1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive [InActive] Virtumonde.prx and Firewall bypass problem...

Discussion in 'Malware and Virus Removal Archive' started by FLYNDAGGER, 2008/11/30.

Page 1 of 2
  1. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    Hello,
    Here's my case: After surfing around with IE7, I started getting other IE windows automatically open up with different websites. I ran Spybot S&D and found the following: Virtumonde.prx - Virtumonde and -Microsoft.WindowsSecurityCenter.FirewallBypass. I followed directions to remove the entries in Spybot and at restart I kept getting these "error loading" popups at startup. I then ran Malwarebytes' Anti-Malware and it removed some other entries, then restart. This time I only got one "Error Loading" message saying: "C:\windows\system32\popubome.dll Module could not be found ".
    I ran spybot again and this time it only finds Virtumonde.prx (4 entries).
    Here is the most recent log from from RSIT:

    Logfile of random's system information tool 1.04 (written by random/random)
    Run by Rich at 2008-11-30 00:41:24
    Microsoft Windows XP Home Edition Service Pack 3
    System drive C: has 6 GB (6%) free of 100 GB
    Total RAM: 1023 MB (53% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:41:41 AM, on 11/30/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\WINDOWS\MMKeybd.exe
    C:\Program Files\ActivCard\ActivCard Gold\acevtsrv.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\Program Files\ActivCard\ActivCard Gold\agquickp.exe
    C:\WINDOWS\Nhksrv.exe
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe
    C:\Program Files\Common Files\ActivCard\acachsrv.exe
    C:\Program Files\Common Files\ActivCard\acautoreg.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    C:\Program Files\Netropa\OSD.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\PROGRA~1\RETROS~1\RETROS~1.1\retrorun.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Rich\Desktop\RSIT.exe
    C:\Program Files\HijackThis\Rich.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: (no name) - {8ab08215-d877-4552-9907-87c8ca2f4948} - C:\WINDOWS\system32\zomiyiwu.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe "
    O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [acEventServ] "C:\Program Files\ActivCard\ActivCard Gold\acevtsrv.exe "
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [golakewayi] Rundll32.exe "C:\WINDOWS\system32\popubome.dll ",s
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe "
    O4 - HKUS\S-1-5-19\..\Run: [golakewayi] Rundll32.exe "C:\WINDOWS\system32\popubome.dll ",s (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [golakewayi] Rundll32.exe "C:\WINDOWS\system32\popubome.dll ",s (User 'NETWORK SERVICE')
    O4 - Global Startup: ActivCard Gold Smart Card Agent.lnk = C:\Program Files\ActivCard\ActivCard Gold\agquickp.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JS...f/&filename=jinstall-6u10-windows-i586-jc.cab
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O20 - AppInit_DLLs: C:\WINDOWS\system32\famafoha.dll c:\windows\system32\vekifusi.dll
    O20 - Winlogon Notify: acAuth - C:\WINDOWS\SYSTEM32\acauth.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - (no file)
    O23 - Service: ActivCard Authentication Service (ACachSrv) - ActivCard - C:\Program Files\Common Files\ActivCard\acachsrv.exe
    O23 - Service: ActivCard Gold Autoregister (acautoreg) - ActivCard S.A. - C:\Program Files\Common Files\ActivCard\acautoreg.exe
    O23 - Service: ActivCard Gold service (Accoca) - ActivCard - C:\Program Files\Common Files\ActivCard\accoca.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
    O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Retrospect Express HD Helper (RetroExp Helper) - EMC Dantz - C:\PROGRA~1\RETROS~1\RETROS~1.1\rthlpsvc.exe
    O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Dantz - C:\PROGRA~1\RETROS~1\RETROS~1.1\retrorun.exe

    --
    End of file - 8902 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    C:\WINDOWS\tasks\McDefragTask.job
    C:\WINDOWS\tasks\McQcTask.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
    McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2008-10-17 247312]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-10-23 320920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
    scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2008-06-20 58688]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8ab08215-d877-4552-9907-87c8ca2f4948}]
    C:\WINDOWS\system32\zomiyiwu.dll [2008-08-29 61952]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
    McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-30 145424]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-10-23 34816]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
    JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2008-10-23 73728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-30 145424]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "nwiz "=nwiz.exe /install []
    "mcagent_exe "=C:\Program Files\McAfee.com\Agent\mcagent.exe [2008-07-11 641208]
    "IntelliPoint "=C:\Program Files\Microsoft IntelliPoint\point32.exe [2003-05-15 163840]
    "DellTouch "=C:\WINDOWS\MMKeybd.exe [2002-01-16 163840]
    "NvCplDaemon "=C:\WINDOWS\system32\NvCpl.dll [2008-05-16 13529088]
    "acEventServ "=C:\Program Files\ActivCard\ActivCard Gold\acevtsrv.exe [2004-06-15 28672]
    "NvMediaCenter "=C:\WINDOWS\system32\NvMcTray.dll [2008-05-16 86016]
    "Adobe Reader Speed Launcher "=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-10-10 39792]
    "QuickTime Task "=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696]
    "golakewayi "=C:\WINDOWS\system32\popubome.dll []

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "H/PC Connection Agent "=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-06-20 1207080]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    ActivCard Gold Smart Card Agent.lnk - C:\Program Files\ActivCard\ActivCard Gold\agquickp.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS "= "C:\WINDOWS\system32\famafoha.dll c:\windows\system32\vekifusi.dll "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\acAuth]
    C:\WINDOWS\system32\acauth.dll [2004-06-15 65536]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
    STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
    "notification packages "=scecli
    C:\WINDOWS\system32\famafoha.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "DisableChangePassword "=0
    "DisableLockWorkstation "=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun "=145
    "NoSetFolders "=0
    "NoCommonGroups "=0
    "NoDrives "=0
    "NoTrayContextMenu "=0
    "NoFileSharing "=0
    "NoPrintSharing "=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveAutoRun "=
    "NoDriveTypeAutoRun "=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe "= "C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe "= "C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe "= "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "
    "C:\Program Files\LimeWire\LimeWire.exe "= "C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire "
    "C:\Program Files\uTorrent\uTorrent.exe "= "C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent "
    "C:\Program Files\Bonjour\mDNSResponder.exe "= "C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour "
    "C:\Program Files\iTunes\iTunes.exe "= "C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes "
    "%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\Program Files\MSN Messenger\msnmsgr.exe "= "C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 "
    "C:\Program Files\MSN Messenger\livecall.exe "= "C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "
    "C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe "= "C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent "
    "C:\WINDOWS\system32\logonui.exe "= "C:\WINDOWS\system32\logonui.exe:*:Enabled:logonui "
    "C:\WINDOWS\system32\winlogon.exe "= "C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon "

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe "= "C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "
    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe "= "C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "
    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe "= "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "
    "%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\Program Files\MSN Messenger\msnmsgr.exe "= "C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 "
    "C:\Program Files\MSN Messenger\livecall.exe "= "C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "

    ======List of files/folders created in the last 1 months======

    2008-11-16 17:59:53 ----D---- C:\Program Files\7-Zip
    2008-11-13 03:03:14 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2008-11-13 03:02:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2008-11-13 03:02:34 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2008-11-02 23:54:43 ----D---- C:\Documents and Settings\Rich\Application Data\Mozilla

    ======List of files/folders modified in the last 1 months======

    2008-11-30 00:41:28 ----D---- C:\WINDOWS\Temp
    2008-11-30 00:41:27 ----D---- C:\Program Files\HijackThis
    2008-11-30 00:02:15 ----A---- C:\WINDOWS\MSIOSD.INI
    2008-11-30 00:00:32 ----A---- C:\WINDOWS\SchedLgU.Txt
    2008-11-29 23:57:51 ----D---- C:\WINDOWS\Prefetch
    2008-11-29 21:21:03 ----D---- C:\WINDOWS\system32\drivers
    2008-11-29 21:19:25 ----AD---- C:\WINDOWS\system32
    2008-11-29 20:18:39 ----A---- C:\WINDOWS\WININIT.INI
    2008-11-29 19:26:36 ----D---- C:\Program Files\Spybot - Search & Destroy
    2008-11-27 03:00:06 ----D---- C:\WINDOWS
    2008-11-27 03:00:02 ----D---- C:\Documents and Settings\All Users\Application Data\RetroExp
    2008-11-25 00:09:51 ----D---- C:\Program Files\Mozilla Firefox
    2008-11-24 19:01:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2008-11-24 19:01:34 ----D---- C:\WINDOWS\system32\CatRoot2
    2008-11-20 00:37:30 ----HD---- C:\WINDOWS\inf
    2008-11-20 00:37:30 ----D---- C:\WINDOWS\Help
    2008-11-16 17:59:53 ----AD---- C:\Program Files
    2008-11-16 17:58:55 ----D---- C:\Technical Downloads
    2008-11-16 17:49:33 ----D---- C:\Program Files\McAfee
    2008-11-13 03:12:45 ----D---- C:\Config.Msi
    2008-11-13 03:03:12 ----HD---- C:\WINDOWS\$hf_mig$
    2008-11-13 03:03:09 ----A---- C:\WINDOWS\imsins.BAK
    2008-11-13 03:01:44 ----SHD---- C:\WINDOWS\Installer
    2008-11-13 03:01:43 ----D---- C:\WINDOWS\WinSxS
    2008-11-08 12:41:20 ----A---- C:\WINDOWS\lexstat.ini
    2008-11-02 19:39:11 ----A---- C:\WINDOWS\MMKEYBD.INI
    2008-11-02 19:34:36 ----D---- C:\Program Files\Common Files\Adobe
    2008-11-02 19:34:18 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
    2008-11-02 19:34:10 ----D---- C:\Program Files\Adobe
    2008-11-02 18:40:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2002-10-02 61424]
    R1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2002-10-02 23420]
    R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2002-10-02 240640]
    R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
    R1 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2008-06-27 207656]
    R1 MPFP;MPFP; C:\WINDOWS\System32\Drivers\Mpfp.sys [2008-06-02 120136]
    R1 OMCI;OMCI; C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS [2001-08-22 13632]
    R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2002-10-02 134426]
    R1 UdfReadr_xp;UdfReadr_xp; C:\WINDOWS\system32\drivers\UdfReadr_xp.sys [2002-10-02 206464]
    R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-09-03 12032]
    R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
    R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
    R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
    R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
    R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
    R2 SpeakerPhone;SpeakerPhone; C:\WINDOWS\System32\DRIVERS\HSF_SPKP.sys [2001-08-17 73279]
    R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
    R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
    R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
    R3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2002-10-02 25674]
    R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\System32\DRIVERS\e100b325.sys [2002-04-30 139776]
    R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
    R3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
    R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
    R3 LVPrcMon;Logitech LVPrcMon Driver; \??\C:\WINDOWS\system32\drivers\LVPrcMon.sys []
    R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-07-28 22528]
    R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2008-06-27 79240]
    R3 mfebopk;McAfee Inc. mfebopk; C:\WINDOWS\system32\drivers\mfebopk.sys [2008-06-27 35240]
    R3 mfesmfk;McAfee Inc. mfesmfk; C:\WINDOWS\system32\drivers\mfesmfk.sys [2008-06-27 40488]
    R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 Msikbd2k;DellTouch; C:\WINDOWS\System32\DRIVERS\msikbd2k.sys [2002-01-16 6656]
    R3 MXOFX;USB Storage Adapter FX (MXO); C:\WINDOWS\system32\DRIVERS\MXOFX.SYS [2003-10-10 32640]
    R3 MXOPSWD;Maxtor OneTouch Security Driver; C:\WINDOWS\system32\DRIVERS\mxopswd.sys [2004-10-07 15360]
    R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-05-16 6557408]
    R3 Pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2007-06-20 47360]
    R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-09-27 9856]
    R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\point32.sys [2003-05-15 19072]
    R3 SCRx31 USB Reader;SCRx31 USB Reader; C:\WINDOWS\system32\DRIVERS\stc2.sys [2002-07-03 56320]
    R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-08-05 545208]
    R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    R3 winachsf;winachsf; C:\WINDOWS\System32\DRIVERS\HSFCXTS2.sys [2004-08-03 685056]
    S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
    S3 ac97intc;Intel(r) 82801 Audio Driver Install Service (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
    S3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
    S3 bcgame;Nostromo HID Device Minidriver; C:\WINDOWS\system32\drivers\bcgame.sys []
    S3 catchme;catchme; \??\C:\DOCUME~1\Rich\LOCALS~1\Temp\catchme.sys []
    S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
    S3 dwusbdnt;dwusbdnt; C:\WINDOWS\system32\DRIVERS\dwusbdnt.sys [2002-05-24 10368]
    S3 FilterService;UVC Filter Service; C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys [2005-07-28 14080]
    S3 hsf_msft;hsf_msft; C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
    S3 Lvckap;Logitech Kernel Audio Processing Filter Driver; \??\C:\WINDOWS\system32\drivers\Lvckap.sys []
    S3 lvmvdrv;Logitech Machine Vision Engine Loader; \??\C:\WINDOWS\system32\drivers\lvmvdrv.sys []
    S3 LVUVC;Logitech QuickCam for Notebooks Pro(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc.sys [2005-07-28 1054848]
    S3 mferkdk;McAfee Inc. mferkdk; C:\WINDOWS\system32\drivers\mferkdk.sys [2008-06-20 34152]
    S3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2002-10-02 30406]
    S3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
    S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
    S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
    S3 Rksample;Rksample; C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
    S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
    S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
    S3 usb_rndisx;USB RNDIS Adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
    S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
    S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-04-10 104576]
    S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
    S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 ACachSrv;ActivCard Authentication Service; C:\Program Files\Common Files\ActivCard\acachsrv.exe [2004-06-15 135168]
    R2 acautoreg;ActivCard Gold Autoregister; C:\Program Files\Common Files\ActivCard\acautoreg.exe [2004-06-15 53248]
    R2 Accoca;ActivCard Gold service; C:\Program Files\Common Files\ActivCard\accoca.exe [2004-06-15 159744]
    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-22 116040]
    R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-10-23 152984]
    R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-08-18 303104]
    R2 LVPrcSrv;Logitech Process Monitor; c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe [2005-07-28 81920]
    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2008-10-08 203280]
    R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2008-10-10 792696]
    R2 McNASvc;McAfee Network Agent; c:\program files\common files\mcafee\mna\mcnasvc.exe [2008-07-18 2482848]
    R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2008-07-09 358736]
    R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2008-06-20 144704]
    R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
    R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2008-07-09 884360]
    R2 MSK80Service;McAfee SpamKiller Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2008-07-09 25416]
    R2 Nhksrv;Netropa NHK Server; C:\WINDOWS\Nhksrv.exe [2002-01-16 28672]
    R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-05-16 159812]
    R2 RetroExpLauncher;Retrospect Express HD Launcher; C:\PROGRA~1\RETROS~1\RETROS~1.1\retrorun.exe [2006-02-06 73728]
    R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2008-09-16 605512]
    S2 RetroExp Helper;Retrospect Express HD Helper; C:\PROGRA~1\RETROS~1\RETROS~1.1\rthlpsvc.exe [2006-02-06 118784]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
    S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
    S3 MBackMonitor;MBackMonitor; C:\Program Files\McAfee\MBK\MBackMonitor.exe [2008-07-10 66848]
    S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2008-06-20 361800]
    S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
    S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
    S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]

    -----------------EOF-----------------
     
    FLYNDAGGER,
    #1
  2. 2008/11/30
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi FLYNDAGGER :)

    Please visit the following webpage for instructions for downloading and running ComboFix

    How to use ComboFix



    Download ComboFix by sUBs from here, saving the file to your desktop.


    Please disable realtime protection applications as they sometimes interfere with the tool. Check this link for your applicable programs.

    • Close all open programs and windows
    • Double click ComboFix.exe and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
     
    noahdfear,
    #2


  3. to hide this advert.

  4. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    Cobofix Log Part 1

    Hi Noahdfear, thanks much for your time!
    Here is my Combofix log; Have to post it in a few parts

    ComboFix 08-11-30.01 - Rich 2008-11-30 13:30:56.5 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.513 [GMT -6:00]
    Running from: c:\documents and settings\Rich\Desktop\ComboFix.exe
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Rich\Local Settings\Temporary Internet Files\CPV.stt
    c:\windows\system32\bivihowo.dll
    c:\windows\system32\famafoha.dll
    c:\windows\system32\ilitalew.ini
    c:\windows\system32\welatili.dll
    c:\windows\system32\wxhxwjjr.ini
    c:\windows\system32\zomiyiwu.dll

    .
    ((((((((((((((((((((((((( Files Created from 2008-10-28 to 2008-11-30 )))))))))))))))))))))))))))))))
    .

    2008-11-16 17:59 . 2008-11-16 17:59 <DIR> d-------- c:\program files\7-Zip
    2008-11-12 23:30 . 2008-10-24 05:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
    2008-11-12 23:29 . 2008-09-04 11:15 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
    2008-11-02 23:54 . 2008-11-02 23:54 0 --a------ c:\windows\nsreg.dat
    2008-10-27 17:16 . 2008-10-27 17:16 107,888 --a------ c:\windows\system32\CmdLineExt.dll
    2008-10-26 16:45 . 2008-05-16 10:48 446,464 --a------ c:\windows\system32\NVUNINST.EXE
    2008-10-25 17:05 . 2008-10-26 16:59 <DIR> d-------- c:\program files\THQ
    2008-10-25 17:04 . 2007-03-12 15:42 3,495,784 --a------ c:\windows\system32\d3dx9_33.dll
    2008-10-25 17:04 . 2007-03-12 15:42 1,123,696 --a------ c:\windows\system32\D3DCompiler_33.dll
    2008-10-25 17:04 . 2007-03-15 15:57 443,752 --a------ c:\windows\system32\d3dx10_33.dll
    2008-10-25 17:01 . 2008-10-25 17:01 <DIR> d--hs---- c:\windows\ftpcache
    2008-10-23 12:20 . 2008-10-15 10:34 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
    2008-10-23 00:19 . 2008-10-23 00:18 73,728 --a------ c:\windows\system32\javacpl.cpl
    2008-10-23 00:18 . 2008-10-23 00:18 <DIR> d-------- c:\program files\Java
    2008-10-23 00:05 . 2008-10-23 00:18 410,976 --a------ c:\windows\system32\deploytk.dll
    2008-10-16 02:06 . 2008-10-16 02:07 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-10-16 02:06 . 2008-10-16 02:06 <DIR> d-------- c:\documents and settings\Rich\Application Data\Malwarebytes
    2008-10-16 02:06 . 2008-10-16 02:06 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2008-10-16 02:06 . 2008-09-09 23:04 38,528 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-10-16 02:06 . 2008-09-09 23:03 17,200 --a------ c:\windows\system32\drivers\mbam.sys
    2008-10-15 21:39 . 2008-08-14 04:11 2,189,184 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
    2008-10-15 21:39 . 2008-08-14 04:09 2,145,280 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
    2008-10-15 21:39 . 2008-08-14 03:33 2,066,048 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
    2008-10-15 21:39 . 2008-08-14 03:33 2,023,936 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
    2008-10-15 21:39 . 2008-09-15 06:12 1,846,400 -----c--- c:\windows\system32\dllcache\win32k.sys
    2008-10-15 21:39 . 2008-09-08 04:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys
    2008-10-13 18:02 . 2008-10-16 02:32 <DIR> d-------- C:\rsit
    2008-10-12 19:36 . 2008-10-12 19:36 2,560 --a------ c:\windows\_MSRSTRT.EXE

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-30 06:03 --------- d-----w c:\windows\system32\config\systemprofile\Application Data\SACore
    2008-11-30 01:26 --------- d-----w c:\program files\Spybot - Search & Destroy
    2008-11-27 09:00 --------- d-----w c:\documents and settings\All Users\Application Data\RetroExp
    2008-11-16 23:49 --------- d-----w c:\program files\McAfee
    2008-11-03 01:34 --------- d-----w c:\program files\Common Files\Adobe
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-23 04:57 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-10-23 04:56 --------- d-----w c:\documents and settings\Rich\Application Data\LimeWire
    2008-10-16 08:45 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee
    2008-10-13 01:36 --------- d-----w c:\program files\iolo
    2008-10-09 18:00 --------- d-----w c:\program files\CursorXP
    2008-10-06 06:08 64,192 ----a-w c:\documents and settings\Rich\Application Data\GDIPFONTCACHEV1.DAT
    2008-01-26 22:05 60,968 ----a-w c:\documents and settings\Rich\GoToAssistDownloadHelper.exe
    2002-09-03 17:07 94,784 --sha-w c:\windows\twain.dll
    2008-04-14 00:12 50,688 --sha-w c:\windows\twain_32.dll
    2008-04-14 00:11 1,028,096 --sha-w c:\windows\system32\mfc42.dll
    2008-04-14 00:12 57,344 --sha-w c:\windows\system32\msvcirt.dll
    2008-04-14 00:12 413,696 --sha-w c:\windows\system32\msvcp60.dll
    2008-04-14 00:12 343,040 --sha-w c:\windows\system32\msvcrt.dll
    2008-04-14 00:12 551,936 --sha-w c:\windows\system32\oleaut32.dll
    2008-04-14 00:12 84,992 --sha-w c:\windows\system32\olepro32.dll
    2008-04-14 00:12 11,776 --sha-w c:\windows\system32\regsvr32.exe
    .

    ((((((((((((((((((((((((((((( snapshot@2007-10-08_ 3.14.48.48 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-02-26 11:48:44 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-07-09 13:16:16 582,656 ----a-w c:\windows\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll
    + 2007-06-19 07:24:36 350,720 ----a-w c:\windows\$hf_mig$\KB933729\SP2QFE\xpsp3res.dll
    + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB933729\spmsg.dll
    + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB933729\spuninst.exe
    + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB933729\update\spcustom.dll
    + 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe
    + 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB933729\update\updspapi.dll
    + 2007-07-12 23:28:55 765,952 ----a-w c:\windows\$hf_mig$\KB938127-IE7\SP2QFE\vgx.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2007-08-21 06:25:02 683,520 ----a-w c:\windows\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941202\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941202\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941202\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941202\update\updspapi.dll
    + 2007-10-29 22:35:13 1,287,680 ----a-w c:\windows\$hf_mig$\KB941568\SP2QFE\quartz.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941568\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941568\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941568\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941568\update\updspapi.dll
    + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll
    + 2008-03-19 09:40:27 1,845,888 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll
    + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE\tzchange.exe
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll
    + 2007-11-14 07:18:03 450,560 ----a-w c:\windows\$hf_mig$\KB942840\SP2QFE\jscript.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB942840\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB942840\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB942840\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB942840\update\updspapi.dll
    + 2007-12-04 18:29:10 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll
    + 2007-11-07 09:50:47 727,040 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll
    + 2007-12-18 14:32:13 450,560 ----a-w c:\windows\$hf_mig$\KB944338\SP2QFE\jscript.dll
    + 2007-12-18 14:32:13 417,792 ----a-w c:\windows\$hf_mig$\KB944338\SP2QFE\vbscript.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944338\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944338\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944338\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944338\update\updspapi.dll
    + 2007-12-07 02:01:07 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
    + 2007-12-19 22:57:52 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
    + 2007-12-07 02:01:07 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
    + 2007-12-07 02:01:07 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
    + 2007-12-07 02:01:07 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
    + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
    + 2007-12-07 02:01:08 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
    + 2007-12-07 02:01:08 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
    + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
    + 2007-12-07 02:01:08 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
    + 2007-12-07 02:01:08 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
    + 2007-12-07 02:01:10 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
    + 2007-12-07 02:01:10 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
    + 2007-12-07 02:01:11 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
    + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
    + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
    + 2007-12-07 02:01:11 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
    + 2007-12-07 02:01:11 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
    + 2007-12-07 02:01:11 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
    + 2007-12-07 02:01:12 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
    + 2007-12-07 02:01:12 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
    + 2007-12-07 02:01:13 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
    + 2007-12-07 02:01:13 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
    + 2007-12-07 02:01:13 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
    + 2008-01-11 05:57:26 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
    + 2007-12-07 02:01:13 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
    + 2007-12-07 02:01:13 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
    + 2007-12-07 02:01:13 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
    + 2007-12-07 02:01:13 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll
    + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll
    + 2008-02-20 05:19:35 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:49:36 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll
    + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB946627\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB946627\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB946627\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB946627\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB946627\update\updspapi.dll
    + 2008-05-02 13:30:08 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:49 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:42:10 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:20:44 755,576 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-03-01 13:03:00 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 13:03:00 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 13:03:00 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 13:03:00 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 13:03:00 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 13:03:00 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 13:03:00 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 13:03:00 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 13:03:00 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 13:03:01 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 13:03:01 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 13:03:01 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 13:03:01 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 13:03:01 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 13:03:01 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 13:03:01 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 13:03:01 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 13:03:01 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 13:03:01 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 13:03:01 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 13:03:02 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 13:03:02 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 13:03:02 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 13:03:02 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:43 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-27 07:39:13 151,583 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-12-10 12:41:14 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 03:35:35 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 03:35:35 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 03:35:35 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 03:35:35 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 03:35:35 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 03:35:35 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 03:35:35 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 03:35:35 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 03:35:35 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 03:35:36 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 03:35:36 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 03:35:36 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 03:35:36 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 03:35:36 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 03:35:36 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 03:35:36 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 03:35:36 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 03:35:36 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 03:35:36 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 03:35:36 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 03:35:36 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 03:35:36 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 03:35:36 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 03:35:36 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2008-04-21 06:44:29 3,066,880 ----a-w c:\windows\$hf_mig$\KB950759\SP3GDR\mshtml.dll
    + 2008-04-21 06:44:29 666,112 ----a-w c:\windows\$hf_mig$\KB950759\SP3GDR\wininet.dll
    + 2008-04-21 06:24:01 3,067,392 ----a-w c:\windows\$hf_mig$\KB950759\SP3QFE\mshtml.dll
    + 2008-04-21 06:24:02 666,624 ----a-w c:\windows\$hf_mig$\KB950759\SP3QFE\wininet.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950759\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950759\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950759\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950759\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950759\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-07-07 20:06:43 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:26:58 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:23:18 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:39:39 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:04:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-12 05:22:26 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:31 755,576 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-06-13 09:52:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-13 11:05:51 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-13 11:27:43 272,128 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 11:00:16 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 12:30:49 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 12:36:35 272,128 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 04:55:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
    + 2008-05-07 05:12:40 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:15 1,288,192 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:08:32 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:36:11 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:36:11 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:46:57 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:46:57 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:43:05 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:43:05 245,248 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:33:02 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:38:05 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:28:00 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:43:16 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:10 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 16:01:38 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 16:01:38 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 16:01:39 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 16:01:39 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 16:01:39 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 16:01:39 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 16:01:39 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 16:01:40 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 16:01:40 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 16:01:43 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 16:01:43 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 16:01:44 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 16:01:46 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 16:01:46 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 16:01:46 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 16:01:49 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 16:01:49 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 16:01:49 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 16:01:50 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 16:01:50 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 16:01:50 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 16:01:50 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 16:01:51 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 16:01:51 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 16:01:51 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-10 01:10:56 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
    + 2008-08-26 09:08:35 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:08:36 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:08:36 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:08:36 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:08:36 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:08:36 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:08:36 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:08:36 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:08:37 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 17:26:50 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:08:39 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:08:39 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:08:40 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:08:40 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:08:40 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:08:43 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:08:43 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:08:44 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:08:44 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:08:44 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:08:44 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:08:44 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:08:45 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:08:45 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:08:45 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:22:36 14,048 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:22:41 213,216 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:22:34 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:22:59 716,000 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2004-08-04 06:10:06 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2005-05-03 17:51:52 2,678 -c----w c:\windows\$NtServicePackUninstall$\24x37pb3.dat
    + 2005-05-03 17:51:49 2,678 -c----w c:\windows\$NtServicePackUninstall$\2r17r5zz.dat
    + 2005-05-03 17:51:50 2,678 -c----w c:\windows\$NtServicePackUninstall$\35v97vl3.dat
    + 2005-05-03 17:51:49 2,678 -c----w c:\windows\$NtServicePackUninstall$\4k83zx73.dat
    + 2004-08-04 06:00:03 12,288 -c----w c:\windows\$NtServicePackUninstall$\4mmdat.sys
    + 2004-08-04 06:10:10 48,128 -c----w c:\windows\$NtServicePackUninstall$\61883.sys
    - 2002-09-03 16:26:42 59,392 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    - 2002-09-03 16:26:49 179,200 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-04 07:56:47 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    - 2002-09-03 16:26:50 1,818,624 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-04 07:56:41 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-04 07:56:41 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    - 2002-09-03 16:26:50 406,528 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-04 07:56:41 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-04 07:56:41 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    - 2002-09-03 16:26:51 125,440 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-04 07:56:41 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-04 07:56:41 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    - 2002-09-03 16:26:51 107,008 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-04 07:56:41 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    - 2002-09-03 16:26:52 179,328 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-04 06:07:38 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    - 2002-09-03 16:26:52 219,136 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-04 07:56:41 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-04 07:56:41 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    - 2002-09-03 16:26:54 181,760 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-04 07:56:41 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    - 2002-09-03 16:26:55 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-04 07:56:47 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    - 2002-09-03 16:26:55 98,304 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-04 07:56:41 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    - 2002-09-03 16:26:56 107,520 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-04 07:56:41 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-04 07:56:41 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    - 2002-05-14 17:08:54 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    + 2004-08-04 07:56:41 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    - 2002-05-14 17:08:54 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    + 2004-08-04 07:56:47 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    - 2002-09-03 16:26:58 57,344 -c----w c:\windows\$NtServicePackUninstall$\admparse.dll
    + 2004-08-04 07:56:41 61,440 -c----w c:\windows\$NtServicePackUninstall$\admparse.dll
    - 2002-09-03 16:27:00 162,816 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-04 07:56:41 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    - 2002-09-03 16:27:00 139,776 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-04 07:56:41 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    - 2002-09-03 16:27:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-04 07:56:41 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    - 2002-09-03 16:27:00 239,616 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-04 07:56:41 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-04 07:56:41 4,255 -c----w c:\windows\$NtServicePackUninstall$\adv01nt5.dll
    + 2004-08-04 07:56:41 3,967 -c----w c:\windows\$NtServicePackUninstall$\adv02nt5.dll
    + 2004-08-04 07:56:41 3,615 -c----w c:\windows\$NtServicePackUninstall$\adv05nt5.dll
    + 2004-08-04 07:56:41 3,647 -c----w c:\windows\$NtServicePackUninstall$\adv07nt5.dll
    + 2004-08-04 07:56:41 3,135 -c----w c:\windows\$NtServicePackUninstall$\adv08nt5.dll
    + 2004-08-04 07:56:41 3,711 -c----w c:\windows\$NtServicePackUninstall$\adv09nt5.dll
    + 2004-08-04 07:56:41 3,775 -c----w c:\windows\$NtServicePackUninstall$\adv11nt5.dll
    - 2002-09-03 16:27:00 558,080 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2004-08-04 07:56:41 616,960 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    - 2002-09-03 16:27:01 91,136 -c----w c:\windows\$NtServicePackUninstall$\advpack.dll
    + 2004-08-04 07:56:41 99,840 -c----w c:\windows\$NtServicePackUninstall$\advpack.dll
    - 2002-08-28 23:16:38 142,208 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.001
     
    FLYNDAGGER,
    #3
  5. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    - 2002-09-03 16:27:01 131,968 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    - 2002-09-03 16:27:01 22,016 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    - 2002-09-03 16:27:01 204,288 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2004-08-04 07:56:41 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    - 2002-09-03 16:27:01 35,840 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2006-10-12 13:54:18 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    - 2002-09-03 16:27:02 50,688 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2007-03-09 13:58:57 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    - 2002-09-03 16:27:02 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-04 07:56:41 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    - 2002-09-03 16:27:02 21,504 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    - 2002-09-03 16:27:02 39,936 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2004-08-04 07:56:41 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    - 2002-09-03 16:27:03 235,008 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    - 2001-08-17 13:58:00 25,472 -c----w c:\windows\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 06:07:41 42,368 -c----w c:\windows\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 06:07:42 44,928 -c----w c:\windows\$NtServicePackUninstall$\agpcpq.sys
    + 2002-09-03 16:27:03 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
    + 2002-09-03 16:27:03 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
    + 2002-09-03 16:27:04 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2002-09-03 16:27:04 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2002-09-03 16:27:04 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2002-09-03 16:27:05 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2002-09-03 16:27:05 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2002-09-03 16:27:06 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2002-09-03 16:27:06 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2002-09-03 16:27:07 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
    + 2002-09-03 16:27:07 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2002-09-03 16:27:07 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2002-09-03 16:27:08 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
    + 2002-09-03 16:27:08 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
    + 2002-09-03 16:27:09 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2002-09-03 16:27:09 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2002-09-03 16:27:10 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2002-09-03 16:27:10 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2002-09-03 16:27:10 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2002-09-03 16:27:11 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2002-09-03 16:27:11 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2002-09-03 16:27:12 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
    + 2002-09-03 16:27:12 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2002-09-03 16:27:12 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    - 2002-09-03 16:27:14 21,504 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-04 07:56:41 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    - 2002-09-03 16:27:14 91,648 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-04 07:56:47 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    - 2002-09-03 16:27:15 41,984 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 07:56:47 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 06:07:41 42,752 -c----w c:\windows\$NtServicePackUninstall$\alim1541.sys
    - 2002-09-03 16:27:16 15,872 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 07:56:41 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 06:07:42 43,008 -c----w c:\windows\$NtServicePackUninstall$\amdagp.sys
    - 2002-09-03 17:04:09 32,000 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-04 05:59:19 36,992 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    - 2002-09-03 17:04:09 32,512 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-04 05:59:20 37,376 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    - 2002-09-03 16:27:17 63,488 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-04 07:56:41 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    - 2002-09-03 16:27:21 115,712 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-04 07:56:41 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-04 07:56:41 331,264 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
    - 2002-09-03 17:04:09 57,344 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2004-08-04 05:58:29 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    - 2002-09-03 16:27:31 14,366 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
    + 2001-03-03 01:52:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
    - 2002-09-03 16:27:32 77,824 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-04 07:56:41 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    - 2002-09-03 16:27:32 13,568 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-04 06:05:03 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    - 2002-09-03 16:27:32 22,528 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 07:56:47 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    - 2002-09-03 16:27:33 86,912 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-04 05:59:42 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-04 07:56:41 229,376 -c----w c:\windows\$NtServicePackUninstall$\ati2cqag.dll
    + 2004-08-04 07:56:41 377,984 -c----w c:\windows\$NtServicePackUninstall$\ati2dvaa.dll
    + 2004-08-04 07:56:41 201,728 -c----w c:\windows\$NtServicePackUninstall$\ati2dvag.dll
    + 2004-08-04 07:56:41 870,784 -c----w c:\windows\$NtServicePackUninstall$\ati3d1ag.dll
    + 2004-08-04 07:56:41 1,057,760 -c----w c:\windows\$NtServicePackUninstall$\ati3d2ag.dll
    + 2004-08-04 07:56:41 1,888,992 -c----w c:\windows\$NtServicePackUninstall$\ati3duag.dll
    + 2004-08-04 07:56:41 32,768 -c----w c:\windows\$NtServicePackUninstall$\ativtmxx.dll
    + 2004-08-04 07:56:41 516,768 -c----w c:\windows\$NtServicePackUninstall$\ativvaxx.dll
    - 2002-09-03 16:27:39 74,810 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-04 07:56:41 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    - 2002-09-03 16:27:40 10,240 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-04 07:56:47 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    - 2002-09-03 16:27:40 57,216 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-04 05:58:30 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    - 2002-09-03 16:27:40 272,768 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-04 07:55:59 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    - 2002-09-03 16:27:40 53,888 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-04 05:58:34 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    - 2002-09-03 16:27:41 27,136 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-04 07:56:41 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2002-09-03 16:27:42 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-04 07:56:41 21,183 -c----w c:\windows\$NtServicePackUninstall$\atv01nt5.dll
    + 2004-08-04 07:56:41 11,359 -c----w c:\windows\$NtServicePackUninstall$\atv02nt5.dll
    + 2004-08-04 07:56:41 25,471 -c----w c:\windows\$NtServicePackUninstall$\atv04nt5.dll
    + 2004-08-04 07:56:41 14,143 -c----w c:\windows\$NtServicePackUninstall$\atv06nt5.dll
    + 2004-08-04 07:56:41 17,279 -c----w c:\windows\$NtServicePackUninstall$\atv10nt5.dll
    - 2002-09-03 16:27:43 38,912 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-04 07:56:41 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-04 07:56:47 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    - 2002-05-14 17:08:54 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    + 2004-08-04 07:56:41 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    - 2002-05-14 17:08:54 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    + 2004-08-04 07:56:47 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    - 2005-03-02 18:20:03 53,760 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2005-03-02 18:09:29 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    - 2002-09-03 16:27:44 565,760 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-04 07:56:47 588,800 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    - 2002-09-03 16:27:44 578,560 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-04 07:56:47 602,624 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    - 2002-09-03 16:27:45 558,592 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-04 07:56:47 580,608 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    - 2002-09-03 16:27:45 8,192 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-04 07:56:47 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-04 06:10:10 38,912 -c----w c:\windows\$NtServicePackUninstall$\avc.sys
    + 2004-08-04 06:09:58 13,696 -c----w c:\windows\$NtServicePackUninstall$\avcstrm.sys
    - 2002-09-03 16:27:47 76,288 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-04 07:56:41 84,992 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    - 2002-09-03 16:27:51 44,032 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-04 07:56:41 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    - 2002-09-03 16:27:51 27,136 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-04 07:56:41 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    - 2002-09-03 16:27:51 6,656 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-04 07:56:41 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-04 06:10:12 11,776 -c----w c:\windows\$NtServicePackUninstall$\bdasup.sys
    - 2002-09-03 16:27:57 14,848 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-04 07:56:41 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    - 2004-07-01 22:08:18 7,680 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-04 07:56:41 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    - 2004-07-01 22:08:18 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-04 07:56:41 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-04 07:56:47 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    - 2002-09-03 16:28:04 68,864 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-04 05:59:57 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    - 2002-09-03 16:28:08 62,976 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-04 07:55:59 63,488 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    - 2002-09-03 16:28:09 49,152 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2004-08-04 07:56:41 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    - 2005-02-18 20:09:14 1,017,856 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2008-04-21 06:56:54 1,024,000 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    - 2002-09-03 16:28:09 71,680 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-04 07:56:41 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-04 07:56:41 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2004-08-04 06:10:38 17,024 -c----w c:\windows\$NtServicePackUninstall$\bthenum.sys
    + 2004-08-04 06:10:38 38,016 -c----w c:\windows\$NtServicePackUninstall$\bthmodem.sys
    + 2004-08-04 05:58:38 100,992 -c----w c:\windows\$NtServicePackUninstall$\bthpan.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.001
    + 2004-08-04 06:10:37 35,456 -c----w c:\windows\$NtServicePackUninstall$\bthprint.sys
    + 2004-08-04 07:56:41 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-04 06:10:34 18,944 -c----w c:\windows\$NtServicePackUninstall$\bthusb.sys
    + 2004-08-04 07:56:41 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2002-09-03 16:30:23 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
    - 2002-09-03 16:28:17 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-04 07:56:41 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    - 2002-09-03 16:28:17 80,384 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-04 07:56:41 84,480 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2002-09-03 16:28:17 18,432 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    - 2004-03-30 01:48:36 364,544 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-04 07:56:41 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    - 2002-09-03 16:28:19 45,056 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-04 07:56:41 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2002-09-03 16:28:21 142,848 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    - 2004-03-06 02:16:10 225,280 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2005-07-26 04:39:42 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    - 2002-09-03 16:28:22 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2004-08-04 07:56:41 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    - 2004-03-06 02:16:10 594,944 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2005-07-26 04:39:43 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-04 07:10:16 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    - 2002-09-03 16:28:24 59,648 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2004-08-04 06:14:10 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    - 2004-12-07 22:43:02 143,360 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2008-04-21 06:56:54 151,040 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2004-08-04 07:56:41 66,560 -c----w c:\windows\$NtServicePackUninstall$\cdm.dll
    - 2002-09-03 16:28:26 2,028,032 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    - 2002-09-03 16:28:26 47,488 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-04 05:59:52 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    - 2002-09-03 16:28:28 186,880 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-04 07:56:41 194,560 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    - 2002-09-03 16:28:28 436,736 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-04 07:56:41 457,728 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    - 2002-09-03 16:28:33 32,768 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-04 07:56:41 38,912 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    - 2002-09-03 16:28:34 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-04 07:56:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    - 2002-05-14 17:08:54 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-04 07:56:47 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-04 07:56:41 15,423 -c----w c:\windows\$NtServicePackUninstall$\ch7xxnt5.dll
    + 2004-08-04 06:00:12 8,192 -c----w c:\windows\$NtServicePackUninstall$\changer.sys
    + 2002-09-03 16:24:02 97,792 -c----w c:\windows\$NtServicePackUninstall$\chtmbx.dll
    + 2002-09-03 16:24:02 56,320 -c----w c:\windows\$NtServicePackUninstall$\chtskdic.dll
    + 2002-09-03 16:24:02 173,568 -c----w c:\windows\$NtServicePackUninstall$\chtskf.dll
    + 2002-09-03 16:28:48 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    - 2002-09-03 16:28:49 1,267,712 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2004-08-04 07:56:41 1,352,192 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    - 2002-09-03 16:24:03 201,216 -c----w c:\windows\$NtServicePackUninstall$\cintime.dll
    + 2004-08-04 05:31:52 198,656 -c----w c:\windows\$NtServicePackUninstall$\cintime.dll
    - 2002-09-03 16:28:49 64,512 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    - 2002-09-03 16:28:50 5,120 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-04 07:56:47 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    - 2002-09-03 16:28:53 46,336 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2004-08-04 06:14:26 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    - 2004-03-06 02:16:10 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:43 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    - 2004-03-06 02:16:11 499,712 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2005-07-26 04:39:43 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    - 2002-09-03 16:28:54 61,440 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-04 07:56:47 64,000 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    - 2002-09-03 16:28:56 127,552 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-04 07:56:41 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    - 2002-09-03 16:28:56 45,632 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-04 07:56:47 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    - 2002-09-03 16:28:57 98,816 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-04 07:56:47 102,912 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    - 2002-09-03 16:28:58 30,720 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-04 07:56:47 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    - 2002-09-03 16:29:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-04 07:56:41 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-04 06:07:39 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
    - 2002-09-03 16:29:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-04 07:56:41 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    - 2002-09-03 16:29:01 375,808 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-04 07:56:48 388,608 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    - 2002-09-03 16:29:01 324,608 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-04 07:56:41 343,040 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    - 2002-09-03 16:29:02 41,472 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-04 07:56:48 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    - 2002-09-03 16:29:02 35,840 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-04 07:56:48 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    - 2002-09-03 16:29:04 174,592 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-04 07:56:41 185,344 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-04 07:56:41 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    - 2002-09-03 16:29:04 54,784 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-04 07:56:48 63,488 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    - 2002-09-03 16:29:04 36,352 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-04 07:56:41 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    - 2002-09-03 16:31:57 45,568 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-04 07:56:41 47,104 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2004-08-04 07:56:41 79,360 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon2.dll
    - 2004-03-06 02:16:10 64,512 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2005-07-26 04:39:43 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2002-09-03 16:29:08 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    - 2004-03-06 02:16:10 187,904 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2005-07-26 04:39:44 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    - 2002-09-03 16:29:09 557,056 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    - 2002-09-03 16:29:09 258,048 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-04 07:56:41 276,992 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    - 2002-09-03 16:29:14 238,592 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-04 07:56:41 252,928 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    - 2002-09-03 16:29:16 222,208 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2004-08-04 07:56:41 229,376 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:44 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    - 2004-02-17 18:49:58 8,192 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-04 07:56:48 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2002-09-03 16:29:17 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    - 2002-09-03 16:29:17 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-04 07:56:41 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2002-09-03 16:29:18 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2002-09-03 16:29:18 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    - 2004-03-06 02:16:11 1,194,496 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:44 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    - 2004-03-06 02:16:10 499,200 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2005-07-26 04:39:45 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    - 2002-09-03 16:29:20 995,328 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-04 07:56:48 1,032,192 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    - 2002-09-03 16:29:21 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-04 07:56:41 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2002-09-03 16:29:21 345,600 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    - 2002-09-03 16:29:22 24,576 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2004-08-04 07:56:48 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    - 2002-09-03 16:29:27 14,877 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-04 07:56:41 35,328 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    - 2002-09-03 16:29:37 158,720 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-04 07:56:41 163,840 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    - 2002-09-03 17:04:09 31,488 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-04 05:59:20 36,480 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    - 2002-09-03 16:29:42 557,568 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-04 07:56:41 597,504 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    - 2002-09-03 16:29:42 70,144 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-04 07:56:41 74,752 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    - 2002-09-03 16:29:42 29,184 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-04 07:56:41 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    - 2002-09-03 16:29:43 48,640 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-04 07:56:41 53,760 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    - 2002-09-03 16:29:43 53,248 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-04 07:56:41 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    - 2002-09-03 16:29:43 53,248 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-04 07:56:41 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    - 2002-09-03 16:29:43 471,040 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-04 07:56:41 512,512 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    - 2004-10-28 01:29:54 92,160 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-04 07:56:41 101,888 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    - 2002-09-03 16:29:45 102,450 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-04 07:56:48 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    - 2002-09-03 16:29:45 307,712 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-04 07:56:41 326,656 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    - 2002-09-03 16:29:46 29,184 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-04 07:56:41 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    - 2002-09-03 16:29:46 4,096 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-04 07:56:48 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    - 2002-09-03 16:29:46 13,312 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2004-08-04 07:56:48 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2004-08-04 07:56:41 249,856 -c----w c:\windows\$NtServicePackUninstall$\ctmasetp.dll
    + 2006-06-03 11:40:49 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    - 2002-09-03 16:30:24 1,180,672 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-04 07:56:41 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    - 2002-09-03 16:30:24 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-04 07:56:41 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-04 07:56:41 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    - 2002-09-03 16:30:24 791,040 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2004-08-04 07:56:41 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    - 2002-09-03 16:30:27 986,112 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2008-04-21 06:56:55 1,054,208 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    - 2002-09-03 16:30:28 557,128 -c----w c:\windows\$NtServicePackUninstall$\dao360.dll
    + 2004-08-04 07:56:42 561,179 -c----w c:\windows\$NtServicePackUninstall$\dao360.dll
    - 2002-09-03 16:30:28 51,712 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-04 07:56:42 54,272 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2002-09-03 16:30:29 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    - 2002-09-03 16:30:29 22,016 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    - 2002-09-03 16:30:31 489,984 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-04 07:56:42 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    - 2002-09-03 16:30:32 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    - 2002-09-03 16:30:33 61,440 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-04 07:56:42 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    - 2002-09-03 16:30:33 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-04 08:07:21 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    - 2002-09-03 16:30:33 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-04 07:56:42 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    - 2002-09-03 16:30:33 7,680 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-04 07:56:42 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2002-09-03 16:30:34 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    - 2002-09-03 16:30:34 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-04 07:56:48 30,208 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    - 2002-09-03 16:30:35 253,440 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-04 07:56:42 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    - 2002-09-03 16:30:35 24,064 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-04 07:56:42 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    - 2002-09-03 16:30:36 70,656 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-04 07:56:48 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    - 2002-09-03 16:30:38 51,712 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    - 2002-09-03 16:30:39 263,168 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-04 07:56:42 282,624 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    - 2002-09-03 16:30:40 76,288 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-04 07:56:48 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    - 2002-09-03 16:30:41 99,328 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-04 07:56:48 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    - 2002-09-03 16:30:41 35,328 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-04 07:56:42 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    - 2002-09-03 16:30:42 113,152 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-04 07:56:42 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    - 2002-09-03 16:30:42 25,600 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    - 2002-09-03 16:30:44 103,424 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2004-08-04 07:56:42 111,104 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    - 2002-09-03 16:30:45 99,840 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2002-09-03 16:30:46 370,176 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    - 2002-09-03 16:30:48 522,240 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-04 07:56:48 539,136 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    - 2002-09-03 16:30:50 79,360 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-04 07:56:48 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    - 2002-09-03 16:30:50 55,296 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-04 07:56:42 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    - 2002-09-03 16:30:54 151,552 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-04 07:56:42 159,232 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    - 2002-09-03 16:30:55 168,960 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2004-08-04 07:56:42 181,760 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    - 2002-09-03 16:30:55 76,288 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    - 2002-09-03 16:30:56 33,792 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-04 05:59:54 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2002-09-03 16:30:57 1,501,696 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    - 2002-09-03 16:30:58 13,184 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-04 05:59:52 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    - 2002-09-03 16:30:59 145,920 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-04 07:56:48 163,840 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2002-09-03 16:31:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    - 2002-09-03 16:31:02 294,912 -c----w c:\windows\$NtServicePackUninstall$\dlimport.exe
    + 2004-08-04 07:56:48 294,912 -c----w c:\windows\$NtServicePackUninstall$\dlimport.exe
    - 2002-09-03 16:31:02 4,608 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-04 07:56:48 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-04 06:00:04 8,320 -c----w c:\windows\$NtServicePackUninstall$\dlttape.sys
    - 2002-09-03 16:31:03 204,800 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-04 07:56:48 224,768 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    - 2002-09-03 16:31:03 26,112 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-04 07:56:42 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    - 2002-09-03 16:31:03 780,928 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-04 06:07:17 799,744 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    - 2002-09-03 16:31:04 57,344 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2002-09-03 16:31:04 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    - 2002-09-03 16:31:05 184,320 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-04 07:56:42 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    - 2002-09-03 16:31:05 172,544 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-04 07:56:42 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    - 2002-09-03 16:31:06 146,304 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-04 06:07:16 153,344 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    - 2002-09-03 16:31:06 31,744 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-04 07:56:42 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    - 2002-09-03 16:31:07 14,336 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-04 07:56:48 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    - 2002-09-03 16:31:07 77,312 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-04 07:56:42 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    - 2002-09-03 16:31:07 21,504 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    - 2002-09-03 16:31:08 110,080 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-04 07:56:42 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    - 2002-09-03 16:31:08 99,840 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-04 07:56:42 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    - 2002-09-03 16:31:08 94,720 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 07:56:42 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    - 2001-08-17 13:59:58 50,048 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-04 06:07:38 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    - 2002-09-03 16:31:57 50,688 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2004-08-04 07:56:42 52,224 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    - 2002-09-03 16:31:09 139,264 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    - 2002-09-03 16:31:09 44,032 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    - 2002-09-03 16:31:10 45,568 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-04 07:56:42 48,128 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-04 05:58:29 207,360 -c----w c:\windows\$NtServicePackUninstall$\dot4.sys
    - 2002-09-03 16:31:16 115,200 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-04 06:13:53 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    - 2002-09-03 16:31:17 26,112 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-04 07:56:48 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    - 2002-09-03 16:31:17 212,992 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-04 07:56:42 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    - 2002-09-03 16:31:17 20,992 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    - 2002-09-03 16:31:18 26,112 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-04 07:56:03 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    - 2002-09-03 16:31:18 156,672 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-04 07:56:42 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    - 2002-09-03 16:31:19 29,696 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    - 2002-09-03 16:31:19 56,320 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-04 07:56:42 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    - 2002-09-03 16:31:20 38,400 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-04 07:56:03 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    - 2002-09-03 16:31:20 18,944 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-04 07:56:48 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    - 2002-09-03 16:31:22 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-04 07:56:42 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    - 2002-09-03 16:31:22 206,336 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-04 07:56:42 212,480 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    - 2002-09-03 16:31:23 58,368 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-04 07:56:48 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    - 2002-09-03 16:31:23 113,152 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-04 07:56:42 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    - 2002-09-03 16:31:24 49,664 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    - 2002-08-29 01:32:34 57,856 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 06:07:58 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 06:07:57 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    - 2002-09-03 16:31:58 11,776 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-04 07:56:42 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    - 2002-09-03 16:32:02 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-04 07:56:42 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    - 2002-09-03 16:32:03 165,888 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-04 07:56:42 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    - 2002-09-03 16:32:03 66,560 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-04 07:56:42 71,680 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    - 2002-09-03 16:32:04 84,992 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-04 07:56:42 92,672 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2002-09-03 16:32:05 144,384 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    - 2002-09-03 16:32:07 338,944 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-04 07:56:42 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    - 2002-09-03 16:32:07 1,293,824 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-04 07:56:42 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    - 2002-09-03 16:32:08 135,680 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-04 07:56:42 142,336 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    - 2002-09-03 16:32:09 3,584 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-04 07:56:04 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    - 2002-09-03 16:32:09 227,840 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-04 07:56:42 239,104 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    - 2002-09-03 16:32:10 47,104 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-04 07:56:42 51,200 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    - 2002-09-03 16:32:10 124,928 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-04 05:31:43 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    - 2002-09-03 16:32:10 106,496 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-04 07:56:42 113,152 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    - 2002-09-03 16:32:11 16,896 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-04 07:56:42 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    - 2002-09-03 16:32:13 9,216 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-04 07:56:48 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    - 2002-09-03 16:32:14 263,680 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-04 07:56:42 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    - 2002-09-03 16:32:15 15,872 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-04 07:56:48 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    - 2002-09-03 16:32:16 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-04 07:56:48 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    - 2002-09-03 16:32:18 595,456 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-04 07:56:42 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    - 2002-09-03 16:32:18 1,185,792 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-04 07:56:42 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    - 2002-09-03 16:32:20 786,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-04 07:56:48 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-04 07:56:42 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    - 2002-09-03 16:32:20 68,992 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2004-08-04 06:00:54 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    - 2002-09-03 16:32:21 498,205 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2006-08-22 10:05:26 498,742 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    - 2002-09-03 16:32:21 337,920 -c----w c:\windows\$NtServicePackUninstall$\dxtmsft.dll
    + 2004-08-04 07:56:42 357,888 -c----w c:\windows\$NtServicePackUninstall$\dxtmsft.dll
    - 2002-09-03 16:32:22 194,560 -c----w c:\windows\$NtServicePackUninstall$\dxtrans.dll
    + 2004-08-04 07:56:42 201,728 -c----w c:\windows\$NtServicePackUninstall$\dxtrans.dll
    - 2002-09-03 16:32:30 165,376 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-04 07:56:42 183,296 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    - 2002-09-03 16:32:31 12,288 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-04 07:56:42 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    - 2002-09-03 16:32:31 155,648 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
    + 2004-08-04 07:56:42 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
    + 2004-08-04 07:56:05 40,960 -c----w c:\windows\$NtServicePackUninstall$\ep9res.dll
    - 2002-09-03 16:32:34 19,456 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2004-08-04 07:56:42 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    - 2004-03-06 02:16:11 226,816 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2008-07-07 20:32:22 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    - 2002-09-03 16:32:35 1,018,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    - 2002-09-03 16:32:37 235,520 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-04 07:56:42 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    - 2002-09-03 16:32:40 178,688 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-04 07:56:49 193,024 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    - 2002-09-03 16:32:41 49,152 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-04 07:56:42 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    - 2002-09-03 16:32:43 96,256 -c----w c:\windows\$NtServicePackUninstall$\evntagnt.dll
    + 2004-08-04 07:56:42 101,888 -c----w c:\windows\$NtServicePackUninstall$\evntagnt.dll
    - 2002-09-03 16:32:43 22,528 -c----w c:\windows\$NtServicePackUninstall$\evntcmd.exe
    + 2004-08-04 07:56:49 24,064 -c----w c:\windows\$NtServicePackUninstall$\evntcmd.exe
    - 2002-09-03 16:32:43 19,456 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    - 2002-09-03 16:32:44 84,992 -c----w c:\windows\$NtServicePackUninstall$\evntwin.exe
    + 2004-08-04 07:56:49 92,160 -c----w c:\windows\$NtServicePackUninstall$\evntwin.exe
    - 2002-09-03 16:32:50 1,004,032 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    - 2002-09-03 16:32:51 380,445 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-04 07:56:42 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-04 07:56:42 55,808 -c----w c:\windows\$NtServicePackUninstall$\extmgr.dll
    - 2002-09-03 16:32:51 40,960 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-04 07:56:49 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2002-09-03 16:32:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2002-09-03 16:32:52 7,168 -c----w c:\windows\$NtServicePackUninstall$\f3ahvoas.dll
    - 2002-09-03 16:32:52 145,152 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-04 06:14:16 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    - 2002-09-03 16:32:53 565,248 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-04 07:56:42 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    - 2002-09-03 16:32:53 66,560 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-04 07:56:42 80,384 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-04 07:56:49 20,992 -c----w c:\windows\$NtServicePackUninstall$\faxpatch.exe
    - 2002-09-03 16:32:55 26,240 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-04 05:59:27 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    - 2002-09-03 16:32:55 18,432 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-04 07:56:42 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    - 2002-09-03 16:32:58 323,072 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-04 07:56:42 337,920 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    - 2002-09-03 16:33:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-04 07:56:49 27,136 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2002-09-03 16:33:01 34,944 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    - 2004-08-20 22:01:15 82,432 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-04 07:56:42 87,552 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    - 2002-09-03 16:33:04 19,712 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2004-08-04 05:59:27 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    - 2002-09-03 16:33:06 361,472 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2004-08-04 07:56:42 382,976 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:14:45 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    - 2002-09-03 16:33:08 19,456 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-04 07:56:49 20,992 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2002-09-03 16:33:08 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2002-09-03 16:33:08 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    - 2002-09-03 16:33:10 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2004-08-04 07:56:42 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    - 2002-05-14 17:08:54 184,435 -c----w c:\windows\$NtServicePackUninstall$\fp4amsft.dll
    + 2004-08-04 07:56:42 184,435 -c----w c:\windows\$NtServicePackUninstall$\fp4amsft.dll
    - 2002-05-14 17:08:54 82,035 -c----w c:\windows\$NtServicePackUninstall$\fp4anscp.dll
    + 2004-08-04 07:56:42 82,035 -c----w c:\windows\$NtServicePackUninstall$\fp4anscp.dll
    - 2002-05-14 17:08:54 147,513 -c----w c:\windows\$NtServicePackUninstall$\fp4apws.dll
    + 2004-08-04 07:56:42 147,513 -c----w c:\windows\$NtServicePackUninstall$\fp4apws.dll
    - 2002-05-14 17:08:54 127,034 -c----w c:\windows\$NtServicePackUninstall$\fp4areg.dll
    + 2004-08-04 07:56:42 49,210 -c----w c:\windows\$NtServicePackUninstall$\fp4areg.dll
    - 2002-05-14 17:08:54 102,509 -c----w c:\windows\$NtServicePackUninstall$\fp4atxt.dll
    + 2004-08-04 07:56:42 102,509 -c----w c:\windows\$NtServicePackUninstall$\fp4atxt.dll
    - 2002-05-14 17:08:54 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-04 07:56:42 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    - 2002-05-14 17:08:54 41,020 -c----w c:\windows\$NtServicePackUninstall$\fp4avnb.dll
    + 2004-08-04 07:56:42 41,020 -c----w c:\windows\$NtServicePackUninstall$\fp4avnb.dll
    - 2002-05-14 17:08:54 32,826 -c----w c:\windows\$NtServicePackUninstall$\fp4avss.dll
    + 2004-08-04 07:56:42 32,826 -c----w c:\windows\$NtServicePackUninstall$\fp4avss.dll
    - 2002-05-14 17:08:54 49,212 -c----w c:\windows\$NtServicePackUninstall$\fp4awebs.dll
    + 2004-08-04 07:56:42 49,212 -c----w c:\windows\$NtServicePackUninstall$\fp4awebs.dll
    - 2002-05-14 17:08:54 872,557 -c----w c:\windows\$NtServicePackUninstall$\fp4awel.dll
     
