    + 2004-08-11 22:00 . 2008-06-24 16:43 74240 c:\windows\system32\mscms.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 57344 c:\windows\system32\msasn1.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 57344 c:\windows\system32\msasn1.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 86016 c:\windows\system32\msapsspc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 86016 c:\windows\system32\msapsspc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 71680 c:\windows\system32\msacm32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 71680 c:\windows\system32\msacm32.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 48640 c:\windows\system32\mqupgrd.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 48640 c:\windows\system32\mqupgrd.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 95744 c:\windows\system32\mqsec.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 95744 c:\windows\system32\mqsec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 89088 c:\windows\system32\mqlogmgr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 89088 c:\windows\system32\mqlogmgr.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 16896 c:\windows\system32\mqise.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 16896 c:\windows\system32\mqise.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 47104 c:\windows\system32\mqdscli.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 47104 c:\windows\system32\mqdscli.dll
    + 2004-08-11 22:00 . 2009-06-22 11:49 19968 c:\windows\system32\mqbkup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 19968 c:\windows\system32\mqbkup.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 53248 c:\windows\system32\mprdim.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 87040 c:\windows\system32\mprapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 87040 c:\windows\system32\mprapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 59904 c:\windows\system32\mpr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 59904 c:\windows\system32\mpr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 16896 c:\windows\system32\more.com
    + 2004-08-11 22:12 . 2008-04-14 00:12 32768 c:\windows\system32\mnmsrvc.exe
    - 2004-08-11 22:12 . 2004-08-04 10:00 32768 c:\windows\system32\mnmsrvc.exe
    + 2004-08-11 22:12 . 2008-04-14 00:11 34560 c:\windows\system32\mnmdd.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 34560 c:\windows\system32\mnmdd.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 17408 c:\windows\system32\mmfutil.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 17408 c:\windows\system32\mmfutil.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 61440 c:\windows\system32\mmcshext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 33792 c:\windows\system32\mmcperf.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 29696 c:\windows\system32\mimefilt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 60928 c:\windows\system32\miglibnt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 60928 c:\windows\system32\miglibnt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 18944 c:\windows\system32\midimap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 18944 c:\windows\system32\midimap.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 14848 c:\windows\system32\mgmtapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 14848 c:\windows\system32\mgmtapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 22528 c:\windows\system32\mfcsubs.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 22528 c:\windows\system32\mfcsubs.dll
    + 1998-06-17 11:08 . 1998-06-17 11:08 53248 c:\windows\system32\MFC42ENU.DLL
    - 1998-06-17 09:08 . 1998-06-17 09:08 53248 c:\windows\system32\MFC42ENU.DLL
    + 2004-08-11 22:00 . 2008-04-14 00:11 40960 c:\windows\system32\mf3216.dll
    - 2004-08-11 22:00 . 2007-03-08 15:36 40960 c:\windows\system32\mf3216.dll
    + 1999-03-03 20:05 . 1999-03-03 20:05 81920 c:\windows\system32\MDT2FW95.DLL
    - 1999-03-03 18:05 . 1999-03-03 18:05 81920 c:\windows\system32\MDT2FW95.DLL
    + 2010-08-28 19:10 . 2008-04-14 00:11 86016 c:\windows\system32\mdmxsdk.dll
    + 2010-02-21 22:11 . 2003-06-19 00:31 17920 c:\windows\system32\mdimon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 23552 c:\windows\system32\mciwave.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 23552 c:\windows\system32\mciwave.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 23040 c:\windows\system32\mciseq.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 35328 c:\windows\system32\mciqtz32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 35328 c:\windows\system32\mciqtz32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 84480 c:\windows\system32\mciavi32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 84480 c:\windows\system32\mciavi32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 14336 c:\windows\system32\mcastmib.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 57344 c:\windows\system32\makecab.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 72704 c:\windows\system32\magnify.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 72704 c:\windows\system32\magnify.exe
     