    FLYNDAGGER,
    #4
  6. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2004-08-04 07:56:42 876,653 -c----w c:\windows\$NtServicePackUninstall$\fp4awel.dll
    - 2002-05-14 17:08:54 14,608 -c----w c:\windows\$NtServicePackUninstall$\fp98sadm.exe
    + 2004-08-04 07:56:49 15,120 -c----w c:\windows\$NtServicePackUninstall$\fp98sadm.exe
    - 2002-05-14 17:08:54 109,328 -c----w c:\windows\$NtServicePackUninstall$\fp98swin.exe
    + 2004-08-04 07:56:49 109,840 -c----w c:\windows\$NtServicePackUninstall$\fp98swin.exe
    - 2002-05-14 17:08:54 24,632 -c----w c:\windows\$NtServicePackUninstall$\fpadmcgi.exe
    + 2004-08-04 07:56:49 24,632 -c----w c:\windows\$NtServicePackUninstall$\fpadmcgi.exe
    - 2002-05-14 17:08:54 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpadmdll.dll
    + 2004-08-04 07:56:42 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpadmdll.dll
    - 2002-05-14 17:08:54 188,494 -c----w c:\windows\$NtServicePackUninstall$\fpcount.exe
    + 2004-08-04 07:56:49 188,494 -c----w c:\windows\$NtServicePackUninstall$\fpcount.exe
    - 2002-05-14 17:08:54 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
    + 2004-08-04 07:56:42 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
    - 2002-05-14 17:08:54 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpexedll.dll
    + 2004-08-04 07:56:42 20,541 -c----w c:\windows\$NtServicePackUninstall$\fpexedll.dll
    - 2002-05-14 17:08:54 598,071 -c----w c:\windows\$NtServicePackUninstall$\fpmmc.dll
    + 2004-08-04 07:56:42 598,071 -c----w c:\windows\$NtServicePackUninstall$\fpmmc.dll
    - 2002-05-14 17:08:56 208,896 -c----w c:\windows\$NtServicePackUninstall$\fpmmcsat.dll
    + 2004-08-04 07:56:06 208,896 -c----w c:\windows\$NtServicePackUninstall$\fpmmcsat.dll
    - 2002-05-14 17:08:54 20,538 -c----w c:\windows\$NtServicePackUninstall$\fpremadm.exe
    + 2004-08-04 07:56:49 20,538 -c----w c:\windows\$NtServicePackUninstall$\fpremadm.exe
    + 2004-08-04 07:56:49 28,728 -c----w c:\windows\$NtServicePackUninstall$\fpsrvadm.exe
    - 2002-09-03 16:33:11 8,832 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-04 07:56:06 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    - 2002-09-03 16:33:11 174,592 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-04 07:56:42 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-04 07:56:49 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    - 2002-09-03 16:33:17 40,448 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-04 07:56:49 42,496 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-04 07:56:42 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    - 2002-09-03 16:33:17 443,392 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-04 07:56:42 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    - 2002-09-03 16:33:19 130,048 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-04 07:56:49 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    - 2002-09-03 16:33:20 68,096 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-04 07:56:42 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    - 2002-09-03 16:33:20 271,360 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-04 07:56:42 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    - 2002-09-03 16:33:21 216,064 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-04 07:56:49 229,376 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    - 2002-09-03 16:33:21 24,064 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-04 07:56:42 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    - 2002-09-03 16:33:22 53,760 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-04 07:56:42 55,296 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    - 2002-09-03 16:33:22 20,992 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    - 2002-09-03 16:33:23 22,016 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    - 2002-09-03 16:33:23 122,880 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-04 07:56:42 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    - 2002-09-03 16:33:24 7,168 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-04 07:56:42 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    - 2002-09-03 16:33:24 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-04 07:56:06 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    - 2002-09-03 16:33:26 559,616 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-04 07:56:42 562,176 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    - 2002-09-03 16:33:26 250,368 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-04 07:56:49 267,776 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    - 2002-09-03 16:33:26 236,032 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-04 07:56:42 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    - 2002-09-03 16:33:27 391,168 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-04 07:56:42 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    - 2002-09-03 16:33:27 149,504 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-04 07:56:42 154,112 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    - 2002-09-03 16:33:27 185,856 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-04 07:56:42 192,512 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    - 2002-09-03 16:33:27 395,264 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-08-04 07:56:42 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-08-04 06:07:43 46,464 -c----w c:\windows\$NtServicePackUninstall$\gagp30kx.sys
    + 2004-08-04 06:08:21 10,624 -c----w c:\windows\$NtServicePackUninstall$\gameenum.sys
    + 2004-08-04 06:08:29 59,136 -c----w c:\windows\$NtServicePackUninstall$\gckernel.sys
    - 2004-03-30 01:48:36 257,536 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    - 2002-09-03 16:33:37 116,736 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-04 07:56:42 122,880 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    - 2002-09-03 16:33:40 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-04 07:56:07 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    - 2002-09-03 16:33:45 37,888 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-04 07:56:49 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-04 05:59:19 28,288 -c----w c:\windows\$NtServicePackUninstall$\grserial.sys
    - 2002-09-03 16:33:49 114,688 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-04 07:56:42 123,904 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    - 2002-09-03 16:33:50 53,248 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    - 2004-03-30 01:48:36 593,408 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2004-08-04 07:56:42 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    - 2002-09-03 16:33:51 127,872 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-08-04 05:59:09 131,968 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-08-04 05:59:09 131,968 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
    + 2004-08-04 05:59:06 81,280 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
    + 2004-08-04 05:59:13 150,656 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
    + 2004-08-04 05:59:12 134,400 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
    + 2004-08-04 05:59:18 152,704 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
    + 2004-08-04 05:59:19 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
    - 2002-09-03 16:33:59 5,120 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-04 07:56:42 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2002-09-03 16:34:01 14,848 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    - 2004-03-30 01:34:15 741,376 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-04 07:56:49 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    - 2002-09-03 16:34:02 703,488 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2004-08-04 07:56:50 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    - 2002-09-03 16:34:05 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    - 2002-09-03 16:34:06 37,888 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2005-05-27 02:04:27 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    - 2002-09-03 16:31:57 22,528 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-04 07:56:42 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-04 06:10:36 25,600 -c----w c:\windows\$NtServicePackUninstall$\hidbth.sys
    - 2002-09-03 16:34:07 34,560 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-04 06:08:19 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-04 06:08:18 15,104 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
    - 2002-09-03 16:34:08 23,680 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 06:08:16 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 07:56:42 21,504 -c----w c:\windows\$NtServicePackUninstall$\hidserv.dll
    + 2006-07-21 08:24:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    - 2002-09-03 16:34:13 36,352 -c----w c:\windows\$NtServicePackUninstall$\hmmapi.dll
    + 2004-08-04 07:56:42 38,912 -c----w c:\windows\$NtServicePackUninstall$\hmmapi.dll
    - 2002-09-03 16:34:14 240,640 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-04 07:56:42 344,064 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    - 2002-09-03 16:34:15 315,904 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-04 07:56:42 330,752 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    - 2002-09-03 16:34:18 35,328 -c----w c:\windows\$NtServicePackUninstall$\hostmib.dll
    + 2004-08-04 07:56:42 39,936 -c----w c:\windows\$NtServicePackUninstall$\hostmib.dll
    - 2002-09-03 16:34:20 137,216 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-04 07:56:42 144,896 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-04 07:56:42 10,752 -c----w c:\windows\$NtServicePackUninstall$\hpcjrr.dll
    + 2004-08-04 07:56:42 10,240 -c----w c:\windows\$NtServicePackUninstall$\hpcjrrps.dll
    + 2004-08-04 07:56:42 87,552 -c----w c:\windows\$NtServicePackUninstall$\hpfud50.dll
    - 2002-09-03 16:34:28 8,704 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2004-08-04 07:56:50 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2004-08-04 07:56:42 32,285 -c----w c:\windows\$NtServicePackUninstall$\hsfcisp2.dll
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.001
    + 2004-08-04 07:56:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    - 2002-09-03 16:34:29 39,936 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-08-04 07:56:42 41,984 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2002-09-03 16:24:16 13,463,552 -c----w c:\windows\$NtServicePackUninstall$\hwxjpn.dll
    - 2004-11-17 17:57:01 493,056 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-11-17 17:41:24 347,136 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-04 06:00:50 8,192 -c----w c:\windows\$NtServicePackUninstall$\i2omgmt.sys
    + 2004-08-04 06:00:50 18,560 -c----w c:\windows\$NtServicePackUninstall$\i2omp.sys
    - 2002-08-29 07:06:38 51,072 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-04 06:14:36 52,736 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-04 07:56:42 702,845 -c----w c:\windows\$NtServicePackUninstall$\i81xdnt5.dll
    - 2002-09-03 16:34:41 116,224 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-04 07:56:42 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    - 2002-09-03 16:34:43 9,216 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-04 07:56:42 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    - 2002-09-03 16:34:44 110,592 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2004-08-04 07:56:42 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    - 2002-09-03 16:34:45 236,032 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2005-06-29 01:46:00 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    - 2002-09-03 16:34:45 3,072 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-04 07:56:07 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    - 2002-09-03 16:34:47 3,584 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    - 2002-09-03 16:34:50 57,344 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    - 2002-09-03 16:34:50 208,896 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-04 07:56:50 214,528 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    - 2002-09-03 16:34:50 77,824 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-04 07:56:50 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    - 2002-09-03 16:34:51 69,632 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-04 07:56:42 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    - 2002-09-03 16:34:51 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-04 07:56:42 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    - 2002-09-03 16:34:52 155,648 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-04 07:56:42 172,032 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    - 2002-09-03 16:34:53 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-04 07:56:42 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    - 2002-09-03 16:34:53 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-04 07:56:50 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    - 2002-09-03 16:34:54 45,056 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-04 07:56:42 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    - 2002-09-03 16:34:57 113,152 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2004-08-04 07:56:42 120,832 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    - 2002-09-03 16:34:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\ie4uinit.exe
    + 2004-08-04 07:56:50 34,304 -c----w c:\windows\$NtServicePackUninstall$\ie4uinit.exe
    - 2002-09-03 16:34:58 126,976 -c----w c:\windows\$NtServicePackUninstall$\ieakeng.dll
    + 2004-08-04 07:56:42 139,264 -c----w c:\windows\$NtServicePackUninstall$\ieakeng.dll
    - 2002-09-03 16:34:58 204,288 -c----w c:\windows\$NtServicePackUninstall$\ieaksie.dll
    + 2004-08-04 07:56:42 216,576 -c----w c:\windows\$NtServicePackUninstall$\ieaksie.dll
    - 2002-09-03 16:34:59 294,912 -c----w c:\windows\$NtServicePackUninstall$\iedkcs32.dll
    + 2004-08-04 07:56:42 323,584 -c----w c:\windows\$NtServicePackUninstall$\iedkcs32.dll
    + 2004-08-04 07:56:50 18,432 -c----w c:\windows\$NtServicePackUninstall$\iedw.exe
    + 2007-08-13 23:45:18 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    - 2005-02-18 17:43:20 236,032 -c----w c:\windows\$NtServicePackUninstall$\iepeers.dll
    + 2004-08-04 07:56:42 249,344 -c----w c:\windows\$NtServicePackUninstall$\iepeers.dll
    - 2002-09-03 16:35:02 23,040 -c----w c:\windows\$NtServicePackUninstall$\iernonce.dll
    + 2004-08-04 07:56:42 48,640 -c----w c:\windows\$NtServicePackUninstall$\iernonce.dll
    - 2002-09-03 16:35:02 59,392 -c----w c:\windows\$NtServicePackUninstall$\iesetup.dll
    + 2004-08-04 07:56:42 62,976 -c----w c:\windows\$NtServicePackUninstall$\iesetup.dll
    - 2002-09-03 16:35:04 91,136 -c----w c:\windows\$NtServicePackUninstall$\iexplore.exe
    + 2004-08-04 07:56:50 93,184 -c----w c:\windows\$NtServicePackUninstall$\iexplore.exe
    - 2002-09-03 16:35:05 99,840 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-04 07:56:50 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    - 2002-09-03 16:35:05 125,952 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-04 07:56:42 135,680 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    - 2002-09-03 16:35:06 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-04 07:56:42 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    - 2002-09-03 16:35:06 468,480 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-04 07:56:42 505,344 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    - 2002-09-03 16:35:07 73,728 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-04 07:56:42 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    - 2002-09-03 16:35:08 126,976 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-04 07:56:42 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    - 2002-09-03 16:35:08 123,904 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-04 07:56:50 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    - 2002-09-03 16:35:09 39,808 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-04 06:00:15 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    - 2002-09-03 16:24:19 99,328 -c----w c:\windows\$NtServicePackUninstall$\imekrcic.dll
    + 2004-08-04 06:04:36 106,496 -c----w c:\windows\$NtServicePackUninstall$\imekrcic.dll
    - 2002-09-03 16:24:20 80,384 -c----w c:\windows\$NtServicePackUninstall$\imekrmbx.dll
    + 2004-08-04 06:04:32 86,016 -c----w c:\windows\$NtServicePackUninstall$\imekrmbx.dll
    - 2002-09-03 16:35:10 36,922 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-04 07:56:42 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    - 2002-09-03 16:35:10 30,208 -c----w c:\windows\$NtServicePackUninstall$\imgutil.dll
    + 2004-08-04 07:56:42 35,840 -c----w c:\windows\$NtServicePackUninstall$\imgutil.dll
    - 2002-09-03 16:24:21 827,438 -c----w c:\windows\$NtServicePackUninstall$\imjp81k.dll
    + 2004-08-04 05:31:48 811,064 -c----w c:\windows\$NtServicePackUninstall$\imjp81k.dll
    - 2002-09-03 16:24:22 360,494 -c----w c:\windows\$NtServicePackUninstall$\imjpcic.dll
    + 2004-08-04 05:31:50 368,696 -c----w c:\windows\$NtServicePackUninstall$\imjpcic.dll
    - 2002-09-03 16:24:23 716,857 -c----w c:\windows\$NtServicePackUninstall$\imjpcus.dll
    + 2004-08-04 05:31:51 716,856 -c----w c:\windows\$NtServicePackUninstall$\imjpcus.dll
    - 2002-09-03 16:24:24 81,977 -c----w c:\windows\$NtServicePackUninstall$\imjpdct.dll
    + 2004-08-04 05:31:52 81,976 -c----w c:\windows\$NtServicePackUninstall$\imjpdct.dll
    - 2002-09-03 16:25:40 274,490 -c----w c:\windows\$NtServicePackUninstall$\imjputyc.dll
    + 2004-08-04 05:32:15 274,489 -c----w c:\windows\$NtServicePackUninstall$\imjputyc.dll
    + 2002-09-03 16:25:43 102,456 -c----w c:\windows\$NtServicePackUninstall$\imlang.dll
    - 2002-09-03 16:35:11 103,936 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-04 07:56:42 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2002-09-03 16:35:13 115,712 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2002-09-03 16:25:43 315,452 -c----w c:\windows\$NtServicePackUninstall$\imskf.dll
    - 2002-09-03 16:35:13 266,240 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2004-08-04 07:56:42 274,432 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    - 2002-09-03 16:35:14 587,776 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2008-04-11 18:50:43 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    - 2002-09-03 16:35:15 31,232 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-04 07:56:42 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    - 2002-09-03 16:35:16 68,096 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-04 07:56:42 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    - 2002-09-03 16:35:16 14,336 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-04 07:56:42 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    - 2002-09-03 16:35:17 47,616 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-04 07:56:08 48,128 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    - 2002-09-03 16:35:17 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-04 07:56:50 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    - 2002-09-03 16:35:20 144,896 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-04 07:56:42 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    - 2002-09-03 16:35:20 114,176 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 07:56:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    - 2004-08-26 14:53:48 69,632 -c----w c:\windows\$NtServicePackUninstall$\inseng.dll
    + 2004-08-04 07:56:42 96,256 -c----w c:\windows\$NtServicePackUninstall$\inseng.dll
    - 2002-09-03 16:35:23 4,736 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-04 05:59:41 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-04 05:59:19 36,096 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-04 06:00:06 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    - 2002-09-03 16:35:26 51,712 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2004-08-04 07:56:50 55,808 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2004-08-04 07:56:05 97,280 -c----w c:\windows\$NtServicePackUninstall$\ipevldpc.dll
    + 2004-08-04 07:56:04 24,064 -c----w c:\windows\$NtServicePackUninstall$\ipevlpid.dll
    - 2002-09-03 16:35:27 82,944 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2006-05-19 12:59:41 94,720 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    - 2002-09-03 16:35:27 19,584 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-04 06:04:45 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2002-09-03 16:35:28 154,112 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    - 2002-09-03 16:35:28 79,488 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    - 2004-03-30 01:48:36 439,808 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-04 07:56:42 331,264 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    - 2002-09-03 16:35:29 318,464 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-04 07:56:42 330,752 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    - 2002-09-03 16:35:39 33,280 -c----w c:\windows\$NtServicePackUninstall$\iprip.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\windows\$NtServicePackUninstall$\iprip.dll
    + 2002-09-03 16:35:40 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    - 2002-09-03 16:35:40 57,984 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-04 06:14:28 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    - 2002-09-03 16:35:41 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-04 07:56:42 349,696 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    - 2002-09-03 16:35:42 155,648 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-04 07:56:42 182,784 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-04 07:56:26 96,768 -c----w c:\windows\$NtServicePackUninstall$\ipseldpc.dll
    + 2004-08-04 07:56:04 24,064 -c----w c:\windows\$NtServicePackUninstall$\ipselpid.dll
    - 2002-09-03 16:35:43 364,032 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-04 07:56:42 384,000 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    - 2002-09-03 16:35:43 60,928 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-04 07:56:50 53,248 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    - 2002-09-03 16:35:44 134,144 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    - 2002-09-03 16:35:45 22,016 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-04 07:56:50 23,552 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2002-09-03 16:35:46 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 2004-08-04 07:56:42 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-04 07:56:42 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-04 07:56:42 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-04 07:56:42 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-04 07:56:42 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-04 06:00:53 87,424 -c----w c:\windows\$NtServicePackUninstall$\irda.sys
    - 2002-09-03 16:35:49 10,496 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2004-08-04 06:00:46 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2004-08-04 07:56:50 152,576 -c----w c:\windows\$NtServicePackUninstall$\irftp.exe
    + 2004-08-04 07:56:42 27,136 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll
    + 2002-09-03 16:35:51 35,840 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    - 2002-09-03 16:35:51 77,824 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-04 07:56:42 81,920 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    - 2002-09-03 16:35:57 28,672 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2004-08-04 07:56:42 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    - 2002-09-03 16:35:58 143,872 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:04:27 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    - 2002-09-03 16:35:59 122,368 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2005-05-27 02:04:27 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-04 07:56:42 192,000 -c----w c:\windows\$NtServicePackUninstall$\iuengine.dll
    - 2002-09-03 16:36:02 49,664 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-04 07:56:42 54,272 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    - 2002-09-03 16:31:57 45,568 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2004-08-04 07:56:42 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    - 2002-09-03 16:37:13 593,948 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2007-08-13 23:38:04 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    - 2002-09-03 16:37:13 12,288 -c----w c:\windows\$NtServicePackUninstall$\jsproxy.dll
    + 2004-08-04 07:56:42 15,872 -c----w c:\windows\$NtServicePackUninstall$\jsproxy.dll
    + 2002-09-03 16:37:15 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd101.dll
    + 2002-09-03 16:37:16 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd106n.dll
    + 2002-09-03 16:37:20 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdax2.dll
    - 2002-08-29 06:27:02 23,424 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-04 05:58:32 24,576 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-04 07:56:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-04 06:58:34 14,848 -c----w c:\windows\$NtServicePackUninstall$\kbdhid.sys
    + 2002-09-03 16:38:42 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdibm02.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-04 07:56:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-04 07:56:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2002-09-03 16:38:48 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41a.dll
    + 2002-09-03 16:38:48 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdlk41j.dll
    + 2004-08-04 07:56:10 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-04 07:56:10 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2002-09-03 16:38:52 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-04 07:56:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-04 07:56:10 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-04 07:56:10 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsno.dll
    + 2004-08-04 07:56:10 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdukx.dll
    - 2002-09-03 16:39:06 7,040 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
    + 2004-08-04 05:59:23 7,424 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
    - 2002-09-03 16:39:08 272,896 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
    + 2005-06-15 17:49:30 295,936 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
    - 2002-09-03 16:39:08 930,304 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
    + 2007-04-16 15:52:53 984,576 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
    - 2002-09-03 16:39:11 146,432 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
    + 2004-08-04 07:56:42 150,528 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
    - 2002-08-29 01:32:30 159,360 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.001
    - 2002-09-03 16:39:14 23,552 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 07:56:42 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    - 2002-09-03 17:04:09 131,712 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    + 2004-08-04 06:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    - 2002-09-03 16:39:16 79,744 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 05:59:47 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    - 2001-08-17 22:36:18 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-04 05:59:32 34,688 -c----w c:\windows\$NtServicePackUninstall$\lbrtfdc.sys
    - 2002-09-03 16:39:33 367,616 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    + 2004-08-04 05:56:44 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    - 2002-09-03 16:39:34 19,456 -c----w c:\windows\$NtServicePackUninstall$\licmgr10.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\windows\$NtServicePackUninstall$\licmgr10.dll
    - 2002-09-03 16:39:34 57,856 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    + 2004-08-04 07:56:42 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    - 2002-09-03 16:39:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    - 2002-09-03 16:39:37 12,288 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-04 07:56:42 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    - 2002-09-03 16:39:37 29,184 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
    + 2004-08-04 07:56:42 33,792 -c----w c:\windows\$NtServicePackUninstall$\lmmib2.dll
    - 2002-09-03 16:39:38 381,440 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-04 07:56:42 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    - 2002-09-03 16:39:40 91,648 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-04 07:56:42 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    - 2002-09-03 16:39:42 202,752 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    + 2004-08-04 07:56:42 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    - 2002-09-03 16:39:42 295,936 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    + 2004-08-04 07:56:42 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    - 2002-09-03 16:39:43 10,240 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    + 2004-08-04 07:56:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    - 2002-09-03 16:39:43 68,096 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    + 2004-08-04 07:56:50 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    - 2002-09-03 16:39:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-04 07:56:42 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-04 07:56:50 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
    - 2002-09-03 16:39:46 219,648 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    + 2004-08-04 07:56:57 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    - 2002-09-03 16:39:46 504,320 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    + 2004-08-04 07:56:50 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    - 2002-09-03 16:39:48 20,992 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
    + 2004-08-04 07:56:42 22,528 -c----w c:\windows\$NtServicePackUninstall$\lpdsvc.dll
    - 2002-09-03 16:39:48 18,944 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    + 2004-08-04 07:56:42 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    - 2002-09-03 16:39:49 8,704 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    + 2004-08-04 07:56:42 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    - 2002-09-03 16:39:50 17,408 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
    + 2004-08-04 07:56:42 18,944 -c----w c:\windows\$NtServicePackUninstall$\lprmon.dll
    - 2004-10-28 01:29:54 681,984 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    + 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    - 2002-09-03 16:39:51 11,776 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-04 07:56:50 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-04 06:00:06 7,040 -c----w c:\windows\$NtServicePackUninstall$\ltotape.sys
    - 2002-09-03 16:39:58 67,584 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    + 2004-08-04 07:56:50 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    - 2002-09-03 16:40:02 79,360 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    + 2004-08-04 07:56:50 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    - 2002-09-03 16:40:06 12,800 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-04 07:56:42 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    - 2002-09-03 16:40:09 80,384 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-04 07:56:42 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    - 2002-09-03 16:40:11 33,280 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-04 07:56:42 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    - 2002-09-03 16:40:11 20,992 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-04 07:56:42 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    - 2002-09-03 16:40:12 22,016 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-04 07:56:42 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    - 2002-09-03 16:40:43 108,544 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-04 07:56:42 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-04 07:56:42 86,016 -c----w c:\windows\$NtServicePackUninstall$\mdmxsdk.dll
    + 2004-08-04 06:00:49 26,112 -c----w c:\windows\$NtServicePackUninstall$\memstpci.sys
    - 2002-09-03 16:31:57 62,208 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    + 2004-08-04 06:07:44 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    - 2004-03-30 01:48:36 36,864 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
    - 2002-09-03 16:41:33 995,383 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
     
    FLYNDAGGER,
    #5
  7. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2004-08-04 07:56:42 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
    - 2002-09-03 16:41:34 995,384 -c----w c:\windows\$NtServicePackUninstall$\mfc42u.dll
    + 2004-08-04 07:56:42 1,024,000 -c----w c:\windows\$NtServicePackUninstall$\mfc42u.dll
    - 2002-09-03 16:41:36 20,992 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-04 07:56:42 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    - 2002-09-03 16:41:42 12,800 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-04 07:56:42 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    - 2002-09-03 16:41:44 17,920 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    + 2004-08-04 07:56:42 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    - 2002-09-03 16:41:46 179,200 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    + 2004-08-04 07:56:42 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    - 2002-09-03 16:41:48 56,320 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-04 07:56:42 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    - 2002-09-03 16:41:48 98,816 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    + 2004-08-04 07:56:50 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    - 2004-02-17 18:50:10 6,656 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
    + 2004-08-04 07:56:51 7,680 -c----w c:\windows\$NtServicePackUninstall$\migregdb.exe
    - 2002-09-03 16:41:52 230,400 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2004-08-04 07:56:51 240,128 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2002-09-03 16:41:56 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
    - 2002-09-03 16:42:00 577,024 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    + 2004-08-04 07:56:42 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    - 2002-09-03 16:42:03 774,144 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    + 2004-08-04 07:56:51 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    - 2002-09-03 16:42:03 66,560 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-04 07:56:42 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    - 2002-09-03 16:42:04 1,128,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-04 07:56:42 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    - 2002-09-03 16:42:05 46,592 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-04 07:56:42 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    - 2002-09-03 16:42:06 16,384 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-04 07:56:42 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    - 2002-09-03 16:42:09 32,256 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-04 07:56:42 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    - 2002-09-03 16:42:11 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-04 07:56:51 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    - 2002-09-03 16:42:11 196,096 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-04 07:56:42 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    - 2002-09-03 16:42:12 135,680 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-04 07:56:51 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    - 2002-09-03 16:31:57 28,800 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    + 2004-08-04 06:08:05 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    - 2002-09-03 16:42:15 145,408 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    + 2004-08-04 07:56:42 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    - 2002-09-03 16:42:16 15,360 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-04 07:56:51 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    - 2002-09-03 16:42:17 104,960 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2004-08-04 07:56:42 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2002-09-03 16:42:23 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
    - 2002-09-03 16:42:24 210,944 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    + 2004-08-04 07:56:11 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    - 2002-08-29 06:27:02 22,016 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-04 05:58:32 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    - 2002-09-03 16:42:24 37,504 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-04 05:58:30 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    - 2002-09-03 16:42:39 806,969 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2002-12-20 18:06:00 3,366,912 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-04 06:10:12 15,360 -c----w c:\windows\$NtServicePackUninstall$\mpe.sys
    - 2002-09-03 16:42:43 116,736 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-04 07:56:52 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    - 2002-09-03 16:42:44 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
    + 2004-08-04 07:56:52 4,639 -c----w c:\windows\$NtServicePackUninstall$\mplayer2.exe
    - 2002-09-03 16:42:47 55,808 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    + 2004-08-04 07:56:42 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    - 2002-09-03 16:42:48 79,360 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-04 07:56:42 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2002-09-03 16:42:48 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
    - 2002-09-03 16:42:53 172,672 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    + 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    - 2004-10-12 16:22:52 436,608 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.001
    - 2002-09-03 16:43:47 67,072 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-04 07:56:42 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    - 2002-09-03 16:43:48 307,200 -c----w c:\windows\$NtServicePackUninstall$\msadce.dll
    + 2004-08-04 07:56:42 331,776 -c----w c:\windows\$NtServicePackUninstall$\msadce.dll
    - 2002-09-03 16:43:49 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-04 07:56:12 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    - 2002-09-03 16:43:49 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-04 07:56:42 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    - 2002-09-03 16:43:50 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    + 2004-08-04 07:56:12 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    - 2002-09-03 16:43:51 131,072 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    - 2002-09-03 16:43:51 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-04 07:56:12 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    - 2002-09-03 16:43:51 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-04 07:56:42 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    - 2002-09-03 16:43:52 147,456 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    + 2004-08-04 07:56:42 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    - 2002-09-03 16:43:53 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-04 07:56:12 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    - 2002-09-03 16:43:53 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    + 2004-08-04 07:56:12 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    - 2002-09-03 16:43:54 487,424 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    - 2002-09-03 16:43:56 159,744 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    - 2002-09-03 16:43:57 49,152 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    - 2002-09-03 16:43:57 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    - 2002-09-03 16:43:58 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    - 2002-09-03 16:43:59 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    + 2004-08-04 07:56:12 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    - 2002-09-03 16:43:59 80,128 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-04 07:56:42 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    - 2004-03-30 01:48:36 51,712 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-04 07:56:42 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    - 2002-09-03 16:44:02 203,776 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    + 2004-08-04 07:56:42 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    - 2002-09-03 16:44:04 68,096 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    + 2008-06-24 16:23:05 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    - 2002-09-03 16:44:05 65,536 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    + 2004-08-04 07:56:42 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    - 2002-09-03 16:44:05 145,408 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    + 2004-08-04 07:56:53 158,208 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    - 2002-09-03 16:44:07 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-04 07:56:12 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    - 2002-09-03 16:44:07 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    + 2004-08-04 07:56:42 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    - 2002-09-03 16:44:07 266,752 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    - 2002-09-03 16:44:08 67,584 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-04 07:56:42 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    - 2002-09-03 16:44:09 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-04 07:56:42 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
    - 2002-09-03 16:44:09 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    - 2002-09-03 16:44:10 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-04 07:56:42 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-04 07:56:43 532,480 -c----w c:\windows\$NtServicePackUninstall$\msdaipp.dll
    - 2002-09-03 16:44:10 221,184 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-04 07:56:43 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    - 2002-09-03 16:44:11 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    - 2002-09-03 16:44:11 73,728 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-04 07:56:43 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    - 2002-09-03 16:44:12 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    - 2002-09-03 16:44:12 180,224 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-04 07:56:43 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    - 2002-09-03 16:44:13 188,416 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-04 07:56:43 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    - 2002-09-03 16:44:13 110,592 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-04 07:56:43 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    - 2002-09-03 16:44:14 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    - 2002-09-03 16:44:14 126,976 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    + 2004-08-04 07:56:43 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    - 2002-09-03 16:44:15 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-04 07:56:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    - 2002-09-03 16:44:16 303,104 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-04 07:56:43 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    - 2002-09-03 16:44:16 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-04 07:56:13 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    - 2002-09-03 16:44:16 86,016 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-04 07:56:43 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    - 2002-09-03 16:44:17 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-04 07:56:43 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    - 2002-09-03 16:44:18 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-04 07:56:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    - 2002-09-03 16:44:18 32,768 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-04 07:56:43 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    - 2002-09-03 16:44:19 11,264 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-04 07:56:43 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    - 2002-09-03 16:44:21 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-04 07:56:53 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    - 2002-09-03 16:44:21 54,784 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    + 2004-08-04 07:56:43 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    - 2004-03-06 02:16:10 367,616 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2002-09-03 16:44:23 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
    - 2004-03-06 02:16:11 977,920 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    - 2004-03-06 02:16:10 150,528 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2004-08-04 06:09:58 51,328 -c----w c:\windows\$NtServicePackUninstall$\msdv.sys
    - 2002-09-03 16:44:27 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-04 07:56:13 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    - 2002-09-03 16:44:28 512,031 -c----w c:\windows\$NtServicePackUninstall$\msexch40.dll
    + 2004-08-04 07:56:43 512,029 -c----w c:\windows\$NtServicePackUninstall$\msexch40.dll
    - 2002-09-03 16:44:29 319,519 -c----w c:\windows\$NtServicePackUninstall$\msexcl40.dll
    + 2004-08-04 07:56:43 319,517 -c----w c:\windows\$NtServicePackUninstall$\msexcl40.dll
    - 2002-09-03 16:44:40 18,048 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    + 2004-08-04 06:00:41 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    - 2002-09-03 16:44:41 504,832 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    + 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    - 2004-03-30 01:48:36 971,264 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    + 2004-08-04 07:56:43 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    - 2002-09-03 16:44:44 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-04 06:04:12 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    - 2002-09-03 16:44:45 3,346,432 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-04 07:56:43 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    - 2002-09-03 16:44:45 57,374 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-04 07:56:43 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    - 2003-04-15 00:00:16 142,256 -c----w c:\windows\$NtServicePackUninstall$\msgsc.dll
    + 2004-08-04 07:56:43 82,944 -c----w c:\windows\$NtServicePackUninstall$\msgsc.dll
    - 2003-04-15 00:01:28 224,184 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-04 07:56:13 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    - 2002-09-03 16:44:46 34,304 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-04 07:56:43 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-04 07:56:57 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
    + 2004-08-04 07:56:57 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
    - 2002-09-03 16:44:49 24,064 -c----w c:\windows\$NtServicePackUninstall$\mshta.exe
    + 2004-08-04 07:56:53 29,184 -c----w c:\windows\$NtServicePackUninstall$\mshta.exe
    - 2005-02-24 18:23:26 2,811,904 -c----w c:\windows\$NtServicePackUninstall$\mshtml.dll
    + 2004-08-04 07:56:43 3,003,392 -c----w c:\windows\$NtServicePackUninstall$\mshtml.dll
    - 2002-09-03 16:44:51 440,320 -c----w c:\windows\$NtServicePackUninstall$\mshtmled.dll
    + 2004-08-04 07:56:43 448,512 -c----w c:\windows\$NtServicePackUninstall$\mshtmled.dll
    - 2002-09-03 16:44:52 56,320 -c----w c:\windows\$NtServicePackUninstall$\mshtmler.dll
    + 2004-08-04 07:56:14 56,832 -c----w c:\windows\$NtServicePackUninstall$\mshtmler.dll
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
    - 2002-09-03 16:44:54 44,032 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    + 2004-08-04 07:56:43 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    - 2002-09-03 16:44:55 5,120 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    + 2004-08-04 07:56:43 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    - 2002-09-03 16:44:56 229,888 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2004-08-04 07:56:43 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2005-03-21 20:00:22 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
    + 2005-03-21 20:00:22 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
    - 2002-09-03 16:44:58 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-04 07:56:43 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    - 2002-09-03 16:44:59 57,344 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2004-08-04 07:56:53 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2005-03-21 20:00:22 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
    - 2002-09-03 16:45:00 143,872 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-04 07:56:43 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    - 2002-09-03 16:45:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-04 07:56:43 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2004-08-04 06:00:46 22,016 -c----w c:\windows\$NtServicePackUninstall$\msircomm.sys
    - 2002-09-03 16:45:04 34,816 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
    + 2004-08-04 07:56:53 40,960 -c----w c:\windows\$NtServicePackUninstall$\msiregmv.exe
    + 2005-03-21 20:00:22 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
    - 2002-09-03 16:45:08 1,503,262 -c----w c:\windows\$NtServicePackUninstall$\msjet40.dll
    + 2004-08-04 07:56:43 1,507,356 -c----w c:\windows\$NtServicePackUninstall$\msjet40.dll
    - 2002-09-03 16:45:08 348,195 -c----w c:\windows\$NtServicePackUninstall$\msjetol1.dll
    + 2004-07-17 18:34:46 358,976 -c----w c:\windows\$NtServicePackUninstall$\msjetol1.dll
    - 2002-09-03 16:45:09 151,626 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    - 2002-09-03 16:45:09 90,112 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    - 2002-09-03 16:45:10 53,322 -c----w c:\windows\$NtServicePackUninstall$\msjter40.dll
    + 2004-08-04 07:56:43 53,279 -c----w c:\windows\$NtServicePackUninstall$\msjter40.dll
    - 2002-09-03 16:45:10 241,695 -c----w c:\windows\$NtServicePackUninstall$\msjtes40.dll
    + 2004-08-04 07:56:43 241,693 -c----w c:\windows\$NtServicePackUninstall$\msjtes40.dll
    - 2002-08-29 01:27:12 7,040 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-04 05:58:41 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    - 2002-09-03 16:45:11 22,528 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-04 07:56:43 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    - 2002-09-03 16:45:12 213,023 -c----w c:\windows\$NtServicePackUninstall$\msltus40.dll
    + 2004-08-04 07:56:43 213,023 -c----w c:\windows\$NtServicePackUninstall$\msltus40.dll
    - 2002-09-03 16:45:13 36,352 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-04 07:56:43 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    - 2004-11-15 21:18:50 1,670,144 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-04 07:56:53 1,667,584 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    - 2002-09-03 16:45:38 319,760 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-04 07:56:43 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    - 2002-09-03 16:45:39 112,128 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-04 07:56:43 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    - 2002-09-03 16:45:40 14,336 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-04 07:56:43 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    - 2002-09-03 16:45:41 536,576 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-04 07:56:43 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    - 2002-09-03 16:45:42 28,160 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-04 07:56:43 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    - 2002-09-03 16:45:43 16,896 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    + 2004-08-04 07:56:43 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    - 2002-09-03 16:45:44 1,174,016 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    - 2002-09-03 16:45:46 228,864 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-04 07:56:43 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    - 2002-09-03 16:45:48 2,479,104 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-04 07:56:18 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    - 2002-09-03 16:45:48 81,408 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-04 07:56:43 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2002-09-03 16:45:49 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
    - 2002-09-03 16:45:49 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-04 07:56:18 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    - 2002-09-03 16:45:50 131,072 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-04 07:56:43 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    - 2002-09-03 16:45:51 339,968 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-04 07:56:53 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    - 2002-09-03 16:45:52 27,136 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 07:56:43 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    - 2002-09-03 16:45:52 348,191 -c----w c:\windows\$NtServicePackUninstall$\mspbde40.dll
    + 2004-08-04 07:56:43 348,189 -c----w c:\windows\$NtServicePackUninstall$\mspbde40.dll
    - 2001-08-17 13:48:42 5,120 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 05:58:38 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    - 2001-08-17 13:48:46 4,608 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-04 05:58:40 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    - 2002-09-03 16:45:56 45,056 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-04 07:56:18 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    - 2005-02-24 16:54:42 132,096 -c----w c:\windows\$NtServicePackUninstall$\msrating.dll
    + 2004-08-04 07:56:43 146,432 -c----w c:\windows\$NtServicePackUninstall$\msrating.dll
    - 2002-09-03 16:46:04 421,919 -c----w c:\windows\$NtServicePackUninstall$\msrd2x40.dll
    + 2004-08-04 07:56:43 421,919 -c----w c:\windows\$NtServicePackUninstall$\msrd2x40.dll
    - 2002-09-03 16:46:05 315,466 -c----w c:\windows\$NtServicePackUninstall$\msrd3x40.dll
    + 2004-08-04 07:56:43 315,423 -c----w c:\windows\$NtServicePackUninstall$\msrd3x40.dll
    - 2002-09-03 16:46:07 552,991 -c----w c:\windows\$NtServicePackUninstall$\msrepl40.dll
    + 2004-08-04 07:56:43 552,989 -c----w c:\windows\$NtServicePackUninstall$\msrepl40.dll
    - 2002-09-03 16:46:09 10,240 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    + 2004-08-04 07:56:43 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    - 2002-09-03 16:46:09 172,032 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 07:56:43 134,656 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 06:07:47 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
    - 2004-03-30 01:48:36 253,952 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    + 2004-08-04 07:56:43 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    - 2002-09-03 16:46:15 49,152 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-04 07:56:43 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-04 06:09:58 49,024 -c----w c:\windows\$NtServicePackUninstall$\mstape.sys
    - 2002-09-03 16:46:16 250,368 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 07:56:43 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 06:58:38 5,504 -c----w c:\windows\$NtServicePackUninstall$\mstee.sys
    - 2002-09-03 16:46:18 253,983 -c----w c:\windows\$NtServicePackUninstall$\mstext40.dll
    + 2004-08-04 07:56:43 258,077 -c----w c:\windows\$NtServicePackUninstall$\mstext40.dll
    - 2002-09-03 16:46:19 496,128 -c----w c:\windows\$NtServicePackUninstall$\mstime.dll
    + 2004-08-04 07:56:43 530,432 -c----w c:\windows\$NtServicePackUninstall$\mstime.dll
    - 2002-09-03 16:46:20 9,728 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-04 07:56:53 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    - 2002-09-03 16:46:20 103,936 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-04 07:56:43 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    - 2002-09-03 16:46:21 388,608 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    + 2004-08-04 05:59:40 407,552 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    - 2002-09-03 16:46:22 598,016 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    + 2004-08-04 05:59:43 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    - 2002-09-03 16:46:24 182,784 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    + 2004-08-04 07:56:43 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    - 2002-09-03 16:46:24 108,544 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    + 2004-08-04 07:56:43 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    - 2002-09-03 16:46:26 1,388,544 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-04 07:56:43 1,392,671 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    - 2002-09-03 16:46:26 50,688 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-04 07:56:43 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    - 2002-09-03 16:46:27 401,462 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-04 07:56:43 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    - 2002-09-03 16:46:28 323,072 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-04 07:56:43 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    - 2002-09-03 16:46:29 65,024 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-04 05:58:25 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    - 2002-09-03 16:46:29 113,664 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-04 07:56:43 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    - 2002-09-03 16:46:31 1,220,608 -c----w c:\windows\$NtServicePackUninstall$\msvidctl.dll
    + 2004-08-04 07:56:43 1,428,480 -c----w c:\windows\$NtServicePackUninstall$\msvidctl.dll
    - 2002-09-03 16:46:32 66,048 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-04 07:56:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    - 2002-09-03 16:46:32 831,562 -c----w c:\windows\$NtServicePackUninstall$\mswdat10.dll
    + 2004-08-04 07:56:44 831,519 -c----w c:\windows\$NtServicePackUninstall$\mswdat10.dll
    - 2002-09-03 16:46:33 192,512 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    + 2004-08-04 07:56:44 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    - 2002-09-03 16:46:35 228,352 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    - 2002-09-03 16:46:36 614,474 -c----w c:\windows\$NtServicePackUninstall$\mswstr10.dll
    + 2004-08-04 07:56:44 614,429 -c----w c:\windows\$NtServicePackUninstall$\mswstr10.dll
    - 2002-09-03 16:46:36 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-04 07:56:44 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    - 2002-09-03 16:46:37 344,095 -c----w c:\windows\$NtServicePackUninstall$\msxbde40.dll
    + 2004-08-04 07:56:44 348,189 -c----w c:\windows\$NtServicePackUninstall$\msxbde40.dll
    - 2002-09-03 16:46:37 495,376 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    + 2004-08-04 07:56:44 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    - 2002-09-03 16:46:38 699,392 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    + 2004-08-04 07:56:44 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    - 2002-09-03 16:46:39 1,122,304 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtServicePackUninstall$\msxml3.dll
    - 2002-09-03 16:31:57 16,384 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2002-09-03 16:46:41 111,104 -c----w c:\windows\$NtServicePackUninstall$\mtstocom.exe
    - 2004-03-06 02:16:10 64,512 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2002-09-03 16:46:42 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
    + 2002-09-03 16:46:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
    + 2002-09-03 16:46:43 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
    - 2004-03-06 02:16:10 82,432 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-04 07:56:44 1,737,856 -c----w c:\windows\$NtServicePackUninstall$\mtxparhd.dll
    + 2004-08-04 07:56:53 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
    - 2002-09-03 16:46:48 104,064 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-04 06:15:20 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-04 06:04:51 12,672 -c----w c:\windows\$NtServicePackUninstall$\mutohpen.sys
    - 2002-09-03 16:46:57 88,064 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 07:56:44 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 07:10:28 85,376 -c----w c:\windows\$NtServicePackUninstall$\nabtsfec.sys
    - 2002-09-03 16:46:59 208,896 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
    + 2004-08-04 07:56:44 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
    - 2002-09-03 16:47:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    + 2004-08-04 07:56:54 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    - 2002-09-03 16:47:03 42,496 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-04 07:56:44 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    - 2002-09-03 16:47:04 60,416 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-04 07:56:44 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-04 07:56:44 9,728 -c----w c:\windows\$NtServicePackUninstall$\ncpsres.dll
    - 2002-09-03 16:47:07 15,360 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-04 07:56:44 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    - 2002-09-03 16:47:07 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-04 07:56:54 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    - 2002-09-03 16:47:08 16,384 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    - 2002-09-03 16:47:08 167,552 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 06:14:28 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 07:10:12 10,880 -c----w c:\windows\$NtServicePackUninstall$\ndisip.sys
    - 2002-09-03 16:47:09 54,272 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-04 07:56:44 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2002-09-03 16:47:10 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
    - 2002-09-03 17:04:09 12,288 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    + 2004-08-04 06:03:12 12,928 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    - 2002-09-03 16:47:11 87,552 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-04 06:14:31 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2002-09-03 16:47:12 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
    - 2002-09-03 16:47:14 39,424 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    + 2004-08-04 07:56:54 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    - 2002-09-03 16:47:15 115,200 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    + 2004-08-04 07:56:54 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    - 2004-03-30 01:48:36 306,176 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    + 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    - 2002-09-03 16:47:36 33,152 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    + 2004-08-04 06:03:21 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    - 2002-09-03 16:47:40 157,056 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    + 2004-08-04 06:14:37 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    - 2002-09-03 16:47:46 584,192 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-04 07:56:44 622,080 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    - 2002-09-03 16:47:51 105,984 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    + 2004-08-04 07:56:54 111,104 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    - 2002-09-03 16:48:14 134,656 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    + 2004-08-04 07:56:44 139,264 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    - 2002-09-03 16:48:22 399,360 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    + 2004-08-04 07:56:44 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    - 2002-09-03 16:48:24 154,112 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    - 2002-09-03 16:48:33 71,168 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    + 2004-08-04 07:56:44 77,312 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    - 2002-09-03 16:48:36 857,600 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-04 07:56:44 875,008 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    - 2002-09-03 16:48:39 10,752 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
    + 2004-08-04 07:56:44 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
     