    Topnotch,
    #11
  13. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    - 2004-08-11 22:00 . 2004-08-04 10:00 13312 c:\windows\system32\lsass.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 13312 c:\windows\system32\lsass.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 10240 c:\windows\system32\lprhelp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 10240 c:\windows\system32\lprhelp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 22016 c:\windows\system32\lpk.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 22016 c:\windows\system32\lpk.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 59392 c:\windows\system32\logman.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 59392 c:\windows\system32\logman.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 75264 c:\windows\system32\locator.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 75264 c:\windows\system32\locator.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 11776 c:\windows\system32\localui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 11776 c:\windows\system32\localui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 97280 c:\windows\system32\loadperf.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 97280 c:\windows\system32\loadperf.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 13824 c:\windows\system32\lmhsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 13824 c:\windows\system32\lmhsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 19968 c:\windows\system32\linkinfo.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 58880 c:\windows\system32\licwmi.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 58880 c:\windows\system32\licwmi.dll
    + 2004-08-11 22:00 . 2007-08-14 01:44 40960 c:\windows\system32\licmgr10.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 37376 c:\windows\system32\l2gpstore.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 61440 c:\windows\system32\kmsvc.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 27648 c:\windows\system32\jsproxy.dll
    - 2004-08-11 22:00 . 2006-06-01 18:47 27648 c:\windows\system32\jgpl400.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 27648 c:\windows\system32\jgpl400.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 47616 c:\windows\system32\iyuv_32.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 47616 c:\windows\system32\iyuv_32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 54272 c:\windows\system32\ixsso.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 54272 c:\windows\system32\ixsso.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 32768 c:\windows\system32\isrdbg32.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 32768 c:\windows\system32\isrdbg32.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 81920 c:\windows\system32\isign32.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 81920 c:\windows\system32\isign32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 22016 c:\windows\system32\ipxwan.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 23552 c:\windows\system32\ipxroute.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 23552 c:\windows\system32\ipxroute.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 59904 c:\windows\system32\ipv6mon.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 59904 c:\windows\system32\ipv6mon.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 53248 c:\windows\system32\ipv6.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 53248 c:\windows\system32\ipv6.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 94720 c:\windows\system32\iphlpapi.dll
    - 2004-08-11 22:00 . 2006-05-19 12:59 94720 c:\windows\system32\iphlpapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 55808 c:\windows\system32\ipconfig.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 55808 c:\windows\system32\ipconfig.exe
    + 2004-08-11 22:00 . 2007-08-14 01:39 92672 c:\windows\system32\inseng.dll
    + 2008-07-30 01:24 . 2008-07-30 01:24 97800 c:\windows\system32\infocardapi.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 48128 c:\windows\system32\inetres.dll
    + 2004-08-11 22:12 . 2008-04-13 16:22 48128 c:\windows\system32\inetres.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15872 c:\windows\system32\inetppui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 15872 c:\windows\system32\inetppui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 75264 c:\windows\system32\inetpp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 75264 c:\windows\system32\inetpp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 32768 c:\windows\system32\inetmib1.dll
    + 2004-08-11 22:00 . 2007-08-14 01:36 36352 c:\windows\system32\imgutil.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 36921 c:\windows\system32\imeshare.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 36921 c:\windows\system32\imeshare.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 81920 c:\windows\system32\ils.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 81920 c:\windows\system32\ils.dll
    + 2007-08-14 01:39 . 2009-08-28 10:28 13824 c:\windows\system32\ieudinit.exe
    + 2004-08-11 22:00 . 2007-08-14 01:39 55296 c:\windows\system32\iesetup.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 44544 c:\windows\system32\iernonce.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 78336 c:\windows\system32\ieencode.dll
    + 2004-08-11 22:00 . 2009-08-28 10:28 70656 c:\windows\system32\ie4uinit.exe
    + 2006-06-29 15:05 . 2006-06-29 15:05 26112 c:\windows\system32\idndl.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 65536 c:\windows\system32\icwphbk.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 65536 c:\windows\system32\icwphbk.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 73728 c:\windows\system32\icwdial.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 73728 c:\windows\system32\icwdial.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 80384 c:\windows\system32\iccvid.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 80384 c:\windows\system32\iccvid.dll
    + 2008-07-30 01:24 . 2008-07-30 01:24 11264 c:\windows\system32\icardres.dll
    + 2007-08-14 01:36 . 2009-08-29 07:36 63488 c:\windows\system32\icardie.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 11264 c:\windows\system32\icaapi.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 11264 c:\windows\system32\icaapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 41984 c:\windows\system32\htui.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 41984 c:\windows\system32\htui.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24576 c:\windows\system32\httpapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 24576 c:\windows\system32\httpapi.dll
    - 2004-08-11 22:00 . 2006-07-21 08:24 72704 c:\windows\system32\hlink.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 72704 c:\windows\system32\hlink.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 20992 c:\windows\system32\hid.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 20992 c:\windows\system32\hid.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 41472 c:\windows\system32\hhsetup.dll
    - 2004-08-11 22:00 . 2005-05-27 02:04 41472 c:\windows\system32\hhsetup.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 15872 c:\windows\system32\help.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 39424 c:\windows\system32\grpconv.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 39424 c:\windows\system32\grpconv.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 59904 c:\windows\system32\getmac.exe
    + 2004-08-11 22:11 . 2008-04-14 00:11 23552 c:\windows\system32\fxsmon.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 23552 c:\windows\system32\fxsmon.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 23552 c:\windows\system32\fxsext32.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 23552 c:\windows\system32\fxsext32.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 55296 c:\windows\system32\fxsevent.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 55296 c:\windows\system32\fxsevent.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 26624 c:\windows\system32\fxsdrv.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 72192 c:\windows\system32\fxscom.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 72192 c:\windows\system32\fxscom.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 60416 c:\windows\system32\fwcfg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 60416 c:\windows\system32\fwcfg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 42496 c:\windows\system32\ftp.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 42496 c:\windows\system32\ftp.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 29696 c:\windows\system32\format.com
    + 2004-08-11 22:00 . 2008-04-14 00:12 20992 c:\windows\system32\fontview.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\system32\fontview.exe
    + 2004-08-11 22:00 . 2009-07-29 04:37 81920 c:\windows\system32\fontsub.dll
    + 2003-07-15 05:57 . 2003-07-15 05:57 32584 c:\windows\system32\FM20ENU.DLL
    + 2004-08-11 22:12 . 2008-04-14 00:12 23040 c:\windows\system32\fltmc.exe
    + 2004-08-11 22:12 . 2008-04-14 00:11 16896 c:\windows\system32\fltlib.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 16896 c:\windows\system32\fltlib.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 87552 c:\windows\system32\fldrclnr.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 87552 c:\windows\system32\fldrclnr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 27136 c:\windows\system32\findstr.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 27136 c:\windows\system32\findstr.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 21504 c:\windows\system32\feclient.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 21504 c:\windows\system32\feclient.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 73728 c:\windows\system32\fdeploy.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 73728 c:\windows\system32\fdeploy.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 20992 c:\windows\system32\faxpatch.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 80384 c:\windows\system32\faultrep.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 80384 c:\windows\system32\faultrep.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 24064 c:\windows\system32\extrac32.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 82944 c:\windows\system32\eventtriggers.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 56320 c:\windows\system32\eventlog.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 50688 c:\windows\system32\eventcreate.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 23040 c:\windows\system32\ersvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 23040 c:\windows\system32\ersvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 20480 c:\windows\system32\encapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\encapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 40960 c:\windows\system32\en\mmcex.resources.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 26624 c:\windows\system32\efsadu.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 26624 c:\windows\system32\efsadu.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 33792 c:\windows\system32\eapsvc.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 59392 c:\windows\system32\eapqec.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 40960 c:\windows\system32\eappprxy.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 94208 c:\windows\system32\eappgnui.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 30720 c:\windows\system32\eapolqec.dll
    + 2008-07-30 03:10 . 2008-07-30 03:10 73720 c:\windows\system32\dxva2.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17920 c:\windows\system32\dvdupgrd.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 17920 c:\windows\system32\dvdupgrd.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 10752 c:\windows\system32\dumprep.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 10752 c:\windows\system32\dumprep.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\system32\dswave.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 19456 c:\windows\system32\dswave.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 51200 c:\windows\system32\dssec.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 51200 c:\windows\system32\dssec.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 92672 c:\windows\system32\dskquota.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 92672 c:\windows\system32\dskquota.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 71680 c:\windows\system32\dsdmoprp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 71680 c:\windows\system32\dsdmoprp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 16384 c:\windows\system32\ds32gt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 16384 c:\windows\system32\ds32gt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 14336 c:\windows\system32\drprov.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\drprov.dll
    + 2008-12-01 11:56 . 2008-04-13 19:17 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 25471 c:\windows\system32\drivers\watv10nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 22271 c:\windows\system32\drivers\watv06nt.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 34560 c:\windows\system32\drivers\wanarp.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 34560 c:\windows\system32\drivers\wanarp.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11935 c:\windows\system32\drivers\wadv11nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11871 c:\windows\system32\drivers\wadv09nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11295 c:\windows\system32\drivers\wadv08nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11807 c:\windows\system32\drivers\wadv07nt.sys
    + 2010-08-28 19:10 . 2008-04-13 18:43 14208 c:\windows\system32\drivers\wacompen.sys
    + 2004-08-11 22:00 . 2008-04-13 18:41 52352 c:\windows\system32\drivers\volsnap.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 52352 c:\windows\system32\drivers\volsnap.sys
    + 2004-08-11 22:00 . 2008-04-13 18:44 81664 c:\windows\system32\drivers\videoprt.sys
    - 2004-08-11 22:37 . 2004-08-04 04:07 42240 c:\windows\system32\drivers\VIAAGP.SYS
    + 2004-08-11 22:37 . 2008-04-13 18:36 42240 c:\windows\system32\drivers\viaagp.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\system32\drivers\vga.sys
    + 2004-08-11 22:00 . 2008-04-13 18:44 20992 c:\windows\system32\drivers\vga.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 11325 c:\windows\system32\drivers\vchnt5.dll
    + 2004-08-04 04:08 . 2008-04-13 18:45 20608 c:\windows\system32\drivers\usbuhci.sys
    + 2008-12-01 11:37 . 2008-04-13 18:45 26368 c:\windows\system32\drivers\usbstor.sys
    - 2009-01-15 03:50 . 2004-08-04 05:58 15104 c:\windows\system32\drivers\usbscan.sys
    + 2009-01-15 03:50 . 2008-04-13 18:45 15104 c:\windows\system32\drivers\usbscan.sys
    - 2008-12-06 17:29 . 2004-08-04 04:01 25856 c:\windows\system32\drivers\usbprint.sys
    + 2008-12-06 17:29 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 15872 c:\windows\system32\drivers\usbintel.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 59520 c:\windows\system32\drivers\usbhub.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 30208 c:\windows\system32\drivers\usbehci.sys
    + 2009-04-26 15:24 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
    + 2001-08-17 19:03 . 2008-04-13 18:45 25728 c:\windows\system32\drivers\usbcamd2.sys
    + 2001-08-17 19:03 . 2008-04-13 18:45 25600 c:\windows\system32\drivers\usbcamd.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023x.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023.sys
    + 2004-08-11 22:00 . 2008-04-13 18:32 66048 c:\windows\system32\drivers\udfs.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 44672 c:\windows\system32\drivers\uagp35.sys
    + 2004-08-04 04:03 . 2008-04-13 18:56 12288 c:\windows\system32\drivers\tunmp.sys
    + 2004-08-11 22:11 . 2008-04-14 00:13 40840 c:\windows\system32\drivers\termdd.sys
    - 2004-08-11 22:11 . 2004-08-04 06:01 40840 c:\windows\system32\drivers\termdd.sys
    - 2004-08-11 22:11 . 2004-08-04 10:00 21896 c:\windows\system32\drivers\tdtcp.sys
    + 2004-08-11 22:11 . 2008-04-14 00:13 21896 c:\windows\system32\drivers\tdtcp.sys
    + 2004-08-11 22:11 . 2008-04-14 00:13 12040 c:\windows\system32\drivers\tdpipe.sys
    - 2004-08-11 22:11 . 2004-08-04 10:00 12040 c:\windows\system32\drivers\tdpipe.sys
    + 2004-08-11 22:00 . 2008-04-13 19:00 19072 c:\windows\system32\drivers\tdi.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 14976 c:\windows\system32\drivers\tape.sys
    + 2004-08-11 22:00 . 2008-04-13 18:40 14976 c:\windows\system32\drivers\tape.sys
    + 2008-12-01 11:56 . 2008-04-13 19:15 60800 c:\windows\system32\drivers\sysaudio.sys
    - 2008-12-01 11:56 . 2004-08-04 04:15 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2008-12-01 11:56 . 2008-04-13 18:45 56576 c:\windows\system32\drivers\swmidi.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
    + 2004-08-11 22:12 . 2008-04-13 18:36 73472 c:\windows\system32\drivers\sr.sys
    - 2004-08-11 22:12 . 2004-08-04 10:00 73472 c:\windows\system32\drivers\sr.sys
    + 2004-08-04 04:09 . 2008-04-13 18:46 25344 c:\windows\system32\drivers\sonydcam.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 13240 c:\windows\system32\drivers\slwdmsup.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 95424 c:\windows\system32\drivers\slnthal.sys
    + 2004-08-11 22:36 . 2008-04-13 18:36 40960 c:\windows\system32\drivers\sisagp.sys
    - 2004-08-04 03:59 . 2004-08-04 10:00 11392 c:\windows\system32\drivers\sfloppy.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 11392 c:\windows\system32\drivers\sfloppy.sys
    - 2004-08-04 03:59 . 2007-05-03 10:03 11008 c:\windows\system32\drivers\sffp_sd.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 11008 c:\windows\system32\drivers\sffp_sd.sys
    + 2008-12-01 11:50 . 2008-04-13 18:40 10240 c:\windows\system32\drivers\sffp_mmc.sys
    - 2008-12-01 11:50 . 2007-05-03 10:03 10240 c:\windows\system32\drivers\sffp_mmc.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 11904 c:\windows\system32\drivers\sffdisk.sys
    + 2004-08-04 04:15 . 2008-04-13 19:15 64512 c:\windows\system32\drivers\serial.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 15744 c:\windows\system32\drivers\serenum.sys
    + 2004-08-04 04:07 . 2008-04-13 18:36 79232 c:\windows\system32\drivers\sdbus.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 96384 c:\windows\system32\drivers\scsiport.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismpx.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismp.sys
    + 2010-08-28 19:10 . 2008-04-13 18:46 59136 c:\windows\system32\drivers\rfcomm.sys
    + 2004-08-11 22:09 . 2008-04-13 18:40 57600 c:\windows\system32\drivers\redbook.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 13776 c:\windows\system32\drivers\recagent.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 48384 c:\windows\system32\drivers\raspptp.sys
    + 2004-08-11 22:00 . 2008-04-13 19:19 48384 c:\windows\system32\drivers\raspptp.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 41472 c:\windows\system32\drivers\raspppoe.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 41472 c:\windows\system32\drivers\raspppoe.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 51328 c:\windows\system32\drivers\rasl2tp.sys
    + 2004-08-11 22:00 . 2008-04-13 19:19 51328 c:\windows\system32\drivers\rasl2tp.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 69120 c:\windows\system32\drivers\psched.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 69120 c:\windows\system32\drivers\psched.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 35840 c:\windows\system32\drivers\processr.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 24960 c:\windows\system32\drivers\pciidex.sys
    - 2004-08-04 04:07 . 2004-08-04 04:07 68224 c:\windows\system32\drivers\pci.sys
    + 2004-08-04 04:07 . 2008-04-13 18:36 68224 c:\windows\system32\drivers\pci.sys
    + 2004-08-11 22:00 . 2008-04-13 18:40 19712 c:\windows\system32\drivers\partmgr.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 80128 c:\windows\system32\drivers\parport.sys
    - 2004-08-04 03:59 . 2004-08-04 10:00 80128 c:\windows\system32\drivers\parport.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 42752 c:\windows\system32\drivers\p3.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 88320 c:\windows\system32\drivers\nwlnkipx.sys
    + 2004-08-11 22:00 . 2008-04-13 18:32 30848 c:\windows\system32\drivers\npfs.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 30848 c:\windows\system32\drivers\npfs.sys
    + 2004-08-11 22:00 . 2008-04-13 18:53 40320 c:\windows\system32\drivers\nmnt.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 40320 c:\windows\system32\drivers\nmnt.sys
    - 2004-08-04 03:58 . 2004-08-04 10:00 61824 c:\windows\system32\drivers\nic1394.sys
    + 2004-08-04 03:58 . 2008-04-13 18:51 61824 c:\windows\system32\drivers\nic1394.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 34688 c:\windows\system32\drivers\netbios.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 40576 c:\windows\system32\drivers\ndproxy.sys
    + 2004-08-11 22:00 . 2008-04-13 19:20 91520 c:\windows\system32\drivers\ndiswan.sys
    + 2004-08-04 04:03 . 2008-04-13 18:55 14592 c:\windows\system32\drivers\ndisuio.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 10112 c:\windows\system32\drivers\ndistapi.sys
    + 2010-08-28 19:10 . 2008-04-13 18:43 12672 c:\windows\system32\drivers\mutohpen.sys
    + 2004-08-04 04:07 . 2008-04-13 18:36 15488 c:\windows\system32\drivers\mssmbios.sys
    - 2004-08-04 04:07 . 2004-08-04 04:07 15488 c:\windows\system32\drivers\mssmbios.sys
    + 2004-08-11 22:00 . 2008-04-13 18:56 35072 c:\windows\system32\drivers\msgpc.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 35072 c:\windows\system32\drivers\msgpc.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 19072 c:\windows\system32\drivers\msfs.sys
    + 2004-08-11 22:00 . 2008-04-13 18:32 19072 c:\windows\system32\drivers\msfs.sys
    + 2004-08-11 22:00 . 2009-06-22 11:48 91776 c:\windows\system32\drivers\mqac.sys
    + 2004-08-11 22:00 . 2008-04-13 18:39 42368 c:\windows\system32\drivers\mountmgr.sys
    - 2004-08-04 03:58 . 2004-08-04 05:58 23040 c:\windows\system32\drivers\mouclass.sys
    + 2004-08-04 03:58 . 2008-04-13 18:39 23040 c:\windows\system32\drivers\mouclass.sys
    + 2004-08-04 04:08 . 2008-04-13 19:00 30080 c:\windows\system32\drivers\modem.sys
    - 2004-08-04 04:08 . 2004-08-04 10:00 30080 c:\windows\system32\drivers\modem.sys
    - 2004-08-04 04:07 . 2004-08-04 10:00 63744 c:\windows\system32\drivers\mf.sys
    + 2004-08-04 04:07 . 2008-04-13 18:36 63744 c:\windows\system32\drivers\mf.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 11868 c:\windows\system32\drivers\mdmxsdk.sys
    + 2009-10-03 13:12 . 2010-04-29 21:39 38224 c:\windows\system32\drivers\mbamswissarmy.sys
    + 2009-10-03 13:12 . 2010-04-29 21:39 20952 c:\windows\system32\drivers\mbam.sys
    + 2004-08-11 22:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
    + 2008-12-06 17:29 . 2008-04-13 18:39 14592 c:\windows\system32\drivers\kbdhid.sys
    - 2004-08-04 03:58 . 2004-08-04 03:58 24576 c:\windows\system32\drivers\kbdclass.sys
    + 2004-08-04 03:58 . 2008-04-13 18:39 24576 c:\windows\system32\drivers\kbdclass.sys
    + 2001-08-17 18:58 . 2008-04-13 18:36 37248 c:\windows\system32\drivers\isapnp.sys
    + 2004-08-11 22:07 . 2008-04-13 18:54 11264 c:\windows\system32\drivers\irenum.sys
    - 2004-08-11 22:07 . 2004-08-04 10:00 11264 c:\windows\system32\drivers\irenum.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 46592 c:\windows\system32\drivers\irbus.sys
    + 2004-08-11 22:00 . 2008-04-13 19:19 75264 c:\windows\system32\drivers\ipsec.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 20864 c:\windows\system32\drivers\ipinip.sys
    + 2004-08-11 22:00 . 2008-04-13 18:53 36608 c:\windows\system32\drivers\ip6fw.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 36352 c:\windows\system32\drivers\intelppm.sys
    + 2004-08-04 04:00 . 2008-04-13 18:40 42112 c:\windows\system32\drivers\imapi.sys
    + 2004-08-04 04:14 . 2008-04-13 19:18 52480 c:\windows\system32\drivers\i8042prt.sys
    - 2004-08-11 22:44 . 2004-08-04 04:00 18560 c:\windows\system32\drivers\i2omp.sys
    + 2004-08-11 22:44 . 2008-04-13 18:41 18560 c:\windows\system32\drivers\i2omp.sys
    + 2008-12-06 17:29 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
    - 2004-08-04 04:08 . 2004-08-04 10:00 24960 c:\windows\system32\drivers\hidparse.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 24960 c:\windows\system32\drivers\hidparse.sys
    + 2010-08-28 19:09 . 2008-04-13 18:45 19200 c:\windows\system32\drivers\hidir.sys
    + 2004-08-04 04:08 . 2008-04-13 18:45 36864 c:\windows\system32\drivers\hidclass.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 25600 c:\windows\system32\drivers\hidbth.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 46464 c:\windows\system32\drivers\gagp30kx.sys
    - 2004-08-04 03:59 . 2004-08-04 10:00 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2004-08-11 22:00 . 2008-04-13 18:33 44544 c:\windows\system32\drivers\fips.sys
    - 2004-08-04 03:59 . 2004-08-04 10:00 27392 c:\windows\system32\drivers\fdc.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 27392 c:\windows\system32\drivers\fdc.sys
    + 2004-08-04 04:00 . 2008-04-13 18:38 71168 c:\windows\system32\drivers\dxg.sys
    + 2008-12-01 11:55 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
    - 2008-12-01 11:56 . 2004-08-04 04:07 52864 c:\windows\system32\drivers\DMusic.sys
    + 2008-12-01 11:56 . 2008-04-13 18:45 52864 c:\windows\system32\drivers\dmusic.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 14208 c:\windows\system32\drivers\diskdump.sys
    + 2004-08-11 22:00 . 2008-04-13 18:40 14208 c:\windows\system32\drivers\diskdump.sys
    - 2004-08-04 03:59 . 2004-08-04 10:00 36352 c:\windows\system32\drivers\disk.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 36352 c:\windows\system32\drivers\disk.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 36736 c:\windows\system32\drivers\crusoe.sys
    + 2004-08-11 22:00 . 2008-04-13 19:16 49536 c:\windows\system32\drivers\classpnp.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 15423 c:\windows\system32\drivers\ch7xxnt5.dll
    + 2004-08-04 03:59 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 63744 c:\windows\system32\drivers\cdfs.sys
    + 2004-08-11 22:00 . 2008-04-13 19:14 63744 c:\windows\system32\drivers\cdfs.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 18944 c:\windows\system32\drivers\bthusb.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 36480 c:\windows\system32\drivers\bthprint.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 37888 c:\windows\system32\drivers\bthmodem.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\bthenum.sys
    + 2004-08-11 22:00 . 2008-04-13 18:53 71552 c:\windows\system32\drivers\bridge.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 71552 c:\windows\system32\drivers\bridge.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 17279 c:\windows\system32\drivers\atv10nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 14143 c:\windows\system32\drivers\atv06nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 25471 c:\windows\system32\drivers\atv04nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 11359 c:\windows\system32\drivers\atv02nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 21183 c:\windows\system32\drivers\atv01nt5.dll
    + 2004-08-11 22:00 . 2008-04-13 18:51 55808 c:\windows\system32\drivers\atmlane.sys
    + 2004-08-11 22:00 . 2008-04-13 18:51 59904 c:\windows\system32\drivers\atmarpc.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 59904 c:\windows\system32\drivers\atmarpc.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 63488 c:\windows\system32\drivers\atinxsxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 31744 c:\windows\system32\drivers\atinxbxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 73216 c:\windows\system32\drivers\atintuxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 13824 c:\windows\system32\drivers\atinttxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 28672 c:\windows\system32\drivers\atinsnxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 52224 c:\windows\system32\drivers\atinraxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 14336 c:\windows\system32\drivers\atinpdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 13824 c:\windows\system32\drivers\atinmdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 57856 c:\windows\system32\drivers\atinbtxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 26367 c:\windows\system32\drivers\ati1snxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 30671 c:\windows\system32\drivers\ati1raxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 56623 c:\windows\system32\drivers\ati1btxx.sys
    + 2004-08-04 03:59 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
    + 2004-08-11 22:00 . 2008-04-13 18:57 14336 c:\windows\system32\drivers\asyncmac.sys
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\drivers\asyncmac.sys
    + 2009-09-07 21:43 . 2009-11-24 23:49 48560 c:\windows\system32\drivers\aswTdi.sys
    + 2009-09-07 21:43 . 2009-11-24 23:48 23120 c:\windows\system32\drivers\aswRdr.sys
    + 2009-09-07 21:43 . 2009-11-24 23:50 94160 c:\windows\system32\drivers\aswmon2.sys
    + 2009-09-07 21:43 . 2009-11-24 23:51 93424 c:\windows\system32\drivers\aswmon.sys
    + 2009-09-07 21:43 . 2009-11-24 23:50 20560 c:\windows\system32\drivers\aswFsBlk.sys
    + 2004-08-04 03:58 . 2008-04-13 18:51 60800 c:\windows\system32\drivers\arp1394.sys
    - 2004-08-04 03:58 . 2004-08-04 10:00 60800 c:\windows\system32\drivers\arp1394.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 37760 c:\windows\system32\drivers\amdk7.sys
    + 2004-08-04 03:59 . 2008-04-13 18:31 37376 c:\windows\system32\drivers\amdk6.sys
    - 2004-08-11 22:29 . 2004-08-04 04:07 43008 c:\windows\system32\drivers\AMDAGP.SYS
    + 2004-08-11 22:29 . 2008-04-13 18:36 43008 c:\windows\system32\drivers\amdagp.sys
    - 2004-08-11 22:29 . 2004-08-04 04:07 42752 c:\windows\system32\drivers\ALIM1541.SYS
    + 2004-08-11 22:29 . 2008-04-13 18:36 42752 c:\windows\system32\drivers\alim1541.sys
    + 2004-08-11 22:35 . 2008-04-13 18:36 44928 c:\windows\system32\drivers\agpcpq.sys
    - 2004-08-11 22:35 . 2004-08-04 04:07 44928 c:\windows\system32\drivers\AGPCPQ.SYS
    + 2004-08-11 22:08 . 2008-04-13 18:36 42368 c:\windows\system32\drivers\agp440.sys
    - 2004-08-11 22:08 . 2004-08-04 04:07 42368 c:\windows\system32\drivers\AGP440.SYS
    - 2009-06-14 23:41 . 2006-11-10 21:05 18688 c:\windows\system32\drivers\afc.sys
    + 2009-06-14 23:41 . 2006-11-10 22:05 18688 c:\windows\system32\drivers\afc.sys
    + 2009-09-07 21:43 . 2009-11-24 23:47 27408 c:\windows\system32\drivers\aavmker4.sys
    + 2004-08-11 22:00 . 2008-04-14 00:12 62976 c:\windows\system32\driverquery.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 57344 c:\windows\system32\dpwsockx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 57344 c:\windows\system32\dpwsockx.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 83456 c:\windows\system32\dpvsetup.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 83456 c:\windows\system32\dpvsetup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 21504 c:\windows\system32\dpvacm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 21504 c:\windows\system32\dpvacm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 17920 c:\windows\system32\dpnsvr.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 60928 c:\windows\system32\dpnhupnp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 60928 c:\windows\system32\dpnhupnp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 35328 c:\windows\system32\dpnhpast.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 35328 c:\windows\system32\dpnhpast.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 23552 c:\windows\system32\dpmodemx.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 23552 c:\windows\system32\dpmodemx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 29696 c:\windows\system32\dplaysvr.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 56320 c:\windows\system32\dot3msm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39936 c:\windows\system32\dot3gpclnt.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 57856 c:\windows\system32\dot3cfg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 26112 c:\windows\system32\dot3api.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 48128 c:\windows\system32\docprop2.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 48128 c:\windows\system32\docprop2.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 45568 c:\windows\system32\dnsrslvr.dll
    - 2004-08-11 22:00 . 2008-02-20 05:32 45568 c:\windows\system32\dnsrslvr.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 52224 c:\windows\system32\dmutil.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 52224 c:\windows\system32\dmutil.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 23552 c:\windows\system32\dmserver.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 23552 c:\windows\system32\dmserver.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 82432 c:\windows\system32\dmscript.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 82432 c:\windows\system32\dmscript.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15872 c:\windows\system32\dmremote.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 15872 c:\windows\system32\dmremote.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 35840 c:\windows\system32\dmloader.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 35840 c:\windows\system32\dmloader.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 61440 c:\windows\system32\dmcompos.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 61440 c:\windows\system32\dmcompos.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 28672 c:\windows\system32\dmband.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 28672 c:\windows\system32\dmband.dll
    + 2004-08-11 22:12 . 2009-08-07 01:24 35552 c:\windows\system32\dllcache\wups.dll
    + 2004-08-11 22:12 . 2009-08-07 01:24 53472 c:\windows\system32\dllcache\wuauclt.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\dllcache\wmpui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\dllcache\wmpui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\dllcache\wmpcore.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\dllcache\wmpcore.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\dllcache\wmpcd.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\dllcache\wmpcd.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\system32\dllcache\tlntsess.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    + 2004-08-11 22:00 . 2009-02-06 10:39 35328 c:\windows\system32\dllcache\sc.exe
    + 2008-12-01 11:48 . 2009-08-29 07:36 44544 c:\windows\system32\dllcache\pngfilt.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\system32\dllcache\mtxoci.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2010-08-28 19:10 . 2008-04-13 17:27 79872 c:\windows\system32\dllcache\msxml6r.dll
    + 2007-08-14 01:01 . 2007-08-14 01:01 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2004-08-11 22:00 . 2007-08-14 01:32 45568 c:\windows\system32\dllcache\mshta.exe
    + 2009-11-22 16:14 . 2009-08-29 07:36 52224 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\system32\dllcache\msdtclog.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 58880 c:\windows\system32\dllcache\msdtclog.dll
    + 2008-12-01 11:51 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    - 2008-12-01 11:51 . 2008-06-24 16:23 74240 c:\windows\system32\dllcache\mscms.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 48640 c:\windows\system32\dllcache\mqupgrd.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 48640 c:\windows\system32\dllcache\mqupgrd.dll
    + 2008-12-01 11:50 . 2009-06-25 18:36 95744 c:\windows\system32\dllcache\mqsec.dll
    - 2008-12-01 11:50 . 2007-07-06 12:46 95744 c:\windows\system32\dllcache\mqsec.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 16896 c:\windows\system32\dllcache\mqise.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 16896 c:\windows\system32\dllcache\mqise.dll
    - 2004-08-11 22:00 . 2007-07-06 12:46 47104 c:\windows\system32\dllcache\mqdscli.dll
    + 2004-08-11 22:00 . 2009-06-25 18:36 47104 c:\windows\system32\dllcache\mqdscli.dll
    + 2004-08-11 22:00 . 2009-06-22 11:49 19968 c:\windows\system32\dllcache\mqbkup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 19968 c:\windows\system32\dllcache\mqbkup.exe
    + 2004-08-11 22:00 . 2009-06-22 11:48 91776 c:\windows\system32\dllcache\mqac.sys
    + 2004-08-11 22:00 . 2007-08-14 01:44 40960 c:\windows\system32\dllcache\licmgr10.dll
    + 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    + 2004-08-11 22:00 . 2009-08-29 07:36 27648 c:\windows\system32\dllcache\jsproxy.dll
    + 2004-08-11 22:00 . 2007-08-14 01:39 92672 c:\windows\system32\dllcache\inseng.dll
    + 2007-08-14 01:36 . 2007-08-14 01:36 36352 c:\windows\system32\dllcache\imgutil.dll
    + 2009-11-22 16:14 . 2009-08-28 10:28 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2004-08-11 22:00 . 2007-08-14 01:39 55296 c:\windows\system32\dllcache\iesetup.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 44544 c:\windows\system32\dllcache\iernonce.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 78336 c:\windows\system32\dllcache\ieencode.dll
    + 2008-12-01 11:48 . 2007-08-14 01:44 69120 c:\windows\system32\dllcache\iedw.exe
    + 2004-08-11 22:00 . 2009-08-28 10:28 70656 c:\windows\system32\dllcache\ie4uinit.exe
    + 2009-11-22 16:14 . 2009-08-29 07:36 63488 c:\windows\system32\dllcache\icardie.dll
    + 2007-08-14 01:18 . 2007-08-14 01:18 60416 c:\windows\system32\dllcache\hmmapi.dll
    + 2009-07-29 04:37 . 2009-07-29 04:37 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2009-09-19 05:43 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll
    + 2009-11-22 16:13 . 2007-08-14 01:54 33792 c:\windows\system32\dllcache\custsat.dll
    + 2007-08-14 01:42 . 2009-08-29 07:36 17408 c:\windows\system32\dllcache\corpol.dll
    + 2004-08-11 22:00 . 2009-08-07 01:24 96480 c:\windows\system32\dllcache\cdm.dll
    + 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2009-07-17 18:55 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
    + 2004-08-11 22:00 . 2007-08-14 01:39 71680 c:\windows\system32\dllcache\admparse.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 32768 c:\windows\system32\dispex.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39936 c:\windows\system32\dimsroam.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 19456 c:\windows\system32\dimsntfy.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 68608 c:\windows\system32\digest.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 68608 c:\windows\system32\digest.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 87040 c:\windows\system32\diantz.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 48640 c:\windows\system32\dhcpqec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 28672 c:\windows\system32\dfsshlex.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 28672 c:\windows\system32\dfsshlex.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 96760 c:\windows\system32\dfshim.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 39424 c:\windows\system32\dfrgsnap.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 82944 c:\windows\system32\dfrgfat.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 59904 c:\windows\system32\devenum.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 59904 c:\windows\system32\devenum.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\defrag.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\defrag.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 27136 c:\windows\system32\ddrawex.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 27136 c:\windows\system32\ddrawex.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 30208 c:\windows\system32\ddeshare.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 30208 c:\windows\system32\ddeshare.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 28672 c:\windows\system32\dbnmpntw.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 28672 c:\windows\system32\dbnmpntw.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24576 c:\windows\system32\dbmsrpcn.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 24576 c:\windows\system32\dbmsrpcn.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 25088 c:\windows\system32\davclnt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 54272 c:\windows\system32\dataclen.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 54272 c:\windows\system32\dataclen.dll
     