    FLYNDAGGER,
    #6
  8. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    - 2002-09-03 16:48:45 326,656 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-04 08:02:44 329,728 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    - 2002-09-03 16:48:46 82,944 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    + 2004-08-04 07:56:54 86,016 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    - 2002-09-03 16:48:46 1,622,528 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    + 2004-08-04 07:56:44 1,708,032 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    - 2002-09-03 16:48:51 30,720 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    + 2004-08-04 07:56:54 36,864 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    - 2002-09-03 16:48:55 74,752 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    + 2004-08-04 07:56:44 80,896 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    - 2002-09-03 16:48:55 230,400 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    + 2004-08-04 07:56:44 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    - 2002-09-03 16:49:06 238,080 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    + 2004-08-04 07:56:44 248,832 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    - 2002-09-03 17:04:09 57,984 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-04 05:58:29 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    - 2002-09-03 16:49:20 95,744 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-04 07:56:44 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    - 2002-09-03 16:49:22 217,088 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    + 2004-08-04 07:56:44 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    - 2002-09-03 16:49:23 20,480 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-04 07:56:44 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    - 2002-09-03 16:49:24 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-04 07:56:44 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    - 2004-03-30 01:48:36 73,728 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-04 07:56:44 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    - 2002-09-03 16:49:26 143,360 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    + 2004-08-04 07:56:44 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    - 2002-09-03 16:49:26 24,576 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-04 07:56:44 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    - 2002-09-03 16:49:27 38,272 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-04 05:59:50 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    - 2002-09-03 16:49:28 163,840 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-04 07:56:44 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    - 2002-09-03 16:49:29 180,224 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-04 07:56:44 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    - 2002-09-03 16:49:40 66,048 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    + 2004-08-04 07:56:54 69,120 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    - 2002-09-03 16:49:46 157,696 -c----w c:\windows\$NtServicePackUninstall$\npdrmv2.dll
    + 2004-08-04 07:57:01 226,816 -c----w c:\windows\$NtServicePackUninstall$\npdrmv2.dll
    - 2002-09-03 16:49:49 364,544 -c----w c:\windows\$NtServicePackUninstall$\npdsplay.dll
    + 2005-11-29 22:27:06 364,544 -c----w c:\windows\$NtServicePackUninstall$\npdsplay.dll
    - 2002-09-03 16:49:49 29,568 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    + 2004-08-04 06:00:43 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    - 2002-09-03 16:49:50 13,824 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-04 07:56:54 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    - 2002-09-03 16:49:50 49,152 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    + 2004-08-04 07:56:44 54,784 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    - 2002-09-03 16:49:51 8,223 -c----w c:\windows\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-04 07:56:44 10,240 -c----w c:\windows\$NtServicePackUninstall$\npwmsdrm.dll
    + 2004-08-04 06:00:50 28,672 -c----w c:\windows\$NtServicePackUninstall$\nscirda.sys
    - 2002-09-03 16:49:52 71,680 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-04 07:56:54 76,800 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    - 2002-09-03 16:49:58 668,672 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-04 07:56:36 708,096 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    - 2002-09-03 16:50:01 64,512 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-04 07:56:44 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    - 2002-09-03 16:50:02 203,264 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    + 2004-08-04 07:56:44 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    - 2002-09-03 16:50:04 561,920 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    + 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    - 2005-03-02 00:36:43 1,900,032 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2007-02-28 09:08:48 2,136,064 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe.001
    - 2005-03-02 00:36:42 1,955,840 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2007-02-28 08:38:55 2,057,600 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2007-02-28 08:38:55 2,057,600 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe.001
    - 2005-03-02 00:36:43 1,928,704 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2007-02-28 08:38:57 2,015,744 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe.001
    - 2002-09-03 16:50:10 38,400 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    - 2002-09-03 16:50:12 6,656 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-04 07:56:44 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    - 2002-09-03 16:50:13 112,128 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-04 07:56:44 118,784 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    - 2002-09-03 16:50:13 38,400 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-04 07:56:44 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    - 2002-09-03 16:50:14 165,888 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-04 07:56:44 179,712 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    - 2002-09-03 16:50:15 460,288 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-04 07:56:44 488,448 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    - 2002-09-03 16:50:16 392,704 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-04 07:56:44 435,200 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    - 2002-09-03 16:50:17 61,440 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    + 2004-08-04 07:56:44 62,976 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    - 2005-03-02 01:33:36 2,040,832 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2007-02-28 09:10:57 2,180,352 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2007-02-28 09:10:57 2,180,352 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe.001
    - 2002-09-03 16:50:19 80,896 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-04 07:56:44 91,136 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    - 2002-09-03 16:50:22 137,216 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-04 07:56:44 143,872 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    - 2002-09-03 16:50:23 395,776 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-04 07:56:54 419,840 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2002-09-03 16:50:24 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
    - 2002-04-18 16:08:48 3,416,077 -c----w c:\windows\$NtServicePackUninstall$\nv4_disp.dll
    + 2004-08-04 07:56:44 4,274,816 -c----w c:\windows\$NtServicePackUninstall$\nv4_disp.dll
    - 2002-09-03 16:50:31 84,864 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    + 2004-08-04 06:03:35 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    - 2002-09-03 16:50:33 133,632 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 12:35:12 142,336 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    - 2002-09-03 16:50:34 328,704 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    + 2004-08-04 07:56:44 266,752 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    - 2002-09-03 16:50:35 271,360 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-04 07:56:44 285,696 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-04 07:56:22 405,504 -c----w c:\windows\$NtServicePackUninstall$\obrb041b.dll
    + 2004-08-04 07:56:22 408,576 -c----w c:\windows\$NtServicePackUninstall$\obrb0424.dll
    - 2002-09-03 16:50:36 87,552 -c----w c:\windows\$NtServicePackUninstall$\occache.dll
    + 2004-08-04 07:56:44 96,256 -c----w c:\windows\$NtServicePackUninstall$\occache.dll
    - 2002-09-03 16:50:37 12,800 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-04 07:56:44 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2002-09-03 16:50:37 60,928 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
    - 2002-09-03 16:50:38 40,960 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    - 2002-09-03 16:50:39 200,704 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-04 07:56:44 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    - 2002-09-03 16:50:40 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-04 07:56:44 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    - 2002-09-03 16:50:40 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-04 07:56:54 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    - 2002-09-03 16:50:40 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-04 07:56:44 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    - 2002-09-03 16:50:41 122,880 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-04 07:56:44 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    - 2002-09-03 16:50:41 53,248 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-04 07:56:54 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    - 2002-09-03 16:50:43 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-04 07:56:44 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    - 2002-09-03 16:50:44 61,440 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    - 2002-09-03 16:50:44 61,440 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    - 2002-09-03 16:50:46 90,112 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-04 07:56:22 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    - 2002-09-03 16:50:47 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-04 07:56:22 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    - 2002-09-03 16:50:48 270,365 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-04 07:56:44 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    - 2002-09-03 16:50:48 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-04 07:56:22 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    - 2002-09-03 16:50:49 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-04 07:56:44 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    - 2002-09-03 16:50:49 20,554 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-04 07:56:44 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    - 2002-09-03 16:50:50 20,553 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    - 2002-09-03 16:50:51 20,553 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    - 2002-09-03 16:50:51 20,553 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-04 07:56:44 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    - 2002-09-03 16:50:52 20,554 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-04 07:56:44 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    - 2002-09-03 16:50:53 92,672 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-04 07:56:44 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    - 2002-09-03 16:50:54 55,808 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-04 07:56:54 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    - 2002-09-03 16:50:54 32,256 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-04 07:56:44 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    - 2002-09-03 16:50:56 109,568 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2004-08-04 07:56:44 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2004-08-04 06:10:08 61,056 -c----w c:\windows\$NtServicePackUninstall$\ohci1394.sys
    - 2005-01-14 05:33:52 1,258,496 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    + 2005-07-26 04:39:48 1,285,120 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    - 2002-09-03 16:51:00 569,344 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 04:39:48 74,752 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 04:39:49 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
    - 2002-09-03 16:51:03 413,696 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-04 07:56:44 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    - 2002-09-03 16:51:04 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2004-08-04 07:56:44 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
    - 2002-09-03 16:51:06 98,304 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-04 07:56:44 107,008 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    - 2002-09-03 16:51:07 106,496 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-04 07:56:44 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    - 2002-09-03 16:51:11 49,664 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-04 07:56:54 51,200 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    - 2002-09-03 16:51:13 686,080 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-04 07:56:44 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-04 06:00:21 166,400 -c----w c:\windows\$NtServicePackUninstall$\oschoice.exe
    - 2002-09-03 16:51:18 212,480 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-04 07:56:55 215,552 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-04 05:59:33 230,400 -c----w c:\windows\$NtServicePackUninstall$\osloader.exe
    - 2002-09-03 16:51:21 61,952 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-04 07:56:44 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-04 07:56:44 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
    + 2004-08-04 07:56:44 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
    + 2004-08-04 07:56:44 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
    + 2004-08-04 07:56:44 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
    + 2004-08-04 07:56:44 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
    - 2002-09-03 17:04:09 37,504 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    + 2004-08-04 05:59:19 42,496 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    - 2002-09-03 16:51:25 53,248 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2004-08-04 07:56:55 58,368 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2002-09-03 16:25:51 15,872 -c----w c:\windows\$NtServicePackUninstall$\padrs404.dll
    + 2002-09-03 16:25:52 15,360 -c----w c:\windows\$NtServicePackUninstall$\padrs804.dll
    - 2002-09-03 17:04:09 76,032 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2004-08-04 05:59:06 80,128 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2002-09-03 16:51:32 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
    - 2002-09-03 16:51:34 58,880 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-04 07:56:44 62,976 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    - 2002-09-03 16:51:37 97,792 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-04 07:56:44 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    - 2002-09-03 16:51:37 29,696 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-04 07:56:44 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    - 2002-09-03 16:51:38 62,976 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    + 2004-08-04 06:07:46 68,224 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    - 2002-09-03 16:51:39 23,680 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-04 05:59:41 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-04 07:56:23 676,864 -c----w c:\windows\$NtServicePackUninstall$\pcl5eres.dll
    + 2004-08-04 07:56:23 169,472 -c----w c:\windows\$NtServicePackUninstall$\pclxl.dll
    - 2002-09-03 16:51:41 115,712 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-04 06:07:46 119,936 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    - 2002-09-03 16:51:43 254,976 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    + 2004-08-04 07:56:44 283,648 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    - 2002-09-03 16:51:57 37,376 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-04 07:56:44 39,936 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    - 2002-09-03 16:51:59 23,552 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-04 07:56:44 26,624 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    - 2002-09-03 16:52:02 14,336 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-04 07:56:55 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2002-09-03 16:52:03 16,896 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
    - 2002-09-03 16:52:04 23,040 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    + 2004-08-04 07:56:44 25,088 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    - 2002-09-03 16:52:04 32,256 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2004-08-04 07:56:44 34,816 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2004-08-04 06:06:55 27,904 -c----w c:\windows\$NtServicePackUninstall$\perm2.sys
    + 2004-08-04 07:56:23 211,712 -c----w c:\windows\$NtServicePackUninstall$\perm2dll.dll
    + 2004-08-04 06:06:56 28,032 -c----w c:\windows\$NtServicePackUninstall$\perm3.sys
    + 2004-08-04 07:56:23 259,328 -c----w c:\windows\$NtServicePackUninstall$\perm3dd.dll
    - 2002-09-03 16:52:23 166,912 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-04 07:56:44 176,128 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    - 2002-09-03 17:04:09 31,744 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    + 2004-08-04 07:56:44 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    - 2002-09-03 16:52:25 27,648 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-04 06:04:41 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    - 2002-09-03 16:52:28 272,896 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    + 2004-08-04 07:56:55 281,088 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    - 2002-09-03 16:52:32 16,384 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2004-08-04 07:56:55 17,920 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2002-09-03 16:25:54 175,104 -c----w c:\windows\$NtServicePackUninstall$\pintlcsa.dll
    + 2002-09-03 16:25:55 53,760 -c----w c:\windows\$NtServicePackUninstall$\pintlcsd.dll
    + 2002-09-03 16:26:02 70,144 -c----w c:\windows\$NtServicePackUninstall$\pintlphr.exe
    - 2002-09-03 16:31:57 12,800 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-04 07:56:44 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-04 07:56:44 44,544 -c----w c:\windows\$NtServicePackUninstall$\plotter.dll
    + 2004-08-04 07:56:44 52,736 -c----w c:\windows\$NtServicePackUninstall$\plotui.dll
    + 2002-09-03 16:26:03 67,584 -c----w c:\windows\$NtServicePackUninstall$\pmigrate.dll
    - 2002-09-03 16:52:38 34,304 -c----w c:\windows\$NtServicePackUninstall$\pngfilt.dll
    + 2004-08-04 07:56:44 39,424 -c----w c:\windows\$NtServicePackUninstall$\pngfilt.dll
    + 2004-08-04 07:56:44 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
    - 2002-09-03 16:52:39 87,552 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    + 2004-08-04 07:56:44 105,472 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    - 2002-08-29 02:01:00 134,272 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-08-04 06:15:50 145,792 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-08-04 07:56:55 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
    - 2002-09-03 16:52:44 14,848 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-04 07:56:44 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-04 06:00:16 17,664 -c----w c:\windows\$NtServicePackUninstall$\ppa3.sys
    - 2002-09-03 16:52:53 522,240 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    + 2004-08-04 07:56:44 560,640 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    - 2002-09-03 17:04:09 30,592 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    + 2004-08-04 05:59:17 35,328 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    - 2002-09-03 16:52:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    + 2004-08-04 07:56:44 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    - 2002-09-03 16:52:59 205,824 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    + 2004-08-04 07:56:55 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    - 2002-09-03 16:53:01 45,056 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    + 2004-08-04 07:56:55 50,176 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    - 2002-09-03 16:53:02 226,304 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-04 07:56:44 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-04 07:56:55 9,216 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
    + 2004-08-04 07:56:44 132,608 -c----w c:\windows\$NtServicePackUninstall$\ps5ui.dll
    - 2002-09-03 16:53:04 17,408 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    + 2004-08-04 07:56:44 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    - 2002-09-03 16:53:05 82,944 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    + 2004-08-04 07:56:44 96,768 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    - 2002-09-03 16:53:07 66,048 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 2004-08-04 06:04:19 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 2004-08-04 07:56:44 464,384 -c----w c:\windows\$NtServicePackUninstall$\pscript5.dll
    + 2004-08-04 07:56:44 363,520 -c----w c:\windows\$NtServicePackUninstall$\psisdecd.dll
    - 2002-09-03 16:53:09 37,888 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    - 2002-09-03 16:53:10 25,600 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-04 07:56:44 34,304 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-04 07:56:44 159,232 -c----w c:\windows\$NtServicePackUninstall$\ptpusd.dll
    - 2002-09-03 16:53:16 152,576 -c----w c:\windows\$NtServicePackUninstall$\qasf.dll
    + 2004-08-04 07:56:44 237,568 -c----w c:\windows\$NtServicePackUninstall$\qasf.dll
    - 2002-09-03 16:53:16 184,832 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    + 2004-08-04 07:56:44 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    - 2002-09-03 16:53:17 266,752 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    + 2004-08-04 07:56:44 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    - 2002-09-03 16:53:18 357,376 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-04 07:56:44 385,024 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    - 2002-09-03 16:53:19 511,488 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    + 2004-08-04 07:56:44 562,176 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    - 2002-09-03 16:53:19 734,208 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-04 07:56:24 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-04 06:00:05 6,016 -c----w c:\windows\$NtServicePackUninstall$\qic157.sys
    - 2004-07-01 22:08:18 361,984 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-04 07:56:44 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    - 2004-07-01 22:08:18 17,408 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    - 2002-09-03 16:53:26 18,432 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    + 2004-08-04 07:56:55 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    - 2002-09-03 16:53:27 1,142,784 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    + 2008-05-07 05:18:48 1,287,680 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    - 2002-09-03 16:53:28 1,349,120 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    - 2002-09-03 16:53:31 33,280 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2004-08-04 06:00:51 20,736 -c----w c:\windows\$NtServicePackUninstall$\ramdisk.sys
    - 2002-09-03 16:53:36 6,144 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    + 2006-06-26 17:37:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    - 2002-09-03 16:53:36 217,088 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-04 07:56:44 236,544 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    - 2002-09-03 16:53:37 82,944 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-04 07:56:44 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    - 2002-09-03 16:54:42 57,856 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    + 2004-08-04 07:56:44 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    - 2002-09-03 16:54:44 631,808 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-04 07:56:44 657,920 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    - 2002-09-03 16:54:45 48,384 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-04 06:14:22 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    - 2002-09-03 16:54:45 55,808 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    + 2004-08-04 07:56:44 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    - 2002-09-03 16:54:46 158,720 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    + 2006-06-22 10:47:18 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    - 2002-09-03 16:54:48 54,272 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-04 07:56:55 56,832 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    - 2002-09-03 16:54:48 193,536 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-04 07:56:44 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    - 2002-09-03 16:54:49 38,912 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-04 06:05:07 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    - 2002-09-03 16:54:50 46,336 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-04 06:14:26 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    - 2002-09-03 16:55:56 13,824 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-04 07:56:44 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    - 2002-09-03 16:55:56 54,272 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-04 07:56:44 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    - 2002-09-03 16:55:57 91,136 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    + 2004-08-04 07:56:44 112,128 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    - 2002-09-03 16:55:59 96,256 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-04 07:56:44 102,400 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    - 2002-09-03 16:56:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-04 07:56:55 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    - 2002-09-03 16:56:01 19,968 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    + 2004-08-04 07:56:55 21,504 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    - 2004-10-12 16:22:24 170,112 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    + 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    - 2002-09-03 16:56:02 135,680 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-04 07:56:44 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    - 2002-09-03 16:56:03 44,032 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-04 07:56:55 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    - 2002-09-03 16:56:04 87,304 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 08:01:07 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    - 2002-08-29 06:06:36 182,400 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-04 06:01:15 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    - 2002-09-03 16:56:04 14,848 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    + 2004-08-04 07:56:44 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    - 2002-09-03 16:56:05 115,976 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    + 2005-06-10 04:09:46 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    - 2002-09-03 16:56:05 75,912 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-04 08:01:08 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    - 2002-09-03 16:56:05 12,288 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-04 07:56:55 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    - 2002-09-03 16:56:06 61,952 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-04 07:56:55 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    - 2002-08-29 01:27:46 56,576 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    + 2004-08-04 05:59:37 57,472 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    - 2002-09-03 16:56:11 48,128 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    + 2004-08-04 07:56:55 50,176 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    - 2002-09-03 16:56:13 44,032 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    + 2004-08-04 07:56:44 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    - 2002-09-03 16:56:15 134,144 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    + 2004-08-04 07:56:55 146,432 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    - 2002-09-03 16:56:19 51,712 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-04 07:56:44 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    - 2002-09-03 16:56:19 9,728 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-04 07:56:55 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    - 2002-09-03 16:56:20 387,584 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-04 07:56:44 397,824 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    - 2002-09-03 16:56:22 56,320 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-04 07:56:44 60,416 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    - 2002-09-03 16:56:24 138,240 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-04 07:56:44 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    - 2002-09-03 16:56:25 54,784 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    + 2004-08-04 07:56:44 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    - 2002-09-03 16:56:25 11,776 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2004-08-04 07:56:55 13,824 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2004-08-04 06:10:39 59,648 -c----w c:\windows\$NtServicePackUninstall$\rfcomm.sys
    + 2004-08-04 07:56:44 123,392 -c----w c:\windows\$NtServicePackUninstall$\riafres.dll
    + 2004-08-04 07:56:44 11,776 -c----w c:\windows\$NtServicePackUninstall$\riafui1.dll
    + 2004-08-04 07:56:44 11,776 -c----w c:\windows\$NtServicePackUninstall$\riafui2.dll
    - 2002-09-03 16:56:27 423,424 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2006-11-27 14:54:06 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
    - 2002-09-03 16:56:31 27,648 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2005-10-21 01:47:04 30,592 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2005-10-21 01:47:04 30,592 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys
    + 2005-10-21 01:47:04 30,592 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys.001
    + 2004-08-04 05:59:10 79,104 -c----w c:\windows\$NtServicePackUninstall$\rocket.sys
    - 2004-03-06 02:16:11 535,552 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    + 2007-07-09 13:09:42 584,192 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    - 2005-01-14 05:33:52 284,672 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    + 2005-07-26 04:39:49 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    - 2002-09-03 16:56:43 57,344 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-04 07:56:44 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    - 2002-09-03 16:56:45 133,632 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-04 05:31:43 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    - 2002-09-03 16:56:45 13,312 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    + 2004-08-04 07:56:55 14,848 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    - 2002-09-03 16:56:46 36,352 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-04 07:56:44 39,936 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    - 2002-09-03 16:56:48 18,432 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    - 2002-09-03 16:56:50 370,688 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-04 07:56:55 380,416 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2002-09-03 16:56:52 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
    - 2002-09-03 16:56:54 74,240 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-04 07:56:55 77,312 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    - 2002-09-03 16:56:55 29,696 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-04 07:56:44 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    - 2002-09-03 16:56:57 39,936 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-04 07:56:44 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    - 2002-09-03 16:56:58 31,744 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
    + 2004-08-04 07:56:55 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
    - 2002-09-03 16:56:58 12,800 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2004-08-04 07:56:55 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2002-09-03 16:57:02 24,576 -c----w c:\windows\$NtServicePackUninstall$\rw001ext.dll
    + 2002-09-03 16:57:02 26,624 -c----w c:\windows\$NtServicePackUninstall$\rw330ext.dll
    + 2004-08-04 07:56:44 397,056 -c----w c:\windows\$NtServicePackUninstall$\s3gnb.dll
    - 2002-09-03 16:57:07 39,424 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-04 07:56:44 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    - 2002-09-03 16:57:07 26,624 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-04 07:56:44 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    - 2002-09-03 16:57:08 40,960 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-04 07:56:44 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    - 2002-09-03 16:57:10 54,784 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    + 2004-08-04 07:56:44 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    - 2002-09-03 16:57:11 411,136 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-04 07:56:44 415,744 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    - 2002-09-03 16:57:13 696,320 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    + 2004-08-04 07:56:44 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    - 2002-09-03 16:57:15 19,456 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    + 2004-08-04 07:56:55 13,312 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    - 2002-09-03 16:57:15 218,112 -c----w c:\windows\$NtServicePackUninstall$\sbe.dll
    + 2004-08-04 07:56:44 270,848 -c----w c:\windows\$NtServicePackUninstall$\sbe.dll
    - 2002-09-03 16:57:16 110,080 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
    + 2004-08-04 07:56:44 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
    + 2004-08-04 05:59:56 43,136 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys
    - 2002-09-03 16:58:21 66,560 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-04 07:56:44 69,632 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    - 2002-09-03 16:58:23 93,184 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-04 07:56:55 95,744 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    - 2002-09-03 16:58:24 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-04 07:56:44 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    - 2002-09-03 16:58:25 174,592 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    + 2004-08-04 07:56:44 180,224 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    - 2002-09-03 16:58:29 297,984 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    + 2004-08-04 07:56:44 313,856 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    - 2004-03-30 01:48:36 136,704 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    - 2002-09-03 16:58:32 159,232 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-04 07:56:44 190,976 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    - 2002-09-03 16:58:32 18,432 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-04 07:56:44 20,992 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    - 2002-09-03 16:58:36 33,792 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-04 07:56:55 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    - 2002-09-03 16:58:39 173,056 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    + 2004-08-04 07:56:44 202,752 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    - 2002-09-03 16:58:42 8,192 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-04 07:56:57 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    - 2002-09-03 16:58:43 155,675 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-04 07:56:44 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    - 2002-09-03 16:58:43 147,483 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-04 07:56:44 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    - 2002-09-03 16:58:45 90,240 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-04 05:59:41 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    - 2002-09-03 16:58:46 71,168 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-04 07:56:55 77,312 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-04 06:07:47 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-04 07:56:44 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
    + 2002-09-03 16:58:49 27,440 -c----w c:\windows\$NtServicePackUninstall$\secdrv.sys
    - 2002-09-03 16:58:50 20,992 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-04 07:56:44 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    - 2002-09-03 16:58:54 52,224 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    + 2004-08-04 07:56:44 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    - 2002-09-03 16:58:55 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    + 2004-08-04 07:56:44 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    - 2002-09-03 16:58:56 27,136 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-04 07:56:44 29,184 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    - 2002-09-03 16:58:58 53,248 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-04 07:56:44 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    - 2002-09-03 16:58:59 36,352 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    + 2004-08-04 07:56:44 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    - 2002-09-03 16:58:59 6,144 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
    + 2004-08-04 07:56:44 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
    - 2002-09-03 16:59:02 14,976 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    + 2004-08-04 05:59:07 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    - 2002-09-03 16:59:04 62,464 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    + 2004-08-04 06:15:52 64,896 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    - 2002-09-03 16:59:11 53,248 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-04 07:56:44 56,320 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    - 2002-09-03 16:59:11 101,376 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    + 2004-08-04 07:56:55 108,032 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    - 2002-09-03 16:59:14 129,024 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-04 07:56:56 140,800 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    - 2002-09-03 16:59:14 28,672 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    + 2004-08-04 07:56:56 31,232 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    - 2002-09-03 16:59:15 20,992 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    + 2004-08-04 07:56:56 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    - 2002-09-03 16:59:16 67,584 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    + 2004-08-04 07:56:56 73,216 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    - 2002-09-03 16:59:18 932,864 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-04 05:56:46 983,552 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    - 2002-09-03 16:59:21 99,328 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-04 07:56:44 101,376 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    - 2002-09-03 16:59:25 4,096 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    + 2004-08-04 07:56:44 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    - 2002-09-03 16:59:26 133,120 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-04 07:56:44 140,288 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    - 2002-09-03 16:59:26 1,157,632 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-04 07:56:45 1,580,544 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-04 05:59:54 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-04 05:59:54 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
    - 2002-09-03 16:59:27 10,496 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-04 05:59:54 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    - 2002-09-03 16:59:31 548,864 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    + 2004-08-04 07:56:27 549,376 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    - 2005-02-18 20:09:00 1,337,344 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    + 2008-04-21 06:56:58 1,499,136 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    - 2005-03-12 01:51:16 8,348,672 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    + 2007-10-26 03:34:01 8,460,288 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    - 2002-09-03 16:59:35 22,528 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-04 07:56:45 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    - 2002-09-03 16:59:36 62,976 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    + 2004-08-04 07:56:45 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    - 2002-09-03 16:59:37 60,416 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-04 07:56:45 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    - 2002-09-03 16:59:37 420,864 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    + 2004-08-04 07:56:45 438,272 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    - 2004-12-07 23:11:50 402,432 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    + 2008-04-21 06:56:58 474,112 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    - 2002-09-03 16:59:39 126,464 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-04 07:56:45 151,552 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    - 2002-09-03 16:59:40 33,280 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
    + 2004-08-04 07:56:56 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
    - 2002-09-03 16:59:40 69,632 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
    + 2004-08-04 07:56:56 77,824 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
    - 2002-09-03 16:59:41 23,040 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
    + 2004-08-04 07:56:45 27,648 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
    - 2004-10-28 01:29:54 116,736 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
    + 2006-12-19 21:52:18 134,656 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
    - 2002-05-14 17:08:54 20,536 -c----w c:\windows\$NtServicePackUninstall$\shtml.dll
    + 2004-08-04 07:56:45 20,536 -c----w c:\windows\$NtServicePackUninstall$\shtml.dll
    - 2002-05-14 17:08:54 16,437 -c----w c:\windows\$NtServicePackUninstall$\shtml.exe
    + 2004-08-04 07:56:56 16,437 -c----w c:\windows\$NtServicePackUninstall$\shtml.exe
    - 2002-09-03 16:59:42 17,920 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
    + 2004-08-04 07:56:56 19,456 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
    - 2002-09-03 16:59:46 11,776 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
    + 2004-08-04 07:56:45 13,312 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
    - 2002-09-03 16:59:47 66,048 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-04 07:56:56 70,144 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-04 07:56:45 3,901 -c----w c:\windows\$NtServicePackUninstall$\siint5.dll
    + 2004-08-04 06:07:42 41,088 -c----w c:\windows\$NtServicePackUninstall$\sisagp.sys
    - 2002-09-03 17:01:18 24,064 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
    + 2004-08-04 07:56:56 26,112 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
    - 2002-09-03 17:01:21 22,528 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
    + 2004-08-04 07:56:45 25,088 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
    - 2002-09-03 17:01:22 89,600 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-04 07:56:45 98,304 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-04 07:56:45 73,832 -c----w c:\windows\$NtServicePackUninstall$\slcoinst.dll
    + 2004-08-04 07:56:45 286,792 -c----w c:\windows\$NtServicePackUninstall$\slextspk.dll
    + 2004-08-04 07:56:45 188,508 -c----w c:\windows\$NtServicePackUninstall$\slgen.dll
    + 2004-08-04 07:10:16 11,136 -c----w c:\windows\$NtServicePackUninstall$\slip.sys
    + 2004-08-04 07:56:56 32,866 -c----w c:\windows\$NtServicePackUninstall$\slrundll.exe
    + 2004-08-04 07:56:56 73,796 -c----w c:\windows\$NtServicePackUninstall$\slserv.exe
    + 2004-08-04 06:07:36 6,016 -c----w c:\windows\$NtServicePackUninstall$\smbali.sys
    + 2004-08-04 06:07:35 16,128 -c----w c:\windows\$NtServicePackUninstall$\smbbatt.sys
    + 2004-08-04 06:07:35 6,912 -c----w c:\windows\$NtServicePackUninstall$\smbclass.sys
    + 2004-08-04 07:56:56 8,192 -c----w c:\windows\$NtServicePackUninstall$\smbinst.exe
    - 2002-09-03 17:02:54 226,304 -c----w c:\windows\$NtServicePackUninstall$\smi2smir.exe
    + 2004-08-04 07:56:56 236,544 -c----w c:\windows\$NtServicePackUninstall$\smi2smir.exe
    - 2002-09-03 17:02:57 334,848 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
    + 2004-08-04 07:56:45 363,008 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
    - 2002-09-03 17:02:58 82,944 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
    + 2004-08-04 07:56:56 89,600 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
    - 2002-09-03 17:02:59 45,568 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
    + 2004-08-04 07:56:56 50,688 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
    - 2002-09-03 17:03:04 431,616 -c----w c:\windows\$NtServicePackUninstall$\smtpsvc.dll
    + 2004-08-04 07:56:45 456,704 -c----w c:\windows\$NtServicePackUninstall$\smtpsvc.dll
    - 2002-09-03 17:03:07 124,416 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
    + 2004-08-04 07:56:56 131,584 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
    - 2002-09-03 17:03:10 32,256 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
    + 2004-08-04 07:56:45 34,816 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
    - 2002-09-03 17:03:10 29,696 -c----w c:\windows\$NtServicePackUninstall$\snmp.exe
    + 2004-08-04 07:56:56 32,768 -c----w c:\windows\$NtServicePackUninstall$\snmp.exe
    - 2002-09-03 17:03:11 16,896 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
    + 2004-08-04 07:56:45 18,944 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
    - 2002-09-03 17:03:12 246,784 -c----w c:\windows\$NtServicePackUninstall$\snmpcl.dll
    + 2004-08-04 07:56:45 259,072 -c----w c:\windows\$NtServicePackUninstall$\snmpcl.dll
    - 2002-09-03 17:03:13 345,600 -c----w c:\windows\$NtServicePackUninstall$\snmpincl.dll
    + 2004-08-04 07:56:45 358,400 -c----w c:\windows\$NtServicePackUninstall$\snmpincl.dll
    - 2002-09-03 17:03:14 5,120 -c----w c:\windows\$NtServicePackUninstall$\snmpmib.dll
    + 2004-08-04 07:56:45 6,144 -c----w c:\windows\$NtServicePackUninstall$\snmpmib.dll
    - 2002-09-03 17:03:15 182,784 -c----w c:\windows\$NtServicePackUninstall$\snmpsmir.dll
     
    FLYNDAGGER,
    #7
  9. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2004-08-04 07:56:45 188,416 -c----w c:\windows\$NtServicePackUninstall$\snmpsmir.dll
    - 2002-09-03 17:03:17 172,032 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
    + 2004-08-04 07:56:45 182,272 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
    - 2002-09-03 17:03:19 36,864 -c----w c:\windows\$NtServicePackUninstall$\snmpthrd.dll
    + 2004-08-04 07:56:45 40,448 -c----w c:\windows\$NtServicePackUninstall$\snmpthrd.dll
    - 2002-09-03 17:03:19 8,192 -c----w c:\windows\$NtServicePackUninstall$\snmptrap.exe
    + 2004-08-04 07:56:56 8,704 -c----w c:\windows\$NtServicePackUninstall$\snmptrap.exe
    - 2002-09-03 17:03:22 121,344 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-04 07:56:45 130,048 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-04 06:00:05 7,552 -c----w c:\windows\$NtServicePackUninstall$\sonyait.sys
    - 2002-09-03 17:04:09 24,448 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
    + 2004-08-04 06:09:55 25,472 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
    + 2002-09-03 17:03:25 23,552 -c----w c:\windows\$NtServicePackUninstall$\sort.exe
    + 2004-08-04 07:56:56 8,192 -c----w c:\windows\$NtServicePackUninstall$\spdwnwxp.exe
    - 2002-09-03 17:04:14 62,464 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
    + 2004-08-04 07:56:29 62,976 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
    - 2002-09-03 17:04:15 534,016 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
    + 2004-08-04 07:56:57 538,624 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
    - 2002-08-29 01:32:28 5,888 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys.001
    + 2004-08-04 05:56:58 11,776 -c----w c:\windows\$NtServicePackUninstall$\spnpinst.exe
    - 2002-09-03 17:04:17 66,560 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
    + 2004-08-04 07:56:45 74,752 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
    - 2002-09-03 17:04:18 51,200 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
    + 2005-06-10 23:53:32 57,856 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
    + 2004-08-04 07:56:29 193,024 -c----w c:\windows\$NtServicePackUninstall$\spra041b.dll
    + 2004-08-04 07:56:29 192,512 -c----w c:\windows\$NtServicePackUninstall$\spra0424.dll
    + 2004-08-04 07:56:29 757,248 -c----w c:\windows\$NtServicePackUninstall$\sprb041b.dll
    + 2004-08-04 07:56:30 732,160 -c----w c:\windows\$NtServicePackUninstall$\sprb0424.dll
    - 2002-09-03 17:04:19 235,520 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
    + 2004-08-04 07:56:45 250,880 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
    + 2008-04-14 10:42:08 438,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spcompat.dll
    - 2004-08-04 03:42:32 170,496 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 01:46:18 231,288 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 01:46:28 382,840 -c----w c:\windows\$NtServicePackUninstall$\spuninst\updspapi.dll
    + 2004-08-04 07:56:57 21,504 -c----w c:\windows\$NtServicePackUninstall$\spupdwxp.exe
    + 2004-08-04 07:56:45 151,552 -c----w c:\windows\$NtServicePackUninstall$\sqldb20.dll
    - 2002-09-03 17:04:26 471,040 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-04 07:56:45 528,384 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-04 07:56:45 462,848 -c----w c:\windows\$NtServicePackUninstall$\sqlqp20.dll
    + 2004-08-04 07:56:45 110,592 -c----w c:\windows\$NtServicePackUninstall$\sqlse20.dll
    - 2002-09-03 17:04:28 385,024 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
    + 2004-08-04 07:56:45 442,368 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
    - 2002-09-03 17:04:30 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
    + 2004-08-04 07:56:45 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
    - 2002-09-03 17:04:32 196,608 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
    + 2004-08-04 07:56:45 217,088 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
    - 2002-09-03 17:04:35 69,248 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
    + 2004-08-04 06:06:25 73,472 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
    - 2002-09-03 17:04:37 106,562 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
    + 2004-08-04 07:56:45 58,434 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
    - 2002-09-03 17:04:38 798,782 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
    + 2004-08-04 07:56:45 725,566 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
    - 2002-09-03 17:04:38 63,488 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
    + 2004-08-04 07:56:45 67,584 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
    - 2002-09-03 17:04:41 226,304 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
    + 2004-08-04 07:56:45 239,104 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
    - 2002-09-03 17:04:41 158,720 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
    + 2004-08-04 07:56:45 170,496 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
    - 2002-09-03 17:04:43 330,368 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
    - 2004-12-07 19:34:37 79,872 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
    + 2004-12-07 19:32:34 96,768 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
    - 2002-09-03 17:04:45 667,648 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
    + 2004-08-04 07:56:57 704,512 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
    - 2002-09-03 17:04:46 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
    + 2004-08-04 07:56:57 19,968 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
    - 2002-09-03 17:04:47 27,136 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
    + 2004-08-04 07:56:45 34,816 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
    - 2002-09-03 17:04:47 43,008 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    + 2004-08-04 07:56:45 71,680 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    - 2002-09-03 17:05:00 364,544 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
    + 2004-08-04 07:56:57 393,216 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
    - 2002-09-03 17:05:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
    + 2004-08-04 07:56:57 20,992 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
    - 2002-09-03 17:05:01 43,008 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
    + 2004-08-04 07:56:57 47,104 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
    - 2002-09-03 17:05:01 17,408 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
    + 2004-08-04 07:56:57 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
    - 2002-09-03 17:05:02 569,344 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
    + 2004-08-04 07:56:57 610,304 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
    - 2002-09-03 17:05:03 13,312 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
    + 2004-08-04 07:56:57 14,336 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
    - 2002-09-03 17:05:04 638,976 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
    + 2004-08-04 07:56:57 679,936 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
    - 2002-09-03 17:05:04 30,720 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
    + 2004-08-04 07:56:45 33,280 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
    + 2004-08-04 07:56:45 22,016 -c----w c:\windows\$NtServicePackUninstall$\startoc.dll
    + 2002-09-03 17:05:08 54,272 -c----w c:\windows\$NtServicePackUninstall$\stclient.dll
    - 2002-09-03 17:05:10 80,896 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
    + 2004-08-04 07:56:45 86,528 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
    - 2002-09-03 17:05:11 61,952 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
    + 2004-08-04 07:56:45 67,584 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
    - 2002-09-03 17:05:14 130,560 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
    + 2004-08-04 07:56:45 136,704 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
    - 2002-09-03 17:05:13 20,480 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
    + 2004-08-04 07:56:57 14,848 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
    - 2002-09-03 17:05:15 117,760 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
    + 2004-08-04 07:56:45 121,856 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
    - 2002-08-29 03:41:18 71,168 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
    + 2004-08-04 07:56:45 74,752 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
    - 2002-09-03 17:04:09 44,416 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
    + 2004-08-04 06:08:02 48,640 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
    + 2004-08-04 07:10:12 15,360 -c----w c:\windows\$NtServicePackUninstall$\streamip.sys
    - 2002-09-03 17:05:22 251,904 -c----w c:\windows\$NtServicePackUninstall$\strmdll.dll
    + 2006-08-21 15:52:08 246,814 -c----w c:\windows\$NtServicePackUninstall$\strmdll.dll
    + 2004-08-04 07:56:45 75,776 -c----w c:\windows\$NtServicePackUninstall$\strmfilt.dll
    + 2004-08-04 07:56:57 16,449 -c----w c:\windows\$NtServicePackUninstall$\stub_fpsrvadm.exe
    + 2004-08-04 07:56:57 65,601 -c----w c:\windows\$NtServicePackUninstall$\stub_fpsrvwin.exe
    - 2002-09-03 17:05:32 12,800 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
    + 2004-08-04 07:56:57 14,336 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
    - 2002-09-03 16:31:57 3,840 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
    + 2004-08-04 05:58:41 4,352 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
    + 2001-08-17 14:00:52 54,272 -c----w c:\windows\$NtServicePackUninstall$\swmidi.sys
    - 2004-08-20 22:01:15 700,928 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
    + 2006-10-19 13:56:32 713,216 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
    - 2002-09-03 17:05:47 51,712 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
    + 2004-08-04 07:56:46 57,856 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
    - 2002-09-03 17:05:47 183,296 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
    + 2004-08-04 07:56:46 191,488 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
    - 2002-08-29 02:01:18 56,832 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
    + 2004-08-04 06:15:55 60,800 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
    - 2002-09-03 17:05:54 141,312 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
    + 2004-08-04 07:56:46 168,960 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
    - 2002-09-03 17:05:58 103,936 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
    + 2004-08-04 07:56:57 105,984 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
    - 2002-09-03 17:06:03 938,496 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
    + 2004-08-04 07:56:46 984,576 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
    - 2002-09-03 17:06:07 198,656 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
    + 2005-10-17 21:14:46 118,272 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
    - 2002-09-03 17:06:14 13,824 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
    + 2004-08-04 05:59:59 14,976 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
    - 2002-09-03 17:06:16 829,952 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
    + 2004-08-04 07:56:46 858,624 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
    - 2002-09-03 17:06:16 165,376 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
    + 2004-08-04 07:56:46 181,760 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
    - 2002-09-03 17:06:19 233,984 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
    + 2005-07-08 16:27:56 249,344 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
    - 2002-09-03 17:06:21 128,512 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
    + 2004-08-04 07:56:57 135,680 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
    - 2005-02-23 02:00:29 339,968 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
    + 2008-06-20 10:45:13 360,320 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
    - 2002-09-03 17:06:26 196,288 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
    - 2002-09-03 17:06:28 13,312 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
    + 2004-08-04 07:56:46 14,848 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
    - 2002-09-03 17:06:28 40,448 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
    + 2004-08-04 07:56:46 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
    - 2002-09-03 17:06:30 40,960 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
    + 2004-08-04 07:56:46 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
    - 2002-05-14 17:08:54 32,827 -c----w c:\windows\$NtServicePackUninstall$\tcptest.exe
    + 2004-08-04 07:56:57 32,827 -c----w c:\windows\$NtServicePackUninstall$\tcptest.exe
    - 2002-05-14 17:08:56 16,384 -c----w c:\windows\$NtServicePackUninstall$\tcptsat.dll
    + 2004-08-04 07:56:34 16,384 -c----w c:\windows\$NtServicePackUninstall$\tcptsat.dll
    - 2002-09-03 17:06:32 16,256 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
    + 2004-08-04 06:07:48 18,560 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
    - 2002-09-03 17:06:33 11,144 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
    + 2004-08-04 08:01:07 12,040 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
    - 2002-09-03 17:06:35 20,232 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
    + 2004-08-04 08:01:07 21,896 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
    - 2002-09-03 17:06:38 71,168 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
    + 2005-05-10 23:45:48 75,776 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
    - 2002-08-29 08:46:42 38,024 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
    + 2004-08-04 08:01:07 40,840 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
    - 2002-09-03 17:06:40 343,552 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
    + 2004-08-04 07:56:46 358,400 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
    - 2002-09-03 17:06:40 200,192 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-04 07:56:46 295,424 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-04 06:00:04 149,376 -c----w c:\windows\$NtServicePackUninstall$\tffsport.sys
    - 2002-09-03 17:06:47 384,000 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
    + 2004-08-04 07:56:46 385,536 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
    + 2002-09-03 16:26:11 10,240 -c----w c:\windows\$NtServicePackUninstall$\tmigrate.dll
    - 2002-09-03 17:07:04 346,624 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
    + 2004-08-04 07:56:57 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
    - 2002-09-03 17:07:04 346,624 -c----w c:\windows\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-04 07:56:57 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstrt.exe
    + 2004-08-04 07:56:57 82,432 -c----w c:\windows\$NtServicePackUninstall$\tp4mon.exe
    - 2002-09-03 17:07:08 10,752 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
    + 2004-08-04 07:56:57 12,288 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
    + 2002-09-03 17:07:15 11,264 -c----w c:\windows\$NtServicePackUninstall$\tree.com
    - 2002-09-03 17:07:18 146,432 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
    + 2004-08-04 07:56:46 153,088 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
    - 2002-09-03 17:07:19 81,920 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
    + 2004-08-04 07:56:46 90,624 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
    - 2002-09-03 17:07:23 88,064 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
    + 2004-08-04 07:56:46 93,696 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
    - 2002-09-03 17:07:27 8,456 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
    + 2004-08-04 08:01:07 12,168 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
    - 2002-09-03 17:07:30 262,656 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
    + 2004-08-04 07:56:46 279,040 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
    - 2002-09-03 17:07:34 113,664 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-04 07:56:46 121,856 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-04 07:56:46 8,704 -c----w c:\windows\$NtServicePackUninstall$\tty.dll
    + 2004-08-04 07:56:34 39,936 -c----w c:\windows\$NtServicePackUninstall$\ttyres.dll
    + 2004-08-04 07:56:46 16,384 -c----w c:\windows\$NtServicePackUninstall$\ttyui.dll
    - 2002-09-03 17:04:09 9,856 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
    + 2004-08-04 06:03:17 12,416 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
    - 2002-09-03 17:07:41 46,592 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-04 07:56:46 50,688 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-04 07:56:46 44,032 -c----w c:\windows\$NtServicePackUninstall$\twext.dll
    - 2004-03-06 02:16:10 97,280 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
    + 2005-07-26 04:39:49 101,376 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
    + 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtServicePackUninstall$\tzchange.exe
    + 2004-08-04 06:07:43 44,672 -c----w c:\windows\$NtServicePackUninstall$\uagp35.sys
    - 2002-09-03 17:07:47 64,000 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
    + 2004-08-04 06:00:31 66,176 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
    - 2002-09-03 17:07:47 22,016 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
    + 2004-08-04 07:56:46 25,600 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
    - 2002-09-03 17:07:50 268,800 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
    + 2004-08-04 07:56:46 275,456 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
    - 2002-09-03 17:07:51 32,256 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
    + 2004-08-04 07:56:46 35,840 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
    - 2002-09-03 17:07:54 107,008 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
    + 2005-08-23 03:35:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
    + 2004-08-04 07:56:46 264,704 -c----w c:\windows\$NtServicePackUninstall$\unidrv.dll
    + 2004-08-04 07:56:46 197,120 -c----w c:\windows\$NtServicePackUninstall$\unidrvui.dll
    - 2002-09-03 16:26:12 72,192 -c----w c:\windows\$NtServicePackUninstall$\uniime.dll
    + 2004-08-04 06:04:11 76,288 -c----w c:\windows\$NtServicePackUninstall$\uniime.dll
    - 2002-09-03 17:07:57 69,120 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
    + 2004-08-04 07:56:46 74,240 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
    - 2002-09-03 17:07:58 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 07:56:46 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 07:56:34 619,520 -c----w c:\windows\$NtServicePackUninstall$\unires.dll
    - 2002-09-03 17:08:01 302,080 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
    + 2004-08-04 07:56:46 316,416 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
    - 2002-09-03 17:08:22 137,088 -c----w c:\windows\$NtServicePackUninstall$\update.sys
    + 2007-04-23 10:32:54 364,160 -c----w c:\windows\$NtServicePackUninstall$\update.sys
    - 2002-09-03 17:08:25 138,752 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
    + 2004-08-04 07:56:57 150,528 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
    - 2002-09-03 17:08:26 120,320 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
    + 2004-08-04 07:56:46 132,608 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
    - 2002-09-03 17:08:27 14,848 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
    + 2004-08-04 07:56:57 16,896 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
    - 2002-09-03 17:08:27 164,864 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
    + 2007-02-05 20:17:02 185,344 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
    - 2002-09-03 17:08:28 231,424 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
    + 2004-08-04 07:56:46 239,616 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
    - 2002-09-03 17:08:29 16,384 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
    + 2004-08-04 07:56:57 18,432 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
    - 2002-09-03 17:08:37 106,496 -c----w c:\windows\$NtServicePackUninstall$\url.dll
    + 2004-08-04 07:56:46 37,888 -c----w c:\windows\$NtServicePackUninstall$\url.dll
    - 2004-12-07 21:37:46 495,104 -c----w c:\windows\$NtServicePackUninstall$\urlmon.dll
    + 2004-08-04 07:56:46 601,088 -c----w c:\windows\$NtServicePackUninstall$\urlmon.dll
    - 2002-09-03 17:08:38 11,136 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
    + 2005-10-21 01:47:05 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
    + 2005-10-21 01:47:05 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023x.sys
    + 2005-10-21 01:47:05 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023x.sys.001
    + 2004-08-04 07:07:56 59,264 -c----w c:\windows\$NtServicePackUninstall$\usbaudio.sys
    + 2002-09-03 16:31:57 23,808 -c----w c:\windows\$NtServicePackUninstall$\usbcamd.sys
    + 2002-09-03 16:31:57 23,936 -c----w c:\windows\$NtServicePackUninstall$\usbcamd2.sys
    + 2004-08-04 07:08:46 31,616 -c----w c:\windows\$NtServicePackUninstall$\usbccgp.sys
    - 2002-09-03 17:08:41 19,328 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
    + 2004-08-04 06:08:37 26,624 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
    - 2002-09-03 17:08:41 51,968 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
    + 2004-08-04 06:08:42 57,600 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
    - 2002-09-03 17:04:09 15,232 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
    + 2004-08-04 06:08:57 16,000 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
    - 2002-09-03 17:08:42 14,848 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
    + 2004-08-04 07:56:46 16,896 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
    + 2004-08-04 06:08:36 17,024 -c----w c:\windows\$NtServicePackUninstall$\usbohci.sys
    - 2002-09-03 17:08:44 135,552 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
    + 2004-08-04 06:08:42 142,976 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
    + 2004-08-04 06:01:24 25,856 -c----w c:\windows\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 05:58:46 15,104 -c----w c:\windows\$NtServicePackUninstall$\usbscan.sys
    + 2004-08-04 06:08:42 25,600 -c----w c:\windows\$NtServicePackUninstall$\usbser.sys
    - 2002-08-29 06:32:52 21,760 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
    + 2004-08-04 06:08:46 26,496 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
    - 2002-09-03 17:08:47 19,328 -c----w c:\windows\$NtServicePackUninstall$\usbuhci.sys
    + 2004-08-04 06:08:37 20,480 -c----w c:\windows\$NtServicePackUninstall$\usbuhci.sys
    - 2001-08-17 22:36:34 67,072 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
    + 2004-08-04 07:56:46 74,240 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
    + 2004-08-04 06:10:10 78,464 -c----w c:\windows\$NtServicePackUninstall$\usbvideo.sys
    - 2005-03-02 18:20:03 561,152 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
    + 2007-03-08 15:36:28 577,536 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
    - 2002-09-03 17:08:50 667,136 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
    + 2004-08-04 07:56:46 723,456 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
    - 2002-09-03 17:08:51 22,016 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
    + 2004-08-04 07:56:57 24,576 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
    - 2002-09-03 17:08:54 339,456 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
    + 2004-08-04 07:56:46 406,528 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
    - 2002-09-03 17:08:57 47,616 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
    + 2004-08-04 07:56:57 50,176 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
    - 2002-09-03 17:09:11 203,264 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
    + 2004-08-04 07:56:46 218,624 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
    - 2002-09-03 17:09:12 30,992 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
    + 2004-08-04 07:56:46 30,749 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
    - 2002-09-03 17:09:14 479,261 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
    + 2007-08-13 23:54:10 413,696 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
    + 2004-08-04 07:56:46 11,325 -c----w c:\windows\$NtServicePackUninstall$\vchnt5.dll
    - 2002-09-03 17:09:15 24,064 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
    + 2004-08-04 07:56:46 26,112 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
    - 2002-09-03 17:09:16 48,640 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
    + 2004-08-04 07:56:46 51,712 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
    + 2006-03-17 00:38:01 28,672 -c----w c:\windows\$NtServicePackUninstall$\verclsid.exe
    + 2002-09-03 17:09:21 13,312 -c----w c:\windows\$NtServicePackUninstall$\verifier.dll
    - 2002-09-03 17:09:25 16,384 -c----w c:\windows\$NtServicePackUninstall$\version.dll
    + 2004-08-04 07:56:46 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
    + 2004-08-04 08:56:46 53,760 -c----w c:\windows\$NtServicePackUninstall$\vfwwdm32.dll
    - 2002-09-03 17:09:28 19,712 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
    + 2004-08-04 06:07:06 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
    - 2002-09-03 17:09:56 802,304 -c----w c:\windows\$NtServicePackUninstall$\vgx.dll
    + 2004-08-04 07:56:46 848,384 -c----w c:\windows\$NtServicePackUninstall$\vgx.dll
    + 2004-08-04 06:07:42 42,240 -c----w c:\windows\$NtServicePackUninstall$\viaagp.sys
    + 2004-08-04 05:59:42 5,376 -c----w c:\windows\$NtServicePackUninstall$\viaide.sys
    - 2002-09-03 17:09:59 70,912 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
    + 2004-08-04 06:07:05 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
    - 2002-09-03 17:10:01 125,952 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-04 07:56:46 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
    - 2002-09-03 16:26:13 426,042 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
    + 2004-08-04 05:32:34 426,041 -c----w c:\windows\$NtServicePackUninstall$\voicepad.dll
    - 2002-09-03 16:26:13 86,074 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
    + 2004-08-04 05:32:35 86,073 -c----w c:\windows\$NtServicePackUninstall$\voicesub.dll
    - 2002-09-03 17:10:05 49,152 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
    + 2004-08-04 06:00:16 52,352 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
    - 2002-09-03 17:10:08 409,088 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
    + 2004-08-04 07:56:46 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
    - 2002-09-03 17:10:09 275,456 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
    + 2004-08-04 07:56:57 289,792 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
    - 2002-09-03 17:10:11 165,376 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
    + 2004-08-04 07:56:46 174,592 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
    + 2004-08-04 07:56:46 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
    - 2002-09-03 17:10:13 444,928 -c----w c:\windows\$NtServicePackUninstall$\w95upgnt.dll
    + 2004-08-04 07:56:46 483,840 -c----w c:\windows\$NtServicePackUninstall$\w95upgnt.dll
    - 2002-09-03 17:10:15 43,008 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
    + 2004-08-04 07:56:57 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
    - 2002-09-03 17:10:16 459,776 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
    + 2007-05-16 15:12:12 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
    - 2002-09-03 17:10:17 249,344 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
    + 2004-08-04 07:56:34 249,856 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
    - 2002-09-03 17:10:19 30,720 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
    + 2004-08-04 07:56:46 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
    - 2002-09-03 17:10:19 76,800 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
    + 2007-05-16 15:12:15 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
    - 2002-09-03 17:10:20 27,648 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-04 07:56:57 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-04 06:04:52 13,568 -c----w c:\windows\$NtServicePackUninstall$\wacompen.sys
    - 2002-09-03 17:10:29 33,280 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
    + 2004-08-04 06:04:57 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
    - 2002-09-03 17:10:32 16,384 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
    + 2004-08-04 06:07:32 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
    + 2002-09-03 17:10:36 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
    - 2002-09-03 17:10:55 183,808 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
    + 2004-08-04 07:56:46 196,608 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
    - 2002-09-03 17:10:56 215,040 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
    + 2004-08-04 07:56:46 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
    - 2002-09-03 17:10:57 66,048 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
    + 2004-08-04 07:56:46 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
    - 2002-09-03 17:10:59 480,256 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
    + 2004-08-04 07:56:46 530,944 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
    - 2002-09-03 17:11:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
    + 2004-08-04 07:56:46 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
    - 2002-09-03 17:11:02 259,072 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
    + 2004-08-04 07:56:46 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
    - 2002-09-03 17:11:03 38,400 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
    + 2004-08-04 07:56:46 43,008 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
    - 2002-09-03 17:11:04 28,160 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
    + 2004-08-04 07:56:46 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
    - 2002-09-03 17:11:05 48,128 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
    + 2004-08-04 07:56:46 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
    - 2002-09-03 17:11:08 157,696 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
    + 2004-08-04 07:56:57 116,224 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
    - 2002-09-03 17:11:08 111,104 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
    + 2004-08-04 07:56:46 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
    + 2004-08-04 06:08:46 31,744 -c----w c:\windows\$NtServicePackUninstall$\wceusbsh.sys
    - 2002-09-03 17:11:11 46,592 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
    + 2006-03-24 04:37:50 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
    + 2004-08-04 07:56:57 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
    - 2002-08-29 02:00:48 77,440 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.001
    - 2002-09-03 17:11:32 258,048 -c----w c:\windows\$NtServicePackUninstall$\webcheck.dll
    + 2004-08-04 07:56:46 276,480 -c----w c:\windows\$NtServicePackUninstall$\webcheck.dll
    - 2002-09-03 17:11:33 61,952 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
    + 2006-01-04 03:35:05 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
    - 2002-09-03 17:11:36 124,928 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
    + 2004-08-04 07:56:46 135,680 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
    - 2002-09-03 17:11:40 60,416 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
    + 2004-08-04 07:56:57 65,536 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
    + 2005-05-03 17:51:49 2,678 -c----w c:\windows\$NtServicePackUninstall$\wfrh77lr.dat
    - 2002-09-03 17:11:47 414,720 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
    + 2004-08-04 07:56:57 433,664 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
    - 2002-09-03 17:11:47 449,536 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
    + 2004-08-04 07:56:46 463,360 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
    - 2002-09-03 17:11:48 119,808 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
    + 2004-08-04 07:56:46 124,416 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
    - 2002-09-03 17:11:49 70,656 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
    + 2004-08-04 07:56:46 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
    - 2002-09-03 17:11:50 316,416 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
    + 2006-12-19 18:16:47 333,824 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
    - 2002-09-03 17:11:51 568,832 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
    + 2004-08-04 07:56:46 589,312 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
    - 2002-09-03 17:11:52 104,448 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
    + 2004-08-04 07:56:46 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
    - 2005-03-02 01:34:32 1,797,120 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
    - 2002-09-03 17:12:00 99,328 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
    + 2004-08-04 07:56:46 101,888 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
    - 2002-09-03 17:12:02 403,456 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
    + 2004-08-04 07:56:35 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
    - 2002-09-03 17:12:13 266,752 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
    + 2004-08-04 07:56:57 283,648 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
    - 2004-07-01 22:08:18 331,776 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
    + 2004-08-04 07:56:46 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
    - 2005-02-18 21:19:18 592,384 -c----w c:\windows\$NtServicePackUninstall$\wininet.dll
    + 2004-08-04 07:56:46 656,384 -c----w c:\windows\$NtServicePackUninstall$\wininet.dll
    - 2002-09-03 17:12:17 25,600 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
    + 2004-08-04 07:56:46 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
    - 2002-09-03 17:12:18 516,608 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
    + 2004-08-04 07:56:57 502,272 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
    - 2002-09-03 17:12:23 171,520 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
    + 2004-08-04 07:56:46 176,128 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
    - 2002-09-03 17:12:32 762,368 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
    + 2004-08-04 07:56:35 764,928 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
    - 2002-09-03 17:12:33 14,848 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
    + 2004-08-04 07:56:46 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
    - 2002-09-03 17:12:35 93,184 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
    + 2004-08-04 07:56:46 99,328 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
    + 2004-08-04 07:56:46 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
    + 2004-08-04 07:56:57 146,432 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
    - 2005-03-02 18:20:03 277,504 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
    + 2007-03-17 13:43:01 292,864 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
    - 2002-09-03 17:12:38 48,128 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
    + 2004-08-04 07:56:46 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
    - 2002-09-03 17:12:42 166,912 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
    + 2004-08-04 07:56:46 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
    - 2002-09-03 17:12:43 4,096 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
    + 2004-08-04 07:56:57 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
    - 2002-09-03 17:12:48 120,832 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
    + 2006-08-17 12:28:27 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
    - 2002-09-03 17:12:50 168,448 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
    + 2004-08-04 07:56:46 172,032 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
    - 2002-09-03 17:12:51 86,528 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
    + 2004-08-04 07:56:46 92,672 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
    - 2002-09-03 17:13:04 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
    + 2004-08-04 07:56:35 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
    + 2004-08-04 06:07:41 8,832 -c----w c:\windows\$NtServicePackUninstall$\wmiacpi.sys
    - 2002-09-03 17:13:07 183,808 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
    + 2004-08-04 07:56:57 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
    - 2002-09-03 17:13:07 6,144 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
    + 2004-08-04 07:56:35 6,656 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
    - 2002-09-03 17:13:09 82,432 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
    + 2004-08-04 07:56:46 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
    - 2002-09-03 17:13:10 117,248 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
    + 2004-08-04 07:56:57 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
    - 2002-09-03 17:13:11 55,808 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
    + 2004-08-04 07:56:46 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
    - 2002-09-03 17:13:12 138,752 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
    + 2004-08-04 07:56:46 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
    - 2002-09-03 17:13:16 149,504 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
    + 2004-08-04 07:56:46 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
    - 2002-09-03 17:13:18 124,928 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
    + 2004-08-04 07:56:46 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
    - 2002-09-03 17:13:23 58,880 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
    + 2004-08-04 07:56:46 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
    - 2002-09-03 17:13:25 59,904 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
    + 2004-08-04 07:56:46 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
    - 2002-09-03 17:13:28 122,368 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
    + 2004-08-04 07:56:46 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
    - 2002-09-03 17:13:29 408,576 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
    + 2004-08-04 07:56:46 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
    - 2002-09-03 17:13:30 203,776 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
    + 2004-08-04 07:56:57 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
    - 2002-09-03 17:13:30 38,912 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
    + 2004-08-04 07:56:46 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
    - 2002-09-03 17:13:33 101,376 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
    + 2004-08-04 07:56:46 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
    - 2002-09-03 17:13:36 96,256 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-04 07:56:46 95,232 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-04 07:56:46 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-04 07:56:46 4,096 -c----w c:\windows\$NtServicePackUninstall$\wmm2eres.dll
    + 2004-08-04 07:56:46 7,680 -c----w c:\windows\$NtServicePackUninstall$\wmm2ext.dll
    + 2004-08-04 07:56:46 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
    + 2004-08-04 07:56:46 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
    + 2004-08-04 07:56:46 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-04 07:56:46 4,256,768 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
    + 2004-08-04 07:56:46 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
    - 2002-09-03 17:14:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
    + 2004-08-04 07:56:46 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
    - 2002-09-03 17:14:01 296,448 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
    + 2004-08-04 07:56:46 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
    - 2004-10-28 18:06:29 201,216 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
    + 2004-08-04 07:56:57 214,528 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
    - 2002-09-03 17:14:12 247,808 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
    + 2004-08-04 07:56:46 264,192 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
    - 2002-09-03 17:14:17 31,232 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
    + 2004-08-04 07:56:57 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
    - 2002-09-03 17:14:21 29,184 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
    + 2004-08-04 07:56:57 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
    - 2002-09-03 17:14:26 75,264 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
    + 2004-08-04 07:56:46 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
    - 2002-09-03 17:14:24 18,944 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-04 07:56:46 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-04 07:56:57 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
    - 2002-09-03 17:14:28 118,834 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
    + 2004-08-04 07:56:57 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
    + 2004-08-04 07:56:46 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
    + 2004-08-04 07:56:46 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
    - 2002-09-03 17:14:33 28,721 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
    + 2004-08-04 07:56:46 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
    - 2002-09-03 17:14:35 65,585 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
    + 2004-08-04 07:56:46 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
    - 2002-09-03 17:14:35 13,312 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
    + 2004-08-04 07:56:46 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
    + 2004-08-04 07:56:46 8,192 -c----w c:\windows\$NtServicePackUninstall$\wshirda.dll
    - 2002-09-03 17:14:39 10,240 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
    + 2004-08-04 07:56:46 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
    - 2002-09-03 17:14:39 17,408 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
    + 2004-08-04 07:56:46 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
    - 2002-09-03 17:14:40 38,912 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
    + 2004-08-04 07:56:46 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
    - 2002-09-03 17:14:41 21,504 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-04 07:56:46 22,528 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-04 07:10:22 19,328 -c----w c:\windows\$NtServicePackUninstall$\wstcodec.sys
    - 2002-09-03 17:14:42 46,080 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
    + 2004-08-04 07:56:46 50,688 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
    - 2002-09-03 17:14:49 17,408 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-04 07:56:46 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-04 07:56:46 430,592 -c----w c:\windows\$NtServicePackUninstall$\wuapi.dll
    + 2004-08-04 07:56:57 111,104 -c----w c:\windows\$NtServicePackUninstall$\wuauclt.exe
    + 2004-08-04 07:56:57 165,888 -c----w c:\windows\$NtServicePackUninstall$\wuauclt1.exe
    + 2004-08-04 07:56:46 1,134,592 -c----w c:\windows\$NtServicePackUninstall$\wuaueng.dll
    + 2004-08-04 07:56:46 183,296 -c----w c:\windows\$NtServicePackUninstall$\wuaueng1.dll
    - 2002-09-03 17:14:53 9,216 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
    + 2004-08-04 07:56:46 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
    + 2004-08-04 07:56:46 112,640 -c----w c:\windows\$NtServicePackUninstall$\wucltui.dll
    + 2004-08-04 07:56:46 36,864 -c----w c:\windows\$NtServicePackUninstall$\wups.dll
    + 2004-08-04 07:56:46 120,320 -c----w c:\windows\$NtServicePackUninstall$\wuweb.dll
    - 2002-09-03 17:14:54 56,832 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
    + 2004-08-04 07:56:46 378,368 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
    - 2002-09-03 17:04:09 23,552 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
    + 2004-08-04 07:56:46 51,712 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
    - 2002-09-03 17:04:09 264,704 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
    + 2004-08-04 07:56:46 359,936 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
    - 2002-09-03 17:14:55 86,016 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
    + 2004-08-04 07:56:46 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
    - 2002-09-03 17:14:58 28,160 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
    + 2004-08-04 07:56:57 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
    + 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
    + 2004-08-04 07:56:46 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
    + 2004-08-04 07:56:46 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
    - 2002-09-03 17:15:01 9,728 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
    + 2006-03-01 19:42:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
    + 2006-10-10 12:44:50 557,568 -c----w c:\windows\$NtServicePackUninstall$\xpnetdiag.exe
    - 2004-06-30 23:59:25 158,720 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
    + 2004-08-04 07:56:36 438,784 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
    - 2002-09-03 17:15:19 187,904 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
    + 2004-08-04 07:56:36 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
    - 2004-03-10 17:59:50 593,408 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
    + 2004-08-04 07:56:36 2,897,920 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
    + 2008-04-17 10:37:04 351,744 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
    + 2004-08-04 07:56:46 116,224 -c----w c:\windows\$NtServicePackUninstall$\xrxwiadr.dll
    - 2002-09-03 17:16:52 316,416 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
    + 2004-08-04 07:56:46 337,920 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
    + 2004-08-04 06:04:31 30,080 -c--a-w c:\windows\$NtUninstallKB909394$\rndismp.sys
    + 2004-08-04 06:04:31 30,080 -c--a-w c:\windows\$NtUninstallKB909394$\rndismpx.sys
    + 2005-10-12 23:12:26 213,216 -c--a-w c:\windows\$NtUninstallKB909394$\spuninst\spuninst.exe
    + 2005-10-12 23:12:33 371,424 -c--a-w c:\windows\$NtUninstallKB909394$\spuninst\updspapi.dll
    + 2004-08-04 06:04:32 12,672 -c--a-w c:\windows\$NtUninstallKB909394$\usb8023.sys
    + 2004-08-04 06:04:33 12,672 -c--a-w c:\windows\$NtUninstallKB909394$\usb8023x.sys
    + 2004-08-04 07:56:42 294,400 -c----w c:\windows\$NtUninstallKB932823-v3$\msctf.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
    + 2004-08-04 07:56:44 581,120 -c--a-w c:\windows\$NtUninstallKB933729$\rpcrt4.dll
    + 2005-10-12 23:12:26 213,216 -c--a-w c:\windows\$NtUninstallKB933729$\spuninst\spuninst.exe
    + 2005-10-12 23:12:33 371,424 -c--a-w c:\windows\$NtUninstallKB933729$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\updspapi.dll
    + 2007-06-15 08:12:28 1,022,976 -c--a-w c:\windows\$NtUninstallKB939653$\browseui.dll
    + 2007-06-15 08:12:28 151,040 -c--a-w c:\windows\$NtUninstallKB939653$\cdfview.dll
    + 2007-06-15 08:12:28 1,054,208 -c--a-w c:\windows\$NtUninstallKB939653$\danim.dll
    + 2007-06-15 08:12:28 357,888 -c--a-w c:\windows\$NtUninstallKB939653$\dxtmsft.dll
    + 2007-06-15 08:12:28 205,824 -c--a-w c:\windows\$NtUninstallKB939653$\dxtrans.dll
    + 2007-06-15 08:12:28 55,808 -c--a-w c:\windows\$NtUninstallKB939653$\extmgr.dll
    + 2007-06-14 10:32:36 18,432 -c--a-w c:\windows\$NtUninstallKB939653$\iedw.exe
    + 2007-06-15 08:12:28 251,904 -c--a-w c:\windows\$NtUninstallKB939653$\iepeers.dll
    + 2007-06-15 08:12:28 96,256 -c--a-w c:\windows\$NtUninstallKB939653$\inseng.dll
    + 2007-06-15 08:12:28 16,384 -c--a-w c:\windows\$NtUninstallKB939653$\jsproxy.dll
    + 2007-06-15 08:12:29 3,064,320 -c--a-w c:\windows\$NtUninstallKB939653$\mshtml.dll
    + 2007-06-15 08:12:29 449,024 -c--a-w c:\windows\$NtUninstallKB939653$\mshtmled.dll
    + 2007-06-15 08:12:29 146,432 -c--a-w c:\windows\$NtUninstallKB939653$\msrating.dll
    + 2007-06-15 08:12:29 532,480 -c--a-w c:\windows\$NtUninstallKB939653$\mstime.dll
    + 2007-06-15 08:12:29 39,424 -c--a-w c:\windows\$NtUninstallKB939653$\pngfilt.dll
    + 2007-06-15 08:12:30 1,498,112 -c--a-w c:\windows\$NtUninstallKB939653$\shdocvw.dll
    + 2007-06-15 08:12:30 474,112 -c--a-w c:\windows\$NtUninstallKB939653$\shlwapi.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB939653$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB939653$\spuninst\updspapi.dll
    + 2007-06-15 08:12:30 616,960 -c--a-w c:\windows\$NtUninstallKB939653$\urlmon.dll
    + 2007-06-26 14:35:54 665,600 -c--a-w c:\windows\$NtUninstallKB939653$\wininet.dll
    + 2007-06-14 10:08:46 350,720 -c--a-w c:\windows\$NtUninstallKB939653$\xpsp3res.dll
    + 2007-05-16 15:12:02 683,520 -c--a-w c:\windows\$NtUninstallKB941202$\inetcomm.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB941202$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB941202$\spuninst\updspapi.dll
    + 2005-08-30 03:54:26 1,287,168 -c--a-w c:\windows\$NtUninstallKB941568$\quartz.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB941568$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB941568$\spuninst\updspapi.dll
    + 2007-10-27 22:39:36 213,216 -c--a-w c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe
    + 2007-10-27 22:39:46 371,424 -c--a-w c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll
    + 2006-10-19 03:47:18 222,208 -c--a-w c:\windows\$NtUninstallKB941569$\wmasf.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB941644$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB941644$\spuninst\updspapi.dll
    + 2006-04-20 11:51:50 359,808 -c--a-w c:\windows\$NtUninstallKB941644$\tcpip.sys
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB941693$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB941693$\spuninst\updspapi.dll
    + 2007-03-08 13:47:48 1,843,584 -c--a-w c:\windows\$NtUninstallKB941693$\win32k.sys
    + 2007-08-22 12:55:28 1,022,976 -c--a-w c:\windows\$NtUninstallKB942615$\browseui.dll
    + 2007-08-22 12:55:29 151,040 -c--a-w c:\windows\$NtUninstallKB942615$\cdfview.dll
    + 2007-08-22 12:55:30 1,054,208 -c--a-w c:\windows\$NtUninstallKB942615$\danim.dll
    + 2007-08-22 12:55:30 357,888 -c--a-w c:\windows\$NtUninstallKB942615$\dxtmsft.dll
    + 2007-08-22 12:55:31 205,824 -c--a-w c:\windows\$NtUninstallKB942615$\dxtrans.dll
     