    Topnotch,
    #12
  14. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2004-08-11 22:00 . 2008-04-14 00:12 15360 c:\windows\system32\ctfmon.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 15360 c:\windows\system32\ctfmon.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 32256 c:\windows\system32\csrsrv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 62464 c:\windows\system32\cryptsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 64512 c:\windows\system32\cryptnet.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 53760 c:\windows\system32\cryptext.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 53760 c:\windows\system32\cryptext.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 33280 c:\windows\system32\cryptdll.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 33280 c:\windows\system32\cryptdll.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 74752 c:\windows\system32\cryptdlg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 74752 c:\windows\system32\cryptdlg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 12800 c:\windows\system32\credssp.dll
    + 2004-08-11 22:00 . 2009-08-29 07:36 17408 c:\windows\system32\corpol.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 27648 c:\windows\system32\conime.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 27648 c:\windows\system32\conime.exe
    - 2008-12-06 17:29 . 2009-09-05 18:54 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2008-12-06 17:29 . 2010-09-01 12:58 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2010-08-28 19:28 . 2010-08-28 19:28 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012010082820100829\index.dat
    - 2008-12-06 17:29 . 2009-09-05 13:19 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-12-06 17:29 . 2010-09-01 12:58 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2008-12-06 17:29 . 2009-09-05 13:19 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-12-06 17:29 . 2010-09-01 12:58 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2004-08-11 22:11 . 2008-04-14 00:11 97792 c:\windows\system32\comrepl.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 28160 c:\windows\system32\comaddin.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 60416 c:\windows\system32\colbact.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 47104 c:\windows\system32\cnbjmon.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 47104 c:\windows\system32\cnbjmon.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 39424 c:\windows\system32\cmutil.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 63488 c:\windows\system32\cmstp.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 63488 c:\windows\system32\cmstp.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 13312 c:\windows\system32\cmsetacl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 39936 c:\windows\system32\cmmon32.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 39936 c:\windows\system32\cmmon32.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 25600 c:\windows\system32\cmdl32.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 15872 c:\windows\system32\cmcfg32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 15872 c:\windows\system32\cmcfg32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 58368 c:\windows\system32\clusapi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 33280 c:\windows\system32\clipsrv.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 33280 c:\windows\system32\clipsrv.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 20480 c:\windows\system32\cliconfg.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\system32\cliconfg.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 77824 c:\windows\system32\cliconfg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 77824 c:\windows\system32\cliconfg.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 64000 c:\windows\system32\cleanmgr.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 64000 c:\windows\system32\cleanmgr.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 56832 c:\windows\system32\cipher.exe
    - 2004-08-11 22:00 . 2006-06-22 05:06 69120 c:\windows\system32\ciodm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 69120 c:\windows\system32\ciodm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 16896 c:\windows\system32\cfgmgr32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 16896 c:\windows\system32\cfgmgr32.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 38912 c:\windows\system32\cfgbkend.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 38912 c:\windows\system32\cfgbkend.dll
    + 2004-08-11 22:00 . 2009-08-07 01:24 96480 c:\windows\system32\cdm.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 85504 c:\windows\system32\catsrvps.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 85504 c:\windows\system32\catsrvps.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 50688 c:\windows\system32\camocx.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50688 c:\windows\system32\camocx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 19968 c:\windows\system32\cacls.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 84480 c:\windows\system32\cabview.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 84480 c:\windows\system32\cabview.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 60416 c:\windows\system32\cabinet.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 50688 c:\windows\system32\btpanui.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 50688 c:\windows\system32\btpanui.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 30208 c:\windows\system32\bthserv.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 30208 c:\windows\system32\bthserv.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 20992 c:\windows\system32\bthci.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 20992 c:\windows\system32\bthci.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 78336 c:\windows\system32\browsewm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 78336 c:\windows\system32\browsewm.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 77824 c:\windows\system32\browser.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 63488 c:\windows\system32\browselc.dll
    + 2004-08-11 22:00 . 2008-04-13 17:03 63488 c:\windows\system32\browselc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 71680 c:\windows\system32\blastcln.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 71680 c:\windows\system32\blastcln.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 17408 c:\windows\system32\bidispl.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17408 c:\windows\system32\bidispl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 29184 c:\windows\system32\batmeter.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 52736 c:\windows\system32\basesrv.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 52736 c:\windows\system32\basesrv.dll
    + 2004-08-11 22:00 . 2009-06-10 14:13 84992 c:\windows\system32\avifil32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 84992 c:\windows\system32\avifil32.dll
    + 2009-09-07 21:43 . 2009-11-24 23:47 97480 c:\windows\system32\AvastSS.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 11264 c:\windows\system32\autolfn.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 11264 c:\windows\system32\autolfn.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 62464 c:\windows\system32\authz.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 14336 c:\windows\system32\auditusr.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 14336 c:\windows\system32\auditusr.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 42496 c:\windows\system32\audiosrv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 42496 c:\windows\system32\audiosrv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 12288 c:\windows\system32\attrib.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 30208 c:\windows\system32\atmlib.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 30208 c:\windows\system32\atmlib.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 11264 c:\windows\system32\atmadm.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 11264 c:\windows\system32\atmadm.exe
    + 2004-08-11 22:00 . 2009-07-17 19:01 58880 c:\windows\system32\atl.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 58880 c:\windows\system32\atl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32768 c:\windows\system32\ativtmxx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 25088 c:\windows\system32\at.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 25088 c:\windows\system32\at.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 65024 c:\windows\system32\asycfilt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 65024 c:\windows\system32\asycfilt.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 32768 c:\windows\system32\asr_pfu.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 32768 c:\windows\system32\asr_pfu.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 30208 c:\windows\system32\asr_fmt.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 30208 c:\windows\system32\asr_fmt.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 70656 c:\windows\system32\amstream.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 70656 c:\windows\system32\amstream.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 17408 c:\windows\system32\alrsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 17408 c:\windows\system32\alrsvc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 44544 c:\windows\system32\alg.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 44544 c:\windows\system32\alg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 98304 c:\windows\system32\ahui.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 98304 c:\windows\system32\ahui.exe
    + 2004-08-11 22:00 . 2008-04-14 00:11 68096 c:\windows\system32\adsmsext.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 68096 c:\windows\system32\adsmsext.dll
    + 2004-08-11 22:00 . 2007-08-14 01:39 71680 c:\windows\system32\admparse.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 98304 c:\windows\system32\actxprxy.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 58434 c:\windows\srchasst\srchctls.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 58434 c:\windows\srchasst\srchctls.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32866 c:\windows\slrundll.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2010-08-28 19:10 . 2004-08-04 04:29 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wups.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 22528 c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2010-08-28 19:10 . 2004-08-04 04:29 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\wship6.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\wshext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 95232 c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\winsta.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 99328 c:\windows\ServicePackFiles\i386\winscard.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\wextract.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2010-08-28 19:10 . 2008-04-13 19:17 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
    + 2010-08-28 19:10 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2010-08-28 19:10 . 2004-08-04 04:29 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 31744 c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 43008 c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2010-08-28 19:10 . 2004-08-04 04:29 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
    + 2010-08-28 19:10 . 2008-04-13 18:44 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2010-08-28 19:10 . 2008-04-13 18:57 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\wamreg51.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\wam51.dll
    + 2010-08-28 19:10 . 2004-08-04 04:29 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:29 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
    + 2010-08-28 19:10 . 2008-04-13 18:43 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 46080 c:\windows\ServicePackFiles\i386\wab.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2010-08-28 19:10 . 2008-04-13 18:41 52352 c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2010-08-28 19:10 . 2008-04-13 18:44 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2010-08-28 19:10 . 2008-04-13 18:44 20992 c:\windows\ServicePackFiles\i386\vga.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\version.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\verifier.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\utilman.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\userinit.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\usbui.dll
    + 2010-08-28 19:10 . 2008-04-13 18:45 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 26112 c:\windows\ServicePackFiles\i386\usbser.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2010-08-28 19:10 . 2008-04-13 18:47 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2010-08-28 19:10 . 2008-04-13 18:45 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023.sys
    + 2010-08-28 19:10 . 2004-08-04 04:31 32384 c:\windows\ServicePackFiles\i386\usb101et.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 37888 c:\windows\ServicePackFiles\i386\url.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\ups.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\uniplat.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 74240 c:\windows\ServicePackFiles\i386\unimdmat.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\umandlg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll
    + 2010-08-28 19:10 . 2008-04-13 18:32 66048 c:\windows\ServicePackFiles\i386\udfs.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 44672 c:\windows\ServicePackFiles\i386\uagp35.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\tzchange.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\twext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\twain_32.dll
    + 2010-08-28 19:10 . 2008-04-13 18:56 12288 c:\windows\ServicePackFiles\i386\tunmp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\ttyui.dll
    + 2010-08-28 19:10 . 2007-04-02 15:31 39936 c:\windows\ServicePackFiles\i386\ttyres.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\tspkg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll
    + 2010-08-28 19:10 . 2008-04-14 00:13 12168 c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll
    + 2010-08-28 19:10 . 2007-10-30 10:06 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs
    + 2010-08-28 19:10 . 2007-12-12 10:33 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs
    + 2010-08-28 19:10 . 2008-04-14 00:12 93696 c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 90112 c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 12800 c:\windows\ServicePackFiles\i386\tree.com
    + 2010-08-28 19:10 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\tracert.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\tools.dll
    + 2010-08-28 19:10 . 2007-12-17 12:00 66592 c:\windows\ServicePackFiles\i386\togac.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 73216 c:\windows\ServicePackFiles\i386\tlntsvr.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 78336 c:\windows\ServicePackFiles\i386\tlntsess.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\tlntadmn.exe
    + 2010-08-28 19:10 . 2008-04-14 00:13 40840 c:\windows\ServicePackFiles\i386\termdd.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\telnet.exe
    + 2010-08-28 19:10 . 2008-04-14 00:13 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:13 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys
    + 2010-08-28 19:10 . 2008-04-13 19:00 19072 c:\windows\ServicePackFiles\i386\tdi.sys
    + 2010-08-28 19:10 . 2007-04-02 16:36 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32827 c:\windows\ServicePackFiles\i386\tcptest.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmonui.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\tcpmon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\tasklist.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 76288 c:\windows\ServicePackFiles\i386\taskkill.exe
    + 2010-08-28 19:10 . 2008-04-13 18:40 14976 c:\windows\ServicePackFiles\i386\tape.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\tabletoc.dll
    + 2010-08-28 19:10 . 2007-06-27 12:59 61440 c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
    + 2010-08-28 19:10 . 2007-06-27 12:59 77824 c:\windows\ServicePackFiles\i386\system.security.dll
    + 2010-08-28 19:10 . 2008-04-13 16:11 48640 c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
    + 2010-08-28 19:10 . 2007-06-27 12:58 65536 c:\windows\ServicePackFiles\i386\system.drawing.design.dll
    + 2010-08-28 19:10 . 2007-06-27 12:58 86016 c:\windows\ServicePackFiles\i386\system.directoryservices.dll
    + 2010-08-28 19:10 . 2007-06-27 12:57 77824 c:\windows\ServicePackFiles\i386\system.configuration.install.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\sysinfo.exe
    + 2010-08-28 19:10 . 2008-04-13 19:15 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\synceng.dll
    + 2010-08-28 19:10 . 2008-04-13 18:45 56576 c:\windows\ServicePackFiles\i386\swmidi.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\svchost.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 46592 c:\windows\ServicePackFiles\i386\svcext51.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\streamip.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 49408 c:\windows\ServicePackFiles\i386\stream.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\storprop.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\stimon.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\sti.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 86528 c:\windows\ServicePackFiles\i386\stdprov.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\stclient.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\sstub.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\ssstars.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 46592 c:\windows\ServicePackFiles\i386\sspifilt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 45056 c:\windows\ServicePackFiles\i386\ssinc51.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\srclient.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 58434 c:\windows\ServicePackFiles\i386\srchctls.dll
    + 2010-08-28 19:10 . 2008-04-13 18:36 73472 c:\windows\ServicePackFiles\i386\sr.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\spoolss.dll
    + 2010-08-28 19:10 . 2008-04-14 11:42 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe
    + 2010-08-28 19:10 . 2008-04-13 18:43 12800 c:\windows\ServicePackFiles\i386\spiisupd.exe
    + 2010-08-28 19:10 . 2008-04-13 16:43 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\sort.exe
    + 2010-08-28 19:10 . 2008-04-13 18:46 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\snmp.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\smtpapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\smss.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 89600 c:\windows\ServicePackFiles\i386\smlogsvc.exe
    + 2010-08-28 19:10 . 2008-04-13 18:36 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 73796 c:\windows\ServicePackFiles\i386\slserv.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 32866 c:\windows\ServicePackFiles\i386\slrundll.exe
    + 2010-08-28 19:10 . 2004-08-04 04:41 95424 c:\windows\ServicePackFiles\i386\slnthal.sys
    + 2010-08-28 19:10 . 2008-04-13 18:46 11136 c:\windows\ServicePackFiles\i386\slip.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\slbiop.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\slayerxp.dll
    + 2010-08-28 19:10 . 2004-08-04 04:31 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 26112 c:\windows\ServicePackFiles\i386\skeys.exe
    + 2010-08-28 19:10 . 2004-08-04 04:31 32768 c:\windows\ServicePackFiles\i386\sisnic.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 40960 c:\windows\ServicePackFiles\i386\sisagp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 70144 c:\windows\ServicePackFiles\i386\sigverif.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\sigtab.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\shutdown.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 16437 c:\windows\ServicePackFiles\i386\shtml.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 20536 c:\windows\ServicePackFiles\i386\shtml.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\shscrap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\shrpubw.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 65024 c:\windows\ServicePackFiles\i386\shimeng.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 68096 c:\windows\ServicePackFiles\i386\shgina.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\shfolder.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\setupn.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 73216 c:\windows\ServicePackFiles\i386\setup50.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\setup.exe
    + 2010-08-28 19:10 . 2007-12-17 11:59 66592 c:\windows\ServicePackFiles\i386\setregni.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 31232 c:\windows\ServicePackFiles\i386\sethc.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\servdeps.dll
    + 2010-08-28 19:10 . 2008-04-13 19:15 64512 c:\windows\ServicePackFiles\i386\serial.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 15744 c:\windows\ServicePackFiles\i386\serenum.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\sens.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\sendmail.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sendcmsg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 56320 c:\windows\ServicePackFiles\i386\secur32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\seclogon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\secedit.exe
    + 2010-08-28 19:10 . 2007-11-13 10:25 20480 c:\windows\ServicePackFiles\i386\secdrv.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll
    + 2010-08-28 19:10 . 2008-04-13 18:36 79232 c:\windows\ServicePackFiles\i386\sdbus.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\sdbinst.exe
    + 2010-08-28 19:10 . 2008-04-13 18:45 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 96384 c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\scrcons.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\sclgntfy.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 95744 c:\windows\ServicePackFiles\i386\scardsvr.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\scarddlg.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\savedump.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\samlib.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 45568 c:\windows\ServicePackFiles\i386\safrslv.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\safrdm.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw430ext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\rw001ext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\runonce.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\rundll32.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\rtutils.dll
    + 2010-08-28 19:10 . 2004-08-04 04:31 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\rtcshare.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\rsmps.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\rshx32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 14848 c:\windows\ServicePackFiles\i386\rsh.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rrcm.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 79104 c:\windows\ServicePackFiles\i386\rocket.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys
    + 2010-08-28 19:10 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rexec.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\resutils.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2010-08-28 19:10 . 2007-06-27 12:57 11264 c:\windows\ServicePackFiles\i386\regsvcs.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2010-08-28 19:10 . 2007-06-27 12:57 32768 c:\windows\ServicePackFiles\i386\regcode.dll
    + 2010-08-28 19:10 . 2007-06-27 12:57 28672 c:\windows\ServicePackFiles\i386\regasm.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 49664 c:\windows\ServicePackFiles\i386\regapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\reg.exe
    + 2010-08-28 19:10 . 2008-04-13 18:40 57600 c:\windows\ServicePackFiles\i386\redbook.sys
    + 2010-08-28 19:10 . 2004-08-04 04:41 13776 c:\windows\ServicePackFiles\i386\recagent.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2010-08-28 19:10 . 2008-04-14 00:13 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:13 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 21504 c:\windows\ServicePackFiles\i386\rcp.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
    + 2010-08-28 19:10 . 2008-04-13 19:19 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2010-08-28 19:10 . 2008-04-13 18:57 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 56832 c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rasman.dll
    + 2010-08-28 19:10 . 2008-04-13 19:19 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 79872 c:\windows\ServicePackFiles\i386\raschap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2010-08-28 19:10 . 2008-04-13 18:41 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\qutil.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2010-08-28 19:10 . 2008-04-13 18:56 69120 c:\windows\ServicePackFiles\i386\psched.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\psbase.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\psapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\proquota.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\profmap.dll
    + 2010-08-28 19:10 . 2008-04-13 18:31 35840 c:\windows\ServicePackFiles\i386\processr.sys
    + 2010-08-28 19:10 . 2008-04-13 18:41 17664 c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 92672 c:\windows\ServicePackFiles\i386\policman.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\plotui.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\plotter.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\ping.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\pid.dll
    + 2010-08-28 19:10 . 2008-04-13 18:44 28032 c:\windows\ServicePackFiles\i386\perm3.sys
    + 2010-08-28 19:10 . 2008-04-13 18:44 27904 c:\windows\ServicePackFiles\i386\perm2.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\perfos.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2010-08-28 19:10 . 2008-04-13 16:11 20480 c:\windows\ServicePackFiles\i386\perfcounter.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 24960 c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 68224 c:\windows\ServicePackFiles\i386\pci.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2010-08-28 19:10 . 2004-08-04 04:31 29502 c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 19712 c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2010-08-28 19:10 . 2008-04-13 18:40 80128 c:\windows\ServicePackFiles\i386\parport.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\packager.exe
    + 2010-08-28 19:10 . 2008-04-13 18:31 42752 c:\windows\ServicePackFiles\i386\p3.sys
     
    Topnotch,
    #13
  15. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2010-08-28 19:10 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\opnfiles.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 84992 c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2010-08-28 19:10 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2010-08-28 19:10 . 2008-04-13 17:26 94208 c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 96256 c:\windows\ServicePackFiles\i386\occache.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 86016 c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2010-08-28 19:10 . 2007-04-02 18:44 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2010-08-28 19:10 . 2008-04-13 18:56 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 91136 c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 34560 c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2010-08-28 19:10 . 2004-08-04 10:00 35424 c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2010-08-28 19:10 . 2004-08-04 10:00 35648 c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2010-08-28 19:10 . 2004-08-04 10:00 34560 c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2010-08-28 19:10 . 2004-08-04 10:00 33840 c:\windows\ServicePackFiles\i386\ntio.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 47564 c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2010-08-28 19:10 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2010-08-28 19:10 . 2008-04-13 18:54 28672 c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\npptools.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2010-08-28 19:10 . 2008-04-13 18:32 30848 c:\windows\ServicePackFiles\i386\npfs.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\notepad.exe
    + 2010-08-28 19:10 . 2008-04-13 18:53 40320 c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 81920 c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2010-08-28 19:10 . 2008-04-13 18:51 61824 c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\netui0.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\netstat.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\netsh.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\netrap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\netoc.dll
    + 2010-08-28 19:10 . 2007-12-17 11:59 82976 c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2010-08-28 19:10 . 2008-04-13 18:56 34688 c:\windows\ServicePackFiles\i386\netbios.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\net.exe
    + 2010-08-28 19:10 . 2008-04-13 18:57 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2010-08-28 19:10 . 2008-04-13 19:20 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2010-08-28 19:10 . 2008-04-13 18:55 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2010-08-28 19:10 . 2008-04-13 18:57 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 10880 c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\narrator.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2010-08-28 19:10 . 2008-04-13 18:43 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2010-08-28 19:10 . 2008-04-13 18:30 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2010-08-28 19:10 . 2008-04-13 18:46 49024 c:\windows\ServicePackFiles\i386\mstape.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\mst123.dll
    + 2010-08-28 19:10 . 2008-04-13 18:36 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2010-08-28 19:10 . 2008-04-13 18:14 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2010-08-28 19:10 . 2008-04-13 16:23 48128 c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2010-08-28 19:10 . 2008-04-13 17:24 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2010-08-28 19:10 . 2008-03-25 04:50 60192 c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msisip.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2010-08-28 19:10 . 2008-04-13 18:54 22016 c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\msimn.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 78848 c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 51712 c:\windows\ServicePackFiles\i386\msident.dll
    + 2010-08-28 19:10 . 2008-04-13 16:26 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\mshta.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2010-08-28 19:10 . 2008-04-13 18:56 35072 c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2010-08-28 19:10 . 2008-04-13 18:32 19072 c:\windows\ServicePackFiles\i386\msfs.sys
    + 2010-08-28 19:10 . 2008-04-13 18:46 51200 c:\windows\ServicePackFiles\i386\msdv.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2010-08-28 19:10 . 2008-04-13 17:26 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2010-08-28 19:10 . 2008-04-13 17:24 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2010-08-28 19:10 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 69632 c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 46592 c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 94208 c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 86016 c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 73728 c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2010-08-28 19:10 . 2008-04-13 16:10 69632 c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 69632 c:\windows\ServicePackFiles\i386\msconf.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\mscms.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msador15.dll
    + 2010-08-28 19:10 . 2008-04-13 17:26 24576 c:\windows\ServicePackFiles\i386\msader15.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2010-08-28 19:10 . 2008-04-13 17:25 20480 c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 95744 c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 89088 c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\mqise.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 47616 c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2010-08-28 19:10 . 2008-04-13 18:39 92544 c:\windows\ServicePackFiles\i386\mqac.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 87040 c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\mpr.dll
    + 2010-08-28 19:10 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\mpe.sys
    + 2010-08-28 19:10 . 2008-04-13 18:39 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2010-08-28 19:10 . 2008-04-13 18:39 23040 c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\more.com
    + 2010-08-28 19:10 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2010-08-28 19:10 . 2008-04-13 19:00 30080 c:\windows\ServicePackFiles\i386\modem.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\midimap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2010-08-28 19:10 . 2008-04-13 18:36 63744 c:\windows\ServicePackFiles\i386\mf.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 85504 c:\windows\ServicePackFiles\i386\metada51.dll
    + 2010-08-28 19:10 . 2008-04-13 18:41 26112 c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2010-08-28 19:10 . 2004-08-04 04:41 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 37888 c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\makecab.exe
    + 2010-08-28 19:10 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\magnify.exe
    + 2010-08-28 19:10 . 2004-08-04 04:39 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\lsass.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\lpk.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\logman.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\log.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\locator.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 11776 c:\windows\ServicePackFiles\i386\localui.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 97280 c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2010-08-28 19:10 . 2004-08-04 04:32 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2010-08-28 19:10 . 2008-04-14 00:10 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2010-08-28 19:10 . 2008-04-13 16:43 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2010-08-28 19:10 . 2008-04-14 00:10 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2010-08-28 19:10 . 2004-08-04 04:31 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2010-08-28 19:10 . 2008-04-14 00:09 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2010-08-28 19:10 . 2004-08-04 04:31 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2010-08-28 19:10 . 2008-04-14 00:09 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 37376 c:\windows\ServicePackFiles\i386\l2store.dll
    + 2010-08-28 19:10 . 2008-04-13 18:31 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 92224 c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2010-08-28 19:10 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2010-08-28 19:10 . 2004-08-04 10:00 42537 c:\windows\ServicePackFiles\i386\keyboard.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2010-08-28 19:10 . 2008-04-13 18:39 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2010-08-28 19:10 . 2008-04-13 18:39 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2010-08-28 19:10 . 2007-06-27 12:54 40960 c:\windows\ServicePackFiles\i386\jsc.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\ispid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\isign32.dll
    + 2010-08-28 19:10 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\isenpid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\iscomlog.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\isatq.dll
    + 2010-08-28 19:10 . 2008-04-13 18:36 37248 c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\irmon.dll
    + 2010-08-28 19:10 . 2008-04-13 18:54 11264 c:\windows\ServicePackFiles\i386\irenum.sys
    + 2010-08-28 19:10 . 2008-04-13 18:54 88192 c:\windows\ServicePackFiles\i386\irda.sys
    + 2010-08-28 19:10 . 2008-04-13 18:45 46592 c:\windows\ServicePackFiles\i386\irbus.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2010-08-28 19:10 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2010-08-28 19:10 . 2008-04-13 19:19 75264 c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\iprip.dll
    + 2010-08-28 19:10 . 2008-04-13 18:57 20864 c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2010-08-28 19:10 . 2008-04-13 18:53 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2010-08-28 19:10 . 2008-04-13 18:31 36352 c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2010-08-28 19:10 . 2007-06-27 12:54 24576 c:\windows\ServicePackFiles\i386\installutil.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 96256 c:\windows\ServicePackFiles\i386\inseng.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\infoadmn.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2010-08-28 19:10 . 2008-04-13 16:22 48128 c:\windows\ServicePackFiles\i386\inetres.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 75264 c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\inetin51.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 36921 c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2010-08-28 19:10 . 2008-04-13 18:40 42112 c:\windows\ServicePackFiles\i386\imapi.sys
    + 2010-08-28 19:10 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ils.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\iisrstas.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 64512 c:\windows\ServicePackFiles\i386\iismap.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 79872 c:\windows\ServicePackFiles\i386\iislog51.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\iisext51.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 25088 c:\windows\ServicePackFiles\i386\iisadmin.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 93184 c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 62976 c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2010-08-28 19:10 . 2007-06-27 12:54 32768 c:\windows\ServicePackFiles\i386\iehost.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\iedw.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 11264 c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2010-08-28 19:09 . 2008-04-13 19:18 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2010-08-28 19:09 . 2008-04-13 18:41 18560 c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 41984 c:\windows\ServicePackFiles\i386\htui.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\httpod51.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 72704 c:\windows\ServicePackFiles\i386\hlink.dll
    + 2010-08-28 19:09 . 2008-04-13 18:45 10368 c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2010-08-28 19:09 . 2008-04-13 18:45 24960 c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2010-08-28 19:09 . 2008-04-13 18:45 19200 c:\windows\ServicePackFiles\i386\hidir.sys
    + 2010-08-28 19:09 . 2008-04-13 18:45 36864 c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 25600 c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\hid.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\hh.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\help.exe
    + 2010-08-28 19:09 . 2008-04-13 18:31 77696 c:\windows\ServicePackFiles\i386\halsp.dll
    + 2010-08-28 19:09 . 2008-04-13 18:31 81152 c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32256 c:\windows\ServicePackFiles\i386\gzip.dll
    + 2010-08-28 19:09 . 2008-04-13 18:40 28288 c:\windows\ServicePackFiles\i386\grserial.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 59904 c:\windows\ServicePackFiles\i386\getmac.exe
    + 2010-08-28 19:09 . 2008-04-13 18:45 59136 c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2010-08-28 19:09 . 2008-04-13 18:45 10624 c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 72192 c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\ftp.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\format.com
    + 2010-08-28 19:09 . 2004-08-04 04:31 34173 c:\windows\ServicePackFiles\i386\forehe.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\fontview.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 80896 c:\windows\ServicePackFiles\i386\fontsub.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2010-08-28 19:09 . 2008-04-13 18:40 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2010-08-28 19:09 . 2008-04-13 18:33 44544 c:\windows\ServicePackFiles\i386\fips.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 27136 c:\windows\ServicePackFiles\i386\findstr.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\feclient.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\fdeploy.dll
    + 2010-08-28 19:09 . 2008-04-13 18:40 27392 c:\windows\ServicePackFiles\i386\fdc.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 55808 c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\exstrace.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\evtrig.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 45056 c:\windows\ServicePackFiles\i386\evtgprov.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 92160 c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 50688 c:\windows\ServicePackFiles\i386\evcreate.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2010-08-28 19:09 . 2008-04-13 16:26 40960 c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\encapi.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\efsadu.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 59392 c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2010-08-28 19:09 . 2008-04-13 18:38 71168 c:\windows\ServicePackFiles\i386\dxg.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dswave.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 51200 c:\windows\ServicePackFiles\i386\dssec.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 92672 c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\drvqry.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\drprov.dll
    + 2010-08-28 19:09 . 2008-04-13 18:45 60160 c:\windows\ServicePackFiles\i386\drmk.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 26112 c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2010-08-28 19:09 . 2004-08-04 10:00 53840 c:\windows\ServicePackFiles\i386\dosx.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 48128 c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 52224 c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2010-08-28 19:09 . 2008-04-13 18:45 52864 c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 82432 c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dmband.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\dispex.dll
    + 2010-08-28 19:09 . 2008-04-13 18:40 14208 c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2010-08-28 19:09 . 2008-04-13 18:40 36352 c:\windows\ServicePackFiles\i386\disk.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 86528 c:\windows\ServicePackFiles\i386\directdb.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\digest.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 87040 c:\windows\ServicePackFiles\i386\diantz.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\devenum.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\defrag.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 25088 c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\davcdata.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2010-08-28 19:09 . 2004-08-04 04:32 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\custsat.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2010-08-28 19:09 . 2008-04-13 16:10 49152 c:\windows\ServicePackFiles\i386\csc.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 53760 c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2010-08-28 19:09 . 2008-04-13 18:31 36736 c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 12800 c:\windows\ServicePackFiles\i386\credssp.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\corpol.dll
    + 2010-08-28 19:09 . 2008-04-13 16:10 69632 c:\windows\ServicePackFiles\i386\corperfmonext.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\conime.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 97792 c:\windows\ServicePackFiles\i386\comrepl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\compfilt.dll
    + 2010-08-28 19:09 . 2008-04-13 18:36 10240 c:\windows\ServicePackFiles\i386\compbatt.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\comaddin.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\colbact.dll
    + 2010-08-28 19:09 . 2008-04-13 16:44 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 46592 c:\windows\ServicePackFiles\i386\coadmin.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 63488 c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2010-08-28 19:09 . 2008-04-13 18:36 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 58368 c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2010-08-28 19:09 . 2008-04-13 19:16 49536 c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 56832 c:\windows\ServicePackFiles\i386\cipher.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 69120 c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:09 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2010-08-28 19:09 . 2008-04-13 18:40 62976 c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 66560 c:\windows\ServicePackFiles\i386\cdm.dll
    + 2010-08-28 19:09 . 2008-04-13 19:14 63744 c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2010-08-28 19:09 . 2007-06-27 12:53 94208 c:\windows\ServicePackFiles\i386\caspol.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\camocx.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\cacls.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\cabview.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2010-08-28 19:09 . 2008-04-13 18:46 18944 c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2010-08-28 19:09 . 2008-04-13 18:46 36480 c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\bthci.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 78336 c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\browser.dll
    + 2010-08-28 19:09 . 2008-04-13 17:03 63488 c:\windows\ServicePackFiles\i386\browselc.dll
    + 2010-08-28 19:09 . 2008-04-13 18:53 71552 c:\windows\ServicePackFiles\i386\bridge.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2010-08-28 19:09 . 2008-04-13 18:46 11776 c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 14208 c:\windows\ServicePackFiles\i386\battc.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 29184 c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 52736 c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 84992 c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2010-08-28 19:09 . 2008-04-13 18:46 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 38912 c:\windows\ServicePackFiles\i386\avc.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 11264
     