    FLYNDAGGER,
    #8
  10. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2007-08-22 12:55:31 55,808 -c--a-w c:\windows\$NtUninstallKB942615$\extmgr.dll
    + 2007-08-21 10:19:39 18,432 -c--a-w c:\windows\$NtUninstallKB942615$\iedw.exe
    + 2007-08-22 12:55:32 251,904 -c--a-w c:\windows\$NtUninstallKB942615$\iepeers.dll
    + 2007-08-22 12:55:32 96,256 -c--a-w c:\windows\$NtUninstallKB942615$\inseng.dll
    + 2007-08-22 12:55:32 16,384 -c--a-w c:\windows\$NtUninstallKB942615$\jsproxy.dll
    + 2007-08-22 12:55:36 3,064,832 -c--a-w c:\windows\$NtUninstallKB942615$\mshtml.dll
    + 2007-08-22 12:55:37 449,024 -c--a-w c:\windows\$NtUninstallKB942615$\mshtmled.dll
    + 2007-08-22 12:55:37 146,432 -c--a-w c:\windows\$NtUninstallKB942615$\msrating.dll
    + 2007-08-22 12:55:38 532,480 -c--a-w c:\windows\$NtUninstallKB942615$\mstime.dll
    + 2007-08-22 12:55:38 39,424 -c--a-w c:\windows\$NtUninstallKB942615$\pngfilt.dll
    + 2007-08-22 12:55:40 1,498,112 -c--a-w c:\windows\$NtUninstallKB942615$\shdocvw.dll
    + 2007-08-22 12:55:41 474,112 -c--a-w c:\windows\$NtUninstallKB942615$\shlwapi.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB942615$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB942615$\spuninst\updspapi.dll
    + 2007-08-22 12:55:43 617,984 -c--a-w c:\windows\$NtUninstallKB942615$\urlmon.dll
    + 2007-08-22 12:55:44 665,600 -c--a-w c:\windows\$NtUninstallKB942615$\wininet.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB942763$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB942763$\spuninst\updspapi.dll
    + 2007-07-18 12:42:22 60,416 -c--a-w c:\windows\$NtUninstallKB942763$\tzchange.exe
    + 2006-05-18 05:24:25 450,560 -c--a-w c:\windows\$NtUninstallKB942840$\jscript.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB942840$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB942840$\spuninst\updspapi.dll
    + 2007-05-17 11:28:05 549,376 -c--a-w c:\windows\$NtUninstallKB943055$\oleaut32.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB943055$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB943055$\spuninst\updspapi.dll
    + 2006-12-19 21:52:18 8,453,632 -c--a-w c:\windows\$NtUninstallKB943460$\shell32.dll
    + 2007-03-06 01:22:39 213,216 -c--a-w c:\windows\$NtUninstallKB943460$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c--a-w c:\windows\$NtUninstallKB943460$\spuninst\updspapi.dll
    + 2007-08-21 10:13:33 350,720 -c--a-w c:\windows\$NtUninstallKB943460$\xpsp3res.dll
    + 2006-08-17 12:28:27 721,920 -c--a-w c:\windows\$NtUninstallKB943485$\lsasrv.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB943485$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB943485$\spuninst\updspapi.dll
    + 2007-11-14 07:26:56 450,560 -c--a-w c:\windows\$NtUninstallKB944338$\jscript.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB944338$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB944338$\spuninst\updspapi.dll
    + 2004-08-04 07:56:46 417,792 -c--a-w c:\windows\$NtUninstallKB944338$\vbscript.dll
    + 2007-10-11 05:57:29 1,024,000 -c--a-w c:\windows\$NtUninstallKB944533$\browseui.dll
    + 2007-10-11 05:57:29 151,040 -c--a-w c:\windows\$NtUninstallKB944533$\cdfview.dll
    + 2007-10-11 05:57:30 1,054,208 -c--a-w c:\windows\$NtUninstallKB944533$\danim.dll
    + 2007-10-11 05:57:30 357,888 -c--a-w c:\windows\$NtUninstallKB944533$\dxtmsft.dll
    + 2007-10-11 05:57:30 205,824 -c--a-w c:\windows\$NtUninstallKB944533$\dxtrans.dll
    + 2007-10-11 05:57:30 55,808 -c--a-w c:\windows\$NtUninstallKB944533$\extmgr.dll
    + 2007-10-10 10:48:23 18,432 -c--a-w c:\windows\$NtUninstallKB944533$\iedw.exe
    + 2007-10-11 05:57:31 251,904 -c--a-w c:\windows\$NtUninstallKB944533$\iepeers.dll
    + 2007-10-11 05:57:31 96,256 -c--a-w c:\windows\$NtUninstallKB944533$\inseng.dll
    + 2007-10-11 05:57:31 16,384 -c--a-w c:\windows\$NtUninstallKB944533$\jsproxy.dll
    + 2007-10-30 09:55:21 3,065,856 -c--a-w c:\windows\$NtUninstallKB944533$\mshtml.dll
    + 2007-10-11 05:57:36 449,024 -c--a-w c:\windows\$NtUninstallKB944533$\mshtmled.dll
    + 2007-10-11 05:57:36 146,432 -c--a-w c:\windows\$NtUninstallKB944533$\msrating.dll
    + 2007-10-11 05:57:37 532,480 -c--a-w c:\windows\$NtUninstallKB944533$\mstime.dll
    + 2007-10-11 05:57:37 39,424 -c--a-w c:\windows\$NtUninstallKB944533$\pngfilt.dll
    + 2007-10-11 05:57:39 1,498,112 -c--a-w c:\windows\$NtUninstallKB944533$\shdocvw.dll
    + 2007-10-11 05:57:40 474,112 -c--a-w c:\windows\$NtUninstallKB944533$\shlwapi.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB944533$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB944533$\spuninst\updspapi.dll
    + 2007-10-11 05:57:40 617,984 -c--a-w c:\windows\$NtUninstallKB944533$\urlmon.dll
    + 2007-10-11 05:57:41 666,112 -c--a-w c:\windows\$NtUninstallKB944533$\wininet.dll
    + 2007-10-29 10:04:03 350,720 -c--a-w c:\windows\$NtUninstallKB944533$\xpsp3res.dll
    + 2005-10-08 03:22:51 12,400 -c--a-w c:\windows\$NtUninstallKB944653$\secdrv.sys
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB944653$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB944653$\spuninst\updspapi.dll
    + 2006-06-26 17:37:10 148,480 -c--a-w c:\windows\$NtUninstallKB945553$\dnsapi.dll
    + 2004-08-04 07:56:42 45,568 -c--a-w c:\windows\$NtUninstallKB945553$\dnsrslvr.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB945553$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB945553$\spuninst\updspapi.dll
    + 2004-08-04 06:00:56 181,248 -c--a-w c:\windows\$NtUninstallKB946026$\mrxdav.sys
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB946026$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB946026$\spuninst\updspapi.dll
    + 2007-03-06 01:22:39 213,216 -c--a-w c:\windows\$NtUninstallKB946627$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c--a-w c:\windows\$NtUninstallKB946627$\spuninst\updspapi.dll
    + 2008-04-14 00:11:59 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll
    + 2004-08-04 07:56:43 82,944 -c----w c:\windows\$NtUninstallKB946648_0$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\updspapi.dll
    + 2007-12-07 00:44:30 1,024,000 -c--a-w c:\windows\$NtUninstallKB947864$\browseui.dll
    + 2007-12-07 00:44:30 151,040 -c--a-w c:\windows\$NtUninstallKB947864$\cdfview.dll
    + 2007-12-07 00:44:32 1,054,208 -c--a-w c:\windows\$NtUninstallKB947864$\danim.dll
    + 2007-12-07 00:44:33 357,888 -c--a-w c:\windows\$NtUninstallKB947864$\dxtmsft.dll
    + 2007-12-07 00:44:33 205,824 -c--a-w c:\windows\$NtUninstallKB947864$\dxtrans.dll
    + 2007-12-07 00:44:33 55,808 -c--a-w c:\windows\$NtUninstallKB947864$\extmgr.dll
    + 2007-12-06 10:05:52 18,432 -c--a-w c:\windows\$NtUninstallKB947864$\iedw.exe
    + 2007-12-07 00:44:33 251,904 -c--a-w c:\windows\$NtUninstallKB947864$\iepeers.dll
    + 2007-12-07 00:44:33 96,256 -c--a-w c:\windows\$NtUninstallKB947864$\inseng.dll
    + 2007-12-07 00:44:33 16,384 -c--a-w c:\windows\$NtUninstallKB947864$\jsproxy.dll
    + 2007-12-07 00:44:35 3,066,368 -c--a-w c:\windows\$NtUninstallKB947864$\mshtml.dll
    + 2007-12-07 00:44:36 449,024 -c--a-w c:\windows\$NtUninstallKB947864$\mshtmled.dll
    + 2007-12-07 00:44:36 146,432 -c--a-w c:\windows\$NtUninstallKB947864$\msrating.dll
    + 2007-12-07 00:44:36 532,480 -c--a-w c:\windows\$NtUninstallKB947864$\mstime.dll
    + 2007-12-07 00:44:36 39,424 -c--a-w c:\windows\$NtUninstallKB947864$\pngfilt.dll
    + 2007-12-07 00:44:37 1,499,136 -c--a-w c:\windows\$NtUninstallKB947864$\shdocvw.dll
    + 2007-12-07 00:44:38 474,112 -c--a-w c:\windows\$NtUninstallKB947864$\shlwapi.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB947864$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB947864$\spuninst\updspapi.dll
    + 2007-12-07 00:44:39 617,984 -c--a-w c:\windows\$NtUninstallKB947864$\urlmon.dll
    + 2007-12-07 00:44:39 666,112 -c--a-w c:\windows\$NtUninstallKB947864$\wininet.dll
    + 2007-12-06 09:38:31 350,720 -c--a-w c:\windows\$NtUninstallKB947864$\xpsp3res.dll
    + 2007-06-19 13:31:19 282,112 -c--a-w c:\windows\$NtUninstallKB948590$\gdi32.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB948590$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB948590$\spuninst\updspapi.dll
    + 2007-03-06 01:22:39 213,216 -c--a-w c:\windows\$NtUninstallKB948881$\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c--a-w c:\windows\$NtUninstallKB948881$\spuninst\updspapi.dll
    + 2004-08-04 07:56:42 561,179 -c--a-w c:\windows\$NtUninstallKB950749$\dao360.dll
    + 2004-08-04 07:56:43 512,029 -c--a-w c:\windows\$NtUninstallKB950749$\msexch40.dll
    + 2004-08-04 07:56:43 319,517 -c--a-w c:\windows\$NtUninstallKB950749$\msexcl40.dll
    + 2004-08-04 07:56:43 1,507,356 -c--a-w c:\windows\$NtUninstallKB950749$\msjet40.dll
    + 2004-07-17 18:34:46 358,976 -c--a-w c:\windows\$NtUninstallKB950749$\msjetoledb40.dll
    + 2004-08-04 07:56:43 151,583 -c--a-w c:\windows\$NtUninstallKB950749$\msjint40.dll
    + 2004-08-04 07:56:43 53,279 -c--a-w c:\windows\$NtUninstallKB950749$\msjter40.dll
    + 2004-08-04 07:56:43 241,693 -c--a-w c:\windows\$NtUninstallKB950749$\msjtes40.dll
    + 2004-08-04 07:56:43 213,023 -c--a-w c:\windows\$NtUninstallKB950749$\msltus40.dll
    + 2004-08-04 07:56:43 348,189 -c--a-w c:\windows\$NtUninstallKB950749$\mspbde40.dll
    + 2004-08-04 07:56:43 421,919 -c--a-w c:\windows\$NtUninstallKB950749$\msrd2x40.dll
    + 2004-08-04 07:56:43 315,423 -c--a-w c:\windows\$NtUninstallKB950749$\msrd3x40.dll
    + 2004-08-04 07:56:43 552,989 -c--a-w c:\windows\$NtUninstallKB950749$\msrepl40.dll
    + 2004-08-04 07:56:43 258,077 -c--a-w c:\windows\$NtUninstallKB950749$\mstext40.dll
    + 2004-08-04 07:56:44 831,519 -c--a-w c:\windows\$NtUninstallKB950749$\mswdat10.dll
    + 2004-08-04 07:56:44 614,429 -c--a-w c:\windows\$NtUninstallKB950749$\mswstr10.dll
    + 2004-08-04 07:56:44 348,189 -c--a-w c:\windows\$NtUninstallKB950749$\msxbde40.dll
    + 2007-03-06 01:22:41 213,216 -c--a-w c:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c--a-w c:\windows\$NtUninstallKB950749$\spuninst\updspapi.dll
    + 2008-02-16 09:32:03 1,024,000 -c--a-w c:\windows\$NtUninstallKB950759$\browseui.dll
    + 2008-02-16 09:32:03 151,040 -c--a-w c:\windows\$NtUninstallKB950759$\cdfview.dll
    + 2008-02-16 09:32:03 1,054,208 -c--a-w c:\windows\$NtUninstallKB950759$\danim.dll
    + 2008-02-16 09:32:04 357,888 -c--a-w c:\windows\$NtUninstallKB950759$\dxtmsft.dll
    + 2008-02-16 09:32:04 205,312 -c--a-w c:\windows\$NtUninstallKB950759$\dxtrans.dll
    + 2008-02-16 09:32:04 55,808 -c--a-w c:\windows\$NtUninstallKB950759$\extmgr.dll
    + 2008-02-15 09:07:53 18,432 -c--a-w c:\windows\$NtUninstallKB950759$\iedw.exe
    + 2008-02-16 09:32:04 251,904 -c--a-w c:\windows\$NtUninstallKB950759$\iepeers.dll
    + 2008-02-16 09:32:04 96,256 -c--a-w c:\windows\$NtUninstallKB950759$\inseng.dll
    + 2008-02-16 09:32:04 16,384 -c--a-w c:\windows\$NtUninstallKB950759$\jsproxy.dll
    + 2008-02-16 09:32:06 3,066,880 -c--a-w c:\windows\$NtUninstallKB950759$\mshtml.dll
    + 2008-02-16 09:32:06 449,024 -c--a-w c:\windows\$NtUninstallKB950759$\mshtmled.dll
    + 2008-02-16 09:32:06 146,432 -c--a-w c:\windows\$NtUninstallKB950759$\msrating.dll
    + 2008-02-16 09:32:07 532,480 -c--a-w c:\windows\$NtUninstallKB950759$\mstime.dll
    + 2008-02-16 09:32:07 39,424 -c--a-w c:\windows\$NtUninstallKB950759$\pngfilt.dll
    + 2008-02-16 09:32:08 1,499,136 -c--a-w c:\windows\$NtUninstallKB950759$\shdocvw.dll
    + 2008-02-16 09:32:08 474,112 -c--a-w c:\windows\$NtUninstallKB950759$\shlwapi.dll
    + 2007-11-30 12:39:22 231,288 -c--a-w c:\windows\$NtUninstallKB950759$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c--a-w c:\windows\$NtUninstallKB950759$\spuninst\updspapi.dll
    + 2008-02-16 09:32:08 618,496 -c--a-w c:\windows\$NtUninstallKB950759$\urlmon.dll
    + 2008-02-16 09:32:09 666,112 -c--a-w c:\windows\$NtUninstallKB950759$\wininet.dll
    + 2008-02-15 09:06:21 351,744 -c--a-w c:\windows\$NtUninstallKB950759$\xpsp3res.dll
    + 2007-11-30 12:39:22 231,288 -c--a-w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c--a-w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll
    + 2008-04-13 18:55:08 202,624 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762$\spuninst\updspapi.dll
    + 2006-07-13 08:48:58 202,240 -c--a-w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c--a-w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c--a-w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:53 246,272 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
    + 2005-07-26 04:39:45 243,200 -c----w c:\windows\$NtUninstallKB950974_0$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:54 691,712 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
    + 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtUninstallKB951066_0$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\updspapi.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
    + 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
    + 2008-04-14 12:30:49 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
    + 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
    + 2008-04-13 18:46:32 273,024 -c----w c:\windows\$NtUninstallKB951376$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376$\spuninst\updspapi.dll
    + 2004-08-04 06:10:37 274,304 -c--a-w c:\windows\$NtUninstallKB951376_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c--a-w c:\windows\$NtUninstallKB951376_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c--a-w c:\windows\$NtUninstallKB951376_0$\spuninst\updspapi.dll
    + 2008-04-14 00:12:03 1,288,192 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698$\spuninst\updspapi.dll
    + 2007-10-29 22:43:03 1,287,680 -c--a-w c:\windows\$NtUninstallKB951698_0$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c--a-w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c--a-w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
    + 2008-04-13 19:19:23 138,112 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    + 2008-04-14 00:11:52 147,968 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    + 2008-04-14 00:12:01 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748$\spuninst\updspapi.dll
    + 2008-04-13 19:20:16 361,344 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    + 2008-04-13 19:00:02 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2004-08-04 06:14:14 138,496 -c----w c:\windows\$NtUninstallKB951748_0$\afd.sys
    + 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748_0$\dnsapi.dll
    + 2004-08-04 07:56:44 245,248 -c----w c:\windows\$NtUninstallKB951748_0$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip6.sys
    + 2008-04-14 00:12:15 139,264 -c----w c:\windows\$NtUninstallKB951978$\cscript.exe
    + 2008-04-14 00:11:56 512,000 -c----w c:\windows\$NtUninstallKB951978$\jscript.dll
    + 2008-04-14 00:12:05 180,224 -c----w c:\windows\$NtUninstallKB951978$\scrobj.dll
    + 2008-04-14 00:12:05 172,032 -c----w c:\windows\$NtUninstallKB951978$\scrrun.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951978$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951978$\spuninst\updspapi.dll
    + 2008-04-14 00:12:08 434,176 -c----w c:\windows\$NtUninstallKB951978$\vbscript.dll
    + 2008-04-14 00:12:41 155,648 -c----w c:\windows\$NtUninstallKB951978$\wscript.exe
    + 2008-04-14 00:12:10 90,112 -c----w c:\windows\$NtUninstallKB951978$\wshext.dll
    + 2008-05-01 14:30:33 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
    + 2004-08-04 07:56:42 331,776 -c----w c:\windows\$NtUninstallKB952287_0$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\updspapi.dll
    + 2008-04-14 00:11:58 73,728 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
    + 2005-06-29 01:46:00 74,240 -c----w c:\windows\$NtUninstallKB952954_0$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
    + 2007-07-27 15:41:48 231,288 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
    + 2007-07-27 15:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
    + 2006-10-19 03:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
    + 2008-10-13 01:36:48 2,560 ----a-w c:\windows\_MSRSTRT.EXE
    - 2006-10-04 14:05:26 39,424 ------w c:\windows\AppPatch\acadproc.dll
    + 2008-04-14 00:11:48 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
    - 2004-08-04 07:56:41 1,852,416 ----a-w c:\windows\AppPatch\acgenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
    - 2004-08-04 07:56:41 450,048 ----a-w c:\windows\AppPatch\aclayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
    - 2004-08-04 07:56:41 137,728 ----a-w c:\windows\AppPatch\aclua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll
    - 2004-08-04 07:56:41 244,736 ----a-w c:\windows\AppPatch\acspecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
    - 2004-08-04 07:56:41 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
    + 2008-10-16 08:45:22 126,976 ----a-w c:\windows\assembly\GAC\Arbus.Common\2.2.4.3__14cac4d33a885ed2\Arbus.Common.dll
    + 2008-10-16 08:45:22 20,480 ----a-w c:\windows\assembly\GAC\Arbus.Interfacing.Library\1.0.4.0__2be3a081d8c94867\Arbus.Interfacing.Library.dll
    + 2008-10-16 08:45:21 20,480 ----a-w c:\windows\assembly\GAC\ArbusApplicationController\1.0.3093.38280__da57d5d39b1d6dd8\ArbusApplicationController.dll
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    - 2007-02-28 09:08:48 2,136,064 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 08:38:55 2,057,600 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 08:38:57 2,015,744 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 09:10:57 2,180,352 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    - 2007-03-13 15:57:10 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2005-10-21 02:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    - 2007-06-13 10:23:07 1,033,216 ----a-w c:\windows\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\explorer.exe
    + 2000-08-31 14:00:00 89,504 ----a-w c:\windows\fdsv.exe
    + 2000-08-31 14:00:00 80,412 ----a-w c:\windows\grep.exe
    - 2004-08-04 07:56:45 34,816 ----a-w c:\windows\Help\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ----a-w c:\windows\Help\sniffpol.dll
    - 2004-08-04 07:56:45 33,280 ----a-w c:\windows\Help\sstub.dll
    + 2008-04-14 00:12:07 33,280 ----a-w c:\windows\Help\sstub.dll
    - 2004-08-04 07:56:46 279,040 ----a-w c:\windows\Help\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ----a-w c:\windows\Help\tshoot.dll
    - 2005-05-26 23:22:01 10,752 ----a-w c:\windows\hh.exe
    + 2008-04-14 00:12:21 10,752 ----a-w c:\windows\hh.exe
    + 2004-08-04 07:56:41 61,440 -c--a-w c:\windows\ie7\admparse.dll
    + 2004-08-04 07:56:41 99,840 -c--a-w c:\windows\ie7\advpack.dll
    + 2004-08-04 07:56:41 35,328 -c--a-w c:\windows\ie7\corpol.dll
    + 2006-06-03 11:40:49 33,792 -c--a-w c:\windows\ie7\custsat.dll
    + 2008-04-21 06:56:55 357,888 -c--a-w c:\windows\ie7\dxtmsft.dll
    + 2008-04-21 06:56:55 205,312 -c--a-w c:\windows\ie7\dxtrans.dll
    + 2008-04-21 06:56:55 55,808 -c--a-w c:\windows\ie7\extmgr.dll
    + 2004-08-04 07:56:42 38,912 -c--a-w c:\windows\ie7\hmmapi.dll
    + 2004-08-04 07:56:50 34,304 -c--a-w c:\windows\ie7\ie4uinit.exe
    + 2004-08-04 07:56:42 139,264 -c--a-w c:\windows\ie7\ieakeng.dll
    + 2004-08-04 07:56:42 216,576 -c--a-w c:\windows\ie7\ieaksie.dll
    + 2002-09-03 16:34:59 221,184 -c--a-w c:\windows\ie7\ieakui.dll
    + 2004-08-04 07:56:42 323,584 -c--a-w c:\windows\ie7\iedkcs32.dll
    + 2008-04-17 10:46:59 18,432 -c--a-w c:\windows\ie7\iedw.exe
    + 2004-08-04 07:56:42 81,920 -c--a-w c:\windows\ie7\ieencode.dll
    + 2008-04-21 06:56:56 251,904 -c--a-w c:\windows\ie7\iepeers.dll
    + 2004-08-04 07:56:42 48,640 -c--a-w c:\windows\ie7\iernonce.dll
    + 2004-08-04 07:56:42 62,976 -c--a-w c:\windows\ie7\iesetup.dll
    + 2004-08-04 07:56:50 93,184 -c--a-w c:\windows\ie7\iexplore.exe
    + 2004-08-04 07:56:42 35,840 -c--a-w c:\windows\ie7\imgutil.dll
    + 2008-04-21 06:56:56 96,256 -c--a-w c:\windows\ie7\inseng.dll
    + 2007-12-18 14:40:58 450,560 -c--a-w c:\windows\ie7\jscript.dll
    + 2008-04-21 06:56:56 16,384 -c--a-w c:\windows\ie7\jsproxy.dll
    + 2004-08-04 07:56:42 22,016 -c--a-w c:\windows\ie7\licmgr10.dll
    + 2004-08-04 07:56:53 29,184 -c--a-w c:\windows\ie7\mshta.exe
    + 2008-04-21 06:56:57 3,066,880 -c--a-w c:\windows\ie7\mshtml.dll
    + 2008-04-21 06:56:57 449,024 -c--a-w c:\windows\ie7\mshtmled.dll
    + 2004-08-04 07:56:14 56,832 -c--a-w c:\windows\ie7\mshtmler.dll
    + 2002-09-03 16:45:12 146,432 -c--a-w c:\windows\ie7\msls31.dll
    + 2008-04-21 06:56:57 146,432 -c--a-w c:\windows\ie7\msrating.dll
    + 2008-04-21 06:56:58 532,480 -c--a-w c:\windows\ie7\mstime.dll
    + 2004-08-04 07:56:44 96,256 -c--a-w c:\windows\ie7\occache.dll
    + 2008-04-21 06:56:58 39,424 -c--a-w c:\windows\ie7\pngfilt.dll
    + 2007-08-13 23:54:42 32,960 -c--a-w c:\windows\ie7\spuninst\iecustom.dll
    + 2007-08-13 23:52:06 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe
    + 2006-09-06 22:43:16 213,216 -c--a-w c:\windows\ie7\spuninst\spuninst.exe
    + 2006-09-06 22:43:18 371,424 -c--a-w c:\windows\ie7\spuninst\updspapi.dll
    + 2004-08-04 07:56:46 37,888 -c--a-w c:\windows\ie7\url.dll
    + 2008-04-21 06:56:58 618,496 -c--a-w c:\windows\ie7\urlmon.dll
    + 2007-12-18 14:40:58 417,792 -c--a-w c:\windows\ie7\vbscript.dll
    + 2007-06-26 15:13:22 851,968 -c--a-w c:\windows\ie7\vgx.dll
    + 2004-08-04 07:56:46 276,480 -c--a-w c:\windows\ie7\webcheck.dll
    + 2008-04-21 06:56:59 666,624 -c--a-w c:\windows\ie7\wininet.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB938127-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB938127-IE7\spuninst\updspapi.dll
    + 2007-08-13 23:54:10 765,952 -c----w c:\windows\ie7updates\KB938127-IE7\vgx.dll
    + 2007-08-13 23:39:00 123,904 -c----w c:\windows\ie7updates\KB944533-IE7\advpack.dll
    + 2007-08-13 23:39:00 123,904 -c----w c:\windows\ie7updates\KB944533-IE7\advpack.dll.000
    + 2007-08-13 23:35:46 346,624 -c----w c:\windows\ie7updates\KB944533-IE7\dxtmsft.dll
    + 2007-08-13 23:35:38 214,528 -c----w c:\windows\ie7updates\KB944533-IE7\dxtrans.dll
    + 2007-08-13 23:54:10 131,584 -c----w c:\windows\ie7updates\KB944533-IE7\extmgr.dll
    + 2007-08-13 23:36:26 61,952 -c----w c:\windows\ie7updates\KB944533-IE7\icardie.dll
    + 2007-08-13 23:39:06 54,784 -c----w c:\windows\ie7updates\KB944533-IE7\ie4uinit.exe
    + 2007-08-13 23:39:06 54,784 -c----w c:\windows\ie7updates\KB944533-IE7\ie4uinit.exe.000
    + 2007-08-13 23:39:26 152,064 -c----w c:\windows\ie7updates\KB944533-IE7\ieakeng.dll
    + 2007-08-13 23:39:26 152,064 -c----w c:\windows\ie7updates\KB944533-IE7\ieakeng.dll.000
    + 2007-08-13 23:39:54 229,376 -c----w c:\windows\ie7updates\KB944533-IE7\ieaksie.dll
    + 2007-08-13 23:39:54 229,376 -c----w c:\windows\ie7updates\KB944533-IE7\ieaksie.dll.000
    + 2007-08-13 22:56:54 161,792 -c----w c:\windows\ie7updates\KB944533-IE7\ieakui.dll
    + 2007-02-12 21:10:12 2,451,312 -c----w c:\windows\ie7updates\KB944533-IE7\ieapfltr.dat
    + 2007-07-11 17:27:48 383,488 -c----w c:\windows\ie7updates\KB944533-IE7\ieapfltr.dll
    + 2007-08-13 23:39:50 382,976 -c----w c:\windows\ie7updates\KB944533-IE7\iedkcs32.dll
    + 2007-08-13 23:39:50 382,976 -c----w c:\windows\ie7updates\KB944533-IE7\iedkcs32.dll.000
    + 2007-08-13 23:54:10 6,049,280 -c----w c:\windows\ie7updates\KB944533-IE7\ieframe.dll
    + 2007-08-13 23:39:10 43,008 -c----w c:\windows\ie7updates\KB944533-IE7\iernonce.dll
    + 2007-08-13 23:39:10 43,008 -c----w c:\windows\ie7updates\KB944533-IE7\iernonce.dll.000
    + 2007-08-13 23:34:04 266,752 -c----w c:\windows\ie7updates\KB944533-IE7\iertutil.dll
    + 2007-08-13 23:39:10 13,312 -c----w c:\windows\ie7updates\KB944533-IE7\ieudinit.exe
    + 2007-08-13 23:43:56 622,080 -c----w c:\windows\ie7updates\KB944533-IE7\iexplore.exe
    + 2007-08-13 23:43:56 622,080 -c----w c:\windows\ie7updates\KB944533-IE7\iexplore.exe.000
    + 2007-08-13 23:54:10 27,136 -c----w c:\windows\ie7updates\KB944533-IE7\jsproxy.dll
    + 2007-08-13 23:54:10 458,752 -c----w c:\windows\ie7updates\KB944533-IE7\msfeeds.dll
    + 2007-08-13 23:54:10 50,688 -c----w c:\windows\ie7updates\KB944533-IE7\msfeedsbs.dll
    + 2007-08-13 23:54:12 3,578,368 -c----w c:\windows\ie7updates\KB944533-IE7\mshtml.dll
    + 2007-08-13 23:54:10 475,648 -c----w c:\windows\ie7updates\KB944533-IE7\mshtmled.dll
    + 2007-08-13 23:44:26 192,000 -c----w c:\windows\ie7updates\KB944533-IE7\msrating.dll
    + 2007-08-13 23:54:10 670,720 -c----w c:\windows\ie7updates\KB944533-IE7\mstime.dll
    + 2007-08-13 23:44:06 101,376 -c----w c:\windows\ie7updates\KB944533-IE7\occache.dll
    + 2007-08-13 23:44:06 101,376 -c----w c:\windows\ie7updates\KB944533-IE7\occache.dll.000
    + 2007-08-13 23:36:12 44,544 -c----w c:\windows\ie7updates\KB944533-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\updspapi.dll
    + 2007-08-13 23:44:30 105,984 -c----w c:\windows\ie7updates\KB944533-IE7\url.dll
    + 2007-08-13 23:44:30 105,984 -c----w c:\windows\ie7updates\KB944533-IE7\url.dll.000
    + 2007-08-13 23:54:10 1,162,240 -c----w c:\windows\ie7updates\KB944533-IE7\urlmon.dll
    + 2007-08-13 23:54:10 231,424 -c----w c:\windows\ie7updates\KB944533-IE7\webcheck.dll
    + 2007-08-13 23:54:10 231,424 -c----w c:\windows\ie7updates\KB944533-IE7\webcheck.dll.000
    + 2007-08-13 23:54:10 818,688 -c----w c:\windows\ie7updates\KB944533-IE7\wininet.dll
    + 2007-12-07 02:21:45 124,928 -c----w c:\windows\ie7updates\KB947864-IE7\advpack.dll
    + 2007-12-07 02:21:45 124,928 -c----w c:\windows\ie7updates\KB947864-IE7\advpack.dll.000
    + 2007-12-19 23:01:06 347,136 -c----w c:\windows\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-12-19 23:01:06 347,136 -c----w c:\windows\ie7updates\KB947864-IE7\dxtmsft.dll.000
    + 2007-12-07 02:21:45 214,528 -c----w c:\windows\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-12-07 02:21:45 214,528 -c----w c:\windows\ie7updates\KB947864-IE7\dxtrans.dll.000
    + 2007-12-07 02:21:45 133,120 -c----w c:\windows\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-12-07 02:21:45 63,488 -c----w c:\windows\ie7updates\KB947864-IE7\icardie.dll
    + 2007-12-07 02:21:45 63,488 -c----w c:\windows\ie7updates\KB947864-IE7\icardie.dll.000
    + 2007-12-06 11:00:57 70,656 -c----w c:\windows\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-12-07 02:21:45 153,088 -c----w c:\windows\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-12-07 02:21:45 230,400 -c----w c:\windows\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-12-06 04:59:51 161,792 -c----w c:\windows\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie7updates\KB947864-IE7\ieapfltr.dat
    + 2007-12-07 02:21:45 383,488 -c----w c:\windows\ie7updates\KB947864-IE7\ieapfltr.dll
    + 2007-12-07 02:21:45 383,488 -c----w c:\windows\ie7updates\KB947864-IE7\ieapfltr.dll.000
    + 2007-12-07 02:21:45 384,512 -c----w c:\windows\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-12-07 02:21:46 6,066,176 -c----w c:\windows\ie7updates\KB947864-IE7\ieframe.dll
    + 2007-12-07 02:21:46 6,066,176 -c----w c:\windows\ie7updates\KB947864-IE7\ieframe.dll.000
    + 2007-12-07 02:21:46 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-12-07 02:21:46 267,776 -c----w c:\windows\ie7updates\KB947864-IE7\iertutil.dll
    + 2007-12-07 02:21:46 267,776 -c----w c:\windows\ie7updates\KB947864-IE7\iertutil.dll.000
    + 2007-12-06 11:00:58 13,824 -c----w c:\windows\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-12-06 11:01:25 625,664 -c----w c:\windows\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-12-06 11:01:25 625,664 -c----w c:\windows\ie7updates\KB947864-IE7\iexplore.exe.000
    + 2007-12-07 02:21:47 27,648 -c----w c:\windows\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-12-07 02:21:47 459,264 -c----w c:\windows\ie7updates\KB947864-IE7\msfeeds.dll
    + 2007-12-07 02:21:47 459,264 -c----w c:\windows\ie7updates\KB947864-IE7\msfeeds.dll.000
    + 2007-12-07 02:21:47 52,224 -c----w c:\windows\ie7updates\KB947864-IE7\msfeedsbs.dll
    + 2007-12-07 02:21:47 52,224 -c----w c:\windows\ie7updates\KB947864-IE7\msfeedsbs.dll.000
    + 2007-12-08 15:51:48 3,592,192 -c----w c:\windows\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-12-08 15:51:48 3,592,192 -c----w c:\windows\ie7updates\KB947864-IE7\mshtml.dll.000
    + 2007-12-07 02:21:47 478,208 -c----w c:\windows\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-12-07 02:21:47 478,208 -c----w c:\windows\ie7updates\KB947864-IE7\mshtmled.dll.000
    + 2007-12-07 02:21:48 193,024 -c----w c:\windows\ie7updates\KB947864-IE7\msrating.dll
    + 2007-12-07 02:21:48 671,232 -c----w c:\windows\ie7updates\KB947864-IE7\mstime.dll
    + 2007-12-07 02:21:48 102,912 -c----w c:\windows\ie7updates\KB947864-IE7\occache.dll
    + 2008-01-11 05:53:32 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\pngfilt.dll
    + 2008-01-11 05:53:32 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\pngfilt.dll.000
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\updspapi.dll
    + 2007-12-07 02:21:48 105,984 -c----w c:\windows\ie7updates\KB947864-IE7\url.dll
    + 2007-12-07 02:21:48 105,984 -c----w c:\windows\ie7updates\KB947864-IE7\url.dll.000
    + 2007-12-07 02:21:48 1,159,680 -c----w c:\windows\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-12-07 02:21:48 1,159,680 -c----w c:\windows\ie7updates\KB947864-IE7\urlmon.dll.000
    + 2007-12-07 02:21:48 233,472 -c----w c:\windows\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-12-07 02:21:48 233,472 -c----w c:\windows\ie7updates\KB947864-IE7\webcheck.dll.000
    + 2007-12-07 02:21:48 824,832 -c----w c:\windows\ie7updates\KB947864-IE7\wininet.dll
    + 2007-12-07 02:21:48 824,832 -c----w c:\windows\ie7updates\KB947864-IE7\wininet.dll.000
    + 2008-03-01 13:06:20 124,928 -c----w c:\windows\ie7updates\KB950759-IE7\advpack.dll
    + 2008-03-01 13:06:20 124,928 -c----w c:\windows\ie7updates\KB950759-IE7\advpack.dll.000
    + 2008-03-01 13:06:21 347,136 -c----w c:\windows\ie7updates\KB950759-IE7\dxtmsft.dll
    + 2008-03-01 13:06:21 347,136 -c----w c:\windows\ie7updates\KB950759-IE7\dxtmsft.dll.000
    + 2008-03-01 13:06:21 214,528 -c----w c:\windows\ie7updates\KB950759-IE7\dxtrans.dll
    + 2008-03-01 13:06:21 214,528 -c----w c:\windows\ie7updates\KB950759-IE7\dxtrans.dll.000
    + 2008-03-01 13:06:21 133,120 -c----w c:\windows\ie7updates\KB950759-IE7\extmgr.dll
    + 2008-03-01 13:06:21 63,488 -c----w c:\windows\ie7updates\KB950759-IE7\icardie.dll
    + 2008-03-01 13:06:21 63,488 -c----w c:\windows\ie7updates\KB950759-IE7\icardie.dll.000
    + 2008-02-29 08:55:23 70,656 -c----w c:\windows\ie7updates\KB950759-IE7\ie4uinit.exe
    + 2008-03-01 13:06:21 153,088 -c----w c:\windows\ie7updates\KB950759-IE7\ieakeng.dll
    + 2008-03-01 13:06:21 230,400 -c----w c:\windows\ie7updates\KB950759-IE7\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 -c----w c:\windows\ie7updates\KB950759-IE7\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dat
    + 2008-03-01 13:06:22 383,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dll
    + 2008-03-01 13:06:22 383,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dll.000
    + 2008-03-01 13:06:22 384,512 -c----w c:\windows\ie7updates\KB950759-IE7\iedkcs32.dll
    + 2008-03-01 13:06:24 6,066,176 -c----w c:\windows\ie7updates\KB950759-IE7\ieframe.dll
    + 2008-03-01 13:06:24 6,066,176 -c----w c:\windows\ie7updates\KB950759-IE7\ieframe.dll.000
    + 2008-03-01 13:06:24 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\iernonce.dll
    + 2008-03-01 13:06:25 267,776 -c----w c:\windows\ie7updates\KB950759-IE7\iertutil.dll
    + 2008-03-01 13:06:25 267,776 -c----w c:\windows\ie7updates\KB950759-IE7\iertutil.dll.000
    + 2008-02-22 10:00:51 13,824 -c----w c:\windows\ie7updates\KB950759-IE7\ieudinit.exe
    + 2008-02-29 08:55:46 625,664 -c----w c:\windows\ie7updates\KB950759-IE7\iexplore.exe
    + 2008-02-29 08:55:46 625,664 -c----w c:\windows\ie7updates\KB950759-IE7\iexplore.exe.000
    + 2008-03-01 13:06:25 27,648 -c----w c:\windows\ie7updates\KB950759-IE7\jsproxy.dll
    + 2008-03-01 13:06:26 459,264 -c----w c:\windows\ie7updates\KB950759-IE7\msfeeds.dll
    + 2008-03-01 13:06:26 459,264 -c----w c:\windows\ie7updates\KB950759-IE7\msfeeds.dll.000
    + 2008-03-01 13:06:26 52,224 -c----w c:\windows\ie7updates\KB950759-IE7\msfeedsbs.dll
    + 2008-03-01 13:06:26 52,224 -c----w c:\windows\ie7updates\KB950759-IE7\msfeedsbs.dll.000
    + 2008-03-01 23:36:30 3,591,680 -c----w c:\windows\ie7updates\KB950759-IE7\mshtml.dll
    + 2008-03-01 23:36:30 3,591,680 -c----w c:\windows\ie7updates\KB950759-IE7\mshtml.dll.000
    + 2008-03-01 13:06:28 478,208 -c----w c:\windows\ie7updates\KB950759-IE7\mshtmled.dll
    + 2008-03-01 13:06:28 478,208 -c----w c:\windows\ie7updates\KB950759-IE7\mshtmled.dll.000
    + 2008-03-01 13:06:28 193,024 -c----w c:\windows\ie7updates\KB950759-IE7\msrating.dll
    + 2008-03-01 13:06:29 671,232 -c----w c:\windows\ie7updates\KB950759-IE7\mstime.dll
    + 2008-03-01 13:06:29 102,912 -c----w c:\windows\ie7updates\KB950759-IE7\occache.dll
    + 2008-03-01 13:06:29 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\pngfilt.dll
    + 2008-03-01 13:06:29 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\pngfilt.dll.000
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\updspapi.dll
    + 2008-03-01 13:06:29 105,984 -c----w c:\windows\ie7updates\KB950759-IE7\url.dll
    + 2008-03-01 13:06:29 105,984 -c----w c:\windows\ie7updates\KB950759-IE7\url.dll.000
    + 2008-03-01 13:06:30 1,159,680 -c----w c:\windows\ie7updates\KB950759-IE7\urlmon.dll
    + 2008-03-01 13:06:30 1,159,680 -c----w c:\windows\ie7updates\KB950759-IE7\urlmon.dll.000
    + 2008-03-01 13:06:30 233,472 -c----w c:\windows\ie7updates\KB950759-IE7\webcheck.dll
    + 2008-03-01 13:06:30 233,472 -c----w c:\windows\ie7updates\KB950759-IE7\webcheck.dll.000
    + 2008-03-01 13:06:31 826,368 -c----w c:\windows\ie7updates\KB950759-IE7\wininet.dll
    + 2008-03-01 13:06:31 826,368 -c----w c:\windows\ie7updates\KB950759-IE7\wininet.dll.000
    + 2008-04-23 04:16:28 124,928 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:16:28 347,136 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:16:28 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:16:28 133,120 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:16:28 63,488 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:39:58 70,656 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:16:28 153,088 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:16:28 230,400 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:16:28 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:16:28 384,512 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:16:28 6,066,176 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:16:28 267,776 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:40:18 625,664 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:16:28 27,648 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:16:28 459,264 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:16:28 52,224 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-24 03:16:30 3,591,680 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
     
    FLYNDAGGER,
    #9
  11. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2008-04-23 04:16:28 478,208 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:16:28 193,024 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:16:28 671,232 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:16:28 102,912 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:16:28 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:16:28 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:16:29 1,159,680 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:16:29 233,472 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:16:29 826,368 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
    + 2008-06-23 16:57:27 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
    + 2008-06-23 16:57:27 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
    + 2008-06-23 16:57:27 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
    + 2008-06-23 16:57:27 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
    + 2008-06-23 16:57:28 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
    + 2008-06-23 09:20:25 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
    + 2008-06-23 16:57:29 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
    + 2008-06-23 16:57:29 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
    + 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
    + 2008-06-23 16:57:29 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
    + 2008-06-23 16:57:29 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
    + 2008-06-23 16:57:33 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
    + 2008-06-23 16:57:33 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
    + 2008-06-23 16:57:34 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
    + 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
    + 2008-06-23 09:20:52 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
    + 2008-06-23 16:57:35 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
    + 2008-06-23 16:57:36 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
    + 2008-06-23 16:57:36 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
    + 2008-06-24 15:57:40 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
    + 2008-06-23 16:57:39 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
    + 2008-06-23 16:57:39 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
    + 2008-06-23 16:57:40 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
    + 2008-06-23 16:57:40 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
    + 2008-06-23 16:57:40 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
    + 2008-06-23 16:57:40 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
    + 2008-06-23 16:57:40 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
    + 2008-06-23 16:57:41 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
    + 2008-06-23 16:57:41 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
    - 2004-08-04 07:56:42 220,160 ----a-w c:\windows\ime\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ----a-w c:\windows\ime\mscandui.dll
    - 2004-08-04 07:56:45 130,048 ----a-w c:\windows\ime\softkbd.dll
    + 2008-04-14 00:12:06 130,048 ----a-w c:\windows\ime\softkbd.dll
    - 2004-08-04 07:56:29 62,976 ----a-w c:\windows\ime\spgrmr.dll
    + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll
    - 2004-08-04 07:56:45 250,880 ----a-w c:\windows\ime\sptip.dll
    + 2008-04-14 00:12:06 250,368 ----a-w c:\windows\ime\sptip.dll
    + 2008-09-06 17:30:06 102,400 ----a-r c:\windows\Installer\{3DE0053C-FD9A-483E-B7C9-B06E4392206E}\iTunesIco.exe
    + 2008-09-06 17:27:13 86,016 ----a-r c:\windows\Installer\{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}\PrntWzrdIco.exe
    - 2007-07-22 18:25:15 29,926 ----a-r c:\windows\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
    + 2008-09-25 15:49:07 29,926 ----a-r c:\windows\Installer\{571700F0-DB9D-4B3A-B03D-35A14BB5939F}\MsblIco.Exe
    - 2005-05-01 01:27:50 49,152 ----a-r c:\windows\Installer\{609F7AC8-C510-11D4-A788-009027ABA5D0}\_7ACEB147A5C7_4727_B1F4_321DAF3EB587.exe
    + 2008-09-25 19:50:31 49,152 ----a-r c:\windows\Installer\{609F7AC8-C510-11D4-A788-009027ABA5D0}\_7ACEB147A5C7_4727_B1F4_321DAF3EB587.exe
    + 2008-09-06 17:31:15 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2008-11-13 09:01:45 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2007-03-12 20:30:35 204,800 ----a-r c:\windows\Installer\{8865876C-B155-11D6-BA42-8B948C41715D}\NewShortcut1.exe
    + 2008-06-13 07:00:06 204,800 ----a-r c:\windows\Installer\{8865876C-B155-11D6-BA42-8B948C41715D}\NewShortcut1.exe
    - 2007-03-12 20:30:35 319,488 ----a-r c:\windows\Installer\{8865876C-B155-11D6-BA42-8B948C41715D}\NewShortcut2_1.exe
    + 2008-06-13 07:00:06 319,488 ----a-r c:\windows\Installer\{8865876C-B155-11D6-BA42-8B948C41715D}\NewShortcut2_1.exe
    + 2008-04-18 22:09:51 38,240 ----a-r c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    + 2007-09-06 00:21:51 2,560 ----a-r c:\windows\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    + 2008-06-12 00:33:45 2,560 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\cagicon.exe
    + 2008-06-12 00:33:45 34,304 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\misc.exe
    + 2008-06-12 00:33:45 8,192 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\mspicons.exe
    + 2008-06-12 00:33:45 3,584 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\opwicon.exe
    + 2008-06-12 00:33:45 114,688 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\outicon.exe
    + 2008-06-12 00:33:45 16,384 ----a-r c:\windows\Installer\{911A0409-6000-11D3-8CFE-0050048383C9}\PEicons.exe
    + 2008-11-03 01:35:04 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81100000003}\SC_Reader.exe
    + 2008-06-12 00:37:31 65,536 ----a-r c:\windows\Installer\{B208806F-A231-4FA0-AB3F-5C1B8979223E}\ARPPRODUCTICON.exe
    + 2008-06-12 00:37:31 65,536 ----a-r c:\windows\Installer\{B208806F-A231-4FA0-AB3F-5C1B8979223E}\WCESMgr_ShortCut.D95548A9_C14F_4B71_A49C_4A45E1721217.exe
    + 2008-06-13 04:43:07 45,056 ----a-r c:\windows\Installer\{D1696920-9794-4BBC-8A30-7A88763DE5A2}\_BB86BFE89996_4EB5_B387_B4EF975DFF29.exe
    + 2008-04-20 19:29:06 33,982 ----a-r c:\windows\Installer\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}\ARPPRODUCTICON.exe
    + 2008-04-20 19:29:06 40,960 ----a-r c:\windows\Installer\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}\NewShortcut3_96B87C3D64854A7D96EBB2C8CB752619.exe
    + 2008-04-20 19:29:06 40,960 ----a-r c:\windows\Installer\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}\NewShortcut31_96B87C3D64854A7D96EBB2C8CB752619.exe
    + 2008-06-13 07:01:23 2,238 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\ARPPRODUCTICON.exe
    - 2007-03-12 20:32:20 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.233CD577_BCE3_41DE_8D94_8FDCE30B44A3.exe
    + 2008-06-13 07:01:23 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.233CD577_BCE3_41DE_8D94_8FDCE30B44A3.exe
    - 2007-03-12 20:32:20 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.9CCC604C_DF99_4F73_BA77_3E28CFF1DECC.exe
    + 2008-06-13 07:01:23 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.9CCC604C_DF99_4F73_BA77_3E28CFF1DECC.exe
    - 2007-03-12 20:32:20 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.C829FC33_0F35_49B8_9701_07143D588222.exe
    + 2008-06-13 07:01:23 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut1.C829FC33_0F35_49B8_9701_07143D588222.exe
    - 2007-03-12 20:32:20 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut2.9CCC604C_DF99_4F73_BA77_3E28CFF1DECC.exe
    + 2008-06-13 07:01:23 40,960 ----a-r c:\windows\Installer\{F489174B-CF14-4B4D-84BB-C1AD46EDB412}\NewShortcut2.9CCC604C_DF99_4F73_BA77_3E28CFF1DECC.exe
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
    + 2005-05-03 17:51:52 2,678 ----a-w c:\windows\java\Packages\Data\24X37PB3.DAT
    + 2005-05-03 17:51:49 2,678 ----a-w c:\windows\java\Packages\Data\2R17R5ZZ.DAT
    + 2005-05-03 17:51:50 2,678 ----a-w c:\windows\java\Packages\Data\35V97VL3.DAT
    + 2005-05-03 17:51:49 2,678 ----a-w c:\windows\java\Packages\Data\4K83ZX73.DAT
    + 2005-05-03 17:51:49 2,678 ----a-w c:\windows\java\Packages\Data\WFRH77LR.DAT
    - 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentanm.dll
    - 2004-08-04 07:56:41 214,016 ----a-w c:\windows\msagent\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ----a-w c:\windows\msagent\agentctl.dll
    - 2006-10-12 13:54:18 42,496 ----a-w c:\windows\msagent\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ----a-w c:\windows\msagent\agentdp2.dll
    - 2007-03-09 13:58:57 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    - 2004-08-04 07:56:41 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    - 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    - 2004-08-04 07:56:41 44,032 ----a-w c:\windows\msagent\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ----a-w c:\windows\msagent\agentsr.dll
    - 2006-10-12 11:54:07 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    - 2004-08-04 07:56:41 24,064 ----a-w c:\windows\msagent\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ----a-w c:\windows\msagent\agtintl.dll
    - 2002-09-03 16:27:04 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    - 2002-09-03 16:27:04 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    - 2002-09-03 16:27:04 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    - 2002-09-03 16:27:05 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    - 2002-09-03 16:27:05 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll
    - 2002-09-03 16:27:06 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    - 2002-09-03 16:27:06 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    - 2002-09-03 16:27:07 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    - 2002-09-03 16:27:07 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    - 2002-09-03 16:27:09 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    - 2002-09-03 16:27:09 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    - 2002-09-03 16:27:10 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    - 2002-09-03 16:27:10 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    - 2002-09-03 16:27:10 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    - 2002-09-03 16:27:11 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    - 2002-09-03 16:27:11 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    - 2002-09-03 16:27:12 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    - 2002-09-03 16:27:12 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    - 2004-08-04 07:56:43 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    - 2006-06-03 11:40:49 33,792 ------w c:\windows\network diagnostic\custsat.dll
    + 2008-04-14 00:11:51 33,792 ----a-w c:\windows\network diagnostic\custsat.dll
    - 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 558,080 ----a-w c:\windows\network diagnostic\xpnetdiag.exe
    - 2007-06-17 05:11:58 51,200 ----a-w c:\windows\NirCmd.exe
    + 2000-08-31 14:00:00 28,672 ----a-w c:\windows\NirCmd.exe
    - 2004-08-04 07:56:54 69,120 ----a-w c:\windows\notepad.exe
    + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\notepad.exe
    - 2004-08-04 07:56:49 768,512 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpctr.exe
    + 2008-04-14 00:12:21 769,024 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpctr.exe
    - 2004-08-04 07:56:50 743,936 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
    + 2008-04-14 00:12:21 744,448 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe
    - 2004-08-04 07:56:50 18,944 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\hscupd.exe
    + 2008-04-14 00:12:21 18,432 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\hscupd.exe
    - 2004-08-04 07:56:53 158,208 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msconfig.exe
    - 2004-08-04 07:56:43 376,320 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msinfo.dll
    - 2004-08-04 07:56:44 102,400 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchshell.dll
    - 2004-08-04 07:56:44 38,912 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll
    - 2005-05-10 04:36:26 77,423 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
    + 2008-09-19 15:44:49 77,423 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
    - 2005-05-10 04:36:26 3,488 ----a-w c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin
    + 2008-09-19 15:44:49 3,858 ----a-w c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin
    - 2004-08-04 07:56:57 150,528 ----a-w c:\windows\PCHealth\UploadLB\Binaries\uploadm.exe
    + 2008-04-14 00:12:38 150,528 ----a-w c:\windows\PCHealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-04 07:56:45 151,552 ------w c:\windows\peernet\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ----a-w c:\windows\peernet\sqldb20.dll
    - 2004-08-04 07:56:45 462,848 ------w c:\windows\peernet\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ----a-w c:\windows\peernet\sqlqp20.dll
    - 2004-08-04 07:56:45 110,592 ------w c:\windows\peernet\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ----a-w c:\windows\peernet\sqlse20.dll
    - 2004-08-04 07:56:55 146,432 ----a-w c:\windows\regedit.exe
    + 2008-04-14 00:12:32 146,432 ----a-w c:\windows\regedit.exe
    + 2000-08-31 14:00:00 98,816 ----a-w c:\windows\sed.exe
    - 2004-08-04 06:10:06 53,248 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:46:18 53,376 ----a-w c:\windows\ServicePackFiles\i386\1394bus.sys
    - 2004-08-04 06:00:03 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:40:50 12,288 ----a-w c:\windows\ServicePackFiles\i386\4mmdat.sys
    - 2004-08-04 06:10:10 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
    + 2008-04-13 18:46:20 48,128 ----a-w c:\windows\ServicePackFiles\i386\61883.sys
    - 2004-08-04 07:56:41 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
    + 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
    - 2004-08-04 07:56:47 183,808 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 00:12:11 184,320 ----a-w c:\windows\ServicePackFiles\i386\accwiz.exe
    - 2004-08-04 07:56:41 1,852,416 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\ServicePackFiles\i386\acgenral.dll
    - 2004-08-04 07:56:41 450,048 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\ServicePackFiles\i386\aclayers.dll
    - 2004-08-04 07:56:41 137,728 ------w c:\windows\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\ServicePackFiles\i386\aclua.dll
    - 2004-08-04 07:56:41 114,688 ------w c:\windows\ServicePackFiles\i386\aclui.dll
    + 2008-04-14 00:11:48 115,712 ----a-w c:\windows\ServicePackFiles\i386\aclui.dll
    - 2004-08-04 06:07:38 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
    + 2008-04-13 18:36:35 187,776 ----a-w c:\windows\ServicePackFiles\i386\acpi.sys
    - 2004-08-04 07:56:41 244,736 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\ServicePackFiles\i386\acspecfc.dll
    - 2004-08-04 07:56:41 194,048 ------w c:\windows\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\ServicePackFiles\i386\activeds.dll
    - 2004-08-04 07:56:47 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 00:12:12 4,096 ----a-w c:\windows\ServicePackFiles\i386\actmovie.exe
    - 2004-08-04 07:56:41 101,888 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\ServicePackFiles\i386\actxprxy.dll
    - 2004-08-04 07:56:41 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\ServicePackFiles\i386\acxtrnal.dll
    - 2004-08-04 07:56:41 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
    + 2008-04-14 00:11:48 20,540 ----a-w c:\windows\ServicePackFiles\i386\admin.dll
    - 2004-08-04 07:56:47 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
    + 2008-04-14 00:12:12 16,439 ----a-w c:\windows\ServicePackFiles\i386\admin.exe
    - 2004-08-04 07:56:41 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 00:11:48 61,440 ----a-w c:\windows\ServicePackFiles\i386\admparse.dll
    - 2004-08-04 07:56:41 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ----a-w c:\windows\ServicePackFiles\i386\adsldp.dll
    - 2004-08-04 07:56:41 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\ServicePackFiles\i386\adsldpc.dll
    - 2004-08-04 07:56:41 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ----a-w c:\windows\ServicePackFiles\i386\adsmsext.dll
    - 2004-08-04 07:56:41 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ----a-w c:\windows\ServicePackFiles\i386\adsnt.dll
    - 2004-08-04 07:56:41 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 00:11:48 4,255 ----a-w c:\windows\ServicePackFiles\i386\adv01nt5.dll
    - 2004-08-04 07:56:41 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 00:11:48 3,967 ----a-w c:\windows\ServicePackFiles\i386\adv02nt5.dll
    - 2004-08-04 07:56:41 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 00:11:48 3,615 ----a-w c:\windows\ServicePackFiles\i386\adv05nt5.dll
    - 2004-08-04 07:56:41 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 00:11:48 3,647 ----a-w c:\windows\ServicePackFiles\i386\adv07nt5.dll
    - 2004-08-04 07:56:41 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 00:11:48 3,135 ----a-w c:\windows\ServicePackFiles\i386\adv08nt5.dll
    - 2004-08-04 07:56:41 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 00:11:48 3,711 ----a-w c:\windows\ServicePackFiles\i386\adv09nt5.dll
    - 2004-08-04 07:56:41 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 00:11:48 3,775 ----a-w c:\windows\ServicePackFiles\i386\adv11nt5.dll
    - 2004-08-04 07:56:41 616,960 ------w c:\windows\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ----a-w c:\windows\ServicePackFiles\i386\advapi32.dll
    - 2004-08-04 07:56:41 99,840 ------w c:\windows\ServicePackFiles\i386\advpack.dll
    + 2008-04-14 00:11:48 99,840 ----a-w c:\windows\ServicePackFiles\i386\advpack.dll
    - 2004-08-04 05:39:36 142,464 ------w c:\windows\ServicePackFiles\i386\aec.sys
    + 2008-04-13 16:39:23 142,592 ----a-w c:\windows\ServicePackFiles\i386\aec.sys
    - 2004-08-04 06:14:14 138,496 ------w c:\windows\ServicePackFiles\i386\afd.sys
    + 2008-04-13 19:19:23 138,112 ----a-w c:\windows\ServicePackFiles\i386\afd.sys
    - 2004-08-04 07:56:41 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\ServicePackFiles\i386\agentanm.dll
    - 2004-08-04 07:56:41 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ----a-w c:\windows\ServicePackFiles\i386\agentctl.dll
    - 2004-08-04 07:56:41 41,984 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ----a-w c:\windows\ServicePackFiles\i386\agentdp2.dll
    - 2004-08-04 07:56:41 58,880 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\ServicePackFiles\i386\agentdpv.dll
    - 2004-08-04 07:56:41 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ----a-w c:\windows\ServicePackFiles\i386\agentmpx.dll
    - 2004-08-04 07:56:41 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\ServicePackFiles\i386\agentpsh.dll
    - 2004-08-04 07:56:41 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ----a-w c:\windows\ServicePackFiles\i386\agentsr.dll
    - 2004-08-04 07:56:47 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ----a-w c:\windows\ServicePackFiles\i386\agentsvr.exe
    - 2004-08-04 06:07:41 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:38 42,368 ----a-w c:\windows\ServicePackFiles\i386\agp440.sys
    - 2004-08-04 06:07:42 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2008-04-13 18:36:39 44,928 ----a-w c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll
    - 2004-08-04 07:56:41 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ----a-w c:\windows\ServicePackFiles\i386\agtintl.dll
    - 2004-08-04 07:56:47 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 00:12:12 98,304 ----a-w c:\windows\ServicePackFiles\i386\ahui.exe
    - 2004-08-04 07:56:47 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe
    + 2008-04-14 00:12:12 44,544 ----a-w c:\windows\ServicePackFiles\i386\alg.exe
    - 2004-08-04 06:07:41 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2008-04-13 18:36:38 42,752 ----a-w c:\windows\ServicePackFiles\i386\alim1541.sys
    - 2004-08-04 07:56:41 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ----a-w c:\windows\ServicePackFiles\i386\alrsvc.dll
    - 2004-08-04 06:07:42 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2008-04-13 18:36:39 43,008 ----a-w c:\windows\ServicePackFiles\i386\amdagp.sys
    - 2004-08-04 05:59:19 36,992 ------w c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2008-04-13 18:31:32 37,376 ----a-w c:\windows\ServicePackFiles\i386\amdk6.sys
    - 2004-08-04 05:59:20 37,376 ------w c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2008-04-13 18:31:33 37,760 ----a-w c:\windows\ServicePackFiles\i386\amdk7.sys
    - 2004-08-04 07:56:41 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll
    + 2008-04-14 00:11:49 70,656 ----a-w c:\windows\ServicePackFiles\i386\amstream.dll
    - 2004-08-04 07:56:41 126,976 ------w c:\windows\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\ServicePackFiles\i386\apphelp.dll
    - 2004-08-04 07:56:41 331,264 ------w c:\windows\ServicePackFiles\i386\aqueue.dll
    + 2008-04-14 00:11:49 331,264 ----a-w c:\windows\ServicePackFiles\i386\aqueue.dll
    - 2004-08-04 05:58:29 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2008-04-13 18:51:25 60,800 ----a-w c:\windows\ServicePackFiles\i386\arp1394.sys
    - 2004-08-04 07:56:41 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ----a-w c:\windows\ServicePackFiles\i386\asycfilt.dll
    - 2004-08-04 06:05:03 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-13 18:57:27 14,336 ----a-w c:\windows\ServicePackFiles\i386\asyncmac.sys
    - 2004-08-04 07:56:47 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe
    + 2008-04-14 00:12:12 25,088 ----a-w c:\windows\ServicePackFiles\i386\at.exe
    - 2004-08-04 05:59:42 95,360 ------w c:\windows\ServicePackFiles\i386\atapi.sys
    + 2008-04-13 18:40:30 96,512 ----a-w c:\windows\ServicePackFiles\i386\atapi.sys
    - 2004-08-04 07:56:41 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 00:11:49 229,376 ----a-w c:\windows\ServicePackFiles\i386\ati2cqag.dll
    - 2004-08-04 07:56:41 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 00:11:49 377,984 ----a-w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
    - 2004-08-04 07:56:41 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll
    + 2008-04-14 00:11:49 201,728 ----a-w c:\windows\ServicePackFiles\i386\ati2dvag.dll
    - 2004-08-04 07:56:41 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 00:11:49 870,784 ----a-w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
    - 2004-08-04 07:56:41 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 00:11:49 1,057,760 ----a-w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
    - 2004-08-04 07:56:41 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll
    + 2008-04-14 00:11:50 1,888,992 ----a-w c:\windows\ServicePackFiles\i386\ati3duag.dll
    - 2004-08-04 07:56:41 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 00:11:50 32,768 ----a-w c:\windows\ServicePackFiles\i386\ativtmxx.dll
    - 2004-08-04 07:56:41 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 00:11:50 516,768 ----a-w c:\windows\ServicePackFiles\i386\ativvaxx.dll
    - 2004-08-04 07:56:41 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll
    + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\ServicePackFiles\i386\atl.dll
    - 2004-08-04 07:56:47 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2008-04-14 00:12:12 11,264 ----a-w c:\windows\ServicePackFiles\i386\atmadm.exe
    - 2004-08-04 05:58:30 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-13 18:51:25 59,904 ----a-w c:\windows\ServicePackFiles\i386\atmarpc.sys
    - 2004-08-04 07:55:59 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ----a-w c:\windows\ServicePackFiles\i386\atmfd.dll
    - 2004-08-04 05:58:34 55,936 ------w c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2008-04-13 18:51:30 55,808 ----a-w c:\windows\ServicePackFiles\i386\atmlane.sys
    - 2004-08-04 07:56:41 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:12:12 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe
    - 2004-08-04 07:56:41 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 00:11:50 21,183 ----a-w c:\windows\ServicePackFiles\i386\atv01nt5.dll
    - 2004-08-04 07:56:41 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 00:11:50 11,359 ----a-w c:\windows\ServicePackFiles\i386\atv02nt5.dll
    - 2004-08-04 07:56:41 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 00:11:50 25,471 ----a-w c:\windows\ServicePackFiles\i386\atv04nt5.dll
    - 2004-08-04 07:56:41 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 00:11:50 14,143 ----a-w c:\windows\ServicePackFiles\i386\atv06nt5.dll
    - 2004-08-04 07:56:41 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 00:11:50 17,279 ----a-w c:\windows\ServicePackFiles\i386\atv10nt5.dll
    - 2004-08-04 07:56:41 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\ServicePackFiles\i386\audiosrv.dll
    - 2004-08-04 07:56:47 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 00:12:12 14,336 ----a-w c:\windows\ServicePackFiles\i386\auditusr.exe
    - 2004-08-04 07:56:41 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll
    + 2008-04-14 00:11:50 20,540 ----a-w c:\windows\ServicePackFiles\i386\author.dll
    - 2004-08-04 07:56:47 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe
    + 2008-04-14 00:12:12 16,439 ----a-w c:\windows\ServicePackFiles\i386\author.exe
    - 2004-08-04 07:56:41 56,832 ------w c:\windows\ServicePackFiles\i386\authz.dll
    + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\ServicePackFiles\i386\authz.dll
    - 2004-08-04 07:56:47 588,800 ------w c:\windows\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 00:12:12 588,800 ----a-w c:\windows\ServicePackFiles\i386\autochk.exe
    - 2004-08-04 07:56:47 602,624 ------w c:\windows\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ----a-w c:\windows\ServicePackFiles\i386\autoconv.exe
    - 2004-08-04 07:56:47 580,608 ------w c:\windows\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ----a-w c:\windows\ServicePackFiles\i386\autofmt.exe
    - 2004-08-04 07:56:47 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ----a-w c:\windows\ServicePackFiles\i386\autolfn.exe
    - 2004-08-04 06:10:10 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:20 38,912 ----a-w c:\windows\ServicePackFiles\i386\avc.sys
    - 2004-08-04 06:09:58 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-13 18:46:07 13,696 ----a-w c:\windows\ServicePackFiles\i386\avcstrm.sys
    - 2004-08-04 07:56:41 84,992 ------w c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ----a-w c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll
    - 2004-08-04 07:56:41 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\ServicePackFiles\i386\basesrv.dll
    - 2004-08-04 07:56:41 28,672 ------w c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\ServicePackFiles\i386\batmeter.dll
    - 2004-08-04 07:56:41 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll
    + 2008-04-14 00:11:50 8,704 ----a-w c:\windows\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys
    - 2004-08-04 06:10:12 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2008-04-13 18:46:21 11,776 ----a-w c:\windows\ServicePackFiles\i386\bdasup.sys
    - 2004-08-04 07:56:41 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ----a-w c:\windows\ServicePackFiles\i386\bidispl.dll
    - 2004-08-04 07:56:41 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ----a-w c:\windows\ServicePackFiles\i386\bitsprx2.dll
    - 2004-08-04 07:56:41 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ----a-w c:\windows\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll
    - 2004-08-04 07:56:47 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2008-04-14 00:12:13 71,680 ----a-w c:\windows\ServicePackFiles\i386\blastcln.exe
    - 2004-08-04 05:59:57 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys
    + 2008-04-13 18:53:23 71,552 ----a-w c:\windows\ServicePackFiles\i386\bridge.sys
    - 2004-08-04 07:55:59 63,488 ------w c:\windows\ServicePackFiles\i386\browselc.dll
    + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\ServicePackFiles\i386\browselc.dll
    - 2004-08-04 07:56:41 77,312 ------w c:\windows\ServicePackFiles\i386\browser.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\ServicePackFiles\i386\browser.dll
    - 2004-08-04 07:56:41 1,016,832 ------w c:\windows\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\ServicePackFiles\i386\browseui.dll
    - 2004-08-04 07:56:41 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ----a-w c:\windows\ServicePackFiles\i386\browsewm.dll
    - 2004-08-04 07:56:41 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll
    + 2008-04-14 00:11:50 20,992 ----a-w c:\windows\ServicePackFiles\i386\bthci.dll
    - 2004-08-04 06:10:38 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 17,024 ----a-w c:\windows\ServicePackFiles\i386\bthenum.sys
    - 2004-08-04 06:10:38 38,016 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:46:33 37,888 ----a-w c:\windows\ServicePackFiles\i386\bthmodem.sys
    - 2004-08-04 05:58:38 100,992 ------w c:\windows\ServicePackFiles\i386\bthpan.sys
    + 2008-04-13 18:51:34 101,120 ----a-w c:\windows\ServicePackFiles\i386\bthpan.sys
    - 2004-08-04 06:10:37 274,304 ------w c:\windows\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:32 273,024 ----a-w c:\windows\ServicePackFiles\i386\bthport.sys
    - 2004-08-04 06:10:37 35,456 ------w c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2008-04-13 18:46:31 36,480 ----a-w c:\windows\ServicePackFiles\i386\bthprint.sys
    - 2004-08-04 07:56:41 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\ServicePackFiles\i386\bthserv.dll
    - 2004-08-04 06:10:34 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2008-04-13 18:46:29 18,944 ----a-w c:\windows\ServicePackFiles\i386\bthusb.sys
    - 2004-08-04 07:56:41 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll
    - 2004-08-04 07:56:41 59,904 ------w c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\ServicePackFiles\i386\cabinet.dll
    - 2004-08-04 07:56:41 84,480 ------w c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:11:50 84,480 ----a-w c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:12:13 19,968 ------w c:\windows\ServicePackFiles\i386\cacls.exe
    - 2004-08-04 07:56:41 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 385,024 ----a-w c:\windows\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll
    - 2004-08-04 07:56:41 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll
    - 2004-08-04 07:56:41 229,888 ------w c:\windows\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\ServicePackFiles\i386\catsrv.dll
    - 2004-08-04 07:56:41 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ----a-w c:\windows\ServicePackFiles\i386\catsrvps.dll
    - 2004-08-04 07:56:41 628,224 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\ServicePackFiles\i386\catsrvut.dll
    - 2004-08-04 06:10:16 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 18:46:23 17,024 ----a-w c:\windows\ServicePackFiles\i386\ccdecode.sys
    - 2004-08-04 06:14:10 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2008-04-13 19:14:21 63,744 ----a-w c:\windows\ServicePackFiles\i386\cdfs.sys
    - 2004-08-04 07:56:41 150,528 ------w c:\windows\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ----a-w c:\windows\ServicePackFiles\i386\cdfview.dll
    - 2004-08-04 07:56:41 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 00:11:50 66,560 ----a-w c:\windows\ServicePackFiles\i386\cdm.dll
    - 2004-08-04 07:56:41 2,067,968 ------w c:\windows\ServicePackFiles\i386\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ----a-w c:\windows\ServicePackFiles\i386\cdosys.dll
    - 2004-08-04 05:59:52 49,536 ------w c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2008-04-13 18:40:46 62,976 ----a-w c:\windows\ServicePackFiles\i386\cdrom.sys
    - 2004-08-04 07:56:41 194,560 ------w c:\windows\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\ServicePackFiles\i386\certcli.dll
    - 2004-08-04 07:56:41 457,728 ------w c:\windows\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ----a-w c:\windows\ServicePackFiles\i386\certmgr.dll
    - 2004-08-04 07:56:41 38,912 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ----a-w c:\windows\ServicePackFiles\i386\cfgbkend.dll
    - 2004-08-04 07:56:00 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    - 2004-08-04 07:56:47 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 00:12:14 188,480 ----a-w c:\windows\ServicePackFiles\i386\cfgwiz.exe
    - 2004-08-04 07:56:41 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-14 00:11:50 15,423 ----a-w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    - 2004-08-04 06:00:12 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys
    + 2008-04-13 18:40:58 8,192 ----a-w c:\windows\ServicePackFiles\i386\changer.sys
    + 2008-04-14 00:11:50 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll
    - 2004-08-04 07:56:41 1,352,192 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 1,358,848 ----a-w c:\windows\ServicePackFiles\i386\cimwin32.dll
    - 2004-08-04 07:56:41 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ----a-w c:\windows\ServicePackFiles\i386\ciodm.dll
    - 2004-08-04 07:56:47 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ----a-w c:\windows\ServicePackFiles\i386\cisvc.exe
    - 2004-08-04 06:14:26 49,664 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-13 19:16:22 49,536 ----a-w c:\windows\ServicePackFiles\i386\classpnp.sys
    - 2004-08-04 07:56:41 110,080 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ----a-w c:\windows\ServicePackFiles\i386\clbcatex.dll
    - 2004-08-04 07:56:41 501,248 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\ServicePackFiles\i386\clbcatq.dll
    - 2004-08-04 07:56:47 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:12:14 64,000 ----a-w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    - 2004-08-04 07:56:41 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\ServicePackFiles\i386\cliconfg.dll
    - 2004-08-04 07:56:47 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ----a-w c:\windows\ServicePackFiles\i386\cliconfg.exe
    - 2004-08-04 07:56:47 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ----a-w c:\windows\ServicePackFiles\i386\clipbrd.exe
    - 2004-08-04 07:56:47 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ----a-w c:\windows\ServicePackFiles\i386\clipsrv.exe
    - 2004-08-04 07:56:41 57,856 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\ServicePackFiles\i386\clusapi.dll
    - 2004-08-04 06:07:39 14,080 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-13 18:36:37 13,952 ----a-w c:\windows\ServicePackFiles\i386\cmbatt.sys
    - 2004-08-04 07:56:41 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ----a-w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    - 2004-08-04 07:56:48 388,608 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:12:14 389,120 ----a-w c:\windows\ServicePackFiles\i386\cmd.exe
    - 2004-08-04 07:56:41 343,040 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ----a-w c:\windows\ServicePackFiles\i386\cmdial32.dll
    - 2004-08-04 07:56:48 47,104 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ----a-w c:\windows\ServicePackFiles\i386\cmdl32.exe
    - 2004-08-04 07:56:48 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ----a-w c:\windows\ServicePackFiles\i386\cmmon32.exe
    - 2004-08-04 07:56:41 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ----a-w c:\windows\ServicePackFiles\i386\cmprops.dll
    - 2004-08-04 07:56:41 13,824 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:11:50 13,312 ----a-w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    - 2004-08-04 07:56:48 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ----a-w c:\windows\ServicePackFiles\i386\cmstp.exe
    - 2004-08-04 07:56:41 39,936 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ----a-w c:\windows\ServicePackFiles\i386\cmutil.dll
    - 2004-08-04 07:56:41 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    - 2004-08-04 07:56:41 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:50 79,360 ----a-w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll
    - 2004-08-04 07:56:41 62,464 ------w c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll
    - 2004-08-04 07:56:41 195,584 ------w c:\windows\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ----a-w c:\windows\ServicePackFiles\i386\comadmin.dll
    - 2004-08-04 07:56:41 611,328 ------w c:\windows\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ----a-w c:\windows\ServicePackFiles\i386\comctl32.dll
    - 2004-08-04 07:56:41 276,992 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ----a-w c:\windows\ServicePackFiles\i386\comdlg32.dll
    - 2004-08-04 07:56:41 252,928 ------w c:\windows\ServicePackFiles\i386\compatui.dll
    + 2008-04-14 00:11:51 252,928 ----a-w c:\windows\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys
    - 2004-08-04 07:56:41 229,376 ------w c:\windows\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 229,376 ----a-w c:\windows\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll
    - 2004-08-04 07:56:48 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 9,728 ----a-w c:\windows\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe
    - 2004-08-04 07:56:41 792,064 ------w c:\windows\ServicePackFiles\i386\comres.dll
    + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\ServicePackFiles\i386\comres.dll
    + 2008-04-14 00:11:51 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll
    - 2004-08-04 07:56:41 1,251,840 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\ServicePackFiles\i386\comsvcs.dll
    - 2004-08-04 07:56:41 540,160 ------w c:\windows\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 00:11:51 539,648 ----a-w c:\windows\ServicePackFiles\i386\comuid.dll
    - 2004-08-04 07:56:48 1,032,192 ------w c:\windows\ServicePackFiles\i386\conf.exe
    + 2008-04-14 00:12:15 1,032,192 ----a-w c:\windows\ServicePackFiles\i386\conf.exe
    - 2004-08-04 07:56:41 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 45,056 ----a-w c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\windows\ServicePackFiles\i386\confmsp.dll
    - 2004-08-04 07:56:48 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe
    + 2008-04-14 00:12:15 27,648 ----a-w c:\windows\ServicePackFiles\i386\conime.exe
    - 2004-08-04 07:56:41 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 35,328 ----a-w c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll
    - 2004-08-04 07:56:41 163,840 ------w c:\windows\ServicePackFiles\i386\credui.dll
    + 2008-04-14 00:11:51 163,840 ----a-w c:\windows\ServicePackFiles\i386\credui.dll
    - 2004-08-04 05:59:20 36,480 ------w c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2008-04-13 18:31:32 36,736 ----a-w c:\windows\ServicePackFiles\i386\crusoe.sys
    - 2004-08-04 07:56:41 597,504 ------w c:\windows\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 00:11:51 599,040 ----a-w c:\windows\ServicePackFiles\i386\crypt32.dll
    - 2004-08-04 07:56:41 74,752 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 00:11:51 74,752 ----a-w c:\windows\ServicePackFiles\i386\cryptdlg.dll
    - 2004-08-04 07:56:41 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 00:11:51 33,280 ----a-w c:\windows\ServicePackFiles\i386\cryptdll.dll
    - 2004-08-04 07:56:41 53,760 ------w c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 00:11:51 53,760 ----a-w c:\windows\ServicePackFiles\i386\cryptext.dll
    - 2004-08-04 07:56:41 63,488 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 00:11:51 64,512 ----a-w c:\windows\ServicePackFiles\i386\cryptnet.dll
    - 2004-08-04 07:56:41 60,416 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 00:11:51 62,464 ----a-w c:\windows\ServicePackFiles\i386\cryptsvc.dll
    - 2004-08-04 07:56:41 512,512 ------w c:\windows\ServicePackFiles\i386\cryptui.dll
    + 2008-04-14 00:11:51 512,512 ----a-w c:\windows\ServicePackFiles\i386\cryptui.dll
    - 2004-08-04 07:56:41 101,888 ------w c:\windows\ServicePackFiles\i386\cscdll.dll
    + 2008-04-14 00:11:51 101,888 ----a-w c:\windows\ServicePackFiles\i386\cscdll.dll
    - 2004-08-04 07:56:48 98,304 ------w c:\windows\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 00:12:15 139,264 ----a-w c:\windows\ServicePackFiles\i386\cscript.exe
    - 2004-08-04 07:56:41 326,656 ------w c:\windows\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 00:11:51 326,656 ----a-w c:\windows\ServicePackFiles\i386\cscui.dll
    - 2004-08-04 07:56:41 32,768 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 00:11:51 32,256 ----a-w c:\windows\ServicePackFiles\i386\csrsrv.dll
    - 2004-08-04 07:56:48 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\ServicePackFiles\i386\csrss.exe
    - 2004-08-04 07:56:48 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe
    + 2008-04-14 00:12:16 15,360 ----a-w c:\windows\ServicePackFiles\i386\ctfmon.exe
    - 2004-08-04 07:56:41 249,856 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 00:11:51 249,856 ----a-w c:\windows\ServicePackFiles\i386\ctmasetp.dll
    - 2004-08-04 07:56:41 28,672 ------w c:\windows\ServicePackFiles\i386\custsat.dll
    + 2008-04-14 00:11:51 33,792 ----a-w c:\windows\ServicePackFiles\i386\custsat.dll
    - 2004-08-04 07:56:41 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 00:11:51 1,179,648 ----a-w c:\windows\ServicePackFiles\i386\d3d8.dll
    - 2004-08-04 07:56:41 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 00:11:51 8,192 ----a-w c:\windows\ServicePackFiles\i386\d3d8thk.dll
    - 2004-08-04 07:56:41 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 00:11:51 1,689,088 ----a-w c:\windows\ServicePackFiles\i386\d3d9.dll
    - 2004-08-04 07:56:41 825,344 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 00:11:51 824,320 ----a-w c:\windows\ServicePackFiles\i386\d3dim700.dll
    - 2004-08-04 07:56:41 1,053,696 ------w c:\windows\ServicePackFiles\i386\danim.dll
    + 2008-04-14 00:11:51 1,054,208 ----a-w c:\windows\ServicePackFiles\i386\danim.dll
    - 2004-08-04 07:56:42 561,179 ------w c:\windows\ServicePackFiles\i386\dao360.dll
    + 2008-03-25 04:50:25 554,008 ----a-w c:\windows\ServicePackFiles\i386\dao360.dll
    - 2004-08-04 07:56:42 54,272 ------w c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 54,272 ----a-w c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll
    - 2004-08-04 07:56:42 24,576 ------w c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 00:11:51 25,088 ----a-w c:\windows\ServicePackFiles\i386\davclnt.dll
    - 2004-08-04 07:56:42 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 00:11:51 640,000 ----a-w c:\windows\ServicePackFiles\i386\dbghelp.dll
    - 2004-08-04 07:56:42 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 00:11:51 24,576 ----a-w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    - 2004-08-04 07:56:42 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 00:11:51 110,592 ----a-w c:\windows\ServicePackFiles\i386\dbnetlib.dll
    - 2004-08-04 07:56:42 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:25:26 1,804 ----a-w c:\windows\ServicePackFiles\i386\dcache.bin
    - 2004-08-04 07:56:42 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 00:11:51 40,960 ----a-w c:\windows\ServicePackFiles\i386\dcap32.dll
    - 2004-08-04 07:56:42 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:11:51 8,704 ----a-w c:\windows\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:12:16 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
    - 2004-08-04 07:56:48 30,208 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 00:12:16 30,208 ----a-w c:\windows\ServicePackFiles\i386\ddeshare.exe
    - 2004-08-04 07:56:42 266,240 ------w c:\windows\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 00:11:51 279,552 ----a-w c:\windows\ServicePackFiles\i386\ddraw.dll
    - 2004-08-04 07:56:42 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 00:11:51 27,136 ----a-w c:\windows\ServicePackFiles\i386\ddrawex.dll
     