    Topnotch,
    #14
  16. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2010-08-28 19:09 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\authz.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\author.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\author.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\attrib.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2010-08-28 19:09 . 2008-04-13 18:51 55808 c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2010-08-28 19:09 . 2008-04-13 18:51 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\atl.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2010-08-28 19:09 . 2004-08-04 04:29 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 31744 c:\windows\ServicePackFiles\i386\atinxbxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 73216 c:\windows\ServicePackFiles\i386\atintuxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 13824 c:\windows\ServicePackFiles\i386\atinttxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 28672 c:\windows\ServicePackFiles\i386\atinsnxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 52224 c:\windows\ServicePackFiles\i386\atinraxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 14336 c:\windows\ServicePackFiles\i386\atinpdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 13824 c:\windows\ServicePackFiles\i386\atinmdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 57856 c:\windows\ServicePackFiles\i386\atinbtxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 34735 c:\windows\ServicePackFiles\i386\ati1xsxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 29455 c:\windows\ServicePackFiles\i386\ati1xbxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 36463 c:\windows\ServicePackFiles\i386\ati1tuxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 21343 c:\windows\ServicePackFiles\i386\ati1ttxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 26367 c:\windows\ServicePackFiles\i386\ati1snxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 63663 c:\windows\ServicePackFiles\i386\ati1rvxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 30671 c:\windows\ServicePackFiles\i386\ati1raxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 12047 c:\windows\ServicePackFiles\i386\ati1pdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 11615 c:\windows\ServicePackFiles\i386\ati1mdxx.sys
    + 2010-08-28 19:09 . 2004-08-04 04:29 56623 c:\windows\ServicePackFiles\i386\ati1btxx.sys
    + 2010-08-28 19:09 . 2008-04-13 18:40 96512 c:\windows\ServicePackFiles\i386\atapi.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\at.exe
    + 2010-08-28 19:09 . 2008-04-13 18:57 14336 c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 65024 c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\asr_pfu.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\asr_fmt.exe
    + 2010-08-28 19:09 . 2008-04-13 16:10 32768 c:\windows\ServicePackFiles\i386\aspnet_wp.exe
    + 2010-08-28 19:09 . 2008-04-13 16:10 32768 c:\windows\ServicePackFiles\i386\aspnet_state.exe
    + 2010-08-28 19:09 . 2008-04-13 16:10 24576 c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
    + 2010-08-28 19:09 . 2008-04-13 16:09 20480 c:\windows\ServicePackFiles\i386\aspnet_filter.dll
    + 2010-08-28 19:09 . 2008-04-13 18:51 60800 c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2010-08-28 19:09 . 2004-08-04 04:31 36224 c:\windows\ServicePackFiles\i386\an983.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 70656 c:\windows\ServicePackFiles\i386\amstream.dll
    + 2010-08-28 19:09 . 2008-04-13 18:31 37760 c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2010-08-28 19:09 . 2008-04-13 18:31 37376 c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 43008 c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2010-08-28 19:09 . 2008-04-13 18:36 42752 c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\alg.exe
    + 2010-08-28 19:09 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\ahui.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 20480 c:\windows\ServicePackFiles\i386\agt0c0a.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 20480 c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19968 c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 21504 c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2010-08-28 19:09 . 2008-04-13 17:32 19968 c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 22016 c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2010-08-28 19:09 . 2007-04-02 18:26 21504 c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2010-08-28 19:09 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2010-08-28 19:09 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2010-08-28 19:09 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2010-08-28 19:09 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2010-08-28 19:09 . 2008-04-13 18:36 44928 c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2010-08-28 19:09 . 2008-04-13 18:36 42368 c:\windows\ServicePackFiles\i386\agp440.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 44032 c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 99840 c:\windows\ServicePackFiles\i386\advpack.dll
    + 2010-08-28 19:10 . 2004-07-17 17:35 85813 c:\windows\ServicePackFiles\i386\adsutil.vbs
    + 2010-08-28 19:09 . 2008-04-14 00:11 68096 c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 43520 c:\windows\ServicePackFiles\i386\admwprox.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\admparse.dll
    + 2010-08-28 19:09 . 2004-08-04 04:32 10880 c:\windows\ServicePackFiles\i386\admjoy.sys
    + 2010-08-28 19:09 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\admin.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\admin.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 29696 c:\windows\ServicePackFiles\i386\admexs.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 98304 c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\acadproc.dll
    + 2010-08-28 19:09 . 2004-08-04 04:32 84480 c:\windows\ServicePackFiles\i386\ac97via.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 48128 c:\windows\ServicePackFiles\i386\61883.sys
    + 2010-08-28 19:09 . 2008-04-13 18:40 12288 c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2010-08-28 19:09 . 2008-04-13 18:46 53376 c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2004-08-11 22:12 . 2008-04-14 00:12 38400 c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 18432 c:\windows\pchealth\helpctr\binaries\hscupd.exe
    + 2004-08-11 22:07 . 2008-04-14 00:12 69120 c:\windows\notepad.exe
    - 2004-08-11 22:07 . 2004-08-04 10:00 69120 c:\windows\NOTEPAD.EXE
    + 2009-11-22 16:13 . 2008-04-14 00:11 33792 c:\windows\network diagnostic\custsat.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 90624 c:\windows\mui\muisetup.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 90624 c:\windows\mui\muisetup.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 39936 c:\windows\msagent\mslwvtts.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 39936 c:\windows\msagent\mslwvtts.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\msagent\intl\agt0c0a.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 20480 c:\windows\msagent\intl\agt0c0a.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 20992 c:\windows\msagent\intl\agt0816.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\msagent\intl\agt0816.dll
    + 2004-08-11 22:07 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt041f.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt041f.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt041d.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt041d.dll
    + 2004-08-11 22:07 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt0419.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt0419.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 20480 c:\windows\msagent\intl\agt0416.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20480 c:\windows\msagent\intl\agt0416.dll
    + 2004-08-11 22:07 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt0415.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt0415.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt0414.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt0414.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 20992 c:\windows\msagent\intl\agt0413.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\msagent\intl\agt0413.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 20992 c:\windows\msagent\intl\agt0410.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 20992 c:\windows\msagent\intl\agt0410.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 19968 c:\windows\msagent\intl\agt040e.dll
    + 2004-08-11 22:07 . 2007-04-02 18:26 19968 c:\windows\msagent\intl\agt040e.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 21504 c:\windows\msagent\intl\agt040c.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 21504 c:\windows\msagent\intl\agt040c.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 19456 c:\windows\msagent\intl\agt040b.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt040b.dll
    + 2004-08-11 22:00 . 2008-04-13 17:32 19968 c:\windows\msagent\intl\agt0409.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 22016 c:\windows\msagent\intl\agt0408.dll
    + 2004-08-11 22:07 . 2007-04-02 18:26 22016 c:\windows\msagent\intl\agt0408.dll
    + 2004-08-11 22:00 . 2007-04-02 18:26 21504 c:\windows\msagent\intl\agt0407.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 21504 c:\windows\msagent\intl\agt0407.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt0406.dll
    + 2004-08-11 22:00 . 2007-04-02 18:25 19456 c:\windows\msagent\intl\agt0406.dll
    + 2004-08-11 22:07 . 2007-04-02 18:25 19456 c:\windows\msagent\intl\agt0405.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 19456 c:\windows\msagent\intl\agt0405.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24064 c:\windows\msagent\agtintl.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 24064 c:\windows\msagent\agtintl.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 44032 c:\windows\msagent\agentsr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 44032 c:\windows\msagent\agentsr.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 24064 c:\windows\msagent\agentpsh.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24064 c:\windows\msagent\agentpsh.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 49152 c:\windows\msagent\agentmpx.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 49152 c:\windows\msagent\agentmpx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 57344 c:\windows\msagent\agentdpv.dll
    - 2004-08-11 22:00 . 2007-03-09 13:46 57344 c:\windows\msagent\agentdpv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 42496 c:\windows\msagent\agentdp2.dll
    - 2004-08-11 22:00 . 2006-10-12 14:02 42496 c:\windows\msagent\agentdp2.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 24064 c:\windows\msagent\agentanm.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 24064 c:\windows\msagent\agentanm.dll
    + 2008-07-30 05:40 . 2008-07-30 05:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
    + 2008-07-30 05:40 . 2008-07-30 05:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
    + 2008-07-30 05:40 . 2008-07-30 05:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
    + 2008-07-30 00:47 . 2008-07-30 00:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    + 2008-07-30 05:40 . 2008-07-30 05:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2008-07-30 03:10 . 2008-07-30 03:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
    + 2008-07-30 01:59 . 2008-07-30 01:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
    + 2008-07-30 03:10 . 2008-07-30 03:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2008-07-30 01:32 . 2008-07-30 01:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
    + 2008-07-30 01:16 . 2008-07-30 01:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2008-07-30 01:16 . 2008-07-30 01:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2008-07-30 01:16 . 2008-07-30 01:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
    + 2008-07-30 01:16 . 2008-07-30 01:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2008-07-25 17:17 . 2008-07-25 17:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2008-11-25 10:59 . 2008-11-25 10:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2005-09-23 13:28 . 2005-09-23 13:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2008-07-25 17:17 . 2008-07-25 17:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2008-07-25 17:16 . 2008-07-25 17:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2005-09-23 13:28 . 2005-09-23 13:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2004-07-15 05:34 . 2004-07-15 05:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW4028\_PerfCounter.dll
    + 2003-02-21 00:09 . 2003-02-21 00:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW4028\_mscorsn.dll
    + 2004-07-15 05:32 . 2004-07-15 05:32 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW4028\_CORPerfMonExt.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2008-07-25 17:17 . 2008-07-25 17:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2008-07-25 17:16 . 2008-07-25 17:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 25600 c:\windows\Installer\tsclientmsitrans\tscupdc.dll
    + 2010-08-28 19:10 . 2007-10-30 10:06 13801 c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
    + 2010-08-28 19:10 . 2007-12-12 10:33 18917 c:\windows\Installer\tsclientmsitrans\tscinst.vbs
    + 2008-07-30 03:07 . 2008-07-30 03:07 23040 c:\windows\Installer\315005.msp
    + 2009-09-19 05:43 . 2009-09-19 05:43 88576 c:\windows\Installer\2ef48c.msi
    + 2010-03-18 23:59 . 2010-03-18 23:59 22528 c:\windows\Installer\297471.msi
    + 2010-04-12 02:50 . 2010-04-12 02:50 49664 c:\windows\Installer\16c1e1.msi
    + 2010-02-21 22:11 . 2010-02-21 22:11 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2010-02-21 22:11 . 2010-02-21 22:11 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
    + 2010-02-21 22:11 . 2010-02-21 22:11 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2010-02-21 22:11 . 2010-02-21 22:11 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2010-02-21 22:11 . 2010-02-21 22:11 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2010-02-21 22:11 . 2010-02-21 22:11 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2010-08-11 18:55 . 2010-08-11 18:55 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2009-09-19 05:40 . 2009-09-19 05:40 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    + 2008-12-07 17:34 . 2010-01-23 21:13 11264 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\pubs.exe
    - 2008-12-07 17:34 . 2008-12-07 17:34 11264 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\pubs.exe
    - 2008-12-07 17:34 . 2008-12-07 17:34 28160 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\misc.exe
    + 2008-12-07 17:34 . 2010-01-23 21:13 28160 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\misc.exe
    - 2008-12-07 17:34 . 2008-12-07 17:34 22528 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\bindico.exe
    + 2008-12-07 17:34 . 2010-01-23 21:13 22528 c:\windows\Installer\{00040409-78E1-11D2-B60F-006097C998E7}\bindico.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 62976 c:\windows\ime\SPGRMR.dll
    + 2004-08-11 22:00 . 2008-04-13 16:43 62976 c:\windows\ime\spgrmr.dll
    + 2009-11-22 16:19 . 2007-08-14 01:36 44544 c:\windows\ie7updates\KB974455-IE7\pngfilt.dll
    + 2009-11-22 16:19 . 2007-08-14 01:54 50688 c:\windows\ie7updates\KB974455-IE7\msfeedsbs.dll
    + 2009-11-22 16:19 . 2007-08-14 01:54 27136 c:\windows\ie7updates\KB974455-IE7\jsproxy.dll
    + 2009-11-22 16:19 . 2007-08-14 01:39 13312 c:\windows\ie7updates\KB974455-IE7\ieudinit.exe
    + 2009-11-22 16:19 . 2007-08-14 01:39 43008 c:\windows\ie7updates\KB974455-IE7\iernonce.dll
    + 2009-11-22 16:19 . 2009-06-26 16:18 81920 c:\windows\ie7updates\KB974455-IE7\ieencode.dll
    + 2009-11-22 16:19 . 2007-08-14 01:39 54784 c:\windows\ie7updates\KB974455-IE7\ie4uinit.exe
    + 2009-11-22 16:19 . 2007-08-14 01:36 61952 c:\windows\ie7updates\KB974455-IE7\icardie.dll
    + 2009-11-22 16:19 . 2007-08-14 01:42 17408 c:\windows\ie7updates\KB974455-IE7\corpol.dll
    + 2009-11-22 16:18 . 2004-08-04 10:00 37888 c:\windows\ie7\url.dll
    + 2009-11-22 16:19 . 2007-08-14 01:52 66048 c:\windows\ie7\spuninst\ieResetIcons.exe
    + 2009-11-22 16:18 . 2007-08-14 01:54 32960 c:\windows\ie7\spuninst\iecustom.dll
    + 2009-11-22 16:17 . 2009-06-26 16:18 39424 c:\windows\ie7\pngfilt.dll
    + 2009-11-22 16:18 . 2004-08-04 10:00 96256 c:\windows\ie7\occache.dll
    + 2009-11-22 16:18 . 2004-08-04 10:00 56832 c:\windows\ie7\mshtmler.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 29184 c:\windows\ie7\mshta.exe
    + 2009-11-22 16:17 . 2004-08-04 10:00 22016 c:\windows\ie7\licmgr10.dll
    + 2009-11-22 16:17 . 2009-06-26 16:18 16384 c:\windows\ie7\jsproxy.dll
    + 2009-11-22 16:17 . 2009-06-26 16:18 96256 c:\windows\ie7\inseng.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 35840 c:\windows\ie7\imgutil.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 93184 c:\windows\ie7\iexplore.exe
    + 2009-11-22 16:17 . 2004-08-04 10:00 62976 c:\windows\ie7\iesetup.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 48640 c:\windows\ie7\iernonce.dll
    + 2009-11-22 16:17 . 2009-06-22 11:38 18432 c:\windows\ie7\iedw.exe
    + 2009-11-22 16:17 . 2004-08-04 10:00 34304 c:\windows\ie7\ie4uinit.exe
    + 2009-11-22 16:17 . 2004-08-04 10:00 38912 c:\windows\ie7\hmmapi.dll
    + 2009-11-22 16:17 . 2009-06-26 16:18 55808 c:\windows\ie7\extmgr.dll
    + 2009-11-22 16:17 . 2006-06-03 11:40 33792 c:\windows\ie7\custsat.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 35328 c:\windows\ie7\corpol.dll
     