    FLYNDAGGER,
    #10
  12. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    - 2004-08-04 07:56:48 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 00:12:16 25,088 ----a-w c:\windows\ServicePackFiles\i386\defrag.exe
    - 2004-08-04 07:56:42 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 00:11:51 59,904 ----a-w c:\windows\ServicePackFiles\i386\devenum.dll
    - 2004-08-04 07:56:42 282,624 ------w c:\windows\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 00:11:51 282,624 ----a-w c:\windows\ServicePackFiles\i386\devmgr.dll
    - 2004-08-04 07:56:48 82,432 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 00:12:16 82,944 ----a-w c:\windows\ServicePackFiles\i386\dfrgfat.exe
    - 2004-08-04 07:56:48 104,960 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 00:12:16 105,472 ----a-w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
    - 2004-08-04 07:56:42 38,912 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 00:11:51 39,424 ----a-w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    - 2004-08-04 07:56:42 123,904 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 00:11:51 124,416 ----a-w c:\windows\ServicePackFiles\i386\dfrgui.dll
    - 2004-08-04 07:56:42 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\ServicePackFiles\i386\dfsshlex.dll
    - 2004-08-04 07:56:42 111,104 ------w c:\windows\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 00:11:51 111,104 ----a-w c:\windows\ServicePackFiles\i386\dgnet.dll
    - 2004-08-04 07:56:42 111,104 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:51 126,976 ----a-w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll
    - 2004-08-04 07:56:48 539,136 ------w c:\windows\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 00:12:17 539,136 ----a-w c:\windows\ServicePackFiles\i386\dialer.exe
    - 2004-08-04 07:56:48 85,504 ------w c:\windows\ServicePackFiles\i386\diantz.exe
    + 2008-04-14 00:12:17 87,040 ----a-w c:\windows\ServicePackFiles\i386\diantz.exe
    + 2007-04-02 18:34:11 884,712 ------w c:\windows\ServicePackFiles\i386\digcore.exe
    - 2004-08-04 07:56:42 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 68,608 ----a-w c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll
    - 2004-08-04 07:56:42 159,232 ------w c:\windows\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 00:11:52 158,720 ----a-w c:\windows\ServicePackFiles\i386\dinput.dll
    - 2004-08-04 07:56:42 181,760 ------w c:\windows\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 00:11:52 181,760 ----a-w c:\windows\ServicePackFiles\i386\dinput8.dll
    - 2004-08-04 07:56:42 81,408 ------w c:\windows\ServicePackFiles\i386\directdb.dll
    + 2008-04-14 00:11:52 86,528 ----a-w c:\windows\ServicePackFiles\i386\directdb.dll
    - 2004-08-04 05:59:54 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-04-13 18:40:47 36,352 ----a-w c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll
    - 2004-08-04 05:59:52 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2008-04-13 18:40:44 14,208 ----a-w c:\windows\ServicePackFiles\i386\diskdump.sys
    - 2004-08-04 07:56:48 163,840 ------w c:\windows\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:12:17 163,840 ----a-w c:\windows\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:11:52 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll
    - 2004-08-04 07:56:48 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe
    + 2008-04-14 00:12:17 5,120 ----a-w c:\windows\ServicePackFiles\i386\dllhost.exe
    - 2004-08-04 06:00:04 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys
    + 2008-04-13 18:40:51 8,320 ----a-w c:\windows\ServicePackFiles\i386\dlttape.sys
    - 2004-08-04 07:56:48 224,768 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe
    + 2008-04-14 00:12:17 224,768 ----a-w c:\windows\ServicePackFiles\i386\dmadmin.exe
    - 2004-08-04 07:56:42 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll
    + 2008-04-14 00:11:52 28,672 ----a-w c:\windows\ServicePackFiles\i386\dmband.dll
    - 2004-08-04 06:07:17 799,744 ------w c:\windows\ServicePackFiles\i386\dmboot.sys
    + 2008-04-13 18:44:48 799,744 ----a-w c:\windows\ServicePackFiles\i386\dmboot.sys
    - 2004-08-04 07:56:42 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 61,440 ----a-w c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll
    - 2004-08-04 07:56:42 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
    + 2008-04-14 00:11:52 200,704 ----a-w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
    - 2004-08-04 07:56:42 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll
    + 2008-04-14 00:11:52 181,248 ----a-w c:\windows\ServicePackFiles\i386\dmime.dll
    - 2004-08-04 06:07:16 153,344 ------w c:\windows\ServicePackFiles\i386\dmio.sys
    + 2008-04-13 18:44:46 153,344 ----a-w c:\windows\ServicePackFiles\i386\dmio.sys
    - 2004-08-04 07:56:42 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2008-04-14 00:11:52 35,840 ----a-w c:\windows\ServicePackFiles\i386\dmloader.dll
    - 2004-08-04 07:56:48 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2008-04-14 00:12:17 15,872 ----a-w c:\windows\ServicePackFiles\i386\dmremote.exe
    - 2004-08-04 07:56:42 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2008-04-14 00:11:52 82,432 ----a-w c:\windows\ServicePackFiles\i386\dmscript.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\ServicePackFiles\i386\dmserver.dll
    - 2004-08-04 07:56:42 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll
    + 2008-04-14 00:11:52 105,984 ----a-w c:\windows\ServicePackFiles\i386\dmstyle.dll
    - 2004-08-04 07:56:42 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll
    + 2008-04-14 00:11:52 103,424 ----a-w c:\windows\ServicePackFiles\i386\dmsynth.dll
    - 2004-08-04 07:56:42 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll
    + 2008-04-14 00:11:52 104,448 ----a-w c:\windows\ServicePackFiles\i386\dmusic.dll
    - 2004-08-04 06:07:38 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2008-04-13 18:45:01 52,864 ----a-w c:\windows\ServicePackFiles\i386\dmusic.sys
    - 2004-08-04 07:56:42 52,224 ------w c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2008-04-14 00:11:52 52,224 ----a-w c:\windows\ServicePackFiles\i386\dmutil.dll
    - 2004-08-04 07:56:42 148,480 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll
    + 2008-04-14 00:11:52 147,968 ----a-w c:\windows\ServicePackFiles\i386\dnsapi.dll
    - 2004-08-04 07:56:42 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    + 2008-04-14 00:11:52 45,568 ----a-w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    - 2004-08-04 07:56:42 48,128 ------w c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2008-04-14 00:11:52 48,128 ----a-w c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll
    - 2004-08-04 05:58:29 207,360 ------w c:\windows\ServicePackFiles\i386\dot4.sys
    + 2008-04-13 18:39:46 206,976 ----a-w c:\windows\ServicePackFiles\i386\dot4.sys
    - 2004-08-04 06:13:53 97,280 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll
    + 2008-04-13 21:00:49 103,424 ----a-w c:\windows\ServicePackFiles\i386\dpcdll.dll
    - 2004-08-04 07:56:48 30,208 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2008-04-14 00:12:17 29,696 ----a-w c:\windows\ServicePackFiles\i386\dplaysvr.exe
    - 2004-08-04 07:56:42 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll
    + 2008-04-14 00:11:52 229,888 ----a-w c:\windows\ServicePackFiles\i386\dplayx.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\ServicePackFiles\i386\dpmodemx.dll
    - 2004-08-04 07:56:03 3,584 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll
    + 2008-04-14 00:09:19 3,072 ----a-w c:\windows\ServicePackFiles\i386\dpnaddr.dll
    - 2004-08-04 07:56:42 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll
    + 2008-04-14 00:11:52 375,296 ----a-w c:\windows\ServicePackFiles\i386\dpnet.dll
    - 2004-08-04 07:56:42 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2008-04-14 00:11:52 35,328 ----a-w c:\windows\ServicePackFiles\i386\dpnhpast.dll
    - 2004-08-04 07:56:42 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-04-14 00:11:52 60,928 ----a-w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    - 2004-08-04 07:56:03 3,584 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll
    + 2008-04-14 00:09:20 3,072 ----a-w c:\windows\ServicePackFiles\i386\dpnlobby.dll
    - 2004-08-04 07:56:48 18,432 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2008-04-14 00:12:17 17,920 ----a-w c:\windows\ServicePackFiles\i386\dpnsvr.exe
    - 2004-08-04 07:56:42 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2008-04-14 00:11:52 21,504 ----a-w c:\windows\ServicePackFiles\i386\dpvacm.dll
    - 2004-08-04 07:56:42 212,480 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll
    + 2008-04-14 00:11:52 212,480 ----a-w c:\windows\ServicePackFiles\i386\dpvoice.dll
    - 2004-08-04 07:56:48 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2008-04-14 00:12:18 83,456 ----a-w c:\windows\ServicePackFiles\i386\dpvsetup.exe
    - 2004-08-04 07:56:42 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll
    + 2008-04-14 00:11:52 116,736 ----a-w c:\windows\ServicePackFiles\i386\dpvvox.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2008-04-14 00:11:52 57,344 ----a-w c:\windows\ServicePackFiles\i386\dpwsockx.dll
    - 2004-08-04 06:07:58 60,288 ------w c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:14 60,160 ----a-w c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:13 2,944 ----a-w c:\windows\ServicePackFiles\i386\drmkaud.sys
    - 2004-08-04 07:56:42 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll
    + 2008-04-14 00:11:52 14,336 ----a-w c:\windows\ServicePackFiles\i386\drprov.dll
    - 2004-08-04 07:56:42 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll
    + 2008-04-14 00:11:52 16,384 ----a-w c:\windows\ServicePackFiles\i386\ds32gt.dll
    - 2004-08-04 07:56:42 181,760 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll
    + 2008-04-14 00:11:52 181,248 ----a-w c:\windows\ServicePackFiles\i386\dsdmo.dll
    - 2004-08-04 07:56:42 71,680 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-04-14 00:11:52 71,680 ----a-w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    - 2004-08-04 07:56:42 92,672 ------w c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 92,672 ----a-w c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll
    - 2004-08-04 07:56:42 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll
    + 2008-04-14 00:11:52 367,616 ----a-w c:\windows\ServicePackFiles\i386\dsound.dll
    - 2004-08-04 07:56:42 1,294,336 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll
    + 2008-04-14 00:11:52 1,293,824 ----a-w c:\windows\ServicePackFiles\i386\dsound3d.dll
    - 2004-08-04 07:56:42 142,336 ------w c:\windows\ServicePackFiles\i386\dsprop.dll
    + 2008-04-14 00:11:52 142,848 ----a-w c:\windows\ServicePackFiles\i386\dsprop.dll
    - 2004-08-04 07:56:04 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll
    + 2008-04-13 17:09:30 4,096 ----a-w c:\windows\ServicePackFiles\i386\dsprpres.dll
    - 2004-08-04 07:56:42 239,104 ------w c:\windows\ServicePackFiles\i386\dsquery.dll
    + 2008-04-14 00:11:52 239,104 ----a-w c:\windows\ServicePackFiles\i386\dsquery.dll
    - 2004-08-04 07:56:42 51,200 ------w c:\windows\ServicePackFiles\i386\dssec.dll
    + 2008-04-14 00:11:52 51,200 ----a-w c:\windows\ServicePackFiles\i386\dssec.dll
    - 2004-08-04 05:31:43 137,216 ------w c:\windows\ServicePackFiles\i386\dssenh.dll
    + 2008-04-13 17:37:57 138,752 ----a-w c:\windows\ServicePackFiles\i386\dssenh.dll
    - 2004-08-04 07:56:42 113,152 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll
    + 2008-04-14 00:11:52 113,152 ----a-w c:\windows\ServicePackFiles\i386\dsuiext.dll
    - 2004-08-04 07:56:42 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll
    + 2008-04-14 00:11:52 19,456 ----a-w c:\windows\ServicePackFiles\i386\dswave.dll
    - 2004-08-04 07:56:48 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2008-04-14 00:12:18 10,752 ----a-w c:\windows\ServicePackFiles\i386\dumprep.exe
    - 2004-08-04 07:56:42 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll
    + 2008-04-14 00:11:52 304,128 ----a-w c:\windows\ServicePackFiles\i386\duser.dll
    - 2004-08-04 07:56:48 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-04-14 00:12:18 17,920 ----a-w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    - 2004-08-04 07:56:48 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe
    + 2008-04-14 00:12:18 180,224 ----a-w c:\windows\ServicePackFiles\i386\dwwin.exe
    - 2004-08-04 07:56:42 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll
    + 2008-04-14 00:11:52 619,008 ----a-w c:\windows\ServicePackFiles\i386\dx7vb.dll
    - 2004-08-04 07:56:42 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll
    + 2008-04-14 00:11:52 1,227,264 ----a-w c:\windows\ServicePackFiles\i386\dx8vb.dll
    - 2004-08-04 07:56:48 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe
    + 2008-04-14 00:12:18 1,298,432 ----a-w c:\windows\ServicePackFiles\i386\dxdiag.exe
    - 2004-08-04 07:56:42 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll
    + 2008-04-14 00:11:52 2,113,536 ----a-w c:\windows\ServicePackFiles\i386\dxdiagn.dll
    - 2004-08-04 06:00:54 71,040 ------w c:\windows\ServicePackFiles\i386\dxg.sys
    + 2008-04-13 18:38:29 71,168 ----a-w c:\windows\ServicePackFiles\i386\dxg.sys
    - 2004-08-04 07:56:42 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll
    + 2008-04-14 00:11:52 357,888 ----a-w c:\windows\ServicePackFiles\i386\dxtmsft.dll
    - 2004-08-04 07:56:42 201,728 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 205,312 ----a-w c:\windows\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\ServicePackFiles\i386\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2008-04-14 00:11:52 175,616 ------w c:\windows\ServicePackFiles\i386\ediskeer.dll
    - 2004-08-04 07:56:42 183,296 ------w c:\windows\ServicePackFiles\i386\els.dll
    + 2008-04-14 00:11:53 183,296 ----a-w c:\windows\ServicePackFiles\i386\els.dll
    - 2004-08-04 07:56:42 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll
    + 2008-04-14 00:11:53 20,480 ----a-w c:\windows\ServicePackFiles\i386\encapi.dll
    - 2004-08-04 07:56:42 186,368 ------w c:\windows\ServicePackFiles\i386\encdec.dll
    + 2008-04-14 00:11:53 186,880 ----a-w c:\windows\ServicePackFiles\i386\encdec.dll
    - 2004-08-04 07:56:05 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2008-04-13 16:26:02 40,960 ----a-w c:\windows\ServicePackFiles\i386\ep9res.dll
    - 2004-08-04 07:56:42 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2008-04-14 00:11:53 23,040 ----a-w c:\windows\ServicePackFiles\i386\ersvc.dll
    - 2004-08-04 07:56:42 243,200 ------w c:\windows\ServicePackFiles\i386\es.dll
    + 2008-04-14 00:11:53 246,272 ----a-w c:\windows\ServicePackFiles\i386\es.dll
    - 2004-08-04 07:56:42 1,082,368 ------w c:\windows\ServicePackFiles\i386\esent.dll
    + 2008-04-14 00:11:53 1,082,368 ----a-w c:\windows\ServicePackFiles\i386\esent.dll
    - 2004-08-04 07:56:42 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll
    + 2008-04-14 00:11:53 247,808 ----a-w c:\windows\ServicePackFiles\i386\esscli.dll
    - 2004-08-04 07:56:49 193,024 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe
    + 2008-04-14 00:12:19 193,024 ----a-w c:\windows\ServicePackFiles\i386\eudcedit.exe
    - 2004-08-04 07:56:42 55,808 ------w c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2008-04-14 00:11:53 56,320 ----a-w c:\windows\ServicePackFiles\i386\eventlog.dll
    - 2004-08-04 07:56:42 101,888 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll
    + 2008-04-14 00:11:53 101,888 ----a-w c:\windows\ServicePackFiles\i386\evntagnt.dll
    - 2004-08-04 07:56:49 24,064 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2008-04-14 00:12:19 24,064 ----a-w c:\windows\ServicePackFiles\i386\evntcmd.exe
    - 2004-08-04 07:56:42 22,016 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2008-04-14 00:11:53 21,504 ----a-w c:\windows\ServicePackFiles\i386\evntrprv.dll
    - 2004-08-04 07:56:49 92,160 ------w c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2008-04-14 00:12:19 92,160 ----a-w c:\windows\ServicePackFiles\i386\evntwin.exe
    - 2004-08-04 07:56:49 1,032,192 ------w c:\windows\ServicePackFiles\i386\explorer.exe
    + 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\ServicePackFiles\i386\explorer.exe
    - 2004-08-04 07:56:42 380,957 ------w c:\windows\ServicePackFiles\i386\expsrv.dll
    + 2008-04-14 00:11:53 380,445 ----a-w c:\windows\ServicePackFiles\i386\expsrv.dll
    - 2004-08-04 07:56:42 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2008-04-14 00:11:53 55,808 ----a-w c:\windows\ServicePackFiles\i386\extmgr.dll
    - 2004-08-04 07:56:49 45,568 ------w c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:12:19 24,064 ----a-w c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll
    + 2008-04-14 00:09:30 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
    - 2004-08-04 06:14:16 143,360 ------w c:\windows\ServicePackFiles\i386\fastfat.sys
    + 2008-04-13 19:14:29 143,744 ----a-w c:\windows\ServicePackFiles\i386\fastfat.sys
    - 2004-08-04 07:56:42 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll
    + 2008-04-14 00:11:53 472,064 ----a-w c:\windows\ServicePackFiles\i386\fastprox.dll
    - 2004-08-04 07:56:42 80,384 ------w c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2008-04-14 00:11:53 80,384 ----a-w c:\windows\ServicePackFiles\i386\faultrep.dll
    - 2004-08-04 07:56:49 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2008-04-14 00:12:20 20,992 ----a-w c:\windows\ServicePackFiles\i386\faxpatch.exe
    - 2004-08-04 05:59:27 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys
    + 2008-04-13 18:40:25 27,392 ----a-w c:\windows\ServicePackFiles\i386\fdc.sys
    - 2004-08-04 07:56:42 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll
    + 2008-04-14 00:11:53 21,504 ----a-w c:\windows\ServicePackFiles\i386\feclient.dll
    - 2004-08-04 07:56:42 337,920 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll
    + 2008-04-14 00:11:53 337,920 ----a-w c:\windows\ServicePackFiles\i386\filemgmt.dll
    - 2004-08-04 07:56:49 27,136 ------w c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-04-14 00:12:20 27,136 ----a-w c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-04-13 18:33:28 44,544 ------w c:\windows\ServicePackFiles\i386\fips.sys
    - 2004-08-04 07:56:42 87,552 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2008-04-14 00:11:53 87,552 ----a-w c:\windows\ServicePackFiles\i386\fldrclnr.dll
    - 2004-08-04 05:59:27 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2008-04-13 18:40:25 20,480 ----a-w c:\windows\ServicePackFiles\i386\flpydisk.sys
    - 2004-08-04 07:56:42 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2008-04-14 00:11:53 16,896 ----a-w c:\windows\ServicePackFiles\i386\fltlib.dll
    - 2004-08-04 07:56:49 22,528 ------w c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2008-04-14 00:12:20 23,040 ----a-w c:\windows\ServicePackFiles\i386\fltmc.exe
    - 2004-08-04 06:01:19 124,800 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys
    + 2008-04-13 18:32:59 129,792 ----a-w c:\windows\ServicePackFiles\i386\fltmgr.sys
    - 2004-08-04 07:56:42 382,976 ------w c:\windows\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 382,976 ----a-w c:\windows\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll
    - 2004-08-04 07:56:49 20,992 ------w c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 20,992 ----a-w c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe
    + 2008-04-14 00:12:42 29,696 ------w c:\windows\ServicePackFiles\i386\format.com
    - 2004-08-04 07:56:42 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2008-04-14 00:11:53 32,828 ----a-w c:\windows\ServicePackFiles\i386\fp40ext.dll
    - 2004-08-04 07:56:42 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll
    + 2008-04-14 00:11:53 184,435 ----a-w c:\windows\ServicePackFiles\i386\fp4amsft.dll
    - 2004-08-04 07:56:42 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2008-04-14 00:11:53 82,035 ----a-w c:\windows\ServicePackFiles\i386\fp4anscp.dll
    - 2004-08-04 07:56:42 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll
    + 2008-04-14 00:11:53 147,513 ----a-w c:\windows\ServicePackFiles\i386\fp4apws.dll
    - 2004-08-04 07:56:42 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2008-04-14 00:11:53 49,210 ----a-w c:\windows\ServicePackFiles\i386\fp4areg.dll
    - 2004-08-04 07:56:42 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll
    + 2008-04-14 00:11:53 102,509 ----a-w c:\windows\ServicePackFiles\i386\fp4atxt.dll
    - 2004-08-04 07:56:42 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll
    + 2008-04-14 00:11:53 618,605 ----a-w c:\windows\ServicePackFiles\i386\fp4autl.dll
    - 2004-08-04 07:56:42 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2008-04-14 00:11:53 41,020 ----a-w c:\windows\ServicePackFiles\i386\fp4avnb.dll
    - 2004-08-04 07:56:42 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2008-04-14 00:11:53 32,826 ----a-w c:\windows\ServicePackFiles\i386\fp4avss.dll
    - 2004-08-04 07:56:42 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2008-04-14 00:11:53 49,212 ----a-w c:\windows\ServicePackFiles\i386\fp4awebs.dll
    - 2004-08-04 07:56:42 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll
    + 2008-04-14 00:11:53 876,653 ----a-w c:\windows\ServicePackFiles\i386\fp4awel.dll
    - 2004-08-04 07:56:49 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2008-04-14 00:12:20 15,120 ----a-w c:\windows\ServicePackFiles\i386\fp98sadm.exe
    - 2004-08-04 07:56:49 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe
    + 2008-04-14 00:12:20 109,840 ----a-w c:\windows\ServicePackFiles\i386\fp98swin.exe
    - 2004-08-04 07:56:49 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-04-14 00:12:20 24,632 ----a-w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    - 2004-08-04 07:56:42 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2008-04-14 00:11:53 20,541 ----a-w c:\windows\ServicePackFiles\i386\fpadmdll.dll
    - 2004-08-04 07:56:49 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe
    + 2008-04-14 00:12:20 188,494 ----a-w c:\windows\ServicePackFiles\i386\fpcount.exe
    - 2004-08-04 07:56:42 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2008-04-14 00:11:53 94,208 ----a-w c:\windows\ServicePackFiles\i386\fpencode.dll
    - 2004-08-04 07:56:42 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2008-04-14 00:11:53 20,541 ----a-w c:\windows\ServicePackFiles\i386\fpexedll.dll
    - 2004-08-04 07:56:42 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll
    + 2008-04-14 00:11:53 598,071 ----a-w c:\windows\ServicePackFiles\i386\fpmmc.dll
    - 2004-08-04 07:56:06 208,896 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
    + 2007-04-02 16:36:04 208,896 ----a-w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
    - 2004-08-04 07:56:49 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2008-04-14 00:12:20 20,538 ----a-w c:\windows\ServicePackFiles\i386\fpremadm.exe
    - 2004-08-04 07:56:49 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-04-14 00:12:20 28,728 ----a-w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    - 2004-08-04 07:56:06 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll
    + 2008-04-14 00:09:33 9,344 ----a-w c:\windows\ServicePackFiles\i386\framebuf.dll
    - 2004-08-04 07:56:42 185,856 ------w c:\windows\ServicePackFiles\i386\framedyn.dll
    + 2008-04-14 00:11:53 185,344 ----a-w c:\windows\ServicePackFiles\i386\framedyn.dll
    - 2004-08-04 07:56:49 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe
    + 2008-04-14 00:12:20 193,024 ----a-w c:\windows\ServicePackFiles\i386\fsquirt.exe
    - 2004-08-04 07:56:49 42,496 ------w c:\windows\ServicePackFiles\i386\ftp.exe
    + 2008-04-14 00:12:20 42,496 ----a-w c:\windows\ServicePackFiles\i386\ftp.exe
    - 2004-08-04 07:56:42 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2008-04-14 00:11:53 60,416 ----a-w c:\windows\ServicePackFiles\i386\fwcfg.dll
    - 2004-08-04 07:56:42 452,096 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll
    + 2008-04-14 00:11:53 451,584 ----a-w c:\windows\ServicePackFiles\i386\fxsapi.dll
    - 2004-08-04 07:56:49 143,360 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe
    + 2008-04-14 00:12:21 142,848 ----a-w c:\windows\ServicePackFiles\i386\fxsclnt.exe
    - 2004-08-04 07:56:42 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2008-04-14 00:11:54 72,192 ----a-w c:\windows\ServicePackFiles\i386\fxscom.dll
    - 2004-08-04 07:56:42 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll
    + 2008-04-14 00:11:54 285,184 ----a-w c:\windows\ServicePackFiles\i386\fxscomex.dll
    - 2004-08-04 07:56:49 229,376 ------w c:\windows\ServicePackFiles\i386\fxscover.exe
    + 2008-04-14 00:12:21 229,376 ----a-w c:\windows\ServicePackFiles\i386\fxscover.exe
    - 2004-08-04 07:56:42 27,136 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2008-04-14 00:11:54 26,624 ----a-w c:\windows\ServicePackFiles\i386\fxsdrv.dll
    - 2004-08-04 07:56:42 55,296 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2008-04-14 00:11:54 55,296 ----a-w c:\windows\ServicePackFiles\i386\fxsevent.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ----a-w c:\windows\ServicePackFiles\i386\fxsext32.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2008-04-14 00:11:54 23,552 ----a-w c:\windows\ServicePackFiles\i386\fxsmon.dll
    - 2004-08-04 07:56:42 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll
    + 2008-04-14 00:11:54 132,608 ----a-w c:\windows\ServicePackFiles\i386\fxsocm.dll
    - 2004-08-04 07:56:42 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll
    + 2008-04-14 00:11:54 8,704 ----a-w c:\windows\ServicePackFiles\i386\fxsperf.dll
    - 2004-08-04 07:56:06 6,656 ------w c:\windows\ServicePackFiles\i386\fxsres.dll
    + 2008-04-14 00:09:33 6,656 ----a-w c:\windows\ServicePackFiles\i386\fxsres.dll
    - 2004-08-04 07:56:42 562,176 ------w c:\windows\ServicePackFiles\i386\fxsst.dll
    + 2008-04-14 00:11:54 562,176 ----a-w c:\windows\ServicePackFiles\i386\fxsst.dll
    - 2004-08-04 07:56:49 267,776 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe
    + 2008-04-14 00:12:21 267,776 ----a-w c:\windows\ServicePackFiles\i386\fxssvc.exe
    - 2004-08-04 07:56:42 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll
    + 2008-04-14 00:11:54 246,272 ----a-w c:\windows\ServicePackFiles\i386\fxst30.dll
    - 2004-08-04 07:56:42 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll
    + 2008-04-14 00:11:54 397,312 ----a-w c:\windows\ServicePackFiles\i386\fxstiff.dll
    - 2004-08-04 07:56:42 154,112 ------w c:\windows\ServicePackFiles\i386\fxsui.dll
    + 2008-04-14 00:11:54 154,112 ----a-w c:\windows\ServicePackFiles\i386\fxsui.dll
    - 2004-08-04 07:56:42 192,512 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll
    + 2008-04-14 00:11:54 192,512 ----a-w c:\windows\ServicePackFiles\i386\fxswzrd.dll
    - 2004-08-04 07:56:42 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll
    + 2008-04-14 00:11:54 400,384 ----a-w c:\windows\ServicePackFiles\i386\fxsxp32.dll
    - 2004-08-04 06:07:43 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2008-04-13 18:36:40 46,464 ----a-w c:\windows\ServicePackFiles\i386\gagp30kx.sys
    - 2004-08-04 06:08:21 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2008-04-13 18:45:29 10,624 ----a-w c:\windows\ServicePackFiles\i386\gameenum.sys
    - 2004-08-04 06:08:29 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2008-04-13 18:45:32 59,136 ----a-w c:\windows\ServicePackFiles\i386\gckernel.sys
    - 2004-08-04 07:56:42 278,016 ------w c:\windows\ServicePackFiles\i386\gdi32.dll
    + 2008-04-14 00:11:54 285,184 ----a-w c:\windows\ServicePackFiles\i386\gdi32.dll
    - 2004-08-04 07:56:42 122,880 ------w c:\windows\ServicePackFiles\i386\glu32.dll
    + 2008-04-14 00:11:54 122,880 ----a-w c:\windows\ServicePackFiles\i386\glu32.dll
    - 2004-08-04 07:56:07 9,728 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
    + 2006-12-31 01:26:44 9,728 ----a-w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
    - 2004-08-04 07:56:49 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2008-04-14 00:12:21 39,424 ----a-w c:\windows\ServicePackFiles\i386\grpconv.exe
    - 2004-08-04 05:59:19 28,288 ------w c:\windows\ServicePackFiles\i386\grserial.sys
    + 2008-04-13 18:40:21 28,288 ----a-w c:\windows\ServicePackFiles\i386\grserial.sys
    - 2004-08-04 07:56:42 123,904 ------w c:\windows\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 133,120 ----a-w c:\windows\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\ServicePackFiles\i386\guitrna.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2008-04-14 00:11:54 57,344 ----a-w c:\windows\ServicePackFiles\i386\h323cc.dll
    - 2004-08-04 07:56:42 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll
    + 2008-04-14 00:11:54 614,912 ----a-w c:\windows\ServicePackFiles\i386\h323msp.dll
    - 2004-08-04 05:59:19 105,472 ------w c:\windows\ServicePackFiles\i386\hal.dll
    + 2008-04-13 18:31:32 105,344 ----a-w c:\windows\ServicePackFiles\i386\hal.dll
    - 2004-08-04 05:59:09 131,968 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll
    + 2008-04-13 18:31:28 131,840 ----a-w c:\windows\ServicePackFiles\i386\halaacpi.dll
    - 2004-08-04 05:59:06 81,280 ------w c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2008-04-13 18:31:27 81,152 ----a-w c:\windows\ServicePackFiles\i386\halacpi.dll
    - 2004-08-04 05:59:13 150,656 ------w c:\windows\ServicePackFiles\i386\halapic.dll
    + 2008-04-13 18:31:28 150,528 ----a-w c:\windows\ServicePackFiles\i386\halapic.dll
    - 2004-08-04 05:59:12 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll
    + 2008-04-13 18:31:28 134,400 ----a-w c:\windows\ServicePackFiles\i386\halmacpi.dll
    - 2004-08-04 05:59:18 152,704 ------w c:\windows\ServicePackFiles\i386\halmps.dll
    + 2008-04-13 18:31:32 152,576 ----a-w c:\windows\ServicePackFiles\i386\halmps.dll
    - 2004-08-04 05:59:19 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll
    + 2008-04-13 18:31:31 77,696 ----a-w c:\windows\ServicePackFiles\i386\halsp.dll
    - 2004-08-04 07:56:42 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll
    + 2008-04-14 00:11:54 7,168 ----a-w c:\windows\ServicePackFiles\i386\hccoin.dll
    + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys
    + 2008-04-14 00:12:21 15,872 ------w c:\windows\ServicePackFiles\i386\help.exe
    - 2004-08-04 07:56:49 768,512 ------w c:\windows\ServicePackFiles\i386\helpctr.exe
    + 2008-04-14 00:12:21 769,024 ----a-w c:\windows\ServicePackFiles\i386\helpctr.exe
    - 2004-08-04 07:56:50 743,936 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe
    + 2008-04-14 00:12:21 744,448 ----a-w c:\windows\ServicePackFiles\i386\helpsvc.exe
    - 2004-08-04 07:56:50 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe
    + 2008-04-14 00:12:21 10,752 ----a-w c:\windows\ServicePackFiles\i386\hh.exe
    - 2004-08-04 07:56:42 38,912 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2008-04-14 00:11:54 41,472 ----a-w c:\windows\ServicePackFiles\i386\hhsetup.dll
    - 2004-08-04 07:56:42 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-04-14 00:11:54 20,992 ----a-w c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys
    - 2004-08-04 06:10:36 25,600 ------w c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2008-04-13 18:46:30 25,600 ----a-w c:\windows\ServicePackFiles\i386\hidbth.sys
    - 2004-08-04 06:08:19 36,224 ------w c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2008-04-13 18:45:26 36,864 ----a-w c:\windows\ServicePackFiles\i386\hidclass.sys
    - 2004-08-04 06:08:18 15,104 ------w c:\windows\ServicePackFiles\i386\hidir.sys
    + 2008-04-13 18:45:26 19,200 ----a-w c:\windows\ServicePackFiles\i386\hidir.sys
    - 2004-08-04 06:08:16 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2008-04-13 18:45:22 24,960 ----a-w c:\windows\ServicePackFiles\i386\hidparse.sys
    - 2004-08-04 07:56:42 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-04-14 00:11:54 21,504 ----a-w c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2008-04-14 00:11:54 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll
    - 2004-08-04 07:56:42 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2008-04-14 00:11:54 38,912 ----a-w c:\windows\ServicePackFiles\i386\hmmapi.dll
    - 2004-08-04 07:56:42 344,064 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll
    + 2008-04-14 00:11:54 344,064 ----a-w c:\windows\ServicePackFiles\i386\hnetcfg.dll
    - 2004-08-04 07:56:42 330,752 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll
    + 2008-04-14 00:11:54 330,752 ----a-w c:\windows\ServicePackFiles\i386\hnetwiz.dll
    - 2004-08-04 07:56:42 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2008-04-14 00:11:54 39,936 ----a-w c:\windows\ServicePackFiles\i386\hostmib.dll
    - 2004-08-04 07:56:42 144,896 ------w c:\windows\ServicePackFiles\i386\hotplug.dll
    + 2008-04-14 00:11:54 144,896 ----a-w c:\windows\ServicePackFiles\i386\hotplug.dll
    - 2004-08-04 07:56:42 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2008-04-14 00:11:54 10,752 ----a-w c:\windows\ServicePackFiles\i386\hpcjrr.dll
    - 2004-08-04 07:56:42 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-04-14 00:11:54 10,240 ----a-w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    - 2004-08-04 07:56:42 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2008-04-14 00:11:54 87,552 ----a-w c:\windows\ServicePackFiles\i386\hpfud50.dll
    - 2004-08-04 07:56:50 18,944 ------w c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2008-04-14 00:12:21 18,432 ----a-w c:\windows\ServicePackFiles\i386\hscupd.exe
    - 2004-08-04 07:56:42 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2008-04-14 00:11:54 32,285 ----a-w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    - 2004-08-04 06:00:13 263,040 ------w c:\windows\ServicePackFiles\i386\http.sys
    + 2008-04-13 18:53:53 264,832 ----a-w c:\windows\ServicePackFiles\i386\http.sys
    - 2004-08-04 07:56:42 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2008-04-14 00:11:54 24,576 ----a-w c:\windows\ServicePackFiles\i386\httpapi.dll
    - 2004-08-04 07:56:42 41,984 ------w c:\windows\ServicePackFiles\i386\htui.dll
    + 2008-04-14 00:11:54 41,984 ----a-w c:\windows\ServicePackFiles\i386\htui.dll
    - 2004-08-04 07:56:42 345,088 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll
    + 2008-04-14 00:11:54 347,136 ----a-w c:\windows\ServicePackFiles\i386\hypertrm.dll
    - 2004-08-04 06:00:50 8,192 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys
    + 2008-04-13 18:41:22 8,576 ----a-w c:\windows\ServicePackFiles\i386\i2omgmt.sys
    - 2004-08-04 06:00:50 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2008-04-13 18:41:22 18,560 ----a-w c:\windows\ServicePackFiles\i386\i2omp.sys
    - 2004-08-04 06:14:36 52,736 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2008-04-13 19:18:00 52,480 ----a-w c:\windows\ServicePackFiles\i386\i8042prt.sys
    - 2004-08-04 07:56:42 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
    + 2008-04-14 00:11:54 702,845 ----a-w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
    - 2004-08-04 07:56:42 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll
    + 2008-04-14 00:11:54 119,808 ----a-w c:\windows\ServicePackFiles\i386\iasrad.dll
    - 2004-08-04 07:56:42 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2008-04-14 00:11:54 11,264 ----a-w c:\windows\ServicePackFiles\i386\icaapi.dll
    - 2004-08-04 07:56:42 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2008-04-14 00:11:54 80,384 ----a-w c:\windows\ServicePackFiles\i386\iccvid.dll
    - 2004-08-04 07:56:42 253,952 ------w c:\windows\ServicePackFiles\i386\icm32.dll
    + 2008-04-14 00:11:54 254,976 ----a-w c:\windows\ServicePackFiles\i386\icm32.dll
    - 2004-08-04 07:56:07 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll
    + 2008-04-14 00:09:40 3,584 ----a-w c:\windows\ServicePackFiles\i386\icmp.dll
    - 2004-08-04 07:56:42 4,096 ------w c:\windows\ServicePackFiles\i386\iconlib.dll
    + 2008-04-13 16:44:29 2,560 ----a-w c:\windows\ServicePackFiles\i386\iconlib.dll
    - 2004-08-04 07:56:42 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2008-04-14 00:11:54 61,440 ----a-w c:\windows\ServicePackFiles\i386\icwconn.dll
    - 2004-08-04 07:56:50 214,528 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe
    + 2008-04-14 00:12:22 214,528 ----a-w c:\windows\ServicePackFiles\i386\icwconn1.exe
    - 2004-08-04 07:56:50 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2008-04-14 00:12:22 86,016 ----a-w c:\windows\ServicePackFiles\i386\icwconn2.exe
    - 2004-08-04 07:56:42 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2008-04-14 00:11:54 73,728 ----a-w c:\windows\ServicePackFiles\i386\icwdial.dll
    - 2004-08-04 07:56:42 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2008-04-14 00:11:54 32,768 ----a-w c:\windows\ServicePackFiles\i386\icwdl.dll
    - 2004-08-04 07:56:42 172,032 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll
    + 2008-04-14 00:11:54 172,032 ----a-w c:\windows\ServicePackFiles\i386\icwhelp.dll
    - 2004-08-04 07:56:42 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2008-04-14 00:11:54 65,536 ----a-w c:\windows\ServicePackFiles\i386\icwphbk.dll
    - 2004-08-04 07:56:50 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2008-04-14 00:12:22 24,576 ----a-w c:\windows\ServicePackFiles\i386\icwrmind.exe
    - 2004-08-04 07:56:42 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2008-04-14 00:11:54 49,152 ----a-w c:\windows\ServicePackFiles\i386\icwutil.dll
    - 2004-08-04 07:56:42 120,832 ------w c:\windows\ServicePackFiles\i386\idq.dll
    + 2008-04-14 00:11:54 120,832 ----a-w c:\windows\ServicePackFiles\i386\idq.dll
    - 2004-08-04 07:56:50 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2008-04-14 00:12:22 34,304 ----a-w c:\windows\ServicePackFiles\i386\ie4uinit.exe
    - 2004-08-04 07:56:42 139,264 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll
    + 2008-04-14 00:11:54 143,360 ----a-w c:\windows\ServicePackFiles\i386\ieakeng.dll
    - 2004-08-04 07:56:42 216,576 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll
    + 2008-04-14 00:11:54 216,576 ----a-w c:\windows\ServicePackFiles\i386\ieaksie.dll
    - 2004-08-04 07:56:42 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll
    + 2008-04-14 00:11:54 323,584 ----a-w c:\windows\ServicePackFiles\i386\iedkcs32.dll
    - 2004-08-04 07:56:50 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe
    + 2008-04-14 00:12:22 18,432 ----a-w c:\windows\ServicePackFiles\i386\iedw.exe
    - 2004-08-04 07:56:42 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2008-04-14 00:11:54 81,920 ----a-w c:\windows\ServicePackFiles\i386\ieencode.dll
    - 2004-08-04 07:56:42 249,344 ------w c:\windows\ServicePackFiles\i386\iepeers.dll
    + 2008-04-14 00:11:54 251,904 ----a-w c:\windows\ServicePackFiles\i386\iepeers.dll
    - 2004-08-04 07:56:42 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2008-04-14 00:11:54 48,640 ----a-w c:\windows\ServicePackFiles\i386\iernonce.dll
    - 2004-08-04 07:56:42 62,976 ------w c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2008-04-14 00:11:54 62,976 ----a-w c:\windows\ServicePackFiles\i386\iesetup.dll
    - 2004-08-04 07:56:50 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2008-04-14 00:12:22 93,184 ----a-w c:\windows\ServicePackFiles\i386\iexplore.exe
    - 2004-08-04 07:56:50 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe
    + 2008-04-14 00:12:22 114,688 ----a-w c:\windows\ServicePackFiles\i386\iexpress.exe
    - 2004-08-04 07:56:42 135,680 ------w c:\windows\ServicePackFiles\i386\ifmon.dll
    + 2008-04-14 00:11:54 135,680 ----a-w c:\windows\ServicePackFiles\i386\ifmon.dll
    - 2004-08-04 07:56:42 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll
    + 2008-04-14 00:11:54 8,192 ----a-w c:\windows\ServicePackFiles\i386\igmpagnt.dll
    - 2004-08-04 07:56:42 505,344 ------w c:\windows\ServicePackFiles\i386\iis.dll
    + 2008-04-14 00:11:54 505,344 ----a-w c:\windows\ServicePackFiles\i386\iis.dll
    - 2004-08-04 07:56:42 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll
    + 2008-04-14 00:11:54 81,920 ----a-w c:\windows\ServicePackFiles\i386\ils.dll
    - 2004-08-04 07:56:42 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll
    + 2008-04-14 00:11:54 144,384 ----a-w c:\windows\ServicePackFiles\i386\imagehlp.dll
    - 2004-08-04 07:56:50 150,016 ------w c:\windows\ServicePackFiles\i386\imapi.exe
    + 2008-04-14 00:12:22 150,528 ----a-w c:\windows\ServicePackFiles\i386\imapi.exe
    - 2004-08-04 06:00:15 41,856 ------w c:\windows\ServicePackFiles\i386\imapi.sys
    + 2008-04-13 18:40:58 42,112 ----a-w c:\windows\ServicePackFiles\i386\imapi.sys
    - 2004-08-04 07:56:42 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2008-04-14 00:11:54 36,921 ----a-w c:\windows\ServicePackFiles\i386\imeshare.dll
    - 2004-08-04 07:56:42 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2008-04-14 00:11:54 35,840 ----a-w c:\windows\ServicePackFiles\i386\imgutil.dll
    - 2004-08-04 07:56:42 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 110,080 ----a-w c:\windows\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 123,392 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll
    - 2004-08-04 07:56:42 274,432 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll
    + 2008-04-14 00:11:54 274,432 ----a-w c:\windows\ServicePackFiles\i386\inetcfg.dll
    - 2004-08-04 07:56:42 678,400 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll
    + 2008-04-14 00:11:54 691,712 ----a-w c:\windows\ServicePackFiles\i386\inetcomm.dll
    - 2004-08-04 07:56:42 33,280 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2008-04-14 00:11:55 32,768 ----a-w c:\windows\ServicePackFiles\i386\inetmib1.dll
    - 2004-08-04 07:56:42 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2008-04-14 00:11:55 75,264 ----a-w c:\windows\ServicePackFiles\i386\inetpp.dll
    - 2004-08-04 07:56:42 15,872 ------w c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2008-04-14 00:11:55 15,872 ----a-w c:\windows\ServicePackFiles\i386\inetppui.dll
    - 2004-08-04 07:56:08 48,128 ------w c:\windows\ServicePackFiles\i386\inetres.dll
    + 2008-04-13 16:22:12 48,128 ----a-w c:\windows\ServicePackFiles\i386\inetres.dll
    - 2004-08-04 07:56:50 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2008-04-14 00:12:22 20,480 ----a-w c:\windows\ServicePackFiles\i386\inetwiz.exe
    - 2004-08-04 07:56:42 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll
    + 2008-04-14 00:11:55 147,456 ----a-w c:\windows\ServicePackFiles\i386\initpki.dll
    - 2004-08-04 07:56:42 123,392 ------w c:\windows\ServicePackFiles\i386\input.dll
    + 2008-04-14 00:11:55 123,392 ----a-w c:\windows\ServicePackFiles\i386\input.dll
    - 2004-08-04 07:56:42 96,256 ------w c:\windows\ServicePackFiles\i386\inseng.dll
    + 2008-04-14 00:11:55 96,256 ----a-w c:\windows\ServicePackFiles\i386\inseng.dll
    - 2004-08-04 05:59:41 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys
    + 2008-04-13 18:40:29 5,504 ----a-w c:\windows\ServicePackFiles\i386\intelide.sys
    - 2004-08-04 05:59:19 36,096 ------w c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2008-04-13 18:31:32 36,352 ----a-w c:\windows\ServicePackFiles\i386\intelppm.sys
    - 2004-08-04 06:00:06 29,056 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2008-04-13 18:53:34 36,608 ----a-w c:\windows\ServicePackFiles\i386\ip6fw.sys
    - 2004-08-04 07:56:50 55,808 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2008-04-14 00:12:22 55,808 ----a-w c:\windows\ServicePackFiles\i386\ipconfig.exe
    - 2004-08-04 07:56:05 97,280 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll
    + 2008-04-14 00:09:30 103,424 ----a-w c:\windows\ServicePackFiles\i386\ipevldpc.dll
    - 2004-08-04 07:56:04 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2008-04-14 00:09:23 24,064 ----a-w c:\windows\ServicePackFiles\i386\ipevlpid.dll
    - 2004-08-04 07:56:42 94,720 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2008-04-14 00:11:55 94,720 ----a-w c:\windows\ServicePackFiles\i386\iphlpapi.dll
    - 2004-08-04 06:04:45 20,992 ------w c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-04-13 18:57:07 20,864 ----a-w c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-04-14 00:11:55 161,280 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll
    - 2004-08-04 06:04:50 134,912 ------w c:\windows\ServicePackFiles\i386\ipnat.sys
    + 2008-04-13 18:57:15 152,832 ----a-w c:\windows\ServicePackFiles\i386\ipnat.sys
    - 2004-08-04 07:56:42 331,264 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll
    + 2008-04-14 00:11:55 331,264 ----a-w c:\windows\ServicePackFiles\i386\ipnathlp.dll
    - 2004-08-04 07:56:42 330,752 ------w c:\windows\ServicePackFiles\i386\ippromon.dll
    + 2008-04-14 00:11:55 330,752 ----a-w c:\windows\ServicePackFiles\i386\ippromon.dll
    - 2004-08-04 07:56:42 35,328 ------w c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 35,328 ----a-w c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
    - 2004-08-04 06:14:28 74,752 ------w c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2008-04-13 19:19:42 75,264 ----a-w c:\windows\ServicePackFiles\i386\ipsec.sys
    - 2004-08-04 07:56:42 349,696 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
    + 2008-04-14 00:11:55 349,696 ----a-w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
    - 2004-08-04 07:56:42 182,784 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
    + 2008-04-14 00:11:55 183,808 ----a-w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
    - 2004-08-04 07:56:26 96,768 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll
    + 2008-04-14 00:10:45 102,912 ----a-w c:\windows\ServicePackFiles\i386\ipseldpc.dll
    - 2004-08-04 07:56:04 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2008-04-14 00:09:24 24,064 ----a-w c:\windows\ServicePackFiles\i386\ipselpid.dll
    - 2004-08-04 07:56:42 384,000 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
    + 2008-04-14 00:11:55 384,000 ----a-w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
    - 2004-08-04 07:56:50 53,248 ------w c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2008-04-14 00:12:23 53,248 ----a-w c:\windows\ServicePackFiles\i386\ipv6.exe
    - 2004-08-04 07:56:42 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2008-04-14 00:11:55 59,904 ----a-w c:\windows\ServicePackFiles\i386\ipv6mon.dll
    - 2004-08-04 07:56:50 23,552 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:12:23 23,552 ----a-w c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:11:55 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll
    - 2004-08-04 07:56:42 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll
    + 2008-04-14 00:11:55 120,320 ----a-w c:\windows\ServicePackFiles\i386\ir41_qc.dll
    - 2004-08-04 07:56:42 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
    + 2008-04-14 00:11:55 338,432 ----a-w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
    - 2004-08-04 07:56:42 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll
    + 2008-04-14 00:11:55 755,200 ----a-w c:\windows\ServicePackFiles\i386\ir50_32.dll
    - 2004-08-04 07:56:42 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll
    + 2008-04-14 00:11:55 200,192 ----a-w c:\windows\ServicePackFiles\i386\ir50_qc.dll
    - 2004-08-04 07:56:42 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
    + 2008-04-14 00:11:55 183,808 ----a-w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
    - 2004-08-04 06:00:53 87,424 ------w c:\windows\ServicePackFiles\i386\irda.sys
    + 2008-04-13 18:54:36 88,192 ----a-w c:\windows\ServicePackFiles\i386\irda.sys
    - 2004-08-04 06:00:46 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys
    + 2008-04-13 18:54:28 11,264 ----a-w c:\windows\ServicePackFiles\i386\irenum.sys
    - 2004-08-04 07:56:50 152,576 ------w c:\windows\ServicePackFiles\i386\irftp.exe
    + 2008-04-14 00:12:23 151,552 ----a-w c:\windows\ServicePackFiles\i386\irftp.exe
    - 2004-08-04 07:56:42 27,136 ------w c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-04-14 00:11:55 28,160 ----a-w c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-04-13 18:36:41 37,248 ------w c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2008-04-14 00:10:32 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll
    + 2008-04-14 00:10:55 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll
    + 2008-04-14 00:10:55 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll
    - 2004-08-04 07:56:42 81,920 ------w c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:11:55 81,920 ----a-w c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:10:32 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll
    - 2004-08-04 07:56:42 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2008-04-14 00:11:55 32,768 ----a-w c:\windows\ServicePackFiles\i386\isrdbg32.dll
    - 2004-08-04 07:56:42 143,872 ------w c:\windows\ServicePackFiles\i386\itircl.dll
    + 2008-04-14 00:11:55 155,136 ----a-w c:\windows\ServicePackFiles\i386\itircl.dll
    - 2004-08-04 07:56:42 134,144 ------w c:\windows\ServicePackFiles\i386\itss.dll
    + 2008-04-14 00:11:55 138,240 ----a-w c:\windows\ServicePackFiles\i386\itss.dll
    - 2004-08-04 07:56:42 192,000 ------w c:\windows\ServicePackFiles\i386\iuengine.dll
    + 2008-04-14 00:11:55 191,488 ----a-w c:\windows\ServicePackFiles\i386\iuengine.dll
    - 2004-08-04 07:56:42 54,272 ------w c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2008-04-14 00:11:55 54,272 ----a-w c:\windows\ServicePackFiles\i386\ixsso.dll
    - 2004-08-04 07:56:42 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 47,616 ----a-w c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll
    - 2004-08-04 07:56:42 450,560 ------w c:\windows\ServicePackFiles\i386\jscript.dll
    + 2008-04-14 00:11:56 512,000 ----a-w c:\windows\ServicePackFiles\i386\jscript.dll
    - 2004-08-04 07:56:42 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-04-14 00:11:56 15,872 ----a-w c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll
     