    Topnotch,
    #15
  17. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2009-11-22 16:17 . 2004-08-04 10:00 99840 c:\windows\ie7\advpack.dll
    + 2009-11-22 16:17 . 2004-08-04 10:00 61440 c:\windows\ie7\admparse.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 10752 c:\windows\hh.exe
    - 2004-08-11 22:00 . 2005-05-26 23:22 10752 c:\windows\hh.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 33280 c:\windows\Help\sstub.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 33280 c:\windows\Help\sstub.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 34816 c:\windows\Help\sniffpol.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 34816 c:\windows\Help\sniffpol.dll
    + 2009-09-19 05:43 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll
    + 2009-09-19 05:49 . 2009-09-19 05:49 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\a715aa442ef87ae99b3ade185599249d\UIAutomationProvider.ni.dll
    + 2009-09-19 14:27 . 2009-09-19 14:27 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\423f794d1f4ed6e120fbb02e436491cb\System.Windows.Presentation.ni.dll
    + 2009-09-19 14:27 . 2009-09-19 14:27 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\19ca1747c1ea18a3b639b302bca8df93\System.Web.DynamicData.Design.ni.dll
    + 2009-09-19 14:26 . 2009-09-19 14:26 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\532438e2acfcadc469a4d468c51f8451\System.ComponentModel.DataAnnotations.ni.dll
    + 2009-09-19 14:26 . 2009-09-19 14:26 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\597b20e1b053d6a510cfe033c07a63e6\System.AddIn.Contract.ni.dll
    + 2009-09-19 05:47 . 2009-09-19 05:47 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\2d7408a0232f2e2efd0d7adf5dfa733a\PresentationFontCache.ni.exe
    + 2009-09-19 05:47 . 2009-09-19 05:47 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\c8fd2d9233f8ea3031fb16f697635231\PresentationCFFRasterizer.ni.dll
    + 2009-09-19 14:26 . 2009-09-19 14:26 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\790cf1edb17ee41b59be62ecbd59613b\Microsoft.Vsa.ni.dll
    + 2009-09-19 14:26 . 2009-09-19 14:26 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e9aba2eab90d647356f65e66053da02b\Microsoft.Build.Framework.ni.dll
    + 2009-09-19 14:25 . 2009-09-19 14:25 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\28343d470d992f169ca0e7cdb3cc3117\Microsoft.Build.Framework.ni.dll
    + 2009-09-19 14:25 . 2009-09-19 14:25 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f4e38208e88cb4cc314a1d6543b9fcc6\dfsvc.ni.exe
    + 2009-09-19 14:25 . 2009-09-19 14:25 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11eb4f6606ba01e5128805759121ea6c\Accessibility.ni.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2009-09-19 05:44 . 2009-09-19 05:44 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
    + 2009-09-19 05:44 . 2009-09-19 05:44 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    + 2009-09-19 05:45 . 2009-09-19 05:45 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2009-04-26 15:29 . 2009-04-26 15:29 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-02-21 22:11 . 2010-02-21 22:11 16384 c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    + 2010-02-21 22:11 . 2010-02-21 22:11 64088 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    - 2009-07-15 01:32 . 2006-10-04 14:05 39424 c:\windows\AppPatch\acadproc.dll
    + 2009-07-15 01:32 . 2008-04-14 00:11 39424 c:\windows\AppPatch\acadproc.dll
    + 2009-09-19 05:48 . 2004-08-04 10:00 58880 c:\windows\$NtUninstallKB973507_0$\atl.dll
    + 2009-09-19 05:47 . 2008-06-23 15:38 39424 c:\windows\$NtUninstallKB972260$\pngfilt.dll
    + 2009-09-19 05:47 . 2008-06-23 15:38 16384 c:\windows\$NtUninstallKB972260$\jsproxy.dll
    + 2009-09-19 05:47 . 2008-06-23 15:38 96256 c:\windows\$NtUninstallKB972260$\inseng.dll
    + 2009-09-19 05:47 . 2004-08-04 10:00 81920 c:\windows\$NtUninstallKB972260$\ieencode.dll
    + 2009-09-19 05:47 . 2008-06-23 09:49 18432 c:\windows\$NtUninstallKB972260$\iedw.exe
    + 2009-09-19 05:47 . 2008-06-23 15:38 55808 c:\windows\$NtUninstallKB972260$\extmgr.dll
    + 2009-09-19 05:48 . 2004-08-04 10:00 84992 c:\windows\$NtUninstallKB971557_0$\avifil32.dll
    + 2009-09-19 05:48 . 2007-07-06 12:46 48640 c:\windows\$NtUninstallKB971032$\mqupgrd.dll
    + 2009-09-19 05:48 . 2007-07-06 12:46 95744 c:\windows\$NtUninstallKB971032$\mqsec.dll
    + 2009-09-19 05:48 . 2007-07-06 12:46 16896 c:\windows\$NtUninstallKB971032$\mqise.dll
    + 2009-09-19 05:48 . 2007-07-06 12:46 47104 c:\windows\$NtUninstallKB971032$\mqdscli.dll
    + 2009-09-19 05:48 . 2004-08-04 10:00 19968 c:\windows\$NtUninstallKB971032$\mqbkup.exe
    + 2009-09-19 05:48 . 2007-07-06 10:05 72960 c:\windows\$NtUninstallKB971032$\mqac.sys
    + 2009-09-19 05:49 . 2007-11-13 11:31 60416 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
    + 2009-09-19 05:49 . 2009-07-16 04:14 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
    + 2009-09-19 05:47 . 2004-08-04 10:00 49152 c:\windows\$NtUninstallKB968389_0$\wdigest.dll
    + 2009-09-19 05:47 . 2009-02-03 20:08 55808 c:\windows\$NtUninstallKB968389_0$\secur32.dll
    + 2009-09-19 05:47 . 2004-08-04 10:00 92032 c:\windows\$NtUninstallKB968389_0$\ksecdd.sys
    + 2009-09-19 05:49 . 2005-10-17 21:14 80896 c:\windows\$NtUninstallKB961371-v2_0$\fontsub.dll
    + 2009-09-19 05:48 . 2004-08-04 10:00 78336 c:\windows\$NtUninstallKB960859_0$\tlntsess.exe
    + 2009-09-19 05:48 . 2004-08-04 10:00 75264 c:\windows\$NtUninstallKB960859_0$\telnet.exe
    + 2009-09-19 05:40 . 2004-08-04 10:00 55808 c:\windows\$NtUninstallKB959426_0$\secur32.dll
    + 2009-09-19 05:40 . 2004-08-04 10:00 31232 c:\windows\$NtUninstallKB956572_0$\sc.exe
    + 2009-09-19 05:40 . 2005-07-26 04:39 60416 c:\windows\$NtUninstallKB956572_0$\colbact.dll
    + 2009-09-19 05:40 . 2006-03-01 19:42 91136 c:\windows\$NtUninstallKB952004_0$\mtxoci.dll
    + 2009-09-19 05:40 . 2006-03-01 19:42 66560 c:\windows\$NtUninstallKB952004_0$\mtxclu.dll
    + 2009-09-19 05:40 . 2004-08-04 10:00 58880 c:\windows\$NtUninstallKB952004_0$\msdtclog.dll
    + 2009-09-19 05:37 . 2004-08-04 10:00 22528 c:\windows\$NtUninstallKB922582$\fltmc.exe
    + 2009-09-19 05:37 . 2004-08-04 10:00 16896 c:\windows\$NtUninstallKB922582$\fltlib.dll
    + 2009-09-19 05:37 . 2004-08-04 04:15 82944 c:\windows\$NtUninstallKB920872$\wdmaud.sys
    + 2009-09-19 05:37 . 2005-07-26 04:39 11776 c:\windows\$NtUninstallKB913580$\xolehlp.dll
    + 2009-09-19 05:37 . 2005-07-26 04:39 91136 c:\windows\$NtUninstallKB913580$\mtxoci.dll
    + 2009-09-19 05:37 . 2005-07-26 04:39 66560 c:\windows\$NtUninstallKB913580$\mtxclu.dll
    + 2009-09-19 05:37 . 2004-08-04 10:00 67584 c:\windows\$NtUninstallKB911927$\webclnt.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 11776 c:\windows\$NtUninstallKB902400$\xolehlp.dll
    + 2009-09-19 05:36 . 2005-04-28 19:31 37888 c:\windows\$NtUninstallKB902400$\olecnv32.dll
    + 2009-09-19 05:36 . 2005-04-28 19:31 74752 c:\windows\$NtUninstallKB902400$\olecli32.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 90112 c:\windows\$NtUninstallKB902400$\mtxoci.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 66560 c:\windows\$NtUninstallKB902400$\mtxclu.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 82432 c:\windows\$NtUninstallKB902400$\comrepl.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 62464 c:\windows\$NtUninstallKB902400$\colbact.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 18944 c:\windows\$NtUninstallKB900725$\linkinfo.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 34304 c:\windows\$NtUninstallKB894391$\olecnv32.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 68608 c:\windows\$NtUninstallKB894391$\olecli32.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 56832 c:\windows\$NtUninstallKB890859$\authz.dll
    + 2009-09-19 05:36 . 2004-08-04 10:00 96768 c:\windows\$NtUninstallKB888302$\srvsvc.dll
     