    FLYNDAGGER,
    #11
  13. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll
    - 2004-08-04 05:58:32 24,576 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2008-04-13 18:39:47 24,576 ----a-w c:\windows\ServicePackFiles\i386\kbdclass.sys
    - 2004-08-04 07:56:10 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\ServicePackFiles\i386\kbdfi1.dll
    - 2004-08-04 05:58:34 14,848 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-04-13 18:39:48 14,592 ----a-w c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll
    - 2004-08-04 07:56:10 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
    - 2004-08-04 07:56:10 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\ServicePackFiles\i386\kbdinben.dll
    - 2004-08-04 07:56:10 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll
    + 2008-04-14 00:09:55 6,656 ----a-w c:\windows\ServicePackFiles\i386\kbdinmal.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
    - 2004-08-04 07:56:10 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll
    + 2008-04-14 00:09:55 5,632 ----a-w c:\windows\ServicePackFiles\i386\kbdmaori.dll
    - 2004-08-04 07:56:10 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
    - 2004-08-04 07:56:10 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
    + 2008-04-14 00:09:55 6,144 ----a-w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll
    - 2004-08-04 07:56:10 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\ServicePackFiles\i386\kbdno1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll
    - 2004-08-04 07:56:10 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ----a-w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
    - 2004-08-04 07:56:10 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,680 ----a-w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
    - 2004-08-04 07:56:10 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll
    + 2008-04-14 00:09:55 7,168 ----a-w c:\windows\ServicePackFiles\i386\kbdukx.dll
    - 2004-08-04 05:59:23 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll
    + 2008-04-13 18:31:35 7,424 ----a-w c:\windows\ServicePackFiles\i386\kd1394.dll
    + 2008-04-14 00:11:56 184,832 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll
    + 2008-04-14 00:11:56 48,640 ------w c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2008-04-14 00:11:56 253,952 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll
    - 2004-08-04 07:56:42 294,400 ------w c:\windows\ServicePackFiles\i386\kerberos.dll
    + 2008-04-14 00:11:56 299,520 ----a-w c:\windows\ServicePackFiles\i386\kerberos.dll
    - 2004-08-04 07:56:42 983,552 ------w c:\windows\ServicePackFiles\i386\kernel32.dll
    + 2008-04-14 00:11:56 989,696 ----a-w c:\windows\ServicePackFiles\i386\kernel32.dll
    - 2004-08-04 07:56:42 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-14 00:11:56 150,528 ----a-w c:\windows\ServicePackFiles\i386\keymgr.dll
    - 2004-08-04 06:07:48 171,776 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-13 18:45:09 172,416 ----a-w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    - 2004-08-04 07:56:42 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-14 00:11:56 24,576 ----a-w c:\windows\ServicePackFiles\i386\krnlprov.dll
    - 2004-08-04 06:15:21 140,928 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 19:16:36 141,056 ----a-w c:\windows\ServicePackFiles\i386\ks.sys
    - 2004-08-04 05:59:47 92,032 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-13 18:31:43 92,288 ----a-w c:\windows\ServicePackFiles\i386\ksecdd.sys
    - 2004-08-04 07:56:42 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 4,096 ----a-w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    - 2002-09-03 16:24:02 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 97,792 ----a-w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    - 2002-09-03 16:24:02 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 56,320 ----a-w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    - 2002-09-03 16:24:02 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:05 173,568 ----a-w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    - 2004-08-04 05:31:52 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2008-04-14 00:09:06 198,656 ----a-w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    - 2004-08-04 06:04:36 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 106,496 ----a-w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    - 2004-08-04 06:04:32 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:43 86,016 ----a-w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    - 2004-08-04 05:31:48 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:44 811,064 ----a-w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    - 2004-08-04 05:31:50 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 368,696 ----a-w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    - 2004-08-04 05:31:51 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 716,856 ----a-w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    - 2004-08-04 05:31:52 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2008-04-14 00:09:45 81,976 ----a-w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    - 2004-08-04 05:32:15 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 274,489 ----a-w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    - 2002-09-03 16:25:43 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2008-04-14 00:09:46 102,456 ----a-w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    - 2002-09-03 16:25:51 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,872 ----a-w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    - 2002-09-03 16:25:52 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:33 15,360 ----a-w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    - 2002-09-03 16:25:54 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 175,104 ----a-w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    - 2002-09-03 16:25:55 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-14 00:10:34 53,760 ----a-w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    - 2002-09-03 16:26:02 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-13 16:43:36 70,144 ----a-w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    - 2002-09-03 16:26:03 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2008-04-14 00:10:34 67,584 ----a-w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    - 2002-09-03 16:26:11 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:10:59 10,240 ----a-w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    - 2004-08-04 06:04:11 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:01 76,288 ----a-w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    - 2004-08-04 05:32:34 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 426,041 ----a-w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    - 2004-08-04 05:32:35 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-14 00:11:04 86,073 ----a-w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    - 2004-08-04 05:59:32 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-13 18:40:26 34,688 ----a-w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    - 2004-08-04 05:56:44 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 10:41:58 423,936 ----a-w c:\windows\ServicePackFiles\i386\licdll.dll
    - 2004-08-04 07:56:42 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 22,016 ----a-w c:\windows\ServicePackFiles\i386\licmgr10.dll
    - 2004-08-04 07:56:42 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 58,880 ----a-w c:\windows\ServicePackFiles\i386\licwmi.dll
    - 2004-08-04 07:56:42 18,944 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 19,968 ----a-w c:\windows\ServicePackFiles\i386\linkinfo.dll
    - 2004-08-04 07:56:42 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 13,824 ----a-w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    - 2004-08-04 07:56:42 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 33,792 ----a-w c:\windows\ServicePackFiles\i386\lmmib2.dll
    - 2004-08-04 07:56:42 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 399,872 ----a-w c:\windows\ServicePackFiles\i386\lmrt.dll
    - 2004-08-04 07:56:42 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 97,280 ----a-w c:\windows\ServicePackFiles\i386\loadperf.dll
    - 2004-08-04 07:56:42 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 221,696 ----a-w c:\windows\ServicePackFiles\i386\localsec.dll
    - 2004-08-04 07:56:42 341,504 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 343,040 ----a-w c:\windows\ServicePackFiles\i386\localspl.dll
    - 2004-08-04 07:56:42 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:11:56 11,776 ----a-w c:\windows\ServicePackFiles\i386\localui.dll
    - 2004-08-04 07:56:50 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:12:24 75,264 ----a-w c:\windows\ServicePackFiles\i386\locator.exe
    - 2004-08-04 07:56:42 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:11:56 19,968 ----a-w c:\windows\ServicePackFiles\i386\log.dll
    - 2004-08-04 07:56:50 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:24 59,392 ----a-w c:\windows\ServicePackFiles\i386\logman.exe
    - 2004-08-04 07:56:57 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:43 220,672 ----a-w c:\windows\ServicePackFiles\i386\logon.scr
    - 2004-08-04 07:56:50 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:12:24 514,560 ----a-w c:\windows\ServicePackFiles\i386\logonui.exe
    - 2004-08-04 07:56:42 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,528 ----a-w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    - 2004-08-04 07:56:42 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 22,016 ----a-w c:\windows\ServicePackFiles\i386\lpk.dll
    - 2004-08-04 07:56:42 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 10,240 ----a-w c:\windows\ServicePackFiles\i386\lprhelp.dll
    - 2004-08-04 07:56:42 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 18,944 ----a-w c:\windows\ServicePackFiles\i386\lprmon.dll
    - 2004-08-04 07:56:42 721,920 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:11:56 728,064 ----a-w c:\windows\ServicePackFiles\i386\lsasrv.dll
    - 2004-08-04 07:56:50 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2008-04-14 00:12:24 13,312 ----a-w c:\windows\ServicePackFiles\i386\lsass.exe
    - 2004-08-04 06:00:06 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2008-04-13 18:40:52 7,040 ----a-w c:\windows\ServicePackFiles\i386\ltotape.sys
    - 2004-08-04 07:56:50 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:24 72,704 ----a-w c:\windows\ServicePackFiles\i386\magnify.exe
    - 2004-08-04 07:56:50 85,504 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:12:25 57,344 ----a-w c:\windows\ServicePackFiles\i386\makecab.exe
    - 2004-08-04 07:56:42 14,848 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 14,336 ----a-w c:\windows\ServicePackFiles\i386\mcastmib.dll
    - 2004-08-04 07:56:42 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 84,480 ----a-w c:\windows\ServicePackFiles\i386\mciavi32.dll
    - 2004-08-04 07:56:42 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 35,328 ----a-w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    - 2004-08-04 07:56:42 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,040 ----a-w c:\windows\ServicePackFiles\i386\mciseq.dll
    - 2004-08-04 07:56:42 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 23,552 ----a-w c:\windows\ServicePackFiles\i386\mciwave.dll
    - 2004-08-04 07:56:42 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 118,272 ----a-w c:\windows\ServicePackFiles\i386\mdminst.dll
    - 2004-08-04 07:56:42 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2008-04-14 00:11:56 86,016 ----a-w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    - 2004-08-04 06:00:49 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-13 18:41:21 26,112 ----a-w c:\windows\ServicePackFiles\i386\memstpci.sys
    - 2004-08-04 06:07:44 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-13 18:36:41 63,744 ----a-w c:\windows\ServicePackFiles\i386\mf.sys
    - 2004-08-04 07:56:42 39,936 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 40,960 ----a-w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    - 2004-08-04 07:56:42 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2008-04-14 00:11:56 1,028,096 ----a-w c:\windows\ServicePackFiles\i386\mfc42.dll
    - 2004-08-04 07:56:42 1,024,000 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2006-10-14 08:13:25 981,760 ----a-w c:\windows\ServicePackFiles\i386\mfc42u.dll
    - 2004-08-04 07:56:42 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 22,528 ----a-w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    - 2004-08-04 07:56:42 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2008-04-14 00:11:56 14,848 ----a-w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    - 2004-08-04 07:56:42 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 18,944 ----a-w c:\windows\ServicePackFiles\i386\midimap.dll
    - 2004-08-04 07:56:42 201,216 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 274,432 ----a-w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    - 2004-08-04 07:56:42 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:11:57 60,928 ----a-w c:\windows\ServicePackFiles\i386\miglibnt.dll
    - 2004-08-04 07:56:50 103,424 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 103,936 ----a-w c:\windows\ServicePackFiles\i386\migload.exe
    - 2004-08-04 07:56:51 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 7,680 ----a-w c:\windows\ServicePackFiles\i386\migregdb.exe
    - 2004-08-04 07:56:51 240,128 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 245,248 ----a-w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    - 2004-08-04 07:56:42 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:11:57 586,240 ----a-w c:\windows\ServicePackFiles\i386\mlang.dll
    - 2004-08-04 07:56:51 815,104 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:12:25 1,414,656 ----a-w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    - 2004-08-04 07:56:42 70,656 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 163,328 ----a-w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    - 2004-08-04 07:56:42 1,192,960 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:11:57 1,872,896 ----a-w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    - 2004-08-04 07:56:42 50,688 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 61,440 ----a-w c:\windows\ServicePackFiles\i386\mmcshext.dll
    - 2004-08-04 07:56:42 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2008-04-14 00:11:57 17,408 ----a-w c:\windows\ServicePackFiles\i386\mmfutil.dll
    - 2004-08-04 07:56:42 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:11:57 34,560 ----a-w c:\windows\ServicePackFiles\i386\mnmdd.dll
    - 2004-08-04 07:56:51 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:12:25 32,768 ----a-w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    - 2004-08-04 07:56:42 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:11:57 207,360 ----a-w c:\windows\ServicePackFiles\i386\mobsync.dll
    - 2004-08-04 07:56:51 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-14 00:12:26 143,360 ----a-w c:\windows\ServicePackFiles\i386\mobsync.exe
    - 2004-08-04 06:08:05 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-13 19:00:19 30,080 ----a-w c:\windows\ServicePackFiles\i386\modem.sys
    - 2004-08-04 07:56:42 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:11:57 153,600 ----a-w c:\windows\ServicePackFiles\i386\modemui.dll
    - 2004-08-04 07:56:51 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:12:26 16,384 ----a-w c:\windows\ServicePackFiles\i386\mofcomp.exe
    - 2004-08-04 07:56:42 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:11:57 123,904 ----a-w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    - 2004-08-04 07:56:11 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 16:45:30 216,064 ----a-w c:\windows\ServicePackFiles\i386\moricons.dll
    - 2004-08-04 05:58:32 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:47 23,040 ----a-w c:\windows\ServicePackFiles\i386\mouclass.sys
    - 2004-08-04 05:58:30 42,240 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-13 18:39:46 42,368 ----a-w c:\windows\ServicePackFiles\i386\mountmgr.sys
    - 2004-08-04 07:56:52 3,555,328 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-14 00:12:27 3,558,912 ----a-w c:\windows\ServicePackFiles\i386\moviemk.exe
    - 2004-08-04 06:10:12 15,360 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-13 18:46:22 15,232 ----a-w c:\windows\ServicePackFiles\i386\mpe.sys
    - 2004-08-04 07:56:52 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:12:27 123,392 ----a-w c:\windows\ServicePackFiles\i386\mplay32.exe
    - 2004-08-04 07:56:42 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 59,904 ----a-w c:\windows\ServicePackFiles\i386\mpr.dll
    - 2004-08-04 07:56:42 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 87,040 ----a-w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    - 2004-08-04 06:00:56 181,248 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 18:32:44 180,608 ----a-w c:\windows\ServicePackFiles\i386\mrxdav.sys
    - 2004-08-04 06:15:16 451,456 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-13 19:17:01 456,576 ----a-w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    - 2004-08-04 07:56:42 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 71,680 ----a-w c:\windows\ServicePackFiles\i386\msacm32.dll
    - 2004-08-04 07:56:42 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-14 00:11:58 331,776 ----a-w c:\windows\ServicePackFiles\i386\msadce.dll
    - 2004-08-04 07:56:12 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-13 17:25:57 20,480 ----a-w c:\windows\ServicePackFiles\i386\msadcer.dll
    - 2004-08-04 07:56:42 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-14 00:11:58 61,440 ----a-w c:\windows\ServicePackFiles\i386\msadcf.dll
    - 2004-08-04 07:56:12 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-13 17:25:57 16,384 ----a-w c:\windows\ServicePackFiles\i386\msadcfr.dll
    - 2004-08-04 07:56:42 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-14 00:11:58 143,360 ----a-w c:\windows\ServicePackFiles\i386\msadco.dll
    - 2004-08-04 07:56:12 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-13 17:25:57 16,384 ----a-w c:\windows\ServicePackFiles\i386\msadcor.dll
    - 2004-08-04 07:56:42 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 53,248 ----a-w c:\windows\ServicePackFiles\i386\msadcs.dll
    - 2004-08-04 07:56:42 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-14 00:11:58 155,648 ----a-w c:\windows\ServicePackFiles\i386\msadds.dll
    - 2004-08-04 07:56:12 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:25:58 24,576 ----a-w c:\windows\ServicePackFiles\i386\msaddsr.dll
    - 2004-08-04 07:56:12 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-13 17:26:17 24,576 ----a-w c:\windows\ServicePackFiles\i386\msader15.dll
    - 2004-08-04 07:56:42 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 536,576 ----a-w c:\windows\ServicePackFiles\i386\msado15.dll
    - 2004-08-04 07:56:42 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 180,224 ----a-w c:\windows\ServicePackFiles\i386\msadomd.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 57,344 ----a-w c:\windows\ServicePackFiles\i386\msador15.dll
    - 2004-08-04 07:56:42 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 200,704 ----a-w c:\windows\ServicePackFiles\i386\msadox.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:11:58 57,344 ----a-w c:\windows\ServicePackFiles\i386\msadrh15.dll
    - 2004-08-04 07:56:12 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:10:06 3,584 ----a-w c:\windows\ServicePackFiles\i386\msafd.dll
    - 2004-08-04 07:56:42 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 86,016 ----a-w c:\windows\ServicePackFiles\i386\msapsspc.dll
    - 2004-08-04 07:56:42 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 57,344 ----a-w c:\windows\ServicePackFiles\i386\msasn1.dll
    - 2004-08-04 07:56:42 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ----a-w c:\windows\ServicePackFiles\i386\mscandui.dll
    - 2004-08-04 07:56:42 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 73,728 ----a-w c:\windows\ServicePackFiles\i386\mscms.dll
    - 2004-08-04 07:56:42 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:11:58 69,632 ----a-w c:\windows\ServicePackFiles\i386\msconf.dll
    - 2004-08-04 07:56:53 158,208 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ----a-w c:\windows\ServicePackFiles\i386\msconfig.exe
    - 2004-08-04 07:56:12 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-13 17:26:07 12,288 ----a-w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    - 2004-08-04 07:56:42 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 36,864 ----a-w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    - 2004-08-04 07:56:42 294,400 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 297,984 ----a-w c:\windows\ServicePackFiles\i386\msctf.dll
    - 2004-08-04 07:56:42 69,120 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 68,608 ----a-w c:\windows\ServicePackFiles\i386\msctfp.dll
    - 2004-08-04 07:56:42 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 4,096 ----a-w c:\windows\ServicePackFiles\i386\msdadc.dll
    - 2004-08-04 07:56:42 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 118,784 ----a-w c:\windows\ServicePackFiles\i386\msdadiag.dll
    - 2004-08-04 07:56:42 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ----a-w c:\windows\ServicePackFiles\i386\msdaenum.dll
    - 2004-08-04 07:56:42 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 4,096 ----a-w c:\windows\ServicePackFiles\i386\msdaer.dll
    - 2004-08-04 07:56:43 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 532,480 ----a-w c:\windows\ServicePackFiles\i386\msdaipp.dll
    - 2004-08-04 07:56:43 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-14 00:11:58 233,472 ----a-w c:\windows\ServicePackFiles\i386\msdaora.dll
    - 2004-08-04 07:56:13 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-13 17:24:14 16,384 ----a-w c:\windows\ServicePackFiles\i386\msdaorar.dll
    - 2004-08-04 07:56:43 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-14 00:11:58 77,824 ----a-w c:\windows\ServicePackFiles\i386\msdaosp.dll
    - 2004-08-04 07:56:13 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-13 17:25:58 16,384 ----a-w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    - 2004-08-04 07:56:43 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:58 200,704 ----a-w c:\windows\ServicePackFiles\i386\msdaprst.dll
    - 2004-08-04 07:56:43 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 204,800 ----a-w c:\windows\ServicePackFiles\i386\msdaps.dll
    - 2004-08-04 07:56:43 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-14 00:11:59 118,784 ----a-w c:\windows\ServicePackFiles\i386\msdarem.dll
    - 2004-08-04 07:56:13 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-13 17:25:58 16,384 ----a-w c:\windows\ServicePackFiles\i386\msdaremr.dll
    - 2004-08-04 07:56:43 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 151,552 ----a-w c:\windows\ServicePackFiles\i386\msdart.dll
    - 2004-08-04 07:56:43 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 4,096 ----a-w c:\windows\ServicePackFiles\i386\msdasc.dll
    - 2004-08-04 07:56:43 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-14 00:11:59 315,392 ----a-w c:\windows\ServicePackFiles\i386\msdasql.dll
    - 2004-08-04 07:56:13 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-13 17:26:07 16,384 ----a-w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    - 2004-08-04 07:56:43 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 94,208 ----a-w c:\windows\ServicePackFiles\i386\msdatl3.dll
    - 2004-08-04 07:56:43 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 20,480 ----a-w c:\windows\ServicePackFiles\i386\msdatt.dll
    - 2004-08-04 07:56:43 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 4,096 ----a-w c:\windows\ServicePackFiles\i386\msdaurl.dll
    - 2004-08-04 07:56:43 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 36,864 ----a-w c:\windows\ServicePackFiles\i386\msdfmap.dll
    - 2004-08-04 07:56:43 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:11:59 14,336 ----a-w c:\windows\ServicePackFiles\i386\msdmo.dll
    - 2004-08-04 07:56:53 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:12:27 6,144 ----a-w c:\windows\ServicePackFiles\i386\msdtc.exe
    - 2004-08-04 07:56:43 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 58,880 ----a-w c:\windows\ServicePackFiles\i386\msdtclog.dll
    - 2004-08-04 07:56:43 425,472 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 427,008 ----a-w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    - 2004-08-04 07:56:43 949,248 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 956,928 ----a-w c:\windows\ServicePackFiles\i386\msdtctm.dll
    - 2004-08-04 07:56:43 161,280 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-14 00:11:59 161,792 ----a-w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    - 2004-08-04 06:09:58 51,328 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2008-04-13 18:46:09 51,200 ----a-w c:\windows\ServicePackFiles\i386\msdv.sys
    - 2004-08-04 07:56:43 512,029 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w c:\windows\ServicePackFiles\i386\msexch40.dll
    - 2004-08-04 07:56:43 319,517 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w c:\windows\ServicePackFiles\i386\msexcl40.dll
    - 2004-08-04 06:00:41 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-13 18:32:39 19,072 ----a-w c:\windows\ServicePackFiles\i386\msfs.sys
    - 2004-08-04 07:56:43 537,088 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 539,136 ----a-w c:\windows\ServicePackFiles\i386\msftedit.dll
    - 2004-08-04 07:56:43 994,304 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-14 00:11:59 997,376 ----a-w c:\windows\ServicePackFiles\i386\msgina.dll
    - 2004-08-04 06:04:12 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-13 18:56:32 35,072 ----a-w c:\windows\ServicePackFiles\i386\msgpc.sys
    - 2004-08-04 07:56:43 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 3,166,208 ----a-w c:\windows\ServicePackFiles\i386\msgr3en.dll
    - 2004-08-04 07:56:43 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\ServicePackFiles\i386\msgrocm.dll
    - 2004-08-04 07:56:43 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-14 00:11:59 82,944 ----a-w c:\windows\ServicePackFiles\i386\msgsc.dll
    - 2004-08-04 07:56:13 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-13 17:30:28 180,224 ----a-w c:\windows\ServicePackFiles\i386\msgslang.dll
    - 2004-08-04 07:56:43 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:11:59 33,792 ----a-w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ----a-w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ----a-w c:\windows\ServicePackFiles\i386\msh263.drv
    - 2004-08-04 07:56:53 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:12:27 29,184 ----a-w c:\windows\ServicePackFiles\i386\mshta.exe
    - 2004-08-04 07:56:43 3,003,392 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 3,066,880 ----a-w c:\windows\ServicePackFiles\i386\mshtml.dll
    - 2004-08-04 07:56:43 448,512 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-14 00:11:59 449,024 ----a-w c:\windows\ServicePackFiles\i386\mshtmled.dll
    - 2004-08-04 07:56:14 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-13 16:26:26 56,832 ----a-w c:\windows\ServicePackFiles\i386\mshtmler.dll
    - 2004-08-04 07:56:43 2,804,224 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 2,843,136 ----a-w c:\windows\ServicePackFiles\i386\msi.dll
    - 2004-08-04 07:56:43 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 51,712 ----a-w c:\windows\ServicePackFiles\i386\msident.dll
    - 2004-08-04 07:56:43 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 6,656 ----a-w c:\windows\ServicePackFiles\i386\msidle.dll
    - 2004-08-04 07:56:43 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:11:59 248,832 ----a-w c:\windows\ServicePackFiles\i386\msieftp.dll
    - 2004-08-04 07:56:53 77,312 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:12:28 78,848 ----a-w c:\windows\ServicePackFiles\i386\msiexec.exe
    - 2004-08-04 07:56:43 331,264 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 271,360 ----a-w c:\windows\ServicePackFiles\i386\msihnd.dll
    - 2004-08-04 07:56:43 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:11:59 4,608 ----a-w c:\windows\ServicePackFiles\i386\msimg32.dll
    - 2004-08-04 07:56:53 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-14 00:12:28 60,416 ----a-w c:\windows\ServicePackFiles\i386\msimn.exe
    - 2004-08-04 07:56:17 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-13 15:39:43 884,736 ----a-w c:\windows\ServicePackFiles\i386\msimsg.dll
    - 2004-08-04 07:56:43 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 159,232 ----a-w c:\windows\ServicePackFiles\i386\msimtf.dll
    - 2004-08-04 07:56:43 376,320 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ----a-w c:\windows\ServicePackFiles\i386\msinfo.dll
    - 2004-08-04 06:00:46 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-13 18:54:28 22,016 ----a-w c:\windows\ServicePackFiles\i386\msircomm.sys
    - 2004-08-04 07:56:53 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:12:28 40,960 ----a-w c:\windows\ServicePackFiles\i386\msiregmv.exe
    - 2004-08-04 07:56:43 44,032 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2008-04-14 00:11:59 15,360 ----a-w c:\windows\ServicePackFiles\i386\msisip.dll
    - 2004-08-04 07:56:43 1,507,356 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w c:\windows\ServicePackFiles\i386\msjet40.dll
    - 2004-07-17 18:34:46 358,976 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-03-25 04:50:40 355,112 ----a-w c:\windows\ServicePackFiles\i386\msjetol1.dll
    - 2004-08-04 07:56:43 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 151,583 ----a-w c:\windows\ServicePackFiles\i386\msjint40.dll
    - 2004-08-04 07:56:43 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2008-04-14 00:12:00 102,400 ----a-w c:\windows\ServicePackFiles\i386\msjro.dll
    - 2004-08-04 07:56:43 53,279 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w c:\windows\ServicePackFiles\i386\msjter40.dll
    - 2004-08-04 07:56:43 241,693 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w c:\windows\ServicePackFiles\i386\msjtes40.dll
    - 2004-08-04 05:58:41 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-13 18:39:52 7,552 ----a-w c:\windows\ServicePackFiles\i386\mskssrv.sys
    - 2004-08-04 07:56:43 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2008-04-14 00:12:00 25,088 ----a-w c:\windows\ServicePackFiles\i386\mslbui.dll
    - 2004-08-04 07:56:43 213,023 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w c:\windows\ServicePackFiles\i386\msltus40.dll
    - 2004-08-04 07:56:43 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ----a-w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    - 2004-08-04 07:56:53 1,667,584 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2008-04-14 00:12:28 1,695,232 ----a-w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2007-04-02 18:39:43 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    - 2004-08-04 07:56:43 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2008-04-14 00:12:00 290,816 ----a-w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2007-04-02 18:42:37 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    - 2004-08-04 07:56:43 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 122,368 ----a-w c:\windows\ServicePackFiles\i386\msobcomm.dll
    - 2004-08-04 07:56:43 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 16,384 ----a-w c:\windows\ServicePackFiles\i386\msobdl.dll
    - 2004-08-04 07:56:43 561,664 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 565,248 ----a-w c:\windows\ServicePackFiles\i386\msobmain.dll
    - 2004-08-04 07:56:43 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 30,720 ----a-w c:\windows\ServicePackFiles\i386\msobshel.dll
    - 2004-08-04 07:56:43 18,944 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 19,456 ----a-w c:\windows\ServicePackFiles\i386\msobweb.dll
    - 2004-08-04 07:56:43 1,311,232 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 1,314,816 ----a-w c:\windows\ServicePackFiles\i386\msoe.dll
    - 2004-08-04 07:56:43 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-14 00:12:00 252,928 ----a-w c:\windows\ServicePackFiles\i386\msoeacct.dll
    - 2004-08-04 07:56:18 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-13 16:23:54 2,479,616 ----a-w c:\windows\ServicePackFiles\i386\msoeres.dll
    - 2004-08-04 07:56:43 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:00 105,984 ----a-w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    - 2004-08-04 07:56:18 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-13 17:24:14 20,480 ----a-w c:\windows\ServicePackFiles\i386\msorc32r.dll
    - 2004-08-04 07:56:43 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:00 143,360 ----a-w c:\windows\ServicePackFiles\i386\msorcl32.dll
    - 2004-08-04 07:56:53 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:28 343,040 ----a-w c:\windows\ServicePackFiles\i386\mspaint.exe
    - 2004-08-04 07:56:43 30,208 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2008-04-14 00:12:00 29,696 ----a-w c:\windows\ServicePackFiles\i386\mspatcha.dll
    - 2004-08-04 07:56:43 348,189 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-03-25 04:50:45 355,104 ----a-w c:\windows\ServicePackFiles\i386\mspbde40.dll
    - 2004-08-04 05:58:38 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:50 5,376 ----a-w c:\windows\ServicePackFiles\i386\mspclock.sys
    - 2004-08-04 05:58:40 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 18:39:51 4,992 ----a-w c:\windows\ServicePackFiles\i386\mspqm.sys
    - 2004-08-04 07:56:18 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-13 16:23:31 48,128 ----a-w c:\windows\ServicePackFiles\i386\msprivs.dll
    - 2004-08-04 07:56:43 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2008-04-14 00:12:00 146,432 ----a-w c:\windows\ServicePackFiles\i386\msrating.dll
    - 2004-08-04 07:56:43 421,919 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2008-03-25 04:50:47 432,928 ----a-w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    - 2004-08-04 07:56:43 315,423 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2008-03-25 04:50:49 322,336 ----a-w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    - 2004-08-04 07:56:43 552,989 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w c:\windows\ServicePackFiles\i386\msrepl40.dll
    - 2004-08-04 07:56:43 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 11,264 ----a-w c:\windows\ServicePackFiles\i386\msrle32.dll
    - 2004-08-04 07:56:43 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 134,656 ----a-w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    - 2004-08-04 06:07:47 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-13 18:36:46 15,488 ----a-w c:\windows\ServicePackFiles\i386\mssmbios.sys
     