    Topnotch,
    #16
  18. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    + 2009-11-22 16:19 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974455-IE7\update\spcustom.dll
    + 2009-11-22 16:19 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974455-IE7\spmsg.dll
    + 2009-11-22 16:14 . 2009-08-29 07:31 44544 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\pngfilt.dll
    + 2009-11-22 16:14 . 2009-08-29 07:31 52224 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\msfeedsbs.dll
    + 2009-11-22 16:14 . 2009-08-29 07:31 27648 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\jsproxy.dll
    + 2009-11-22 16:14 . 2009-08-28 10:01 13824 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieudinit.exe
    + 2009-11-22 16:14 . 2009-08-29 07:31 44544 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\iernonce.dll
    + 2009-11-22 16:14 . 2009-08-29 07:31 78336 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieencode.dll
    + 2009-11-22 16:14 . 2009-08-28 10:01 70656 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ie4uinit.exe
    + 2009-11-22 16:14 . 2009-08-29 07:31 63488 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\icardie.dll
    + 2009-11-22 16:14 . 2009-08-29 07:31 17408 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\corpol.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973869\update\spcustom.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973869\spmsg.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973815\update\spcustom.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973815\spmsg.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973507\update\spcustom.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973507\spmsg.dll
    + 2009-07-17 19:25 . 2009-07-17 19:25 58880 c:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll
    + 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\$hf_mig$\KB973507\SP3GDR\atl.dll
    + 2009-07-17 18:43 . 2009-07-17 18:43 58880 c:\windows\$hf_mig$\KB973507\SP2QFE\atl.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973354\update\spcustom.dll
    + 2009-09-19 05:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973354\spmsg.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973346\spmsg.dll
    + 2009-09-19 05:47 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB972260\update\spcustom.dll
    + 2009-09-19 05:47 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB972260\spmsg.dll
    + 2009-06-26 16:42 . 2009-06-26 16:42 81920 c:\windows\$hf_mig$\KB972260\SP3QFE\ieencode.dll
    + 2009-06-26 16:50 . 2009-06-26 16:50 81920 c:\windows\$hf_mig$\KB972260\SP3GDR\ieencode.dll
    + 2009-06-26 15:59 . 2009-06-26 15:59 39424 c:\windows\$hf_mig$\KB972260\SP2QFE\pngfilt.dll
    + 2009-06-26 15:59 . 2009-06-26 15:59 16384 c:\windows\$hf_mig$\KB972260\SP2QFE\jsproxy.dll
    + 2009-06-26 15:59 . 2009-06-26 15:59 96256 c:\windows\$hf_mig$\KB972260\SP2QFE\inseng.dll
    + 2009-06-26 15:59 . 2009-06-26 15:59 81920 c:\windows\$hf_mig$\KB972260\SP2QFE\ieencode.dll
    + 2009-06-22 11:40 . 2009-06-22 11:40 18432 c:\windows\$hf_mig$\KB972260\SP2QFE\iedw.exe
    + 2009-06-26 15:59 . 2009-06-26 15:59 55808 c:\windows\$hf_mig$\KB972260\SP2QFE\extmgr.dll
    + 2009-09-19 05:53 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB971961\update\spcustom.dll
    + 2009-09-19 05:53 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB971961\spmsg.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971657\update\spcustom.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971657\spmsg.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971633\spmsg.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971557\update\spcustom.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971557\spmsg.dll
    + 2009-06-10 14:01 . 2009-06-10 14:01 84992 c:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll
    + 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\$hf_mig$\KB971557\SP3GDR\avifil32.dll
    + 2009-06-10 14:52 . 2009-06-10 14:52 84992 c:\windows\$hf_mig$\KB971557\SP2QFE\avifil32.dll
    + 2009-09-19 05:48 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB971032\update\spcustom.dll
    + 2009-09-19 05:48 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB971032\spmsg.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 48640 c:\windows\$hf_mig$\KB971032\SP2QFE\mqupgrd.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 95744 c:\windows\$hf_mig$\KB971032\SP2QFE\mqsec.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 16896 c:\windows\$hf_mig$\KB971032\SP2QFE\mqise.dll
    + 2009-06-25 18:26 . 2009-06-25 18:26 47104 c:\windows\$hf_mig$\KB971032\SP2QFE\mqdscli.dll
    + 2009-06-22 11:30 . 2009-06-22 11:30 19968 c:\windows\$hf_mig$\KB971032\SP2QFE\mqbkup.exe
    + 2009-06-22 11:30 . 2009-06-22 11:30 91776 c:\windows\$hf_mig$\KB971032\SP2QFE\mqac.sys
    + 2009-09-19 05:40 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB970238\update\spcustom.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB970238\spmsg.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB968537\update\spcustom.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB968537\spmsg.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
    + 2009-09-19 05:47 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB968389\spmsg.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
    + 2009-06-25 08:41 . 2009-06-25 08:41 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
    + 2009-06-24 10:28 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
    + 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\$hf_mig$\KB968389\SP3GDR\wdigest.dll
    + 2009-06-25 08:25 . 2009-06-25 08:25 56832 c:\windows\$hf_mig$\KB968389\SP3GDR\secur32.dll
    + 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\$hf_mig$\KB968389\SP3GDR\ksecdd.sys
    + 2009-09-19 05:39 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB967715\update\spcustom.dll
    + 2009-09-19 05:39 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB967715\spmsg.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB961501\update\spcustom.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB961501\spmsg.dll
    + 2009-09-19 05:49 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB961371-v2\update\spcustom.dll
    + 2009-09-19 05:49 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB961371-v2\spmsg.dll
    + 2009-07-29 04:30 . 2009-07-29 04:30 81920 c:\windows\$hf_mig$\KB961371-v2\SP3QFE\fontsub.dll
    + 2009-07-29 04:37 . 2009-07-29 04:37 81920 c:\windows\$hf_mig$\KB961371-v2\SP3GDR\fontsub.dll
    + 2009-07-29 04:20 . 2009-07-29 04:20 81920 c:\windows\$hf_mig$\KB961371-v2\SP2QFE\fontsub.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB960859\update\spcustom.dll
    + 2009-09-19 05:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB960859\spmsg.dll
    + 2009-06-12 12:03 . 2009-06-12 12:03 80896 c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
    + 2009-06-12 12:03 . 2009-06-12 12:03 76288 c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\$hf_mig$\KB960859\SP3GDR\tlntsess.exe
    + 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\$hf_mig$\KB960859\SP3GDR\telnet.exe
    + 2009-06-12 11:49 . 2009-06-12 11:49 80896 c:\windows\$hf_mig$\KB960859\SP2QFE\tlntsess.exe
    + 2009-06-12 11:49 . 2009-06-12 11:49 76288 c:\windows\$hf_mig$\KB960859\SP2QFE\telnet.exe
    + 2009-09-19 05:40 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB960803\update\spcustom.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB960803\spmsg.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB960225\update\spcustom.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB960225\spmsg.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB959426\update\spcustom.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB959426\spmsg.dll
    + 2009-02-04 09:12 . 2009-02-04 09:12 56832 c:\windows\$hf_mig$\KB959426\SP3QFE\secur32.dll
    + 2009-02-03 19:59 . 2009-02-03 19:59 56832 c:\windows\$hf_mig$\KB959426\SP3GDR\secur32.dll
    + 2009-02-03 19:52 . 2009-02-03 19:52 56320 c:\windows\$hf_mig$\KB959426\SP2QFE\secur32.dll
    + 2009-09-19 05:39 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2009-09-19 05:39 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2009-09-19 05:48 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB958470\update\spcustom.dll
    + 2009-09-19 05:31 . 2009-06-05 07:42 17408 c:\windows\$hf_mig$\KB958470\update\msrdpcustom.dll
    + 2009-09-19 05:48 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB958470\spmsg.dll
    + 2009-09-19 05:38 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2009-09-19 05:38 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2009-09-19 05:52 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
    + 2009-09-19 05:52 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB956844\spmsg.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2009-09-19 05:39 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB956802\update\spcustom.dll
    + 2009-09-19 05:39 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB956802\spmsg.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB956572\update\spcustom.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB956572\spmsg.dll
    + 2009-09-19 05:21 . 2009-02-06 10:36 35328 c:\windows\$hf_mig$\KB956572\SP3QFE\sc.exe
    + 2009-09-19 05:21 . 2009-02-06 10:39 35328 c:\windows\$hf_mig$\KB956572\SP3GDR\sc.exe
    + 2009-09-19 05:38 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2009-09-19 05:38 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2009-09-19 05:39 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB954600\update\spcustom.dll
    + 2009-09-19 05:39 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB954600\spmsg.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB952004\update\spcustom.dll
    + 2009-09-19 05:40 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB952004\spmsg.dll
    + 2008-06-12 14:09 . 2008-06-12 14:09 91648 c:\windows\$hf_mig$\KB952004\SP3QFE\mtxoci.dll
    + 2008-06-12 14:09 . 2008-06-12 14:09 66560 c:\windows\$hf_mig$\KB952004\SP3QFE\mtxclu.dll
    + 2008-06-12 14:09 . 2008-06-12 14:09 58880 c:\windows\$hf_mig$\KB952004\SP3QFE\msdtclog.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\$hf_mig$\KB952004\SP3GDR\mtxoci.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\$hf_mig$\KB952004\SP3GDR\mtxclu.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\$hf_mig$\KB952004\SP3GDR\msdtclog.dll
    + 2008-06-12 13:47 . 2008-06-12 13:47 91648 c:\windows\$hf_mig$\KB952004\SP2QFE\mtxoci.dll
    + 2008-06-12 13:47 . 2008-06-12 13:47 66560 c:\windows\$hf_mig$\KB952004\SP2QFE\mtxclu.dll
    + 2008-06-12 13:47 . 2008-06-12 13:47 58880 c:\windows\$hf_mig$\KB952004\SP2QFE\msdtclog.dll
    + 2009-09-19 05:38 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2009-09-19 05:38 . 2007-11-30 12:39 17272 c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB938464-v2\update\spcustom.dll
    + 2009-09-19 05:39 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB938464-v2\spmsg.dll
    + 2009-09-19 05:52 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2009-09-19 05:52 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB930916\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB930916\spmsg.dll
    + 2009-09-19 05:37 . 2006-01-19 19:29 22752 c:\windows\$hf_mig$\KB927891\update\spcustom.dll
    + 2009-09-19 05:37 . 2006-01-19 19:29 14048 c:\windows\$hf_mig$\KB927891\spmsg.dll
    + 2009-09-19 05:37 . 2006-01-19 19:29 22752 c:\windows\$hf_mig$\KB927779\update\spcustom.dll
    + 2009-09-19 05:37 . 2006-01-19 19:29 14048 c:\windows\$hf_mig$\KB927779\spmsg.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 26488 c:\windows\$hf_mig$\KB923561\update\spcustom.dll
    + 2009-09-19 05:40 . 2008-07-09 07:38 17272 c:\windows\$hf_mig$\KB923561\spmsg.dll
    + 2009-09-19 05:20 . 2009-03-25 05:54 39424 c:\windows\$hf_mig$\KB923561\SP2QFE\acadproc.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB922582\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB922582\spmsg.dll
    + 2009-09-19 05:37 . 2006-08-21 09:43 23040 c:\windows\$hf_mig$\KB922582\SP2QFE\fltmc.exe
    + 2009-09-19 05:37 . 2006-08-21 12:26 16896 c:\windows\$hf_mig$\KB922582\SP2QFE\fltlib.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB920872\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB920872\spmsg.dll
    + 2006-06-14 09:17 . 2006-06-14 09:17 82944 c:\windows\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
    + 2009-09-19 05:37 . 2005-10-12 23:16 22752 c:\windows\$hf_mig$\KB916595\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:16 14048 c:\windows\$hf_mig$\KB916595\spmsg.dll
    + 2009-11-22 16:17 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB915865\update\spcustom.dll
    + 2009-11-22 16:17 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB915865\spmsg.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB914389\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB914389\spmsg.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB913580\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB913580\spmsg.dll
    + 2006-03-01 19:34 . 2006-03-01 19:34 11776 c:\windows\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    + 2006-03-01 19:34 . 2006-03-01 19:34 91136 c:\windows\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    + 2006-03-01 19:34 . 2006-03-01 19:34 66560 c:\windows\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB911927\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB911927\spmsg.dll
    + 2006-01-04 04:18 . 2006-01-04 04:18 68096 c:\windows\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB911280\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB911280\spmsg.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB910437\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB910437\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB905749\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-08-23 00:01 30720 c:\windows\$hf_mig$\KB905749\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB905749\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 03:35 22240 c:\windows\$hf_mig$\KB905414\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-08-19 23:50 30720 c:\windows\$hf_mig$\KB905414\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 03:35 14048 c:\windows\$hf_mig$\KB905414\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB902400\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-07-26 01:21 30720 c:\windows\$hf_mig$\KB902400\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB902400\spmsg.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 11776 c:\windows\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 37376 c:\windows\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 74752 c:\windows\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 91136 c:\windows\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 66560 c:\windows\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 97792 c:\windows\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    + 2005-07-26 04:20 . 2005-07-26 04:20 60416 c:\windows\$hf_mig$\KB902400\SP2QFE\colbact.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB901017\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-09-09 22:26 30720 c:\windows\$hf_mig$\KB901017\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB901017\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB900725\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-09-26 23:36 30720 c:\windows\$hf_mig$\KB900725\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB900725\spmsg.dll
    + 2005-09-27 00:29 . 2005-09-27 00:29 21504 c:\windows\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll
    + 2005-09-01 01:44 . 2005-09-01 01:44 19968 c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 22752 c:\windows\$hf_mig$\KB900485\update\spcustom.dll
    + 2009-09-19 05:37 . 2005-10-12 23:12 14048 c:\windows\$hf_mig$\KB900485\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB899587\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-06-29 22:54 30720 c:\windows\$hf_mig$\KB899587\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB899587\spmsg.dll
    + 2009-09-19 05:05 . 2005-02-25 03:35 22240 c:\windows\$hf_mig$\KB898461\update\spcustom.dll
    + 2009-09-19 05:05 . 2005-02-25 03:35 22752 c:\windows\$hf_mig$\KB898461\spupdsvc.exe
    + 2009-09-19 05:05 . 2005-02-25 03:35 14048 c:\windows\$hf_mig$\KB898461\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB894391\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB894391\spmsg.dll
    + 2005-04-28 19:35 . 2005-04-28 19:35 37376 c:\windows\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    + 2005-04-28 19:35 . 2005-04-28 19:35 74752 c:\windows\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    + 2009-09-19 05:36 . 2005-02-25 02:35 22240 c:\windows\$hf_mig$\KB893756\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-07-08 01:27 30720 c:\windows\$hf_mig$\KB893756\update\arpidfix.exe
    + 2009-09-19 05:36 . 2005-02-25 02:35 14048 c:\windows\$hf_mig$\KB893756\spmsg.dll
    + 2009-09-19 05:36 . 2005-02-25 01:35 22240 c:\windows\$hf_mig$\KB890859\update\spcustom.dll
    + 2009-09-19 05:36 . 2005-02-25 01:35 14048 c:\windows\$hf_mig$\KB890859\spmsg.dll
    + 2005-03-02 18:19 . 2005-03-02 18:19 62464 c:\windows\$hf_mig$\KB890859\SP2QFE\authz.dll
    + 2009-09-19 05:36 . 2004-12-01 02:22 21504 c:\windows\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-12-07 19:29 . 2004-12-07 19:29 96768 c:\windows\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    + 2009-09-19 05:36 . 2004-10-14 18:36 21504 c:\windows\$hf_mig$\KB886185\update\spcustom.dll
    + 2009-09-19 05:36 . 2004-10-14 17:36 21504 c:\windows\$hf_mig$\KB885836\update\spcustom.dll
    + 2009-09-19 05:46 . 2009-09-19 05:46 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2010-01-23 18:31 . 2010-01-23 18:31 3584 c:\windows\VIEWS.DAT
    + 2009-09-19 05:20 . 2008-05-03 11:55 2560 c:\windows\system32\xpsp4res.dll
    + 2004-08-11 22:12 . 2008-04-14 00:12 6656 c:\windows\system32\wuauserv.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 6656 c:\windows\system32\wuauserv.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 5632 c:\windows\system32\wmi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 5632 c:\windows\system32\wmi.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 5632 c:\windows\system32\winver.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 5632 c:\windows\system32\winver.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 6656 c:\windows\system32\wbem\wmiapres.dll
    + 2004-08-11 22:11 . 2008-04-13 17:10 6656 c:\windows\system32\wbem\wmiapres.dll
    + 2004-08-11 22:00 . 2008-04-13 16:44 2560 c:\windows\system32\usmt\iconlib.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 7168 c:\windows\system32\tlntsvrp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7168 c:\windows\system32\tlntsvrp.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 6656 c:\windows\system32\spool\drivers\w32x86\3\FXSRES.DLL
    + 2004-08-11 22:11 . 2008-04-14 00:09 6656 c:\windows\system32\spool\drivers\w32x86\3\fxsres.dll
    + 2010-08-28 19:10 . 2008-04-14 00:12 7680 c:\windows\system32\spdwnwxp.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 8192 c:\windows\system32\smbinst.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 8192 c:\windows\system32\smbinst.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 5120 c:\windows\system32\sfc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 5120 c:\windows\system32\sfc.dll
    + 2010-08-28 19:10 . 2008-04-14 00:11 8192 c:\windows\system32\Setup\koc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 7168 c:\windows\system32\sensapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 5632 c:\windows\system32\security.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 5632 c:\windows\system32\security.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 9216 c:\windows\system32\scrnsave.scr
    - 2004-08-11 22:00 . 2004-08-04 10:00 9216 c:\windows\system32\scrnsave.scr
    + 2010-08-28 19:10 . 2008-04-14 00:12 9728 c:\windows\system32\rwnh.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 7680 c:\windows\system32\rasadhlp.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 9216 c:\windows\system32\proxycfg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 9216 c:\windows\system32\proxycfg.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 8192 c:\windows\system32\ntlsapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 8192 c:\windows\system32\ntlsapi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4096 c:\windows\system32\nddeapir.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 4096 c:\windows\system32\nddeapir.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 4096 c:\windows\system32\mtxex.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 4096 c:\windows\system32\mtxex.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 4608 c:\windows\system32\msimg32.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4608 c:\windows\system32\msimg32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 6656 c:\windows\system32\msidle.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 6656 c:\windows\system32\msidle.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4126 c:\windows\system32\msdxmlc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:10 4126 c:\windows\system32\msdxmlc.dll
    + 2004-08-11 22:11 . 2008-04-14 00:12 6144 c:\windows\system32\msdtc.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 6144 c:\windows\system32\msdtc.exe
    + 2004-08-11 22:00 . 2008-04-14 00:10 3584 c:\windows\system32\msafd.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 3584 c:\windows\system32\msafd.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4608 c:\windows\system32\mqsvc.exe
    + 2004-08-11 22:00 . 2009-06-22 11:49 4608 c:\windows\system32\mqsvc.exe
    - 2008-12-01 11:55 . 2004-08-04 06:56 4096 c:\windows\system32\ksuser.dll
    + 2008-12-01 11:55 . 2008-04-14 00:11 4096 c:\windows\system32\ksuser.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7424 c:\windows\system32\kd1394.dll
    + 2004-08-11 22:00 . 2008-04-13 18:31 7424 c:\windows\system32\kd1394.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7168 c:\windows\system32\kbdukx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7168 c:\windows\system32\kbdukx.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7680 c:\windows\system32\kbdsmsno.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7680 c:\windows\system32\kbdsmsno.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7680 c:\windows\system32\kbdsmsfi.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7680 c:\windows\system32\kbdsmsfi.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 6144 c:\windows\system32\kbdpash.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7168 c:\windows\system32\kbdno1.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7168 c:\windows\system32\kbdno1.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 6144 c:\windows\system32\kbdnepr.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7168 c:\windows\system32\kbdnec.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7168 c:\windows\system32\kbdnec.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 6144 c:\windows\system32\kbdmlt48.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 6144 c:\windows\system32\kbdmlt48.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 6144 c:\windows\system32\kbdmlt47.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 6144 c:\windows\system32\kbdmlt47.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 5632 c:\windows\system32\kbdmaori.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 5632 c:\windows\system32\kbdmaori.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 6144 c:\windows\system32\kbdiultn.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 6656 c:\windows\system32\kbdinmal.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 6656 c:\windows\system32\kbdinmal.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 6144 c:\windows\system32\kbdinben.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 6144 c:\windows\system32\kbdinbe1.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 6144 c:\windows\system32\kbdinbe1.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 7168 c:\windows\system32\kbdfi1.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 7168 c:\windows\system32\kbdfi1.dll
    + 2010-08-28 19:10 . 2008-04-14 00:09 6144 c:\windows\system32\kbdbhc.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 8192 c:\windows\system32\igmpagnt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 8192 c:\windows\system32\igmpagnt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 3584 c:\windows\system32\icmp.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 3584 c:\windows\system32\icmp.dll
    - 2004-08-04 05:56 . 2004-08-04 10:00 7168 c:\windows\system32\hccoin.dll
    + 2004-08-04 05:56 . 2008-04-14 00:11 7168 c:\windows\system32\hccoin.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 9728 c:\windows\system32\gpkrsrc.dll
    + 2004-08-11 22:00 . 2006-12-31 01:26 9728 c:\windows\system32\gpkrsrc.dll
    + 2004-08-11 22:11 . 2008-04-14 00:09 6656 c:\windows\system32\fxsres.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 6656 c:\windows\system32\fxsres.dll
    + 2004-08-11 22:11 . 2008-04-14 00:11 8704 c:\windows\system32\fxsperf.dll
    - 2004-08-11 22:11 . 2004-08-04 10:00 8704 c:\windows\system32\fxsperf.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 9344 c:\windows\system32\framebuf.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 9344 c:\windows\system32\framebuf.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 7680 c:\windows\system32\forcedos.exe
    + 2010-08-28 19:10 . 2008-04-14 00:11 6656 c:\windows\system32\en\mmcfxcommon.resources.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4096 c:\windows\system32\dsprpres.dll
    + 2004-08-11 22:00 . 2008-04-13 17:09 4096 c:\windows\system32\dsprpres.dll
    + 2004-08-11 22:50 . 2008-04-13 18:40 5376 c:\windows\system32\drivers\viaide.sys
    - 2004-08-11 22:50 . 2004-08-04 03:59 5376 c:\windows\system32\drivers\viaide.sys
    - 2004-08-04 03:58 . 2004-08-04 03:58 4352 c:\windows\system32\drivers\swenum.sys
    + 2004-08-04 03:58 . 2008-04-13 18:39 4352 c:\windows\system32\drivers\swenum.sys
    + 2008-12-01 11:56 . 2008-04-13 18:45 6272 c:\windows\system32\drivers\splitter.sys
    + 2010-08-28 19:10 . 2008-04-13 18:36 5888 c:\windows\system32\drivers\smbali.sys
    + 2010-08-28 19:10 . 2008-04-14 00:12 3901 c:\windows\system32\drivers\siint5.dll
    - 2008-12-01 11:56 . 2004-08-04 03:58 4992 c:\windows\system32\drivers\MSPQM.sys
    + 2008-12-01 11:56 . 2008-04-13 18:39 4992 c:\windows\system32\drivers\mspqm.sys
    + 2008-12-01 11:56 . 2008-04-13 18:39 5376 c:\windows\system32\drivers\mspclock.sys
    - 2008-12-01 11:56 . 2004-08-04 03:58 5376 c:\windows\system32\drivers\MSPCLOCK.sys
    + 2008-12-01 11:56 . 2008-04-13 18:39 7552 c:\windows\system32\drivers\mskssrv.sys
    - 2008-12-01 11:56 . 2004-08-04 03:58 7552 c:\windows\system32\drivers\MSKSSRV.sys
    - 2004-08-11 22:08 . 2004-08-04 03:59 5504 c:\windows\system32\drivers\intelide.sys
    + 2004-08-11 22:08 . 2008-04-13 18:40 5504 c:\windows\system32\drivers\intelide.sys
    + 2004-08-11 22:44 . 2008-04-13 18:41 8576 c:\windows\system32\drivers\i2omgmt.sys
    - 2008-12-01 11:56 . 2004-08-04 04:07 2944 c:\windows\system32\drivers\drmkaud.sys
    + 2008-12-01 11:56 . 2008-04-13 18:45 2944 c:\windows\system32\drivers\drmkaud.sys
    + 2010-08-28 19:09 . 2008-04-14 00:11 3775 c:\windows\system32\drivers\adv11nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 3711 c:\windows\system32\drivers\adv09nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 3135 c:\windows\system32\drivers\adv08nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 3647 c:\windows\system32\drivers\adv07nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 3615 c:\windows\system32\drivers\adv05nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 3967 c:\windows\system32\drivers\adv02nt5.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 4255 c:\windows\system32\drivers\adv01nt5.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 3072 c:\windows\system32\dpnlobby.dll
    + 2004-08-11 22:00 . 2008-04-14 00:09 3072 c:\windows\system32\dpnaddr.dll
    + 2010-08-28 19:09 . 2008-04-14 00:11 9216 c:\windows\system32\dot3dlg.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 5120 c:\windows\system32\dllhost.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 5120 c:\windows\system32\dllhost.exe
    + 2004-08-11 22:00 . 2008-04-14 00:10 4126 c:\windows\system32\dllcache\msdxmlc.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4126 c:\windows\system32\dllcache\msdxmlc.dll
    + 2004-08-11 22:00 . 2009-06-22 11:49 4608 c:\windows\system32\dllcache\mqsvc.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 4608 c:\windows\system32\dllcache\mqsvc.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 6144 c:\windows\system32\dcomcnfg.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 8704 c:\windows\system32\dciman32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 8704 c:\windows\system32\dciman32.dll
    + 2004-08-11 22:00 . 2008-04-14 00:25 1804 c:\windows\system32\dcache.bin
    - 2004-08-11 22:00 . 2004-08-04 10:00 8192 c:\windows\system32\d3d8thk.dll
    + 2004-08-11 22:00 . 2008-04-14 00:11 8192 c:\windows\system32\d3d8thk.dll
    + 2004-08-11 22:00 . 2008-04-14 00:12 6144 c:\windows\system32\csrss.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 6144 c:\windows\system32\csrss.exe
    + 2010-08-28 19:10 . 2008-04-13 18:43 9728 c:\windows\system32\comsdupd.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 6144 c:\windows\system32\Com\comrereg.exe
    + 2004-08-11 22:11 . 2008-04-14 00:12 9728 c:\windows\system32\Com\comrepl.exe
    - 2004-08-11 22:11 . 2004-08-04 10:00 9728 c:\windows\system32\Com\comrepl.exe
    - 2004-08-11 22:00 . 2004-08-04 10:00 5632 c:\windows\system32\cisvc.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 5632 c:\windows\system32\cisvc.exe
    + 2010-08-28 19:09 . 2008-04-14 00:11 7168 c:\windows\system32\bitsprx4.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 7168 c:\windows\system32\bitsprx3.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 7168 c:\windows\system32\bitsprx3.dll
    + 2004-08-11 22:12 . 2008-04-14 00:11 8192 c:\windows\system32\bitsprx2.dll
    - 2004-08-11 22:12 . 2004-08-04 10:00 8192 c:\windows\system32\bitsprx2.dll
    - 2004-08-11 22:07 . 2004-08-04 10:00 8704 c:\windows\system32\batt.dll
    + 2004-08-11 22:07 . 2008-04-14 00:11 8704 c:\windows\system32\batt.dll
    - 2004-08-11 22:00 . 2004-08-04 10:00 4096 c:\windows\system32\actmovie.exe
    + 2004-08-11 22:00 . 2008-04-14 00:12 4096 c:\windows\system32\actmovie.exe
     