    FLYNDAGGER,
    #12
  14. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    - 2004-08-04 07:56:43 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 274,432 ----a-w c:\windows\ServicePackFiles\i386\mst120.dll
    - 2004-08-04 07:56:43 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-14 00:12:00 57,344 ----a-w c:\windows\ServicePackFiles\i386\mst123.dll
    - 2004-08-04 06:09:58 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-13 18:46:08 49,024 ----a-w c:\windows\ServicePackFiles\i386\mstape.sys
    - 2004-08-04 07:56:43 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-14 00:12:00 274,944 ----a-w c:\windows\ServicePackFiles\i386\mstask.dll
    - 2004-08-04 05:58:38 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2008-04-13 18:39:50 5,504 ----a-w c:\windows\ServicePackFiles\i386\mstee.sys
    - 2004-08-04 07:56:43 258,077 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-03-25 04:50:55 264,992 ----a-w c:\windows\ServicePackFiles\i386\mstext40.dll
    - 2004-08-04 07:56:43 530,432 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:00 532,480 ----a-w c:\windows\ServicePackFiles\i386\mstime.dll
    - 2004-08-04 07:56:53 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:29 12,288 ----a-w c:\windows\ServicePackFiles\i386\mstinit.exe
    - 2004-08-04 07:56:43 115,712 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 116,224 ----a-w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    - 2004-08-04 07:56:43 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 195,072 ----a-w c:\windows\ServicePackFiles\i386\msutb.dll
    - 2004-08-04 07:56:43 129,536 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 132,608 ----a-w c:\windows\ServicePackFiles\i386\msv1_0.dll
    - 2004-08-04 07:56:43 1,392,671 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:00 1,384,479 ----a-w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    - 2004-08-04 07:56:43 54,784 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 57,344 ----a-w c:\windows\ServicePackFiles\i386\msvcirt.dll
    - 2004-08-04 07:56:43 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 413,696 ----a-w c:\windows\ServicePackFiles\i386\msvcp60.dll
    - 2004-08-04 07:56:43 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-14 00:12:01 343,040 ----a-w c:\windows\ServicePackFiles\i386\msvcrt.dll
    - 2004-08-04 05:58:25 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-13 18:30:46 61,440 ----a-w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    - 2004-08-04 07:56:43 120,832 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 121,344 ----a-w c:\windows\ServicePackFiles\i386\msvfw32.dll
    - 2004-08-04 07:56:43 1,428,480 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 1,428,992 ----a-w c:\windows\ServicePackFiles\i386\msvidctl.dll
    - 2004-08-04 07:56:43 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2008-04-14 00:12:01 72,704 ----a-w c:\windows\ServicePackFiles\i386\msw3prt.dll
    - 2004-08-04 07:56:44 831,519 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-03-25 04:50:57 838,432 ----a-w c:\windows\ServicePackFiles\i386\mswdat10.dll
    - 2004-08-04 07:56:44 204,288 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 203,776 ----a-w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    - 2004-08-04 07:56:44 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2008-04-14 00:12:01 245,248 ----a-w c:\windows\ServicePackFiles\i386\mswsock.dll
    - 2004-08-04 07:56:44 614,429 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-03-25 04:50:58 621,344 ----a-w c:\windows\ServicePackFiles\i386\mswstr10.dll
    - 2004-08-04 07:56:44 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2008-04-14 00:12:01 24,576 ----a-w c:\windows\ServicePackFiles\i386\msxactps.dll
    - 2004-08-04 07:56:44 348,189 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w c:\windows\ServicePackFiles\i386\msxbde40.dll
    - 2004-08-04 07:56:44 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 506,368 ----a-w c:\windows\ServicePackFiles\i386\msxml.dll
    - 2004-08-04 07:56:44 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 701,440 ----a-w c:\windows\ServicePackFiles\i386\msxml2.dll
    - 2004-08-04 07:56:44 1,236,480 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 1,104,896 ----a-w c:\windows\ServicePackFiles\i386\msxml3.dll
    - 2004-08-04 07:56:44 17,408 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2008-04-14 00:12:01 16,896 ----a-w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    - 2004-08-04 07:56:44 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 66,560 ----a-w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    - 2004-08-04 07:56:44 90,112 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 91,648 ----a-w c:\windows\ServicePackFiles\i386\mtxoci.dll
    - 2004-08-04 07:56:44 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2008-04-14 00:12:01 1,737,856 ----a-w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    - 2004-08-04 07:56:53 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-14 00:12:29 90,624 ----a-w c:\windows\ServicePackFiles\i386\muisetup.exe
    - 2004-08-04 06:15:20 107,904 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 19:17:05 105,344 ----a-w c:\windows\ServicePackFiles\i386\mup.sys
    - 2004-08-04 06:04:51 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-13 18:43:55 12,672 ----a-w c:\windows\ServicePackFiles\i386\mutohpen.sys
    - 2004-08-04 07:56:44 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-14 00:12:01 90,624 ----a-w c:\windows\ServicePackFiles\i386\mydocs.dll
    - 2004-08-04 06:10:28 85,376 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-13 18:46:25 85,248 ----a-w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    - 2004-08-04 07:56:44 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 221,184 ----a-w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    - 2004-08-04 07:56:54 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:29 53,760 ----a-w c:\windows\ServicePackFiles\i386\narrator.exe
    - 2004-08-04 07:56:44 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 36,352 ----a-w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    - 2004-08-04 07:56:44 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 47,104 ----a-w c:\windows\ServicePackFiles\i386\ncprov.dll
    - 2004-08-04 07:56:44 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 9,728 ----a-w c:\windows\ServicePackFiles\i386\ncpsres.dll
    - 2004-08-04 07:56:44 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:01 17,920 ----a-w c:\windows\ServicePackFiles\i386\nddeapi.dll
    - 2004-08-04 07:56:54 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:29 4,096 ----a-w c:\windows\ServicePackFiles\i386\nddeapir.exe
    - 2004-08-04 07:56:44 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-14 00:12:01 18,944 ----a-w c:\windows\ServicePackFiles\i386\nddenb32.dll
    - 2004-08-04 06:14:28 182,912 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 19:20:37 182,656 ----a-w c:\windows\ServicePackFiles\i386\ndis.sys
    - 2004-08-04 06:10:12 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-13 18:46:22 10,880 ----a-w c:\windows\ServicePackFiles\i386\ndisip.sys
    - 2004-08-04 07:56:44 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-14 00:12:01 57,344 ----a-w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    - 2004-08-04 06:03:12 12,928 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 18:55:58 14,592 ----a-w c:\windows\ServicePackFiles\i386\ndisuio.sys
    - 2004-08-04 06:14:31 91,776 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 19:20:42 91,520 ----a-w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    - 2004-08-04 07:56:54 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 42,496 ----a-w c:\windows\ServicePackFiles\i386\net.exe
    - 2004-08-04 07:56:54 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:29 124,928 ----a-w c:\windows\ServicePackFiles\i386\net1.exe
    - 2004-08-04 07:56:44 332,288 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-14 00:12:01 337,408 ----a-w c:\windows\ServicePackFiles\i386\netapi32.dll
    - 2004-08-04 06:03:21 34,560 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 18:56:02 34,688 ----a-w c:\windows\ServicePackFiles\i386\netbios.sys
    - 2004-08-04 06:14:37 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-13 19:21:00 162,816 ----a-w c:\windows\ServicePackFiles\i386\netbt.sys
    - 2004-08-04 07:56:44 622,080 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:01 622,592 ----a-w c:\windows\ServicePackFiles\i386\netcfgx.dll
    - 2004-08-04 07:56:54 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2008-04-14 00:12:29 111,104 ----a-w c:\windows\ServicePackFiles\i386\netdde.exe
    - 2004-08-04 07:56:44 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 139,264 ----a-w c:\windows\ServicePackFiles\i386\netid.dll
    - 2004-08-04 07:56:44 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 407,040 ----a-w c:\windows\ServicePackFiles\i386\netlogon.dll
    - 2004-08-04 07:56:44 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 198,144 ----a-w c:\windows\ServicePackFiles\i386\netman.dll
    - 2004-08-04 07:56:44 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 77,312 ----a-w c:\windows\ServicePackFiles\i386\netoc.dll
    - 2004-08-04 07:56:44 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 875,008 ----a-w c:\windows\ServicePackFiles\i386\netplwiz.dll
    - 2004-08-04 07:56:44 12,288 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:12:01 11,776 ----a-w c:\windows\ServicePackFiles\i386\netrap.dll
    - 2004-08-04 08:02:44 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:16:51 329,728 ----a-w c:\windows\ServicePackFiles\i386\netsetup.exe
    - 2004-08-04 07:56:54 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:29 86,016 ----a-w c:\windows\ServicePackFiles\i386\netsh.exe
    - 2004-08-04 07:56:44 1,708,032 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:02 1,703,936 ----a-w c:\windows\ServicePackFiles\i386\netshell.dll
    - 2004-08-04 07:56:54 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:29 36,864 ----a-w c:\windows\ServicePackFiles\i386\netstat.exe
    - 2004-08-04 07:56:44 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 80,896 ----a-w c:\windows\ServicePackFiles\i386\netui0.dll
    - 2004-08-04 07:56:44 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2008-04-14 00:12:02 245,760 ----a-w c:\windows\ServicePackFiles\i386\netui1.dll
    - 2004-08-04 07:56:44 248,832 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2008-04-14 00:12:02 247,808 ----a-w c:\windows\ServicePackFiles\i386\newdev.dll
    - 2004-08-04 05:58:29 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-13 18:51:25 61,824 ----a-w c:\windows\ServicePackFiles\i386\nic1394.sys
    - 2004-08-04 07:56:44 103,936 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 98,304 ----a-w c:\windows\ServicePackFiles\i386\nlhtml.dll
    - 2004-08-04 07:56:44 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 229,376 ----a-w c:\windows\ServicePackFiles\i386\nmas.dll
    - 2004-08-04 07:56:44 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 28,672 ----a-w c:\windows\ServicePackFiles\i386\nmasnt.dll
    - 2004-08-04 07:56:44 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 81,920 ----a-w c:\windows\ServicePackFiles\i386\nmchat.dll
    - 2004-08-04 07:56:44 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 77,824 ----a-w c:\windows\ServicePackFiles\i386\nmcom.dll
    - 2004-08-04 07:56:44 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 151,552 ----a-w c:\windows\ServicePackFiles\i386\nmft.dll
    - 2004-08-04 07:56:44 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-14 00:12:02 28,672 ----a-w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    - 2004-08-04 05:59:50 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-13 18:53:09 40,320 ----a-w c:\windows\ServicePackFiles\i386\nmnt.sys
    - 2004-08-04 07:56:44 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 172,032 ----a-w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    - 2004-08-04 07:56:44 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:02 188,416 ----a-w c:\windows\ServicePackFiles\i386\nmwb.dll
    - 2004-08-04 07:56:54 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\ServicePackFiles\i386\notepad.exe
    - 2004-08-04 06:00:43 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-04-13 18:32:39 30,848 ----a-w c:\windows\ServicePackFiles\i386\npfs.sys
    - 2004-08-04 07:56:54 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:29 15,360 ----a-w c:\windows\ServicePackFiles\i386\nppagent.exe
    - 2004-08-04 07:56:44 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-14 00:12:02 54,784 ----a-w c:\windows\ServicePackFiles\i386\npptools.dll
    - 2004-08-04 06:00:50 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-13 18:54:36 28,672 ----a-w c:\windows\ServicePackFiles\i386\nscirda.sys
    - 2004-08-04 07:56:54 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:29 76,800 ----a-w c:\windows\ServicePackFiles\i386\nslookup.exe
    - 2004-08-04 07:56:36 708,096 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:11:24 706,048 ----a-w c:\windows\ServicePackFiles\i386\ntdll.dll
    - 2004-08-04 07:56:44 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 67,072 ----a-w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    - 2004-08-04 07:56:44 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-14 00:12:02 212,992 ----a-w c:\windows\ServicePackFiles\i386\ntevt.dll
    - 2004-08-04 06:15:09 574,592 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2008-04-13 19:15:53 574,976 ----a-w c:\windows\ServicePackFiles\i386\ntfs.sys
    - 2004-08-04 06:18:30 2,148,352 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 19:24:37 2,145,280 ----a-w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    - 2004-08-04 05:58:58 2,056,832 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,065,792 ----a-w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    - 2004-08-04 05:59:01 2,015,232 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-13 18:31:21 2,023,936 ----a-w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    - 2004-08-04 07:56:44 43,520 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 44,032 ----a-w c:\windows\ServicePackFiles\i386\ntlanman.dll
    - 2004-08-04 07:56:44 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 8,192 ----a-w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    - 2004-08-04 07:56:44 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 118,784 ----a-w c:\windows\ServicePackFiles\i386\ntmarta.dll
    - 2004-08-04 07:56:44 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 40,960 ----a-w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    - 2004-08-04 07:56:44 179,712 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 179,200 ----a-w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    - 2004-08-04 07:56:44 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 488,448 ----a-w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    - 2004-08-04 07:56:44 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2008-04-14 00:12:02 435,200 ----a-w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    - 2004-08-04 07:56:44 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-14 00:12:02 62,976 ----a-w c:\windows\ServicePackFiles\i386\ntoc.dll
    - 2004-08-04 06:19:59 2,180,992 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-13 19:27:53 2,188,928 ----a-w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    - 2004-08-04 07:56:44 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 91,136 ----a-w c:\windows\ServicePackFiles\i386\ntprint.dll
    - 2004-08-04 07:56:44 143,872 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:02 143,360 ----a-w c:\windows\ServicePackFiles\i386\ntshrui.dll
    - 2004-08-04 07:56:54 419,840 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:30 420,864 ----a-w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    - 2004-08-04 07:56:44 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2008-04-14 00:12:02 4,274,816 ----a-w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    - 2004-08-04 06:03:35 88,448 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-13 18:56:06 88,320 ----a-w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    - 2004-08-04 07:56:44 144,384 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-14 00:12:02 142,336 ----a-w c:\windows\ServicePackFiles\i386\nwprovau.dll
    - 2004-08-04 07:56:44 266,752 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:12:02 270,336 ----a-w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    - 2004-08-04 07:56:44 285,696 ------w c:\windows\ServicePackFiles\i386\objsel.dll
    + 2008-04-14 00:12:02 286,208 ----a-w c:\windows\ServicePackFiles\i386\objsel.dll
    - 2004-08-04 07:56:22 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll
    + 2008-04-13 18:40:52 405,504 ----a-w c:\windows\ServicePackFiles\i386\obrb041b.dll
    - 2004-08-04 07:56:22 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll
    + 2008-04-13 18:40:56 408,576 ----a-w c:\windows\ServicePackFiles\i386\obrb0424.dll
    - 2004-08-04 07:56:44 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-04-14 00:12:02 96,256 ----a-w c:\windows\ServicePackFiles\i386\occache.dll
    - 2004-08-04 07:56:44 15,872 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
    - 2004-08-04 07:56:44 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2008-04-14 00:12:02 17,408 ----a-w c:\windows\ServicePackFiles\i386\ocmsn.dll
    - 2004-08-04 07:56:44 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
    + 2008-04-14 00:12:02 249,856 ----a-w c:\windows\ServicePackFiles\i386\odbc32.dll
    - 2004-08-04 07:56:44 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-04-14 00:12:02 16,384 ----a-w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    - 2004-08-04 07:56:54 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-04-14 00:12:30 32,768 ----a-w c:\windows\ServicePackFiles\i386\odbcad32.exe
    - 2004-08-04 07:56:44 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-04-14 00:12:02 24,576 ----a-w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    - 2004-08-04 07:56:44 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
    + 2008-04-14 00:12:02 135,168 ----a-w c:\windows\ServicePackFiles\i386\odbcconf.dll
    - 2004-08-04 07:56:54 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-04-14 00:12:30 69,632 ----a-w c:\windows\ServicePackFiles\i386\odbcconf.exe
    - 2004-08-04 07:56:44 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
    + 2008-04-14 00:12:02 106,496 ----a-w c:\windows\ServicePackFiles\i386\odbccp32.dll
    - 2004-08-04 07:56:44 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\ServicePackFiles\i386\odbccr32.dll
    - 2004-08-04 07:56:44 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\ServicePackFiles\i386\odbccu32.dll
    - 2004-08-04 07:56:22 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-04-13 17:26:05 94,208 ----a-w c:\windows\ServicePackFiles\i386\odbcint.dll
    - 2004-08-04 07:56:22 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-04-14 00:10:31 53,279 ----a-w c:\windows\ServicePackFiles\i386\odbcji32.dll
    - 2004-08-04 07:56:44 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    + 2008-04-14 00:12:02 278,559 ----a-w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    - 2004-08-04 07:56:22 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-04-13 17:26:05 12,288 ----a-w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    - 2004-08-04 07:56:44 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
    + 2008-04-14 00:12:02 147,456 ----a-w c:\windows\ServicePackFiles\i386\odbctrac.dll
    - 2004-08-04 07:56:44 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-04-14 00:12:02 20,511 ----a-w c:\windows\ServicePackFiles\i386\oddbse32.dll
    - 2004-08-04 07:56:44 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\ServicePackFiles\i386\odexl32.dll
    - 2004-08-04 07:56:44 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\ServicePackFiles\i386\odfox32.dll
    - 2004-08-04 07:56:44 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-04-14 00:12:02 20,510 ----a-w c:\windows\ServicePackFiles\i386\odpdx32.dll
    - 2004-08-04 07:56:44 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-04-14 00:12:02 20,511 ----a-w c:\windows\ServicePackFiles\i386\odtext32.dll
    - 2004-08-04 07:56:44 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
    + 2008-04-14 00:12:02 104,448 ----a-w c:\windows\ServicePackFiles\i386\oeimport.dll
    - 2004-08-04 07:56:54 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-04-14 00:12:30 60,416 ----a-w c:\windows\ServicePackFiles\i386\oemig50.exe
    - 2004-08-04 07:56:44 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-04-14 00:12:02 35,328 ----a-w c:\windows\ServicePackFiles\i386\oemiglib.dll
    - 2004-08-04 07:56:44 120,832 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
    + 2008-04-14 00:12:02 192,000 ----a-w c:\windows\ServicePackFiles\i386\offfilt.dll
    - 2004-08-04 06:10:08 61,056 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-04-13 18:46:18 61,696 ----a-w c:\windows\ServicePackFiles\i386\ohci1394.sys
    - 2004-08-04 07:56:44 1,281,536 ------w c:\windows\ServicePackFiles\i386\ole32.dll
    + 2008-04-14 00:12:02 1,287,168 ----a-w c:\windows\ServicePackFiles\i386\ole32.dll
    - 2004-08-04 07:56:44 553,472 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 551,936 ----a-w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
    - 2004-08-04 07:56:44 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
    + 2008-04-14 00:12:02 487,424 ----a-w c:\windows\ServicePackFiles\i386\oledb32.dll
    - 2004-08-04 07:56:44 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 65,536 ----a-w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
    - 2004-08-04 07:56:44 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
    + 2008-04-14 00:12:02 107,008 ----a-w c:\windows\ServicePackFiles\i386\oleprn.dll
    - 2004-08-04 07:56:44 83,456 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 84,992 ----a-w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll
    - 2004-08-04 07:56:54 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-04-14 00:12:31 51,200 ----a-w c:\windows\ServicePackFiles\i386\oobebaln.exe
    - 2004-08-04 07:56:44 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
    + 2008-04-14 00:12:02 713,728 ----a-w c:\windows\ServicePackFiles\i386\opengl32.dll
    - 2004-08-04 06:00:21 166,400 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
    + 2008-04-13 18:32:32 166,912 ----a-w c:\windows\ServicePackFiles\i386\oschoice.exe
    - 2004-08-04 07:56:55 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe
    + 2008-04-14 00:12:31 215,552 ----a-w c:\windows\ServicePackFiles\i386\osk.exe
    - 2004-08-04 05:59:33 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe
    + 2008-04-13 18:31:43 230,400 ----a-w c:\windows\ServicePackFiles\i386\osloader.exe
    - 2004-08-04 07:56:44 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\ServicePackFiles\i386\osuninst.dll
    - 2004-08-04 07:56:44 116,224 ------w c:\windows\ServicePackFiles\i386\p2p.dll
    + 2008-04-14 00:12:02 153,600 ----a-w c:\windows\ServicePackFiles\i386\p2p.dll
    - 2004-08-04 07:56:44 86,016 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    + 2008-04-14 00:12:02 105,472 ----a-w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    - 2004-08-04 07:56:44 312,320 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    + 2008-04-14 00:12:02 313,856 ----a-w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    - 2004-08-04 07:56:44 88,064 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    + 2008-04-14 00:12:02 115,712 ----a-w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    - 2004-08-04 07:56:44 526,848 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
    + 2008-04-14 00:12:02 554,496 ----a-w c:\windows\ServicePackFiles\i386\p2psvc.dll
    - 2004-08-04 05:59:19 42,496 ------w c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-04-13 18:31:31 42,752 ----a-w c:\windows\ServicePackFiles\i386\p3.sys
    - 2004-08-04 07:56:55 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-04-14 00:12:31 58,368 ----a-w c:\windows\ServicePackFiles\i386\packager.exe
    - 2004-08-04 05:59:06 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:10 80,128 ----a-w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
    - 2004-08-04 07:56:44 62,976 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2008-04-14 00:12:02 67,584 ----a-w c:\windows\ServicePackFiles\i386\pautoenr.dll
    - 2004-08-04 07:56:44 102,400 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ----a-w c:\windows\ServicePackFiles\i386\pchshell.dll
    - 2004-08-04 07:56:44 38,912 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\ServicePackFiles\i386\pchsvc.dll
    - 2004-08-04 06:07:46 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-04-13 18:36:44 68,224 ----a-w c:\windows\ServicePackFiles\i386\pci.sys
    - 2004-08-04 05:59:41 25,088 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2008-04-13 18:40:29 24,960 ----a-w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
    - 2004-08-04 07:56:23 676,864 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:13 1,058,816 ----a-w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
    - 2004-08-04 07:56:23 169,472 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
    + 2007-05-15 08:08:14 207,872 ----a-w c:\windows\ServicePackFiles\i386\pclxl.dll
    - 2004-08-04 06:07:46 119,936 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
    + 2008-04-13 18:36:43 120,192 ----a-w c:\windows\ServicePackFiles\i386\pcmcia.sys
    - 2004-08-04 07:56:44 283,648 ------w c:\windows\ServicePackFiles\i386\pdh.dll
    + 2008-04-14 00:12:02 284,160 ----a-w c:\windows\ServicePackFiles\i386\pdh.dll
    - 2004-08-04 07:56:44 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-04-14 00:12:02 39,936 ----a-w c:\windows\ServicePackFiles\i386\perfctrs.dll
    - 2004-08-04 07:56:44 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-04-14 00:12:02 26,624 ----a-w c:\windows\ServicePackFiles\i386\perfdisk.dll
    - 2004-08-04 07:56:55 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:31 15,872 ----a-w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
    - 2004-08-04 07:56:44 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-04-14 00:12:02 25,088 ----a-w c:\windows\ServicePackFiles\i386\perfos.dll
    - 2004-08-04 07:56:44 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-04-14 00:12:02 34,816 ----a-w c:\windows\ServicePackFiles\i386\perfproc.dll
    - 2004-08-04 06:06:55 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-04-13 18:44:29 27,904 ----a-w c:\windows\ServicePackFiles\i386\perm2.sys
    - 2004-08-04 07:56:23 211,712 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
    + 2008-04-14 00:10:34 211,584 ----a-w c:\windows\ServicePackFiles\i386\perm2dll.dll
    - 2004-08-04 06:06:56 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-04-13 18:44:30 28,032 ----a-w c:\windows\ServicePackFiles\i386\perm3.sys
    - 2004-08-04 07:56:23 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
    + 2008-04-14 00:10:34 259,328 ----a-w c:\windows\ServicePackFiles\i386\perm3dd.dll
    - 2004-08-04 07:56:44 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
    + 2008-04-14 00:12:02 176,128 ----a-w c:\windows\ServicePackFiles\i386\photowiz.dll
    - 2004-08-04 07:56:44 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-04-14 00:12:02 35,328 ----a-w c:\windows\ServicePackFiles\i386\pid.dll
    - 2004-08-04 06:04:41 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-04-13 18:35:22 24,064 ----a-w c:\windows\ServicePackFiles\i386\pidgen.dll
    - 2004-08-04 07:56:55 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe
    + 2008-04-14 00:12:31 281,088 ----a-w c:\windows\ServicePackFiles\i386\pinball.exe
    - 2004-08-04 07:56:55 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-04-14 00:12:31 17,920 ----a-w c:\windows\ServicePackFiles\i386\ping.exe
    - 2004-08-04 07:56:44 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-04-14 00:12:02 15,360 ----a-w c:\windows\ServicePackFiles\i386\pjlmon.dll
    - 2004-08-04 07:56:44 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-04-14 00:12:02 44,544 ----a-w c:\windows\ServicePackFiles\i386\plotter.dll
    - 2004-08-04 07:56:44 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 52,736 ----a-w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
    - 2004-08-04 07:56:44 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-04-14 00:12:02 39,424 ----a-w c:\windows\ServicePackFiles\i386\pngfilt.dll
    - 2004-08-04 07:56:44 48,640 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-04-14 00:12:02 58,880 ----a-w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    - 2004-08-04 07:56:44 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll
    + 2008-04-14 00:12:02 105,472 ----a-w c:\windows\ServicePackFiles\i386\polstore.dll
    - 2004-08-04 06:15:49 145,792 ------w c:\windows\ServicePackFiles\i386\portcls.sys
    + 2008-04-13 19:19:41 146,048 ----a-w c:\windows\ServicePackFiles\i386\portcls.sys
    - 2004-08-04 07:56:55 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-04-14 00:12:31 49,152 ----a-w c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys
    - 2004-08-04 07:56:44 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2008-04-14 00:12:03 17,408 ----a-w c:\windows\ServicePackFiles\i386\powrprof.dll
    - 2004-08-04 06:00:16 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2008-04-13 18:41:00 17,664 ----a-w c:\windows\ServicePackFiles\i386\ppa3.sys
    - 2004-08-04 07:56:44 560,640 ------w c:\windows\ServicePackFiles\i386\printui.dll
    + 2008-04-14 00:12:03 560,640 ----a-w c:\windows\ServicePackFiles\i386\printui.dll
    - 2004-08-04 05:59:17 35,328 ------w c:\windows\ServicePackFiles\i386\processr.sys
    + 2008-04-13 18:31:30 35,840 ----a-w c:\windows\ServicePackFiles\i386\processr.sys
    - 2004-08-04 07:56:44 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll
    + 2008-04-14 00:12:03 27,648 ----a-w c:\windows\ServicePackFiles\i386\profmap.dll
    - 2004-08-04 07:56:55 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe
    + 2008-04-14 00:12:31 109,568 ----a-w c:\windows\ServicePackFiles\i386\progman.exe
    - 2004-08-04 07:56:55 50,176 ------w c:\windows\ServicePackFiles\i386\proquota.exe
    + 2008-04-14 00:12:32 50,176 ----a-w c:\windows\ServicePackFiles\i386\proquota.exe
    - 2004-08-04 07:56:44 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll
    + 2008-04-14 00:12:03 237,056 ----a-w c:\windows\ServicePackFiles\i386\provthrd.dll
    - 2004-08-04 07:56:55 9,216 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe
    + 2008-04-14 00:12:32 9,216 ----a-w c:\windows\ServicePackFiles\i386\proxycfg.exe
    - 2004-08-04 07:56:44 132,608 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll
    + 2008-04-14 00:12:03 728,576 ----a-w c:\windows\ServicePackFiles\i386\ps5ui.dll
    - 2004-08-04 07:56:44 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll
    + 2008-04-14 00:12:03 23,040 ----a-w c:\windows\ServicePackFiles\i386\psapi.dll
    - 2004-08-04 07:56:44 96,768 ------w c:\windows\ServicePackFiles\i386\psbase.dll
    + 2008-04-14 00:12:03 96,768 ----a-w c:\windows\ServicePackFiles\i386\psbase.dll
    - 2004-08-04 06:04:19 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys
    + 2008-04-13 18:56:38 69,120 ----a-w c:\windows\ServicePackFiles\i386\psched.sys
    - 2004-08-04 07:56:44 464,384 ------w c:\windows\ServicePackFiles\i386\pscript5.dll
    + 2008-04-14 00:12:03 543,232 ----a-w c:\windows\ServicePackFiles\i386\pscript5.dll
    - 2004-08-04 07:56:44 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll
    + 2008-04-14 00:12:03 363,520 ----a-w c:\windows\ServicePackFiles\i386\psisdecd.dll
    - 2004-08-04 07:56:44 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2008-04-14 00:12:03 43,520 ----a-w c:\windows\ServicePackFiles\i386\pstorec.dll
    - 2004-08-04 07:56:44 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2008-04-14 00:12:03 34,304 ----a-w c:\windows\ServicePackFiles\i386\pstorsvc.dll
    - 2004-08-04 07:56:44 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll
    + 2008-04-14 00:12:03 159,232 ----a-w c:\windows\ServicePackFiles\i386\ptpusd.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll
    - 2004-08-04 07:56:44 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll
    + 2008-04-14 00:12:03 237,568 ----a-w c:\windows\ServicePackFiles\i386\qasf.dll
    - 2004-08-04 07:56:44 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll
    + 2008-04-14 00:12:03 192,512 ----a-w c:\windows\ServicePackFiles\i386\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll
    - 2004-08-04 07:56:44 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll
    + 2008-04-14 00:12:03 279,040 ----a-w c:\windows\ServicePackFiles\i386\qdv.dll
    - 2004-08-04 07:56:44 385,024 ------w c:\windows\ServicePackFiles\i386\qdvd.dll
    + 2008-04-14 00:12:03 386,048 ----a-w c:\windows\ServicePackFiles\i386\qdvd.dll
    - 2004-08-04 07:56:44 562,176 ------w c:\windows\ServicePackFiles\i386\qedit.dll
    + 2008-04-14 00:12:03 562,176 ----a-w c:\windows\ServicePackFiles\i386\qedit.dll
    - 2004-08-04 07:56:24 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll
    + 2008-04-13 17:21:32 733,696 ----a-w c:\windows\ServicePackFiles\i386\qedwipes.dll
    - 2004-08-04 06:00:05 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys
    + 2008-04-13 18:40:52 6,016 ----a-w c:\windows\ServicePackFiles\i386\qic157.sys
    - 2004-08-04 07:56:44 382,464 ------w c:\windows\ServicePackFiles\i386\qmgr.dll
    + 2008-04-14 00:12:03 409,088 ----a-w c:\windows\ServicePackFiles\i386\qmgr.dll
    - 2004-08-04 07:56:44 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2008-04-14 00:12:03 18,944 ----a-w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    - 2004-08-04 07:56:55 20,480 ------w c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2008-04-14 00:12:32 19,968 ----a-w c:\windows\ServicePackFiles\i386\qprocess.exe
    - 2004-08-04 07:56:44 1,287,680 ------w c:\windows\ServicePackFiles\i386\quartz.dll
    + 2008-04-14 00:12:03 1,288,192 ----a-w c:\windows\ServicePackFiles\i386\quartz.dll
    - 2004-08-04 07:56:44 1,435,648 ------w c:\windows\ServicePackFiles\i386\query.dll
    + 2008-04-14 00:12:03 1,435,648 ----a-w c:\windows\ServicePackFiles\i386\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll
    - 2004-08-04 07:56:44 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2008-04-14 00:12:03 43,520 ----a-w c:\windows\ServicePackFiles\i386\racpldlg.dll
    - 2004-08-04 06:00:51 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2008-04-13 18:41:23 20,736 ----a-w c:\windows\ServicePackFiles\i386\ramdisk.sys
    - 2004-08-04 07:56:44 8,192 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll
    + 2008-04-14 00:12:03 7,680 ----a-w c:\windows\ServicePackFiles\i386\rasadhlp.dll
    - 2004-08-04 07:56:44 236,544 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll
    + 2008-04-14 00:12:03 237,056 ----a-w c:\windows\ServicePackFiles\i386\rasapi32.dll
    - 2004-08-04 07:56:44 89,088 ------w c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2008-04-14 00:12:03 88,576 ----a-w c:\windows\ServicePackFiles\i386\rasauto.dll
    - 2004-08-04 07:56:44 69,632 ------w c:\windows\ServicePackFiles\i386\raschap.dll
    + 2008-04-14 00:12:03 79,872 ----a-w c:\windows\ServicePackFiles\i386\raschap.dll
    - 2004-08-04 07:56:44 657,920 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll
    + 2008-04-14 00:12:03 658,432 ----a-w c:\windows\ServicePackFiles\i386\rasdlg.dll
    - 2004-08-04 06:14:22 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2008-04-13 19:19:43 51,328 ----a-w c:\windows\ServicePackFiles\i386\rasl2tp.sys
    - 2004-08-04 07:56:44 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll
    + 2008-04-14 00:12:03 61,440 ----a-w c:\windows\ServicePackFiles\i386\rasman.dll
    - 2004-08-04 07:56:44 174,080 ------w c:\windows\ServicePackFiles\i386\rasmans.dll
    + 2008-04-14 00:12:03 186,368 ----a-w c:\windows\ServicePackFiles\i386\rasmans.dll
    - 2004-08-04 07:56:55 56,832 ------w c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2008-04-14 00:12:32 56,832 ----a-w c:\windows\ServicePackFiles\i386\rasphone.exe
    - 2004-08-04 07:56:44 206,336 ------w c:\windows\ServicePackFiles\i386\rasppp.dll
    + 2008-04-14 00:12:03 210,944 ----a-w c:\windows\ServicePackFiles\i386\rasppp.dll
    - 2004-08-04 06:05:07 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2008-04-13 18:57:32 41,472 ----a-w c:\windows\ServicePackFiles\i386\raspppoe.sys
    - 2004-08-04 06:14:26 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-04-13 19:19:48 48,384 ----a-w c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll
    - 2004-08-04 07:56:44 16,896 ------w c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2008-04-14 00:12:03 16,384 ----a-w c:\windows\ServicePackFiles\i386\rassapi.dll
    - 2004-08-04 07:56:44 58,880 ------w c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2008-04-14 00:12:03 58,368 ----a-w c:\windows\ServicePackFiles\i386\rastapi.dll
    - 2004-08-04 07:56:44 112,128 ------w c:\windows\ServicePackFiles\i386\rastls.dll
    + 2008-04-14 00:12:03 150,016 ----a-w c:\windows\ServicePackFiles\i386\rastls.dll
    - 2004-08-04 07:56:44 102,400 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
    + 2008-04-14 00:12:03 102,400 ----a-w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
    - 2004-08-04 07:56:55 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2008-04-14 00:12:32 35,840 ----a-w c:\windows\ServicePackFiles\i386\rcimlby.exe
    - 2004-08-04 07:56:55 21,504 ------w c:\windows\ServicePackFiles\i386\rcp.exe
    + 2008-04-14 00:12:32 21,504 ----a-w c:\windows\ServicePackFiles\i386\rcp.exe
    - 2004-08-04 06:20:06 176,512 ------w c:\windows\ServicePackFiles\i386\rdbss.sys
    + 2008-04-13 19:28:39 175,744 ----a-w c:\windows\ServicePackFiles\i386\rdbss.sys
    - 2004-08-04 07:56:44 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll
    + 2008-04-14 00:12:03 147,968 ----a-w c:\windows\ServicePackFiles\i386\rdchost.dll
    - 2004-08-04 07:56:55 62,464 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2008-04-14 00:12:32 62,976 ----a-w c:\windows\ServicePackFiles\i386\rdpclip.exe
    - 2004-08-04 08:01:07 92,168 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2008-04-14 00:13:22 92,424 ----a-w c:\windows\ServicePackFiles\i386\rdpdd.dll
    - 2004-08-04 06:01:15 196,864 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys
    + 2008-04-13 18:32:51 196,224 ----a-w c:\windows\ServicePackFiles\i386\rdpdr.sys
    - 2004-08-04 07:56:44 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2008-04-14 00:12:04 19,968 ----a-w c:\windows\ServicePackFiles\i386\rdpsnd.dll
    - 2004-08-04 08:01:08 139,400 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys
    + 2008-04-14 00:13:22 139,656 ----a-w c:\windows\ServicePackFiles\i386\rdpwd.sys
    - 2004-08-04 08:01:08 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2008-04-14 00:13:22 87,176 ----a-w c:\windows\ServicePackFiles\i386\rdpwsx.dll
    - 2004-08-04 07:56:55 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2008-04-14 00:12:32 13,824 ----a-w c:\windows\ServicePackFiles\i386\rdsaddin.exe
    - 2004-08-04 07:56:55 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2008-04-14 00:12:32 67,072 ----a-w c:\windows\ServicePackFiles\i386\rdshost.exe
    - 2004-08-04 05:59:37 57,472 ------w c:\windows\ServicePackFiles\i386\redbook.sys
    + 2008-04-13 18:40:27 57,600 ----a-w c:\windows\ServicePackFiles\i386\redbook.sys
    - 2004-08-04 07:56:55 50,176 ------w c:\windows\ServicePackFiles\i386\reg.exe
    + 2008-04-14 00:12:32 50,176 ----a-w c:\windows\ServicePackFiles\i386\reg.exe
    - 2004-08-04 07:56:44 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll
    + 2008-04-14 00:12:04 49,664 ----a-w c:\windows\ServicePackFiles\i386\regapi.dll
    - 2004-08-04 07:56:55 146,432 ------w c:\windows\ServicePackFiles\i386\regedit.exe
    + 2008-04-14 00:12:32 146,432 ----a-w c:\windows\ServicePackFiles\i386\regedit.exe
    - 2004-08-04 07:56:44 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2008-04-14 00:12:04 59,904 ----a-w c:\windows\ServicePackFiles\i386\regsvc.dll
    - 2004-08-04 07:56:55 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2008-04-14 00:12:32 11,776 ----a-w c:\windows\ServicePackFiles\i386\regsvr32.exe
    - 2004-08-04 07:56:44 397,824 ------w c:\windows\ServicePackFiles\i386\regwizc.dll
    + 2008-04-14 00:12:04 397,824 ----a-w c:\windows\ServicePackFiles\i386\regwizc.dll
    - 2004-08-04 07:56:44 60,416 ------w c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2008-04-14 00:12:04 60,416 ----a-w c:\windows\ServicePackFiles\i386\remotepg.dll
    - 2004-08-04 07:56:44 177,152 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll
    + 2008-04-14 00:12:04 178,176 ----a-w c:\windows\ServicePackFiles\i386\repdrvfs.dll
    - 2004-08-04 07:56:44 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll
    + 2008-04-14 00:12:04 58,880 ----a-w c:\windows\ServicePackFiles\i386\resutils.dll
    - 2004-08-04 07:56:55 13,824 ------w c:\windows\ServicePackFiles\i386\rexec.exe
    + 2008-04-14 00:12:33 13,824 ----a-w c:\windows\ServicePackFiles\i386\rexec.exe
    - 2004-08-04 06:10:39 59,648 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-04-13 18:46:32 59,136 ----a-w c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll
    - 2004-08-04 07:56:44 123,392 ------w c:\windows\ServicePackFiles\i386\riafres.dll
    + 2008-04-14 00:12:04 123,392 ----a-w c:\windows\ServicePackFiles\i386\riafres.dll
    - 2004-08-04 07:56:44 11,776 ------w c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2008-04-14 00:12:04 11,776 ----a-w c:\windows\ServicePackFiles\i386\riafui1.dll
    - 2004-08-04 07:56:44 11,776 ------w c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2008-04-14 00:12:04 11,776 ----a-w c:\windows\ServicePackFiles\i386\riafui2.dll
    - 2004-08-04 07:56:44 431,616 ------w c:\windows\ServicePackFiles\i386\riched20.dll
    + 2008-04-14 00:12:04 433,664 ----a-w c:\windows\ServicePackFiles\i386\riched20.dll
    + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys
    - 2004-08-04 06:04:31 30,080 ------w c:\windows\ServicePackFiles\i386\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ----a-w c:\windows\ServicePackFiles\i386\rndismp.sys
    - 2004-08-04 06:04:31 30,080 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys
    + 2008-04-13 18:56:49 30,592 ----a-w c:\windows\ServicePackFiles\i386\rndismpx.sys
    - 2004-08-04 05:59:10 79,104 ------w c:\windows\ServicePackFiles\i386\rocket.sys
    + 2008-04-13 18:40:14 79,104 ----a-w c:\windows\ServicePackFiles\i386\rocket.sys
    - 2004-08-04 07:56:44 581,120 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll
    + 2008-04-14 00:12:04 584,704 ----a-w c:\windows\ServicePackFiles\i386\rpcrt4.dll
    - 2004-08-04 07:56:44 395,776 ------w c:\windows\ServicePackFiles\i386\rpcss.dll
    + 2008-04-14 00:12:04 399,360 ----a-w c:\windows\ServicePackFiles\i386\rpcss.dll
    - 2004-08-04 07:56:44 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll
    + 2008-04-14 00:12:04 61,440 ----a-w c:\windows\ServicePackFiles\i386\rrcm.dll
    - 2004-08-04 05:31:43 152,576 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll
    + 2008-04-13 17:37:57 208,384 ----a-w c:\windows\ServicePackFiles\i386\rsaenh.dll
    - 2004-08-04 07:56:55 14,848 ------w c:\windows\ServicePackFiles\i386\rsh.exe
    + 2008-04-14 00:12:33 14,848 ----a-w c:\windows\ServicePackFiles\i386\rsh.exe
    - 2004-08-04 07:56:44 39,936 ------w c:\windows\ServicePackFiles\i386\rshx32.dll
    + 2008-04-14 00:12:04 39,936 ----a-w c:\windows\ServicePackFiles\i386\rshx32.dll
    - 2004-08-04 07:56:44 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll
    + 2008-04-14 00:12:04 18,944 ----a-w c:\windows\ServicePackFiles\i386\rsmps.dll
    - 2004-08-04 07:56:55 380,416 ------w c:\windows\ServicePackFiles\i386\rstrui.exe
    + 2008-04-14 00:12:33 380,416 ----a-w c:\windows\ServicePackFiles\i386\rstrui.exe
    + 2008-04-14 00:12:04 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll
    - 2004-08-04 07:56:55 77,312 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe
    + 2008-04-14 00:12:33 77,312 ----a-w c:\windows\ServicePackFiles\i386\rtcshare.exe
    - 2004-08-04 07:56:44 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll
    + 2008-04-14 00:12:04 31,744 ----a-w c:\windows\ServicePackFiles\i386\rtipxmib.dll
    - 2004-08-04 07:56:44 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll
    + 2008-04-14 00:12:04 44,032 ----a-w c:\windows\ServicePackFiles\i386\rtutils.dll
    - 2004-08-04 07:56:55 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe
    + 2008-04-14 00:12:33 33,280 ----a-w c:\windows\ServicePackFiles\i386\rundll32.exe
    - 2004-08-04 07:56:55 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe
    + 2008-04-14 00:12:33 14,336 ----a-w c:\windows\ServicePackFiles\i386\runonce.exe
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll
    + 2008-04-14 00:12:04 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll
    - 2004-08-04 07:56:44 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll
    + 2008-04-14 00:12:04 397,056 ----a-w c:\windows\ServicePackFiles\i386\s3gnb.dll
    - 2004-08-04 07:56:44 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll
    + 2008-04-14 00:12:04 43,520 ----a-w c:\windows\ServicePackFiles\i386\safrcdlg.dll
    - 2004-08-04 07:56:44 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll
    + 2008-04-14 00:12:04 29,696 ----a-w c:\windows\ServicePackFiles\i386\safrdm.dll
    - 2004-08-04 07:56:44 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll
    + 2008-04-14 00:12:04 45,568 ----a-w c:\windows\ServicePackFiles\i386\safrslv.dll
    - 2004-08-04 07:56:44 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll
    + 2008-04-14 00:12:04 64,000 ----a-w c:\windows\ServicePackFiles\i386\samlib.dll
    - 2004-08-04 07:56:44 415,744 ------w c:\windows\ServicePackFiles\i386\samsrv.dll
     
    FLYNDAGGER,
    #13
  15. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    + 2008-04-14 00:12:04 415,744 ----a-w c:\windows\ServicePackFiles\i386\samsrv.dll
    - 2004-08-04 07:56:44 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll
    + 2008-04-14 00:12:04 741,376 ----a-w c:\windows\ServicePackFiles\i386\sapi.dll
    - 2004-08-04 07:56:55 13,312 ------w c:\windows\ServicePackFiles\i386\savedump.exe
    + 2008-04-14 00:12:33 13,312 ----a-w c:\windows\ServicePackFiles\i386\savedump.exe
    - 2004-08-04 07:56:44 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll
    + 2008-04-14 00:12:04 270,848 ----a-w c:\windows\ServicePackFiles\i386\sbe.dll
    - 2004-08-04 07:56:44 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll
    + 2008-04-14 00:12:04 159,232 ----a-w c:\windows\ServicePackFiles\i386\sbeio.dll
    - 2004-08-04 05:59:56 43,136 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys
    + 2008-04-13 18:40:48 43,904 ----a-w c:\windows\ServicePackFiles\i386\sbp2port.sys
    - 2004-08-04 07:56:44 69,632 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll
    + 2008-04-14 00:12:04 69,632 ----a-w c:\windows\ServicePackFiles\i386\scarddlg.dll
    - 2004-08-04 07:56:55 95,744 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe
    + 2008-04-14 00:12:33 95,744 ----a-w c:\windows\ServicePackFiles\i386\scardsvr.exe
    - 2004-08-04 07:56:44 171,008 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll
    + 2008-04-14 00:12:05 171,008 ----a-w c:\windows\ServicePackFiles\i386\sccsccp.dll
    - 2004-08-04 07:56:44 180,224 ------w c:\windows\ServicePackFiles\i386\scecli.dll
    + 2008-04-14 00:12:05 181,248 ----a-w c:\windows\ServicePackFiles\i386\scecli.dll
    - 2004-08-04 07:56:44 313,856 ------w c:\windows\ServicePackFiles\i386\scesrv.dll
    + 2008-04-14 00:12:05 314,880 ----a-w c:\windows\ServicePackFiles\i386\scesrv.dll
    - 2004-08-04 07:56:44 144,896 ------w c:\windows\ServicePackFiles\i386\schannel.dll
    + 2008-04-14 00:12:05 144,384 ----a-w c:\windows\ServicePackFiles\i386\schannel.dll
    - 2004-08-04 07:56:44 190,976 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll
    + 2008-04-14 00:12:05 192,512 ----a-w c:\windows\ServicePackFiles\i386\schedsvc.dll
    - 2004-08-04 07:56:44 20,992 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll
    + 2008-04-14 00:12:05 20,480 ----a-w c:\windows\ServicePackFiles\i386\sclgntfy.dll
    - 2004-08-04 07:56:55 36,864 ------w c:\windows\ServicePackFiles\i386\scrcons.exe
    + 2008-04-14 00:12:34 36,352 ----a-w c:\windows\ServicePackFiles\i386\scrcons.exe
    - 2004-08-04 07:56:44 202,752 ------w c:\windows\ServicePackFiles\i386\script.dll
    + 2008-04-14 00:12:05 215,552 ----a-w c:\windows\ServicePackFiles\i386\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\ServicePackFiles\i386\scripta.dll
    - 2004-08-04 07:56:57 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr
    + 2008-04-14 00:12:43 9,216 ----a-w c:\windows\ServicePackFiles\i386\scrnsave.scr
    - 2004-08-04 07:56:44 159,744 ------w c:\windows\ServicePackFiles\i386\scrobj.dll
    + 2008-04-14 00:12:05 180,224 ----a-w c:\windows\ServicePackFiles\i386\scrobj.dll
    - 2004-08-04 07:56:44 151,552 ------w c:\windows\ServicePackFiles\i386\scrrun.dll
    + 2008-04-14 00:12:05 172,032 ----a-w c:\windows\ServicePackFiles\i386\scrrun.dll
    - 2004-08-04 05:59:41 96,256 ------w c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2008-04-13 18:40:30 96,384 ----a-w c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys
    - 2004-08-04 07:56:55 77,312 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe
    + 2008-04-14 00:12:34 77,312 ----a-w c:\windows\ServicePackFiles\i386\sdbinst.exe
    - 2004-08-04 06:07:47 67,584 ------w c:\windows\ServicePackFiles\i386\sdbus.sys
    + 2008-04-13 18:36:44 79,232 ----a-w c:\windows\ServicePackFiles\i386\sdbus.sys
    - 2004-08-04 07:56:44 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll
    + 2008-04-14 00:12:05 29,184 ----a-w c:\windows\ServicePackFiles\i386\sdhcinst.dll
    - 2002-09-03 16:58:49 27,440 ------w c:\windows\ServicePackFiles\i386\secdrv.sys
    + 2007-11-13 10:25:53 20,480 ----a-w c:\windows\ServicePackFiles\i386\secdrv.sys
    - 2004-08-04 07:56:44 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll
    + 2008-04-14 00:12:05 18,944 ----a-w c:\windows\ServicePackFiles\i386\seclogon.dll
    - 2004-08-04 07:56:44 55,808 ------w c:\windows\ServicePackFiles\i386\secur32.dll
    + 2008-04-14 00:12:05 56,320 ----a-w c:\windows\ServicePackFiles\i386\secur32.dll
    - 2004-08-04 07:56:44 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll
    + 2008-04-14 00:12:05 5,632 ----a-w c:\windows\ServicePackFiles\i386\security.dll
    - 2004-08-04 07:56:44 29,184 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll
    + 2008-04-14 00:12:05 29,184 ----a-w c:\windows\ServicePackFiles\i386\sendcmsg.dll
    - 2004-08-04 07:56:44 55,296 ------w c:\windows\ServicePackFiles\i386\sendmail.dll
    + 2008-04-14 00:12:05 54,784 ----a-w c:\windows\ServicePackFiles\i386\sendmail.dll
    - 2004-08-04 07:56:44 38,912 ------w c:\windows\ServicePackFiles\i386\sens.dll
    + 2008-04-14 00:12:05 39,424 ----a-w c:\windows\ServicePackFiles\i386\sens.dll
    - 2004-08-04 07:56:44 6,656 ------w c:\windows\ServicePackFiles\i386\sensapi.dll
    + 2008-04-14 00:12:05 7,168 ----a-w c:\windows\ServicePackFiles\i386\sensapi.dll
    - 2004-08-04 05:59:07 15,488 ------w c:\windows\ServicePackFiles\i386\serenum.sys
    + 2008-04-13 18:40:12 15,744 ----a-w c:\windows\ServicePackFiles\i386\serenum.sys
    - 2004-08-04 06:15:52 64,896 ------w c:\windows\ServicePackFiles\i386\serial.sys
    + 2008-04-13 19:15:45 64,512 ----a-w c:\windows\ServicePackFiles\i386\serial.sys
    - 2004-08-04 07:56:44 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll
    + 2008-04-14 00:12:05 56,320 ----a-w c:\windows\ServicePackFiles\i386\servdeps.dll
    - 2004-08-04 07:56:55 108,032 ------w c:\windows\ServicePackFiles\i386\services.exe
    + 2008-04-14 00:12:34 108,544 ----a-w c:\windows\ServicePackFiles\i386\services.exe
    - 2004-08-04 07:56:56 140,800 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe
    + 2008-04-14 00:12:34 141,312 ----a-w c:\windows\ServicePackFiles\i386\sessmgr.exe
    - 2004-08-04 07:56:56 31,232 ------w c:\windows\ServicePackFiles\i386\sethc.exe
    + 2008-04-14 00:12:34 31,232 ----a-w c:\windows\ServicePackFiles\i386\sethc.exe
    - 2004-08-04 07:56:56 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe
    + 2008-04-14 00:12:34 23,040 ----a-w c:\windows\ServicePackFiles\i386\setup.exe
    - 2004-08-04 07:56:56 73,216 ------w c:\windows\ServicePackFiles\i386\setup50.exe
    + 2008-04-14 00:12:34 73,216 ----a-w c:\windows\ServicePackFiles\i386\setup50.exe
    - 2004-08-04 05:56:46 983,552 ------w c:\windows\ServicePackFiles\i386\setupapi.dll
    + 2008-04-14 10:42:06 985,088 ----a-w c:\windows\ServicePackFiles\i386\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe
    - 2004-08-04 07:56:44 101,376 ------w c:\windows\ServicePackFiles\i386\setupqry.dll
    + 2008-04-14 00:12:05 101,376 ----a-w c:\windows\ServicePackFiles\i386\setupqry.dll
    - 2004-08-04 07:56:44 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll
    + 2008-04-14 00:12:05 5,120 ----a-w c:\windows\ServicePackFiles\i386\sfc.dll
    - 2004-08-04 07:56:44 140,288 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll
    + 2008-04-14 00:12:05 140,288 ----a-w c:\windows\ServicePackFiles\i386\sfc_os.dll
    - 2004-08-04 07:56:45 1,580,544 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll
    + 2008-04-14 00:12:05 1,614,848 ----a-w c:\windows\ServicePackFiles\i386\sfcfiles.dll
    - 2004-08-04 05:59:54 11,136 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2008-04-13 18:40:47 11,904 ----a-w c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
    - 2004-08-04 05:59:54 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys
    + 2008-04-13 18:40:47 11,008 ----a-w c:\windows\ServicePackFiles\i386\sffp_sd.sys
    - 2004-08-04 05:59:54 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys
    + 2008-04-13 18:40:48 11,392 ----a-w c:\windows\ServicePackFiles\i386\sfloppy.sys
    - 2004-08-04 07:56:27 549,376 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll
    + 2008-04-13 17:03:19 549,376 ----a-w c:\windows\ServicePackFiles\i386\shdoclc.dll
    - 2004-08-04 07:56:45 1,483,264 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll
    + 2008-04-14 00:12:05 1,499,136 ----a-w c:\windows\ServicePackFiles\i386\shdocvw.dll
    - 2004-08-04 07:56:45 8,384,000 ------w c:\windows\ServicePackFiles\i386\shell32.dll
    + 2008-04-14 00:12:05 8,461,312 ----a-w c:\windows\ServicePackFiles\i386\shell32.dll
    - 2004-08-04 07:56:45 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll
    + 2008-04-14 00:12:05 25,088 ----a-w c:\windows\ServicePackFiles\i386\shfolder.dll
    - 2004-08-04 07:56:45 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll
    + 2008-04-14 00:12:05 68,096 ----a-w c:\windows\ServicePackFiles\i386\shgina.dll
    - 2004-08-04 07:56:45 65,536 ------w c:\windows\ServicePackFiles\i386\shimeng.dll
    + 2008-04-14 00:12:05 65,024 ----a-w c:\windows\ServicePackFiles\i386\shimeng.dll
    - 2004-08-04 07:56:45 438,272 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll
    + 2008-04-14 00:12:05 438,272 ----a-w c:\windows\ServicePackFiles\i386\shimgvw.dll
    - 2004-08-04 07:56:45 473,600 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll
    + 2008-04-14 00:12:05 474,112 ----a-w c:\windows\ServicePackFiles\i386\shlwapi.dll
    - 2004-08-04 07:56:56 42,496 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe
    + 2008-04-14 00:12:35 45,056 ----a-w c:\windows\ServicePackFiles\i386\shmgrate.exe
    - 2004-08-04 07:56:56 77,824 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe
    + 2008-04-14 00:12:35 77,824 ----a-w c:\windows\ServicePackFiles\i386\shrpubw.exe
    - 2004-08-04 07:56:45 27,648 ------w c:\windows\ServicePackFiles\i386\shscrap.dll
    + 2008-04-14 00:12:05 27,648 ----a-w c:\windows\ServicePackFiles\i386\shscrap.dll
    - 2004-08-04 07:56:45 134,656 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll
    + 2008-04-14 00:12:05 135,168 ----a-w c:\windows\ServicePackFiles\i386\shsvcs.dll
    - 2004-08-04 07:56:45 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll
    + 2008-04-14 00:12:05 20,536 ----a-w c:\windows\ServicePackFiles\i386\shtml.dll
    - 2004-08-04 07:56:56 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe
    + 2008-04-14 00:12:35 16,437 ----a-w c:\windows\ServicePackFiles\i386\shtml.exe
    - 2004-08-04 07:56:56 19,456 ------w c:\windows\ServicePackFiles\i386\shutdown.exe
    + 2008-04-14 00:12:35 19,456 ----a-w c:\windows\ServicePackFiles\i386\shutdown.exe
    - 2004-08-04 07:56:45 13,312 ------w c:\windows\ServicePackFiles\i386\sigtab.dll
    + 2008-04-14 00:12:05 13,312 ----a-w c:\windows\ServicePackFiles\i386\sigtab.dll
    - 2004-08-04 07:56:56 70,144 ------w c:\windows\ServicePackFiles\i386\sigverif.exe
    + 2008-04-14 00:12:35 70,144 ----a-w c:\windows\ServicePackFiles\i386\sigverif.exe
    - 2004-08-04 07:56:45 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll
    + 2008-04-14 00:12:05 3,901 ----a-w c:\windows\ServicePackFiles\i386\siint5.dll
    - 2004-08-04 06:07:42 41,088 ------w c:\windows\ServicePackFiles\i386\sisagp.sys
    + 2008-04-13 18:36:39 40,960 ----a-w c:\windows\ServicePackFiles\i386\sisagp.sys
    - 2004-08-04 07:56:56 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe
    + 2008-04-14 00:12:35 26,112 ----a-w c:\windows\ServicePackFiles\i386\skeys.exe
    - 2004-08-04 07:56:45 25,088 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll
    + 2008-04-14 00:12:06 25,088 ----a-w c:\windows\ServicePackFiles\i386\slayerxp.dll
    - 2004-08-04 07:56:45 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll
    + 2008-04-14 00:12:06 98,304 ----a-w c:\windows\ServicePackFiles\i386\slbiop.dll
    - 2004-08-04 07:56:45 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll
    + 2008-04-14 00:12:06 73,832 ----a-w c:\windows\ServicePackFiles\i386\slcoinst.dll
    - 2004-08-04 07:56:45 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll
    + 2008-04-14 00:12:06 286,792 ----a-w c:\windows\ServicePackFiles\i386\slextspk.dll
    - 2004-08-04 07:56:45 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll
    + 2008-04-14 00:12:06 188,508 ----a-w c:\windows\ServicePackFiles\i386\slgen.dll
    - 2004-08-04 06:10:16 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys
    + 2008-04-13 18:46:23 11,136 ----a-w c:\windows\ServicePackFiles\i386\slip.sys
    - 2004-08-04 07:56:56 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe
    + 2008-04-14 00:12:35 32,866 ----a-w c:\windows\ServicePackFiles\i386\slrundll.exe
    - 2004-08-04 07:56:56 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe
    + 2008-04-14 00:12:35 73,796 ----a-w c:\windows\ServicePackFiles\i386\slserv.exe
    - 2004-08-04 06:07:36 6,016 ------w c:\windows\ServicePackFiles\i386\smbali.sys
    + 2008-04-13 18:36:34 5,888 ----a-w c:\windows\ServicePackFiles\i386\smbali.sys
    - 2004-08-04 06:07:35 16,128 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys
    + 2008-04-13 18:36:33 16,000 ----a-w c:\windows\ServicePackFiles\i386\smbbatt.sys
    - 2004-08-04 06:07:35 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys
    + 2008-04-13 18:36:33 6,912 ----a-w c:\windows\ServicePackFiles\i386\smbclass.sys
    - 2004-08-04 07:56:56 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe
    + 2008-04-14 00:12:35 8,192 ----a-w c:\windows\ServicePackFiles\i386\smbinst.exe
    - 2004-08-04 07:56:56 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe
    + 2008-04-14 00:12:35 236,544 ----a-w c:\windows\ServicePackFiles\i386\smi2smir.exe
    - 2004-08-04 07:56:45 363,008 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll
    + 2008-04-14 00:12:06 362,496 ----a-w c:\windows\ServicePackFiles\i386\smlogcfg.dll
    - 2004-08-04 07:56:56 89,600 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe
    + 2008-04-14 00:12:35 89,600 ----a-w c:\windows\ServicePackFiles\i386\smlogsvc.exe
    - 2004-08-04 07:56:56 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe
    + 2008-04-14 00:12:36 50,688 ----a-w c:\windows\ServicePackFiles\i386\smss.exe
    - 2004-08-04 07:56:45 456,704 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll
    + 2008-04-14 00:12:06 456,192 ----a-w c:\windows\ServicePackFiles\i386\smtpsvc.dll
    - 2004-08-04 07:56:56 131,584 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe
    + 2008-04-14 00:12:36 131,584 ----a-w c:\windows\ServicePackFiles\i386\sndrec32.exe
    - 2004-08-04 07:56:45 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ----a-w c:\windows\ServicePackFiles\i386\sniffpol.dll
    - 2004-08-04 07:56:56 32,768 ------w c:\windows\ServicePackFiles\i386\snmp.exe
    + 2008-04-14 00:12:36 33,280 ----a-w c:\windows\ServicePackFiles\i386\snmp.exe
    - 2004-08-04 07:56:45 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll
    + 2008-04-14 00:12:06 18,944 ----a-w c:\windows\ServicePackFiles\i386\snmpapi.dll
    - 2004-08-04 07:56:45 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll
    + 2008-04-14 00:12:06 259,072 ----a-w c:\windows\ServicePackFiles\i386\snmpcl.dll
    - 2004-08-04 07:56:45 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll
    + 2008-04-14 00:12:06 358,400 ----a-w c:\windows\ServicePackFiles\i386\snmpincl.dll
    - 2004-08-04 07:56:45 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll
    + 2008-04-14 00:12:06 6,144 ----a-w c:\windows\ServicePackFiles\i386\snmpmib.dll
    - 2004-08-04 07:56:45 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll
    + 2008-04-14 00:12:06 188,416 ----a-w c:\windows\ServicePackFiles\i386\snmpsmir.dll
    - 2004-08-04 07:56:45 182,272 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll
    + 2008-04-14 00:12:06 182,272 ----a-w c:\windows\ServicePackFiles\i386\snmpsnap.dll
    - 2004-08-04 07:56:45 40,448 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll
    + 2008-04-14 00:12:06 39,936 ----a-w c:\windows\ServicePackFiles\i386\snmpthrd.dll
    - 2004-08-04 07:56:56 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe
    + 2008-04-14 00:12:36 8,704 ----a-w c:\windows\ServicePackFiles\i386\snmptrap.exe
    - 2004-08-04 07:56:45 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll
    + 2008-04-14 00:12:06 130,048 ----a-w c:\windows\ServicePackFiles\i386\softkbd.dll
    - 2004-08-04 06:00:05 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys
    + 2008-04-13 18:40:52 7,552 ----a-w c:\windows\ServicePackFiles\i386\sonyait.sys
    - 2004-08-04 06:09:55 25,472 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2008-04-13 18:46:07 25,344 ----a-w c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2008-04-14 00:12:36 24,576 ------w c:\windows\ServicePackFiles\i386\sort.exe
    - 2004-08-04 07:56:56 8,192 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
    + 2008-04-14 00:12:36 7,680 ----a-w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
    - 2004-08-04 07:56:29 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll
    + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ServicePackFiles\i386\spgrmr.dll
    - 2004-08-04 07:56:57 538,624 ------w c:\windows\ServicePackFiles\i386\spider.exe
    + 2008-04-14 00:12:36 538,624 ----a-w c:\windows\ServicePackFiles\i386\spider.exe
    - 2004-08-04 06:07:47 6,400 ------w c:\windows\ServicePackFiles\i386\splitter.sys
    + 2008-04-13 18:45:07 6,272 ----a-w c:\windows\ServicePackFiles\i386\splitter.sys
    - 2004-08-04 05:56:58 11,776 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe
    + 2008-04-14 10:42:38 11,264 ----a-w c:\windows\ServicePackFiles\i386\spnpinst.exe
    - 2004-08-04 07:56:45 74,752 ------w c:\windows\ServicePackFiles\i386\spoolss.dll
    + 2008-04-14 00:12:06 75,264 ----a-w c:\windows\ServicePackFiles\i386\spoolss.dll
    - 2004-08-04 07:56:57 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe
    + 2008-04-14 00:12:36 57,856 ----a-w c:\windows\ServicePackFiles\i386\spoolsv.exe
    - 2004-08-04 07:56:29 193,024 ------w c:\windows\ServicePackFiles\i386\spra041b.dll
    + 2008-04-13 18:35:28 192,512 ----a-w c:\windows\ServicePackFiles\i386\spra041b.dll
    - 2004-08-04 07:56:29 192,512 ------w c:\windows\ServicePackFiles\i386\spra0424.dll
    + 2008-04-13 18:35:28 192,512 ----a-w c:\windows\ServicePackFiles\i386\spra0424.dll
    - 2004-08-04 07:56:29 757,248 ------w c:\windows\ServicePackFiles\i386\sprb041b.dll
    + 2008-04-13 18:38:37 757,248 ----a-w c:\windows\ServicePackFiles\i386\sprb041b.dll
    - 2004-08-04 07:56:30 732,160 ------w c:\windows\ServicePackFiles\i386\sprb0424.dll
    + 2008-04-13 18:38:36 732,160 ----a-w c:\windows\ServicePackFiles\i386\sprb0424.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\ServicePackFiles\i386\sprc041b.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\ServicePackFiles\i386\sprc0424.dll
    - 2004-08-04 07:56:45 250,880 ------w c:\windows\ServicePackFiles\i386\sptip.dll
    + 2008-04-14 00:12:06 250,368 ----a-w c:\windows\ServicePackFiles\i386\sptip.dll
    - 2004-08-04 07:56:57 21,504 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe
    + 2008-04-14 00:12:36 20,992 ----a-w c:\windows\ServicePackFiles\i386\spupdwxp.exe
    - 2004-08-04 07:56:45 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ----a-w c:\windows\ServicePackFiles\i386\sqldb20.dll
    - 2004-08-04 07:56:45 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll
    + 2008-04-14 00:12:06 528,384 ----a-w c:\windows\ServicePackFiles\i386\sqloledb.dll
    - 2004-08-04 07:56:45 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ----a-w c:\windows\ServicePackFiles\i386\sqlqp20.dll
    - 2004-08-04 07:56:45 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ----a-w c:\windows\ServicePackFiles\i386\sqlse20.dll
    - 2004-08-04 07:56:45 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
    + 2008-04-14 00:12:06 442,368 ----a-w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
    - 2004-08-04 07:56:45 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll
    + 2008-04-14 00:12:06 180,800 ----a-w c:\windows\ServicePackFiles\i386\sqlunirl.dll
    - 2004-08-04 07:56:45 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
    + 2008-04-14 00:12:06 217,088 ----a-w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
    - 2004-08-04 06:06:25 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys
    + 2008-04-13 18:36:52 73,472 ----a-w c:\windows\ServicePackFiles\i386\sr.sys
    - 2004-08-04 07:56:45 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll
    + 2008-04-14 00:12:06 58,434 ----a-w c:\windows\ServicePackFiles\i386\srchctls.dll
    - 2004-08-04 07:56:45 725,566 ------w c:\windows\ServicePackFiles\i386\srchui.dll
    + 2008-04-14 00:12:07 726,078 ----a-w c:\windows\ServicePackFiles\i386\srchui.dll
    - 2004-08-04 07:56:45 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll
    + 2008-04-14 00:12:07 67,584 ----a-w c:\windows\ServicePackFiles\i386\srclient.dll
    - 2004-08-04 07:56:45 239,104 ------w c:\windows\ServicePackFiles\i386\srrstr.dll
    + 2008-04-14 00:12:07 239,104 ----a-w c:\windows\ServicePackFiles\i386\srrstr.dll
    - 2004-08-04 07:56:45 170,496 ------w c:\windows\ServicePackFiles\i386\srsvc.dll
    + 2008-04-14 00:12:07 171,008 ----a-w c:\windows\ServicePackFiles\i386\srsvc.dll
    - 2004-08-04 06:14:45 336,256 ------w c:\windows\ServicePackFiles\i386\srv.sys
    + 2008-04-13 19:15:11 334,848 ----a-w c:\windows\ServicePackFiles\i386\srv.sys
    - 2004-08-04 07:56:45 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll
    + 2008-04-14 00:12:07 96,768 ----a-w c:\windows\ServicePackFiles\i386\srvsvc.dll
    - 2004-08-04 07:56:57 704,512 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr
    + 2008-04-14 00:12:43 704,512 ----a-w c:\windows\ServicePackFiles\i386\ss3dfo.scr
    - 2004-08-04 07:56:57 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr
    + 2008-04-14 00:12:43 19,968 ----a-w c:\windows\ServicePackFiles\i386\ssbezier.scr
    - 2004-08-04 07:56:45 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll
    + 2008-04-14 00:12:07 34,816 ----a-w c:\windows\ServicePackFiles\i386\ssdpapi.dll
    - 2004-08-04 07:56:45 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    + 2008-04-14 00:12:07 71,680 ----a-w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    - 2004-08-04 07:56:57 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr
    + 2008-04-14 00:12:43 393,216 ----a-w c:\windows\ServicePackFiles\i386\ssflwbox.scr
    - 2004-08-04 07:56:57 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr
    + 2008-04-14 00:12:44 20,992 ----a-w c:\windows\ServicePackFiles\i386\ssmarque.scr
    - 2004-08-04 07:56:57 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr
    + 2008-04-14 00:12:44 47,104 ----a-w c:\windows\ServicePackFiles\i386\ssmypics.scr
    - 2004-08-04 07:56:57 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr
    + 2008-04-14 00:12:44 18,944 ----a-w c:\windows\ServicePackFiles\i386\ssmyst.scr
    - 2004-08-04 07:56:57 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr
    + 2008-04-14 00:12:44 610,304 ----a-w c:\windows\ServicePackFiles\i386\sspipes.scr
    - 2004-08-04 07:56:57 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr
    + 2008-04-14 00:12:44 14,336 ----a-w c:\windows\ServicePackFiles\i386\ssstars.scr
    - 2004-08-04 07:56:57 679,936 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr
    + 2008-04-14 00:12:44 679,936 ----a-w c:\windows\ServicePackFiles\i386\sstext3d.scr
    - 2004-08-04 07:56:45 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll
    + 2008-04-14 00:12:07 33,280 ----a-w c:\windows\ServicePackFiles\i386\sstub.dll
    - 2004-08-04 07:56:45 22,016 ------w c:\windows\ServicePackFiles\i386\startoc.dll
    + 2008-04-14 00:12:07 26,624 ----a-w c:\windows\ServicePackFiles\i386\startoc.dll
    + 2008-04-14 00:12:07 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll
    - 2004-08-04 07:56:45 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll
    + 2008-04-14 00:12:07 86,528 ----a-w c:\windows\ServicePackFiles\i386\stdprov.dll
    - 2004-08-04 07:56:45 67,584 ------w c:\windows\ServicePackFiles\i386\sti.dll
    + 2008-04-14 00:12:07 68,096 ----a-w c:\windows\ServicePackFiles\i386\sti.dll
    - 2004-08-04 07:56:45 136,704 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll
    + 2008-04-14 00:12:07 136,704 ----a-w c:\windows\ServicePackFiles\i386\sti_ci.dll
    - 2004-08-04 07:56:57 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe
    + 2008-04-14 00:12:36 14,848 ----a-w c:\windows\ServicePackFiles\i386\stimon.exe
    - 2004-08-04 07:56:45 121,856 ------w c:\windows\ServicePackFiles\i386\stobject.dll
    + 2008-04-14 00:12:07 121,856 ----a-w c:\windows\ServicePackFiles\i386\stobject.dll
    - 2004-08-04 07:56:45 74,752 ------w c:\windows\ServicePackFiles\i386\storprop.dll
    + 2008-04-14 00:12:07 74,752 ----a-w c:\windows\ServicePackFiles\i386\storprop.dll
    - 2004-08-04 06:08:02 48,640 ------w c:\windows\ServicePackFiles\i386\stream.sys
    + 2008-04-13 18:45:15 49,408 ----a-w c:\windows\ServicePackFiles\i386\stream.sys
    - 2004-08-04 06:10:12 15,360 ------w c:\windows\ServicePackFiles\i386\streamip.sys
    + 2008-04-13 18:46:21 15,232 ----a-w c:\windows\ServicePackFiles\i386\streamip.sys
    - 2004-08-04 07:56:45 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll
    + 2008-04-14 00:12:07 75,776 ----a-w c:\windows\ServicePackFiles\i386\strmfilt.dll
    - 2004-08-04 07:56:57 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2008-04-14 00:12:36 16,449 ----a-w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    - 2004-08-04 07:56:57 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2008-04-14 00:12:36 65,601 ----a-w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    - 2004-08-04 07:56:57 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe
    + 2008-04-14 00:12:36 14,336 ----a-w c:\windows\ServicePackFiles\i386\svchost.exe
    - 2004-08-04 05:58:41 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys
    + 2008-04-13 18:39:53 4,352 ----a-w c:\windows\ServicePackFiles\i386\swenum.sys
    + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys
    - 2004-08-04 07:56:46 713,216 ------w c:\windows\ServicePackFiles\i386\sxs.dll
    + 2008-04-14 00:12:07 713,216 ----a-w c:\windows\ServicePackFiles\i386\sxs.dll
    - 2004-08-04 07:56:46 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll
    + 2008-04-14 00:12:07 57,856 ----a-w c:\windows\ServicePackFiles\i386\synceng.dll
    - 2004-08-04 07:56:46 191,488 ------w c:\windows\ServicePackFiles\i386\syncui.dll
    + 2008-04-14 00:12:07 191,488 ----a-w c:\windows\ServicePackFiles\i386\syncui.dll
    - 2004-08-04 06:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys
    + 2008-04-13 19:15:55 60,800 ----a-w c:\windows\ServicePackFiles\i386\sysaudio.sys
    - 2004-08-04 07:56:46 168,960 ------w c:\windows\ServicePackFiles\i386\sysmod.dll
    + 2008-04-14 00:12:07 193,024 ----a-w c:\windows\ServicePackFiles\i386\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll
    - 2004-08-04 07:56:57 105,984 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe
    + 2008-04-14 00:12:37 106,496 ----a-w c:\windows\ServicePackFiles\i386\sysocmgr.exe
    - 2004-08-04 07:56:46 984,576 ------w c:\windows\ServicePackFiles\i386\syssetup.dll
    + 2008-04-14 00:12:07 990,208 ----a-w c:\windows\ServicePackFiles\i386\syssetup.dll
    - 2004-08-04 07:56:46 210,432 ------w c:\windows\ServicePackFiles\i386\t2embed.dll
    + 2008-04-14 00:12:07 117,760 ----a-w c:\windows\ServicePackFiles\i386\t2embed.dll
    - 2004-08-04 05:59:59 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys
    + 2008-04-13 18:40:50 14,976 ----a-w c:\windows\ServicePackFiles\i386\tape.sys
    - 2004-08-04 07:56:46 858,624 ------w c:\windows\ServicePackFiles\i386\tapi3.dll
    + 2008-04-14 00:12:07 858,624 ----a-w c:\windows\ServicePackFiles\i386\tapi3.dll
    - 2004-08-04 07:56:46 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll
    + 2008-04-14 00:12:07 181,760 ----a-w c:\windows\ServicePackFiles\i386\tapi32.dll
    - 2004-08-04 07:56:46 246,272 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll
    + 2008-04-14 00:12:07 249,856 ----a-w c:\windows\ServicePackFiles\i386\tapisrv.dll
    - 2004-08-04 07:56:57 135,680 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe
    + 2008-04-14 00:12:37 135,680 ----a-w c:\windows\ServicePackFiles\i386\taskmgr.exe
    - 2004-08-04 06:14:40 359,040 ------w c:\windows\ServicePackFiles\i386\tcpip.sys
    + 2008-04-13 19:20:16 361,344 ----a-w c:\windows\ServicePackFiles\i386\tcpip.sys
    - 2004-08-04 06:07:45 223,616 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys
    + 2008-04-13 19:00:02 225,664 ----a-w c:\windows\ServicePackFiles\i386\tcpip6.sys
    - 2004-08-04 07:56:46 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll
    + 2008-04-14 00:12:07 14,848 ----a-w c:\windows\ServicePackFiles\i386\tcpmib.dll
    - 2004-08-04 07:56:46 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ----a-w c:\windows\ServicePackFiles\i386\tcpmon.dll
    - 2004-08-04 07:56:46 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll
    + 2008-04-14 00:12:07 45,568 ----a-w c:\windows\ServicePackFiles\i386\tcpmonui.dll
    - 2004-08-04 07:56:57 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe
    + 2008-04-14 00:12:37 32,827 ----a-w c:\windows\ServicePackFiles\i386\tcptest.exe
    - 2004-08-04 07:56:34 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll
    + 2007-04-02 16:36:07 16,384 ----a-w c:\windows\ServicePackFiles\i386\tcptsat.dll
    - 2004-08-04 06:07:48 18,560 ------w c:\windows\ServicePackFiles\i386\tdi.sys
    + 2008-04-13 19:00:05 19,072 ----a-w c:\windows\ServicePackFiles\i386\tdi.sys
    - 2004-08-04 08:01:07 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys
    + 2008-04-14 00:13:20 12,040 ----a-w c:\windows\ServicePackFiles\i386\tdpipe.sys
    - 2004-08-04 08:01:07 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys
    + 2008-04-14 00:13:21 21,896 ----a-w c:\windows\ServicePackFiles\i386\tdtcp.sys
    - 2004-08-04 07:56:57 75,264 ------w c:\windows\ServicePackFiles\i386\telnet.exe
    + 2008-04-14 00:12:37 75,776 ----a-w c:\windows\ServicePackFiles\i386\telnet.exe
    - 2004-08-04 08:01:07 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys
    + 2008-04-14 00:13:20 40,840 ----a-w c:\windows\ServicePackFiles\i386\termdd.sys
    - 2004-08-04 07:56:46 358,400 ------w c:\windows\ServicePackFiles\i386\termmgr.dll
    + 2008-04-14 00:12:07 358,400 ----a-w c:\windows\ServicePackFiles\i386\termmgr.dll
    - 2004-08-04 07:56:46 295,424 ------w c:\windows\ServicePackFiles\i386\termsrv.dll
    + 2008-04-14 00:12:07 295,424 ----a-w c:\windows\ServicePackFiles\i386\termsrv.dll
    - 2004-08-04 06:00:04 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys
    + 2008-04-13 18:40:50 149,376 ----a-w c:\windows\ServicePackFiles\i386\tffsport.sys
    - 2004-08-04 07:56:46 385,536 ------w c:\windows\ServicePackFiles\i386\themeui.dll
    + 2008-04-14 00:12:07 385,536 ----a-w c:\windows\ServicePackFiles\i386\themeui.dll
    - 2004-08-04 07:56:57 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe
    + 2008-04-14 00:12:38 347,136 ----a-w c:\windows\ServicePackFiles\i386\tourstrt.exe
    - 2004-08-04 07:56:57 82,432 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe
    + 2008-04-14 00:12:38 82,944 ----a-w c:\windows\ServicePackFiles\i386\tp4mon.exe
    - 2004-08-04 07:56:57 12,288 ------w c:\windows\ServicePackFiles\i386\tracert.exe
    + 2008-04-14 00:12:38 12,288 ----a-w c:\windows\ServicePackFiles\i386\tracert.exe
    + 2008-04-14 00:12:42 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com
    - 2004-08-04 07:56:46 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll
    + 2008-04-14 00:12:07 153,088 ----a-w c:\windows\ServicePackFiles\i386\triedit.dll
    - 2004-08-04 07:56:46 90,624 ------w c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2008-04-14 00:12:07 90,112 ----a-w c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat
    - 2004-08-04 07:56:46 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2008-04-14 00:12:07 93,696 ----a-w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll
    - 2004-08-04 08:01:07 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2008-04-14 00:13:21 12,168 ----a-w c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll
    - 2004-08-04 07:56:46 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ----a-w c:\windows\ServicePackFiles\i386\tshoot.dll
    - 2004-08-04 07:56:46 121,856 ------w c:\windows\ServicePackFiles\i386\tsoc.dll
    + 2008-04-14 00:12:07 130,048 ----a-w c:\windows\ServicePackFiles\i386\tsoc.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll
    - 2004-08-04 07:56:46 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll
    + 2008-04-14 00:12:07 8,704 ----a-w c:\windows\ServicePackFiles\i386\tty.dll
    - 2004-08-04 07:56:34 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll
    + 2007-04-02 15:31:00 39,936 ----a-w c:\windows\ServicePackFiles\i386\ttyres.dll
    - 2004-08-04 07:56:46 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll
    + 2008-04-14 00:12:07 16,384 ----a-w c:\windows\ServicePackFiles\i386\ttyui.dll
    - 2004-08-04 06:03:17 12,416 ------w c:\windows\ServicePackFiles\i386\tunmp.sys
    + 2008-04-13 18:56:01 12,288 ----a-w c:\windows\ServicePackFiles\i386\tunmp.sys
    - 2004-08-04 07:56:46 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll
    + 2008-04-14 00:12:07 50,688 ----a-w c:\windows\ServicePackFiles\i386\twain_32.dll
    - 2004-08-04 07:56:46 44,032 ------w c:\windows\ServicePackFiles\i386\twext.dll
    + 2008-04-14 00:12:07 57,856 ----a-w c:\windows\ServicePackFiles\i386\twext.dll
    - 2004-08-04 07:56:46 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll
    + 2008-04-14 00:12:07 101,376 ----a-w c:\windows\ServicePackFiles\i386\txflog.dll
    + 2008-04-14 00:12:38 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe
    - 2004-08-04 06:07:43 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys
    + 2008-04-13 18:36:40 44,672 ----a-w c:\windows\ServicePackFiles\i386\uagp35.sys
    - 2004-08-04 06:00:31 66,176 ------w c:\windows\ServicePackFiles\i386\udfs.sys
    + 2008-04-13 18:32:36 66,048 ----a-w c:\windows\ServicePackFiles\i386\udfs.sys
    - 2004-08-04 07:56:46 25,600 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll
    + 2008-04-14 00:12:07 26,624 ----a-w c:\windows\ServicePackFiles\i386\udhisapi.dll
    - 2004-08-04 07:56:46 275,456 ------w c:\windows\ServicePackFiles\i386\ulib.dll
    + 2008-04-14 00:12:07 275,456 ----a-w c:\windows\ServicePackFiles\i386\ulib.dll
    - 2004-08-04 07:56:46 35,840 ------w c:\windows\ServicePackFiles\i386\umandlg.dll
    + 2008-04-14 00:12:07 35,840 ----a-w c:\windows\ServicePackFiles\i386\umandlg.dll
    - 2004-08-04 07:56:46 118,272 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
    + 2008-04-14 00:12:07 123,392 ----a-w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
    - 2004-08-04 07:56:46 264,704 ------w c:\windows\ServicePackFiles\i386\unidrv.dll
    + 2008-04-14 00:12:07 373,248 ----a-w c:\windows\ServicePackFiles\i386\unidrv.dll
    - 2004-08-04 07:56:46 197,120 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll
    + 2008-04-14 00:12:07 744,448 ----a-w c:\windows\ServicePackFiles\i386\unidrvui.dll
    - 2004-08-04 07:56:46 74,240 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll
    + 2008-04-14 00:12:07 74,240 ----a-w c:\windows\ServicePackFiles\i386\unimdmat.dll
    - 2004-08-04 07:56:46 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll
    + 2008-04-14 00:12:07 13,824 ----a-w c:\windows\ServicePackFiles\i386\uniplat.dll
    - 2004-08-04 07:56:34 619,520 ------w c:\windows\ServicePackFiles\i386\unires.dll
    + 2007-05-15 08:08:53 761,344 ----a-w c:\windows\ServicePackFiles\i386\unires.dll
    - 2004-08-04 07:56:46 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll
    + 2008-04-14 00:12:07 316,416 ----a-w c:\windows\ServicePackFiles\i386\untfs.dll
    - 2004-08-04 05:58:32 209,408 ------w c:\windows\ServicePackFiles\i386\update.sys
    + 2008-04-13 18:39:46 384,768 ----a-w c:\windows\ServicePackFiles\i386\update.sys
    - 2004-08-04 07:56:57 150,528 ------w c:\windows\ServicePackFiles\i386\uploadm.exe
    + 2008-04-14 00:12:38 150,528 ----a-w c:\windows\ServicePackFiles\i386\uploadm.exe
    - 2004-08-04 07:56:46 132,608 ------w c:\windows\ServicePackFiles\i386\upnp.dll
    + 2008-04-14 00:12:08 133,632 ----a-w c:\windows\ServicePackFiles\i386\upnp.dll
    - 2004-08-04 07:56:57 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe
    + 2008-04-14 00:12:38 16,896 ----a-w c:\windows\ServicePackFiles\i386\upnpcont.exe
    - 2004-08-04 07:56:46 185,344 ------w c:\windows\ServicePackFiles\i386\upnphost.dll
    + 2008-04-14 00:12:08 185,856 ----a-w c:\windows\ServicePackFiles\i386\upnphost.dll
    - 2004-08-04 07:56:46 239,616 ------w c:\windows\ServicePackFiles\i386\upnpui.dll
    + 2008-04-14 00:12:08 239,616 ----a-w c:\windows\ServicePackFiles\i386\upnpui.dll
    - 2004-08-04 07:56:57 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe
    + 2008-04-14 00:12:38 18,432 ----a-w c:\windows\ServicePackFiles\i386\ups.exe
    - 2004-08-04 07:56:46 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll
    + 2008-04-14 00:12:08 37,888 ----a-w c:\windows\ServicePackFiles\i386\url.dll
    - 2004-08-04 07:56:46 601,088 ------w c:\windows\ServicePackFiles\i386\urlmon.dll
    + 2008-04-14 00:12:08 619,520 ----a-w c:\windows\ServicePackFiles\i386\urlmon.dll
    - 2004-08-04 06:04:32 12,672 ------w c:\windows\ServicePackFiles\i386\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ----a-w c:\windows\ServicePackFiles\i386\usb8023.sys
    - 2004-08-04 06:04:33 12,672 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys
    + 2008-04-13 18:56:49 12,800 ----a-w c:\windows\ServicePackFiles\i386\usb8023x.sys
    - 2004-08-04 06:07:55 59,264 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2008-04-13 18:45:12 60,032 ----a-w c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys
    + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys
    - 2004-08-04 06:08:46 31,616 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2008-04-13 18:45:39 32,128 ----a-w c:\windows\ServicePackFiles\i386\usbccgp.sys
    - 2004-08-04 06:08:37 26,624 ------w c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2008-04-13 18:45:35 30,208 ----a-w c:\windows\ServicePackFiles\i386\usbehci.sys
    - 2004-08-04 06:08:42 57,600 ------w c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2008-04-13 18:45:37 59,520 ----a-w c:\windows\ServicePackFiles\i386\usbhub.sys
    - 2004-08-04 06:08:57 16,000 ------w c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2008-04-13 18:45:43 15,872 ----a-w c:\windows\ServicePackFiles\i386\usbintel.sys
    - 2004-08-04 07:56:46 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2008-04-14 00:12:08 16,896 ----a-w c:\windows\ServicePackFiles\i386\usbmon.dll
    - 2004-08-04 06:08:36 17,024 ------w c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2008-04-13 18:45:35 17,152 ----a-w c:\windows\ServicePackFiles\i386\usbohci.sys
    - 2004-08-04 06:08:42 142,976 ------w c:\windows\ServicePackFiles\i386\usbport.sys
    + 2008-04-13 18:45:36 143,872 ----a-w c:\windows\ServicePackFiles\i386\usbport.sys
    - 2004-08-04 06:01:24 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2008-04-13 18:47:37 25,856 ----a-w c:\windows\ServicePackFiles\i386\usbprint.sys
     