    Topnotch,
    #17
  19. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    Broni, I left out a big middle section. Do u need that too?

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATICCC "= "c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-09-25 90112]
    "dscactivate "= "c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
    "RoxWatchTray "= "c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe" [2008-05-14 244208]
    "Logitech Utility "= "Logi_MwX.Exe" [2003-12-17 19968]
    "lxdmmon.exe "= "c:\program files\Lexmark 5000 Series\lxdmmon.exe" [2007-07-06 455344]
    "lxdmamon "= "c:\program files\Lexmark 5000 Series\lxdmamon.exe" [2007-06-01 20480]
    "Lexmark 5000 Series Fax Server "= "c:\program files\Lexmark 5000 Series\fm3032.exe" [2007-07-06 307888]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" [2008-03-29 413696]
    "WinampAgent "= "c:\program files\Winamp\winampa.exe" [2009-07-01 37888]
    "avast! "= "c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
    "SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
    "ArcSoft Connection Service "= "c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

    c:\documents and settings\Andy\Start Menu\Programs\Startup\
    DING!.lnk - c:\program files\Southwest Airlines\Ding\Ding.exe [2006-6-22 462848]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    NCProTray.lnk - c:\program files\SEC\Natural Color Pro\NCProTray.exe [2008-12-7 49220]

    [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
    Source= c:\windows\system32\onhelp.htm
    FriendlyName= tets

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
    @= "Service "

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride "=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall "= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe "=
    "c:\\Program Files\\LimeWire\\LimeWire.exe "=
    "c:\\WINDOWS\\system32\\lxdmcoms.exe "=
    "c:\\Program Files\\Lexmark 5000 Series\\lxdmamon.exe "=
    "c:\\Program Files\\Lexmark 5000 Series\\frun.exe "=
    "c:\\Program Files\\Abbyy FineReader 6.0 Sprint\\Scan\\ScanMan6.exe "=
    "c:\\Program Files\\Lexmark 5000 Series\\lxdmmon.exe "=
    "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdmpswx.exe "=
    "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdmtime.exe "=
    "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdmjswx.exe "=
    "c:\\Program Files\\Lexmark 5000 Series\\LXDMFax.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [9/7/2009 3:43 PM 114768]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [9/7/2009 3:43 PM 20560]
    R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [8/12/2010 6:15 AM 1355416]
    S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [1/31/2010 8:49 AM 135664]
    S2 RoxLiveShare10;LiveShare P2P Server 10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [5/14/2008 9:32 AM 309744]
    S2 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe [5/14/2008 9:32 AM 166384]
    S2 SessionLauncher;SessionLauncher;c:\docume~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe --> c:\docume~1\ADMINI~1\LOCALS~1\Temp\DX9\SessionLauncher.exe [?]
    S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [8/12/2010 6:15 AM 15008]
    S3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [5/14/2008 9:31 AM 1120752]
    .
    Contents of the 'Scheduled Tasks' folder

    2010-09-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 12:15]

    2010-09-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-31 14:49]

    2010-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-31 14:49]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://my.earthlink.net/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    DPF: {26B2A5DA-BFD6-422F-A89A-28A54C74B12B} - hxxp://www.costcophotocenter.com/upload/activex/v3_0_0_4/PhotoCenter_ActiveX_Control.cab
    DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-09-01 18:10
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-3003520428-431247303-3936332552-1005\Software\Microsoft\SystemCertificates\AddressBook*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @= "FlashBroker "
    "LocalizedString "= "@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101 "

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @= "c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe "

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @= "IFlashBroker4 "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @= "{00020424-0000-0000-C000-000000000046} "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
    "Version "= "1.0 "
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(736)
    c:\windows\system32\Ati2evxx.dll
    .
    Completion time: 2010-09-01 18:11:35
    ComboFix-quarantined-files.txt 2010-09-02 00:11
    ComboFix2.txt 2009-09-07 21:21

    Pre-Run: 459,717,484,544 bytes free
    Post-Run: 460,292,587,520 bytes free

    WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
    UnsupportedDebug= "do not select this" /debug
    multi(0)disk(0)rdisk(0)partition(2)\WINDOWS= "Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    Current=2 Default=2 Failed=3 LastKnownGood=1 Sets=1,2,3,4
    - - End Of File - - 3B0E6C6B61B808AAE85EC45EEBEFF1C4
     
    Topnotch,
    #18
  20. 2010/09/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    How are the issues?


    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    File::
c:\windows\Uwarikic.dat
c:\windows\Gkakecah.bin


Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
 "AntiVirusOverride "=-

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
     
    broni,
    #19
  21. 2010/09/01
    Topnotch

    Topnotch Well-Known Member Thread Starter

    Joined:
    2003/12/27
    Messages:
    92
    Likes Received:
    0
    Broni, I am doing your last suggestion now.

    Do you want/need the entire combo fix log? Or just specific sectioin? The entire log will take 15 or more replies to get it to you.

    Also, I ran Avast and it foumd 2 copies of win32:Alureon-FZ in a cxouple of restore volume. So I turned off the restore volumes and rebooted and then turned the restore volume back on.
     
    Topnotch,
    #20
Page 1 of 3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...