    FLYNDAGGER,
    #14
  16. 2008/11/30
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    You can skip the rest of the snapshot section and post the remainder of the log that follows it.
     
    noahdfear,
    #15
  17. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    - 2004-08-04 05:58:45 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2008-04-13 18:45:34 15,104 ----a-w c:\windows\ServicePackFiles\i386\usbscan.sys
    - 2004-08-04 06:08:42 25,600 ------w c:\windows\ServicePackFiles\i386\usbser.sys
    + 2008-04-13 18:45:36 26,112 ----a-w c:\windows\ServicePackFiles\i386\usbser.sys
    - 2004-08-04 06:08:46 26,496 ------w c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2008-04-13 18:45:38 26,368 ----a-w c:\windows\ServicePackFiles\i386\usbstor.sys
    - 2004-08-04 06:08:37 20,480 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys
    + 2008-04-13 18:45:35 20,608 ----a-w c:\windows\ServicePackFiles\i386\usbuhci.sys
    - 2004-08-04 07:56:46 74,240 ------w c:\windows\ServicePackFiles\i386\usbui.dll
    + 2008-04-14 00:12:08 74,240 ----a-w c:\windows\ServicePackFiles\i386\usbui.dll
    - 2004-08-04 06:10:10 78,464 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys
    + 2008-04-13 18:46:20 121,984 ----a-w c:\windows\ServicePackFiles\i386\usbvideo.sys
    - 2004-08-04 07:56:46 577,024 ------w c:\windows\ServicePackFiles\i386\user32.dll
    + 2008-04-14 00:12:08 578,560 ----a-w c:\windows\ServicePackFiles\i386\user32.dll
    - 2004-08-04 07:56:46 723,456 ------w c:\windows\ServicePackFiles\i386\userenv.dll
    + 2008-04-14 00:12:08 727,040 ----a-w c:\windows\ServicePackFiles\i386\userenv.dll
    - 2004-08-04 07:56:57 24,576 ------w c:\windows\ServicePackFiles\i386\userinit.exe
    + 2008-04-14 00:12:38 26,112 ----a-w c:\windows\ServicePackFiles\i386\userinit.exe
    - 2004-08-04 07:56:46 406,528 ------w c:\windows\ServicePackFiles\i386\usp10.dll
    + 2008-04-14 00:12:08 406,016 ----a-w c:\windows\ServicePackFiles\i386\usp10.dll
    - 2004-08-04 07:56:57 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe
    + 2008-04-14 00:12:38 50,176 ----a-w c:\windows\ServicePackFiles\i386\utilman.exe
    - 2004-08-04 07:56:46 218,624 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll
    + 2008-04-14 00:12:08 218,624 ----a-w c:\windows\ServicePackFiles\i386\uxtheme.dll
    - 2004-08-04 07:56:46 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2008-04-14 00:12:08 30,749 ----a-w c:\windows\ServicePackFiles\i386\vbajet32.dll
    - 2004-08-04 07:56:46 417,792 ------w c:\windows\ServicePackFiles\i386\vbscript.dll
    + 2008-04-14 00:12:08 434,176 ----a-w c:\windows\ServicePackFiles\i386\vbscript.dll
    - 2004-08-04 07:56:46 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2008-04-14 00:12:08 11,325 ----a-w c:\windows\ServicePackFiles\i386\vchnt5.dll
    - 2004-08-04 07:56:46 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2008-04-14 00:12:08 26,112 ----a-w c:\windows\ServicePackFiles\i386\vdmdbg.dll
    - 2004-08-04 07:56:46 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 00:12:08 51,712 ----a-w c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 00:12:38 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2008-04-14 00:12:08 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll
    - 2004-08-04 07:56:46 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\ServicePackFiles\i386\version.dll
    - 2004-08-04 07:56:46 53,760 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2008-04-14 00:12:08 53,760 ----a-w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    - 2004-08-04 06:07:06 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys
    + 2008-04-13 18:44:40 20,992 ----a-w c:\windows\ServicePackFiles\i386\vga.sys
    - 2004-08-04 07:56:46 848,384 ------w c:\windows\ServicePackFiles\i386\vgx.dll
    + 2008-04-14 00:12:08 851,968 ----a-w c:\windows\ServicePackFiles\i386\vgx.dll
    - 2004-08-04 06:07:42 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2008-04-13 18:36:40 42,240 ----a-w c:\windows\ServicePackFiles\i386\viaagp.sys
    - 2004-08-04 05:59:42 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys
    + 2008-04-13 18:40:31 5,376 ----a-w c:\windows\ServicePackFiles\i386\viaide.sys
    - 2004-08-04 06:07:05 79,744 ------w c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2008-04-13 18:44:40 81,664 ----a-w c:\windows\ServicePackFiles\i386\videoprt.sys
    - 2004-08-04 07:56:46 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll
    + 2008-04-14 00:12:08 131,584 ----a-w c:\windows\ServicePackFiles\i386\viewprov.dll
    - 2004-08-04 06:00:16 52,352 ------w c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2008-04-13 18:41:01 52,352 ----a-w c:\windows\ServicePackFiles\i386\volsnap.sys
    - 2004-08-04 07:56:46 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll
    + 2008-04-14 00:12:08 430,592 ----a-w c:\windows\ServicePackFiles\i386\vssapi.dll
    - 2004-08-04 07:56:57 289,792 ------w c:\windows\ServicePackFiles\i386\vssvc.exe
    + 2008-04-14 00:12:38 289,792 ----a-w c:\windows\ServicePackFiles\i386\vssvc.exe
    - 2004-08-04 07:56:46 174,592 ------w c:\windows\ServicePackFiles\i386\w32time.dll
    + 2008-04-14 00:12:08 175,104 ----a-w c:\windows\ServicePackFiles\i386\w32time.dll
    - 2004-08-04 07:56:46 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2008-04-14 00:12:08 15,872 ----a-w c:\windows\ServicePackFiles\i386\w3ssl.dll
    - 2004-08-04 07:56:46 483,840 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll
    + 2008-04-14 00:12:08 483,840 ----a-w c:\windows\ServicePackFiles\i386\w95upgnt.dll
    - 2004-08-04 07:56:57 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe
    + 2008-04-14 00:12:38 46,080 ----a-w c:\windows\ServicePackFiles\i386\wab.exe
    - 2004-08-04 07:56:46 504,832 ------w c:\windows\ServicePackFiles\i386\wab32.dll
    + 2008-04-14 00:12:08 510,976 ----a-w c:\windows\ServicePackFiles\i386\wab32.dll
    - 2004-08-04 07:56:34 249,856 ------w c:\windows\ServicePackFiles\i386\wab32res.dll
    + 2008-04-13 16:21:48 249,856 ----a-w c:\windows\ServicePackFiles\i386\wab32res.dll
    - 2004-08-04 07:56:46 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2008-04-14 00:12:08 32,768 ----a-w c:\windows\ServicePackFiles\i386\wabfind.dll
    - 2004-08-04 07:56:46 84,992 ------w c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2008-04-14 00:12:08 85,504 ----a-w c:\windows\ServicePackFiles\i386\wabimp.dll
    - 2004-08-04 07:56:57 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2008-04-14 00:12:39 30,208 ----a-w c:\windows\ServicePackFiles\i386\wabmig.exe
    - 2004-08-04 06:04:52 13,568 ------w c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2008-04-13 18:43:55 14,208 ----a-w c:\windows\ServicePackFiles\i386\wacompen.sys
    - 2004-08-04 06:04:57 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2008-04-13 18:57:21 34,560 ----a-w c:\windows\ServicePackFiles\i386\wanarp.sys
    - 2004-08-04 06:07:32 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2008-04-13 18:44:59 17,664 ----a-w c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2008-04-14 00:12:08 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll
    - 2004-08-04 07:56:46 196,608 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll
    + 2008-04-14 00:12:08 196,608 ----a-w c:\windows\ServicePackFiles\i386\wbemcntl.dll
    - 2004-08-04 07:56:46 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll
    + 2008-04-14 00:12:08 214,528 ----a-w c:\windows\ServicePackFiles\i386\wbemcomn.dll
    - 2004-08-04 07:56:46 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2008-04-14 00:12:08 71,680 ----a-w c:\windows\ServicePackFiles\i386\wbemcons.dll
    - 2004-08-04 07:56:46 530,944 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll
    + 2008-04-14 00:12:08 531,456 ----a-w c:\windows\ServicePackFiles\i386\wbemcore.dll
    - 2004-08-04 07:56:46 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll
    + 2008-04-14 00:12:08 178,176 ----a-w c:\windows\ServicePackFiles\i386\wbemdisp.dll
    - 2004-08-04 07:56:46 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll
    + 2008-04-14 00:12:08 273,920 ----a-w c:\windows\ServicePackFiles\i386\wbemess.dll
    - 2004-08-04 07:56:46 43,008 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2008-04-14 00:12:08 43,008 ----a-w c:\windows\ServicePackFiles\i386\wbemperf.dll
    - 2004-08-04 07:56:46 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2008-04-14 00:12:08 18,944 ----a-w c:\windows\ServicePackFiles\i386\wbemprox.dll
    - 2004-08-04 07:56:46 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2008-04-14 00:12:08 43,520 ----a-w c:\windows\ServicePackFiles\i386\wbemsvc.dll
    - 2004-08-04 07:56:57 116,224 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe
    + 2008-04-14 00:12:39 116,224 ----a-w c:\windows\ServicePackFiles\i386\wbemtest.exe
    - 2004-08-04 07:56:46 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll
    + 2008-04-14 00:12:08 197,120 ----a-w c:\windows\ServicePackFiles\i386\wbemupgd.dll
    - 2004-08-04 06:08:46 31,744 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2008-04-13 18:45:38 31,744 ----a-w c:\windows\ServicePackFiles\i386\wceusbsh.sys
    - 2004-08-04 07:56:46 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-04-14 00:12:08 49,152 ----a-w c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-04-14 00:12:45 23,552 ----a-w c:\windows\ServicePackFiles\i386\wdmaud.drv
    - 2004-08-04 06:15:04 82,944 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2008-04-13 19:17:18 83,072 ----a-w c:\windows\ServicePackFiles\i386\wdmaud.sys
    - 2004-08-04 07:56:46 276,480 ------w c:\windows\ServicePackFiles\i386\webcheck.dll
    + 2008-04-14 00:12:08 276,480 ----a-w c:\windows\ServicePackFiles\i386\webcheck.dll
    - 2004-08-04 07:56:46 67,584 ------w c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2008-04-14 00:12:08 68,096 ----a-w c:\windows\ServicePackFiles\i386\webclnt.dll
    - 2004-08-04 07:56:46 135,680 ------w c:\windows\ServicePackFiles\i386\webvw.dll
    + 2008-04-14 00:12:08 135,680 ----a-w c:\windows\ServicePackFiles\i386\webvw.dll
    - 2004-08-04 07:56:57 65,536 ------w c:\windows\ServicePackFiles\i386\wextract.exe
    + 2008-04-14 00:12:39 65,024 ----a-w c:\windows\ServicePackFiles\i386\wextract.exe
    - 2004-08-04 07:56:57 433,664 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
    + 2008-04-14 00:12:39 433,664 ----a-w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
    - 2004-08-04 07:56:46 463,360 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll
    + 2008-04-14 00:12:08 463,360 ----a-w c:\windows\ServicePackFiles\i386\wiadefui.dll
    - 2004-08-04 07:56:46 124,416 ------w c:\windows\ServicePackFiles\i386\wiadss.dll
    + 2008-04-14 00:12:08 124,416 ----a-w c:\windows\ServicePackFiles\i386\wiadss.dll
    - 2004-08-04 07:56:46 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2008-04-14 00:12:08 75,776 ----a-w c:\windows\ServicePackFiles\i386\wiascr.dll
    - 2004-08-04 07:56:46 333,312 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll
    + 2008-04-14 00:12:08 333,824 ----a-w c:\windows\ServicePackFiles\i386\wiaservc.dll
    - 2004-08-04 07:56:46 589,312 ------w c:\windows\ServicePackFiles\i386\wiashext.dll
    + 2008-04-14 00:12:08 589,312 ----a-w c:\windows\ServicePackFiles\i386\wiashext.dll
    - 2004-08-04 07:56:46 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll
    + 2008-04-14 00:12:08 111,104 ----a-w c:\windows\ServicePackFiles\i386\wiavideo.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll
    - 2004-08-04 06:17:40 1,835,904 ------w c:\windows\ServicePackFiles\i386\win32k.sys
    + 2008-04-13 19:30:10 1,845,632 ----a-w c:\windows\ServicePackFiles\i386\win32k.sys
    - 2004-08-04 07:56:46 101,888 ------w c:\windows\ServicePackFiles\i386\win32spl.dll
    + 2008-04-14 00:12:08 102,400 ----a-w c:\windows\ServicePackFiles\i386\win32spl.dll
    - 2004-08-04 07:56:35 937,984 ------w c:\windows\ServicePackFiles\i386\winbrand.dll
    + 2008-04-13 16:48:53 1,647,616 ----a-w c:\windows\ServicePackFiles\i386\winbrand.dll
    - 2004-08-04 07:56:57 283,648 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe
    + 2008-04-14 00:12:39 283,648 ----a-w c:\windows\ServicePackFiles\i386\winhlp32.exe
    - 2004-08-04 07:56:46 351,232 ------w c:\windows\ServicePackFiles\i386\winhttp.dll
    + 2008-04-14 00:12:08 354,304 ----a-w c:\windows\ServicePackFiles\i386\winhttp.dll
    - 2004-08-04 07:56:46 656,384 ------w c:\windows\ServicePackFiles\i386\wininet.dll
    + 2008-04-14 00:12:08 666,112 ----a-w c:\windows\ServicePackFiles\i386\wininet.dll
    - 2004-08-04 07:56:46 32,768 ------w c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2008-04-14 00:12:09 32,256 ----a-w c:\windows\ServicePackFiles\i386\winipsec.dll
    - 2004-08-04 07:56:57 502,272 ------w c:\windows\ServicePackFiles\i386\winlogon.exe
    + 2008-04-14 00:12:39 507,904 ----a-w c:\windows\ServicePackFiles\i386\winlogon.exe
    - 2004-08-04 07:56:46 176,128 ------w c:\windows\ServicePackFiles\i386\winmm.dll
    + 2008-04-14 00:12:09 176,128 ----a-w c:\windows\ServicePackFiles\i386\winmm.dll
    - 2004-08-04 07:56:35 764,928 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll
    + 2008-04-14 00:11:11 756,224 ----a-w c:\windows\ServicePackFiles\i386\winntbbu.dll
    - 2004-08-04 07:56:46 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2008-04-14 00:12:09 16,896 ----a-w c:\windows\ServicePackFiles\i386\winrnr.dll
    - 2004-08-04 07:56:46 99,328 ------w c:\windows\ServicePackFiles\i386\winscard.dll
    + 2008-04-14 00:12:09 99,328 ----a-w c:\windows\ServicePackFiles\i386\winscard.dll
    - 2004-08-04 07:56:46 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 00:12:09 17,408 ----a-w c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\ServicePackFiles\i386\winspool.drv
    - 2004-08-04 07:56:46 290,816 ------w c:\windows\ServicePackFiles\i386\winsrv.dll
    + 2008-04-14 00:12:09 293,376 ----a-w c:\windows\ServicePackFiles\i386\winsrv.dll
    - 2004-08-04 07:56:46 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll
    + 2008-04-14 00:12:09 53,760 ----a-w c:\windows\ServicePackFiles\i386\winsta.dll
    - 2004-08-04 07:56:46 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll
    + 2008-04-14 00:12:09 176,640 ----a-w c:\windows\ServicePackFiles\i386\wintrust.dll
    - 2004-08-04 07:56:57 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe
    + 2008-04-14 00:12:40 5,632 ----a-w c:\windows\ServicePackFiles\i386\winver.exe
    - 2004-08-04 07:56:46 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll
    + 2008-04-14 00:12:09 132,096 ----a-w c:\windows\ServicePackFiles\i386\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll
    - 2004-08-04 07:56:46 172,032 ------w c:\windows\ServicePackFiles\i386\wldap32.dll
    + 2008-04-14 00:12:09 172,032 ----a-w c:\windows\ServicePackFiles\i386\wldap32.dll
    - 2004-08-04 07:56:46 92,672 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2008-04-14 00:12:09 92,672 ----a-w c:\windows\ServicePackFiles\i386\wlnotify.dll
    - 2004-08-04 07:56:35 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll
    + 2008-04-14 00:11:15 5,632 ----a-w c:\windows\ServicePackFiles\i386\wmi.dll
    - 2004-08-04 06:07:41 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys
    + 2008-04-13 18:36:38 8,832 ----a-w c:\windows\ServicePackFiles\i386\wmiacpi.sys
    - 2004-08-04 07:56:57 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe
    + 2008-04-14 00:12:40 196,608 ----a-w c:\windows\ServicePackFiles\i386\wmiadap.exe
    - 2004-08-04 07:56:35 6,656 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll
    + 2008-04-13 17:10:20 6,656 ----a-w c:\windows\ServicePackFiles\i386\wmiapres.dll
    - 2004-08-04 07:56:46 89,088 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2008-04-14 00:12:09 88,576 ----a-w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    - 2004-08-04 07:56:57 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
    + 2008-04-14 00:12:40 126,464 ----a-w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
    - 2004-08-04 07:56:46 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2008-04-14 00:12:09 60,928 ----a-w c:\windows\ServicePackFiles\i386\wmicookr.dll
    - 2004-08-04 07:56:46 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll
    + 2008-04-14 00:12:09 140,800 ----a-w c:\windows\ServicePackFiles\i386\wmidcprv.dll
    - 2004-08-04 07:56:46 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll
    + 2008-04-14 00:12:09 156,672 ----a-w c:\windows\ServicePackFiles\i386\wmipcima.dll
    - 2004-08-04 07:56:46 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll
    + 2008-04-14 00:12:09 132,096 ----a-w c:\windows\ServicePackFiles\i386\wmipdskq.dll
    - 2004-08-04 07:56:46 62,464 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2008-04-14 00:12:09 61,952 ----a-w c:\windows\ServicePackFiles\i386\wmipiprt.dll
    - 2004-08-04 07:56:46 62,976 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2008-04-14 00:12:09 62,464 ----a-w c:\windows\ServicePackFiles\i386\wmipjobj.dll
    - 2004-08-04 07:56:46 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\ServicePackFiles\i386\wmiprov.dll
    - 2004-08-04 07:56:46 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
    + 2008-04-14 00:12:09 437,248 ----a-w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
    - 2004-08-04 07:56:57 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe
    + 2008-04-14 00:12:40 218,112 ----a-w c:\windows\ServicePackFiles\i386\wmiprvse.exe
    - 2004-08-04 07:56:46 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2008-04-14 00:12:09 41,472 ----a-w c:\windows\ServicePackFiles\i386\wmipsess.dll
    - 2004-08-04 07:56:46 144,896 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll
    + 2008-04-14 00:12:09 144,896 ----a-w c:\windows\ServicePackFiles\i386\wmisvc.dll
    - 2004-08-04 07:56:46 95,232 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2008-04-14 00:12:09 95,232 ----a-w c:\windows\ServicePackFiles\i386\wmiutils.dll
    - 2004-08-04 07:56:46 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll
    + 2008-04-14 00:12:09 167,936 ----a-w c:\windows\ServicePackFiles\i386\wmm2ae.dll
    - 2004-08-04 07:56:46 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll
    + 2008-04-14 00:12:09 4,096 ----a-w c:\windows\ServicePackFiles\i386\wmm2eres.dll
    - 2004-08-04 07:56:46 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll
    + 2008-04-14 00:12:09 7,680 ----a-w c:\windows\ServicePackFiles\i386\wmm2ext.dll
    - 2004-08-04 07:56:46 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll
    + 2008-04-14 00:12:09 402,432 ----a-w c:\windows\ServicePackFiles\i386\wmm2filt.dll
    - 2004-08-04 07:56:46 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
    + 2008-04-14 00:12:09 502,272 ----a-w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
    - 2004-08-04 07:56:46 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
    + 2008-04-14 00:12:09 325,632 ----a-w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
    - 2004-08-04 07:56:46 4,256,768 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll
    + 2008-04-14 00:12:09 4,256,768 ----a-w c:\windows\ServicePackFiles\i386\wmm2res.dll
    - 2004-08-04 07:56:46 5,632 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll
    + 2008-04-14 00:12:09 5,632 ----a-w c:\windows\ServicePackFiles\i386\wmm2res2.dll
    + 2008-04-14 00:12:09 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll
    - 2004-08-04 07:56:57 214,528 ------w c:\windows\ServicePackFiles\i386\wordpad.exe
    + 2008-04-14 00:12:40 214,528 ----a-w c:\windows\ServicePackFiles\i386\wordpad.exe
    - 2004-08-04 07:56:46 264,192 ------w c:\windows\ServicePackFiles\i386\wow32.dll
    + 2008-04-14 00:12:10 264,192 ----a-w c:\windows\ServicePackFiles\i386\wow32.dll
    - 2004-08-04 07:56:57 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2008-04-14 00:12:40 32,256 ----a-w c:\windows\ServicePackFiles\i386\wpabaln.exe
    - 2004-08-04 07:56:57 32,256 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2008-04-14 00:12:41 11,264 ----a-w c:\windows\ServicePackFiles\i386\wpnpinst.exe
    - 2004-08-04 07:56:46 82,944 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2008-04-14 00:12:10 82,432 ----a-w c:\windows\ServicePackFiles\i386\ws2_32.dll
    - 2004-08-04 07:56:46 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2008-04-14 00:12:10 19,968 ----a-w c:\windows\ServicePackFiles\i386\ws2help.dll
    - 2004-08-04 07:56:57 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2008-04-14 00:12:41 13,824 ----a-w c:\windows\ServicePackFiles\i386\wscntfy.exe
    - 2004-08-04 07:56:57 114,688 ------w c:\windows\ServicePackFiles\i386\wscript.exe
    + 2008-04-14 00:12:41 155,648 ----a-w c:\windows\ServicePackFiles\i386\wscript.exe
    - 2004-08-04 07:56:46 81,408 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2008-04-14 00:12:10 80,896 ----a-w c:\windows\ServicePackFiles\i386\wscsvc.dll
    - 2004-08-04 07:56:46 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll
    + 2008-04-14 00:12:10 108,032 ----a-w c:\windows\ServicePackFiles\i386\wshbth.dll
    - 2004-08-04 07:56:46 28,672 ------w c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2008-04-14 00:12:10 36,864 ----a-w c:\windows\ServicePackFiles\i386\wshcon.dll
    - 2004-08-04 07:56:46 65,536 ------w c:\windows\ServicePackFiles\i386\wshext.dll
    + 2008-04-14 00:12:10 90,112 ----a-w c:\windows\ServicePackFiles\i386\wshext.dll
    - 2004-08-04 07:56:46 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll
    + 2008-04-14 00:12:10 14,336 ----a-w c:\windows\ServicePackFiles\i386\wship6.dll
    - 2004-08-04 07:56:46 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll
    + 2008-04-14 00:12:10 8,192 ----a-w c:\windows\ServicePackFiles\i386\wshirda.dll
    - 2004-08-04 07:56:46 11,776 ------w c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2008-04-14 00:12:10 11,264 ----a-w c:\windows\ServicePackFiles\i386\wshrm.dll
    - 2004-08-04 07:56:46 19,968 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2008-04-14 00:12:10 19,456 ----a-w c:\windows\ServicePackFiles\i386\wshtcpip.dll
    - 2004-08-04 07:56:46 42,496 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2008-04-14 00:12:10 41,984 ----a-w c:\windows\ServicePackFiles\i386\wsnmp32.dll
    - 2004-08-04 07:56:46 22,528 ------w c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2008-04-14 00:12:10 22,528 ----a-w c:\windows\ServicePackFiles\i386\wsock32.dll
    - 2004-08-04 06:10:21 19,328 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2008-04-13 18:46:24 19,200 ----a-w c:\windows\ServicePackFiles\i386\wstcodec.sys
    - 2004-08-04 07:56:46 50,688 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2008-04-14 00:12:10 50,688 ----a-w c:\windows\ServicePackFiles\i386\wstdecod.dll
    - 2004-08-04 07:56:46 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2008-04-14 00:12:10 18,432 ----a-w c:\windows\ServicePackFiles\i386\wtsapi32.dll
    - 2004-08-04 07:56:46 430,592 ------w c:\windows\ServicePackFiles\i386\wuapi.dll
    + 2008-04-14 00:12:10 430,592 ----a-w c:\windows\ServicePackFiles\i386\wuapi.dll
    - 2004-08-04 07:56:57 111,104 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe
    + 2008-04-14 00:12:41 111,104 ----a-w c:\windows\ServicePackFiles\i386\wuauclt.exe
    - 2004-08-04 07:56:57 165,888 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe
    + 2008-04-14 00:12:41 165,888 ----a-w c:\windows\ServicePackFiles\i386\wuauclt1.exe
    - 2004-08-04 07:56:46 1,134,592 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll
    + 2008-04-14 00:12:11 1,135,616 ----a-w c:\windows\ServicePackFiles\i386\wuaueng.dll
    - 2004-08-04 07:56:46 183,296 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll
    + 2008-04-14 00:12:11 183,296 ----a-w c:\windows\ServicePackFiles\i386\wuaueng1.dll
    - 2004-08-04 07:56:46 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll
    + 2008-04-14 00:12:11 6,656 ----a-w c:\windows\ServicePackFiles\i386\wuauserv.dll
    - 2004-08-04 07:56:46 112,640 ------w c:\windows\ServicePackFiles\i386\wucltui.dll
    + 2008-04-14 00:12:11 112,640 ----a-w c:\windows\ServicePackFiles\i386\wucltui.dll
    - 2004-08-04 07:56:46 36,864 ------w c:\windows\ServicePackFiles\i386\wups.dll
    + 2008-04-14 00:12:11 32,256 ----a-w c:\windows\ServicePackFiles\i386\wups.dll
    - 2004-08-04 07:56:46 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll
    + 2008-04-14 00:12:11 120,320 ----a-w c:\windows\ServicePackFiles\i386\wuweb.dll
    - 2004-08-04 07:56:46 378,368 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll
    + 2008-04-14 00:12:11 383,488 ----a-w c:\windows\ServicePackFiles\i386\wzcdlg.dll
    - 2004-08-04 07:56:46 51,712 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2008-04-14 00:12:11 52,736 ----a-w c:\windows\ServicePackFiles\i386\wzcsapi.dll
    - 2004-08-04 07:56:46 359,936 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll
    + 2008-04-14 00:12:11 483,840 ----a-w c:\windows\ServicePackFiles\i386\wzcsvc.dll
    - 2004-08-04 07:56:46 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2008-04-14 00:12:11 91,648 ----a-w c:\windows\ServicePackFiles\i386\xactsrv.dll
    - 2004-08-04 07:56:57 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2008-04-14 00:12:41 30,720 ----a-w c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2008-04-14 00:12:11 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll
    - 2004-08-04 07:56:46 129,536 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll
    + 2008-04-14 00:12:11 129,024 ----a-w c:\windows\ServicePackFiles\i386\xmlprov.dll
    - 2004-08-04 07:56:46 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2008-04-14 00:12:11 50,176 ----a-w c:\windows\ServicePackFiles\i386\xmlprovi.dll
    - 2004-08-04 07:56:46 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-14 00:12:11 11,776 ----a-w c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe
    - 2004-08-04 07:56:36 438,784 ------w c:\windows\ServicePackFiles\i386\xpob2res.dll
    + 2008-04-13 17:39:29 438,784 ----a-w c:\windows\ServicePackFiles\i386\xpob2res.dll
    - 2004-08-04 07:56:36 187,392 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll
    + 2008-04-13 17:39:22 187,392 ----a-w c:\windows\ServicePackFiles\i386\xpsp1res.dll
    - 2004-08-04 07:56:36 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll
    + 2008-04-13 17:39:24 2,897,920 ----a-w c:\windows\ServicePackFiles\i386\xpsp2res.dll
    + 2008-04-13 17:39:26 689,152 ------w c:\windows\ServicePackFiles\i386\xpsp3res.dll
    + 2008-04-14 00:12:11 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll
    - 2004-08-04 07:56:46 116,224 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
    + 2008-04-14 00:12:11 116,224 ----a-w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
    - 2004-08-04 07:56:46 337,920 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll
    + 2008-04-14 00:12:11 338,432 ----a-w c:\windows\ServicePackFiles\i386\zipfldr.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
    - 2004-08-04 07:56:56 32,866 ------w c:\windows\slrundll.exe
    + 2008-04-14 00:12:35 32,866 ----a-w c:\windows\slrundll.exe
    - 2004-08-04 07:56:43 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    + 2008-04-14 00:11:59 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    - 2004-08-04 07:56:45 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    + 2008-04-14 00:12:06 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    - 2004-08-04 07:56:45 725,566 ----a-w c:\windows\srchasst\srchui.dll
    + 2008-04-14 00:12:07 726,078 ----a-w c:\windows\srchasst\srchui.dll
    + 2000-08-31 14:00:00 161,792 ----a-w c:\windows\SWREG.exe
    + 2000-08-31 14:00:00 136,704 ----a-w c:\windows\SWSC.exe
    + 2000-08-31 14:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
    + 2002-09-03 16:39:10 2,000 ----a-w c:\windows\system\KEYBOARD.DRV
    + 2002-09-03 16:40:09 73,376 ----a-w c:\windows\system\MCIAVI.DRV
    + 2002-09-03 16:40:12 25,264 ----a-w c:\windows\system\MCISEQ.DRV
    + 2002-09-03 16:40:13 28,160 ----a-w c:\windows\system\MCIWAVE.DRV
    + 2002-09-03 16:42:26 2,032 ----a-w c:\windows\system\MOUSE.DRV
    + 2002-09-03 17:03:29 1,744 ----a-w c:\windows\system\SOUND.DRV
    + 2002-09-03 17:06:04 3,360 ----a-w c:\windows\system\SYSTEM.DRV
    + 2002-09-03 17:06:48 4,048 ----a-w c:\windows\system\TIMER.DRV
    + 2002-09-03 17:09:27 2,176 ----a-w c:\windows\system\VGA.DRV
    + 2002-09-03 17:11:44 13,600 ----a-w c:\windows\system\WFWNET.DRV
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system\winspool.drv
    - 2006-08-16 11:58:05 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\system32\aaclient.dll
    - 2004-06-15 16:34:34 65,536 ----a-w c:\windows\system32\acauth.dll
    + 2004-06-15 15:34:34 65,536 ----a-w c:\windows\system32\acauth.dll
    - 2004-06-15 16:34:34 126,976 ----a-w c:\windows\system32\acbsi20.dll
    + 2004-06-15 15:34:34 126,976 ----a-w c:\windows\system32\acbsi20.dll
    - 2003-09-26 17:46:20 102,400 ----a-w c:\windows\system32\acbsi21.dll
    + 2003-09-26 16:46:20 102,400 ----a-w c:\windows\system32\acbsi21.dll
    - 2004-06-15 16:34:34 86,016 ----a-w c:\windows\system32\acbsij.dll
    + 2004-06-15 15:34:34 86,016 ----a-w c:\windows\system32\acbsij.dll
    - 2004-06-15 16:34:34 135,168 ----a-w c:\windows\system32\acbsiprov.dll
    + 2004-06-15 15:34:34 135,168 ----a-w c:\windows\system32\acbsiprov.dll
    - 2004-06-15 16:34:34 249,856 ----a-w c:\windows\system32\accsp.dll
    + 2004-06-15 15:34:34 249,856 ----a-w c:\windows\system32\accsp.dll
    - 2004-08-04 07:56:47 183,808 ----a-w c:\windows\system32\accwiz.exe
    + 2008-04-14 00:12:11 184,320 ----a-w c:\windows\system32\accwiz.exe
    - 2004-06-15 16:34:34 61,440 ----a-w c:\windows\system32\acdbilog.dll
    + 2004-06-15 15:34:34 61,440 ----a-w c:\windows\system32\acdbilog.dll
    - 2004-06-15 16:34:34 36,864 ----a-w c:\windows\system32\acdiag.dll
    + 2004-06-15 15:34:34 36,864 ----a-w c:\windows\system32\acdiag.dll
    - 2004-06-15 16:34:34 90,112 ----a-w c:\windows\system32\acDiagno.dll
    + 2004-06-15 15:34:34 90,112 ----a-w c:\windows\system32\acDiagno.dll
    - 2004-06-15 16:34:34 36,864 ----a-w c:\windows\system32\acerrmes.dll
    + 2004-06-15 15:34:34 36,864 ----a-w c:\windows\system32\acerrmes.dll
    - 2004-06-15 16:34:34 196,608 ----a-w c:\windows\system32\acexchex.dll
    + 2004-06-15 15:34:34 196,608 ----a-w c:\windows\system32\acexchex.dll
    - 2004-06-15 16:34:34 405,504 ----a-w c:\windows\system32\acjavasc.dll
    + 2004-06-15 15:34:34 405,504 ----a-w c:\windows\system32\acjavasc.dll
    - 2004-06-15 16:34:36 684,032 ----a-w c:\windows\system32\aclibeay.dll
    + 2004-06-15 15:34:36 684,032 ----a-w c:\windows\system32\aclibeay.dll
    - 2004-08-04 07:56:41 114,688 ----a-w c:\windows\system32\aclui.dll
    + 2008-04-14 00:11:48 115,712 ----a-w c:\windows\system32\aclui.dll
    - 2004-06-15 16:34:36 110,592 ----a-w c:\windows\system32\acomx.dll
    + 2004-06-15 15:34:36 110,592 ----a-w c:\windows\system32\acomx.dll
    - 2003-10-06 16:58:56 28,672 ----a-w c:\windows\system32\ACOutCom.dll
    + 2003-10-06 15:58:56 28,672 ----a-w c:\windows\system32\ACOutCom.dll
    - 2004-06-15 16:34:36 176,205 ----a-w c:\windows\system32\acpicom.dll
    + 2004-06-15 15:34:36 176,205 ----a-w c:\windows\system32\acpicom.dll
    - 2004-06-15 16:34:36 155,727 ----a-w c:\windows\system32\acpimeta.dll
    + 2004-06-15 15:34:36 155,727 ----a-w c:\windows\system32\acpimeta.dll
    - 2004-06-15 16:34:36 81,920 ----a-w c:\windows\system32\acpipint.dll
    + 2004-06-15 15:34:36 81,920 ----a-w c:\windows\system32\acpipint.dll
    - 2004-06-15 16:34:36 294,912 ----a-w c:\windows\system32\acpkcs.dll
    + 2004-06-15 15:34:36 294,912 ----a-w c:\windows\system32\acpkcs.dll
    - 2004-06-15 16:34:36 294,912 ----a-w c:\windows\system32\acpkcs201.dll
    + 2004-06-15 15:34:36 294,912 ----a-w c:\windows\system32\acpkcs201.dll
    - 2004-06-15 16:34:36 294,912 ----a-w c:\windows\system32\acpkcs211.dll
    + 2004-06-15 15:34:36 294,912 ----a-w c:\windows\system32\acpkcs211.dll
    - 2004-08-04 07:56:41 194,048 ----a-w c:\windows\system32\activeds.dll
    + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\system32\activeds.dll
    - 2004-08-04 07:56:47 4,096 ----a-w c:\windows\system32\actmovie.exe
    + 2008-04-14 00:12:12 4,096 ----a-w c:\windows\system32\actmovie.exe
    - 2004-08-04 07:56:41 101,888 ----a-w c:\windows\system32\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\system32\actxprxy.dll
    - 2004-06-15 16:34:36 28,672 ----a-w c:\windows\system32\acWMIPrv.dll
    + 2004-06-15 15:34:36 28,672 ----a-w c:\windows\system32\acWMIPrv.dll
    - 2004-06-15 16:34:36 49,152 ----a-w c:\windows\system32\acwpipint.dll
    + 2004-06-15 15:34:36 49,152 ----a-w c:\windows\system32\acwpipint.dll
    - 2004-06-15 16:34:36 86,016 ----a-w c:\windows\system32\acxsi20.dll
    + 2004-06-15 15:34:36 86,016 ----a-w c:\windows\system32\acxsi20.dll
    - 2004-08-04 07:56:41 61,440 ----a-w c:\windows\system32\admparse.dll
    + 2007-08-13 23:39:20 71,680 ----a-w c:\windows\system32\admparse.dll
    - 2004-08-04 07:56:41 175,616 ----a-w c:\windows\system32\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ----a-w c:\windows\system32\adsldp.dll
    - 2004-08-04 07:56:41 143,360 ----a-w c:\windows\system32\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\system32\adsldpc.dll
    - 2004-08-04 07:56:41 68,096 ----a-w c:\windows\system32\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ----a-w c:\windows\system32\adsmsext.dll
    - 2004-08-04 07:56:41 263,680 ----a-w c:\windows\system32\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ----a-w c:\windows\system32\adsnt.dll
    - 2004-08-04 07:56:41 616,960 ----a-w c:\windows\system32\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ----a-w c:\windows\system32\advapi32.dll
    - 2004-08-04 07:56:41 99,840 ----a-w c:\windows\system32\advpack.dll
    + 2008-08-26 07:24:28 124,928 ----a-w c:\windows\system32\advpack.dll
    - 2004-08-04 07:56:47 98,304 ----a-w c:\windows\system32\ahui.exe
    + 2008-04-14 00:12:12 98,304 ----a-w c:\windows\system32\ahui.exe
    - 2004-08-04 07:56:47 44,544 ----a-w c:\windows\system32\alg.exe
    + 2008-04-14 00:12:12 44,544 ----a-w c:\windows\system32\alg.exe
    - 2004-08-04 07:56:41 17,408 ----a-w c:\windows\system32\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ----a-w c:\windows\system32\alrsvc.dll
    - 2004-08-04 07:56:41 70,656 ----a-w c:\windows\system32\amstream.dll
    + 2008-04-14 00:11:49 70,656 ----a-w c:\windows\system32\amstream.dll
    - 2004-08-04 07:56:41 126,976 ----a-w c:\windows\system32\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\system32\apphelp.dll
    - 2001-03-03 01:52:40 15,360 ----a-w c:\windows\system32\asfsipc.dll
    + 1999-12-20 18:16:40 15,360 ----a-w c:\windows\system32\asfsipc.dll
    - 2004-06-15 16:34:36 86,016 ----a-w c:\windows\system32\aspcom.dll
    + 2004-06-15 15:34:36 86,016 ----a-w c:\windows\system32\aspcom.dll
    - 2004-06-15 16:34:38 348,160 ----a-w c:\windows\system32\asphat32.dll
    + 2004-06-15 15:34:38 348,160 ----a-w c:\windows\system32\asphat32.dll
    - 2004-08-04 07:56:41 65,024 ----a-w c:\windows\system32\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ----a-w c:\windows\system32\asycfilt.dll
    - 2004-08-04 07:56:47 25,088 ----a-w c:\windows\system32\at.exe
    + 2008-04-14 00:12:12 25,088 ----a-w c:\windows\system32\at.exe
    - 2004-08-04 07:56:41 229,376 ----a-w c:\windows\system32\ati2cqag.dll
    + 2008-04-14 00:11:49 229,376 ----a-w c:\windows\system32\ati2cqag.dll
    - 2004-08-04 07:56:41 377,984 ----a-w c:\windows\system32\ati2dvaa.dll
    + 2008-04-14 00:11:49 377,984 ----a-w c:\windows\system32\ati2dvaa.dll
    - 2004-08-04 07:56:41 201,728 ----a-w c:\windows\system32\ati2dvag.dll
    + 2008-04-14 00:11:49 201,728 ----a-w c:\windows\system32\ati2dvag.dll
    - 2004-08-04 07:56:41 870,784 ----a-w c:\windows\system32\ati3d1ag.dll
    + 2008-04-14 00:11:49 870,784 ----a-w c:\windows\system32\ati3d1ag.dll
    - 2004-08-04 07:56:41 1,888,992 ----a-w c:\windows\system32\ati3duag.dll
    + 2008-04-14 00:11:50 1,888,992 ----a-w c:\windows\system32\ati3duag.dll
    - 2004-08-04 07:56:41 32,768 ----a-w c:\windows\system32\ativtmxx.dll
    + 2008-04-14 00:11:50 32,768 ----a-w c:\windows\system32\ativtmxx.dll
    - 2004-08-04 07:56:41 516,768 ----a-w c:\windows\system32\ativvaxx.dll
    + 2008-04-14 00:11:50 516,768 ----a-w c:\windows\system32\ativvaxx.dll
    - 2004-08-04 07:56:41 58,880 ----a-w c:\windows\system32\atl.dll
    + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\system32\atl.dll
    - 2004-08-04 07:56:47 11,264 ----a-w c:\windows\system32\atmadm.exe
    + 2008-04-14 00:12:12 11,264 ----a-w c:\windows\system32\atmadm.exe
    - 2004-08-04 07:55:59 285,696 ----a-w c:\windows\system32\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ----a-w c:\windows\system32\atmfd.dll
    - 2004-08-04 07:56:41 30,208 ----a-w c:\windows\system32\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\atmlib.dll
    + 2004-08-10 06:50:22 77,889 ----a-w c:\windows\system32\atrc.dll
    - 2002-09-03 16:27:42 11,264 ----a-w c:\windows\system32\attrib.exe
    + 2008-04-14 00:12:12 12,288 ----a-w c:\windows\system32\attrib.exe
    - 2004-08-04 07:56:41 42,496 ----a-w c:\windows\system32\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\system32\audiosrv.dll
    - 2004-08-04 07:56:47 14,336 ----a-w c:\windows\system32\auditusr.exe
    + 2008-04-14 00:12:12 14,336 ----a-w c:\windows\system32\auditusr.exe
    - 2005-03-02 18:09:29 56,832 ----a-w c:\windows\system32\authz.dll
    + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\system32\authz.dll
    - 2004-08-04 07:56:47 588,800 ----a-w c:\windows\system32\autochk.exe
    + 2008-04-14 00:12:12 588,800 ----a-w c:\windows\system32\autochk.exe
    - 2004-08-04 07:56:47 602,624 ----a-w c:\windows\system32\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ----a-w c:\windows\system32\autoconv.exe
    - 2004-08-04 07:56:47 580,608 ----a-w c:\windows\system32\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ----a-w c:\windows\system32\autofmt.exe
    - 2004-08-04 07:56:47 11,264 ----a-w c:\windows\system32\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ----a-w c:\windows\system32\autolfn.exe
    - 2004-08-04 07:56:41 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\system32\azroles.dll
    - 2004-08-04 07:56:41 52,736 ----a-w c:\windows\system32\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\system32\basesrv.dll
    - 2004-08-04 07:56:41 28,672 ----a-w c:\windows\system32\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\system32\batmeter.dll
    - 2004-08-04 07:56:41 8,704 ----a-w c:\windows\system32\batt.dll
    + 2008-04-14 00:11:50 8,704 ----a-w c:\windows\system32\batt.dll
    - 2004-08-04 07:56:41 17,408 ----a-w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ----a-w c:\windows\system32\bidispl.dll
    - 2004-07-01 22:08:18 361,984 ----a-w c:\windows\system32\bits\qmgr.dll
    + 2008-04-14 00:12:03 409,088 ----a-w c:\windows\system32\bits\qmgr.dll
    - 2004-08-04 07:56:41 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    - 2004-08-04 07:56:41 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\system32\bitsprx4.dll
    - 2004-08-04 07:56:47 71,680 ----a-w c:\windows\system32\blastcln.exe
    + 2008-04-14 00:12:13 71,680 ----a-w c:\windows\system32\blastcln.exe
    - 2004-08-04 07:55:59 63,488 ----a-w c:\windows\system32\browselc.dll
    + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\system32\browselc.dll
    - 2004-08-04 07:56:41 77,312 ----a-w c:\windows\system32\browser.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\browser.dll
    - 2007-06-15 08:12:28 1,022,976 ----a-w c:\windows\system32\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\system32\browseui.dll
    - 2004-08-04 07:56:41 78,336 ----a-w c:\windows\system32\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ----a-w c:\windows\system32\browsewm.dll
    - 2004-08-04 07:56:41 20,992 ----a-w c:\windows\system32\bthci.dll
    + 2008-04-14 00:11:50 20,992 ----a-w c:\windows\system32\bthci.dll
    - 2004-08-04 07:56:41 30,208 ----a-w c:\windows\system32\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\bthserv.dll
    - 2004-08-04 07:56:41 50,688 ----a-w c:\windows\system32\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\btpanui.dll
    - 2004-08-04 07:56:41 59,904 ----a-w c:\windows\system32\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\system32\cabinet.dll
    - 2004-08-04 07:56:41 84,480 ----a-w c:\windows\system32\cabview.dll
    + 2008-04-14 00:11:50 84,480 ----a-w c:\windows\system32\cabview.dll
    - 2002-09-03 16:28:17 18,432 ----a-w c:\windows\system32\cacls.exe
    + 2008-04-14 00:12:13 19,968 ----a-w c:\windows\system32\cacls.exe
    - 2004-08-04 07:56:41 50,688 ----a-w c:\windows\system32\camocx.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\camocx.dll
    - 2002-09-03 16:28:21 142,848 ----a-w c:\windows\system32\capesnpn.dll
    + 2008-04-14 00:11:50 150,016 ----a-w c:\windows\system32\capesnpn.dll
    - 2005-07-26 04:39:42 225,792 ----a-w c:\windows\system32\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\system32\catsrv.dll
    - 2004-08-04 07:56:41 85,504 ----a-w c:\windows\system32\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ----a-w c:\windows\system32\catsrvps.dll
    - 2005-07-26 04:39:43 625,152 ----a-w c:\windows\system32\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\system32\catsrvut.dll
    - 2007-06-15 08:12:28 151,040 ----a-w c:\windows\system32\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ----a-w c:\windows\system32\cdfview.dll
    - 2007-07-31 00:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
    + 2008-10-16 20:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
    - 2005-09-10 01:53:41 2,067,968 ----a-w c:\windows\system32\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ----a-w c:\windows\system32\cdosys.dll
    - 2004-08-04 07:56:41 194,560 ----a-w c:\windows\system32\certcli.dll
    + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\system32\certcli.dll
    - 2004-08-04 07:56:41 457,728 ----a-w c:\windows\system32\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ----a-w c:\windows\system32\certmgr.dll
    - 2003-03-26 23:28:36 53,325 ----a-w c:\windows\system32\CEUTIL.DLL
    + 2006-06-21 03:34:38 20,264 ----a-w c:\windows\system32\ceutil.dll
    - 2004-08-04 07:56:41 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    - 2004-08-04 07:56:00 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    - 2002-09-03 16:28:48 109,568 ----a-w c:\windows\system32\cic.dll
    + 2008-04-14 00:11:50 148,480 ----a-w c:\windows\system32\cic.dll
    - 2006-06-22 05:06:29 69,120 ----a-w c:\windows\system32\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ----a-w c:\windows\system32\ciodm.dll
    - 2004-08-04 07:56:47 5,632 ----a-w c:\windows\system32\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ----a-w c:\windows\system32\cisvc.exe
    - 2005-07-26 04:39:43 110,080 ----a-w c:\windows\system32\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ----a-w c:\windows\system32\clbcatex.dll
    - 2005-07-26 04:39:43 498,688 ----a-w c:\windows\system32\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\system32\clbcatq.dll
    - 2004-08-04 07:56:47 64,000 ----a-w c:\windows\system32\cleanmgr.exe
    + 2008-04-14 00:12:14 64,000 ----a-w c:\windows\system32\cleanmgr.exe
    - 2004-08-04 07:56:41 77,824 ----a-w c:\windows\system32\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\cliconfg.dll
    - 2004-08-04 07:56:47 20,480 ----a-w c:\windows\system32\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ----a-w c:\windows\system32\cliconfg.exe
    - 2004-08-04 07:56:47 102,912 ----a-w c:\windows\system32\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ----a-w c:\windows\system32\clipbrd.exe
    - 2004-08-04 07:56:47 33,280 ----a-w c:\windows\system32\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ----a-w c:\windows\system32\clipsrv.exe
    - 2004-08-04 07:56:41 57,856 ----a-w c:\windows\system32\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\system32\clusapi.dll
    - 2004-08-04 07:56:41 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    - 2004-08-04 07:56:48 388,608 ----a-w c:\windows\system32\cmd.exe
    + 2008-04-14 00:12:14 389,120 ----a-w c:\windows\system32\cmd.exe
    - 2004-08-04 07:56:41 343,040 ----a-w c:\windows\system32\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ----a-w c:\windows\system32\cmdial32.dll
    - 2004-08-04 07:56:48 47,104 ----a-w c:\windows\system32\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ----a-w c:\windows\system32\cmdl32.exe
    - 2004-08-04 07:56:48 39,936 ----a-w c:\windows\system32\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ----a-w c:\windows\system32\cmmon32.exe
    - 2004-08-04 07:56:41 185,344 ----a-w c:\windows\system32\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ----a-w c:\windows\system32\cmprops.dll
    - 2004-08-04 07:56:41 13,824 ----a-w c:\windows\system32\cmsetacl.dll
    + 2008-04-14 00:11:50 13,312 ----a-w c:\windows\system32\cmsetacl.dll
    - 2004-08-04 07:56:48 63,488 ----a-w c:\windows\system32\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ----a-w c:\windows\system32\cmstp.exe
    - 2004-08-04 07:56:41 39,936 ----a-w c:\windows\system32\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ----a-w c:\windows\system32\cmutil.dll
    - 2004-08-04 07:56:41 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    - 2005-07-26 04:39:43 60,416 ----a-w c:\windows\system32\colbact.dll
    + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\system32\colbact.dll
    - 2005-07-26 04:39:44 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
    - 2004-08-04 07:56:48 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
    + 2008-04-14 00:12:15 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
    - 2002-09-03 16:29:17 5,120 ----a-w c:\windows\system32\Com\comrereg.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\system32\Com\comrereg.exe
    - 2002-09-03 16:29:08 25,600 ----a-w c:\windows\system32\comaddin.dll
    + 2008-04-14 00:11:51 28,160 ----a-w c:\windows\system32\comaddin.dll
    - 2006-08-25 15:45:58 617,472 ----a-w c:\windows\system32\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ----a-w c:\windows\system32\comctl32.dll
    - 2004-08-04 07:56:41 276,992 ----a-w c:\windows\system32\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ----a-w c:\windows\system32\comdlg32.dll
    + 2002-09-03 16:29:11 10,544 ----a-w c:\windows\system32\comm.drv
    - 2004-08-04 07:56:41 252,928 ----a-w c:\windows\system32\compatui.dll
    + 2008-04-14 00:11:51 252,928 ----a-w c:\windows\system32\compatui.dll
    - 2004-08-04 07:56:41 229,376 ----a-w c:\windows\system32\compstui.dll
    + 2008-04-14 00:11:51 229,376 ----a-w c:\windows\system32\compstui.dll
    - 2005-07-26 04:39:44 97,792 ----a-w c:\windows\system32\comrepl.dll
    + 2008-04-14 00:11:51 97,792 ----a-w c:\windows\system32\comrepl.dll
    - 2004-08-04 07:56:41 792,064 ----a-w c:\windows\system32\comres.dll
    + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\system32\comres.dll
    - 2002-09-03 16:29:18 147,456 ----a-w c:\windows\system32\comsnap.dll
    + 2008-04-14 00:11:51 167,424 ----a-w c:\windows\system32\comsnap.dll
    - 2005-07-26 04:39:44 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    - 2005-07-26 04:39:45 540,160 ----a-w c:\windows\system32\comuid.dll
    + 2008-04-14 00:11:51 539,648 ----a-w c:\windows\system32\comuid.dll
    + 2008-11-30 19:15:50 3,448 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\070787C32F4F9C08E71FF8FBCE2C58FDAF53FE41\070787C32F4F9C08E71FF8FBCE2C58FDAF53FE41\Data.dat
    + 2008-11-30 19:15:38 3,378 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\34EF31291F8EA59F5C77B5C7C788725D8B538BB1\34EF31291F8EA59F5C77B5C7C788725D8B538BB1\Data.dat
    + 2008-11-30 19:04:40 5,814 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\3A3C5F7CC9415160B34912634CB95978E99A7DDE\3A3C5F7CC9415160B34912634CB95978E99A7DDE\Data.dat
    + 2008-11-30 19:01:48 3,378 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\681E3BBDEDD8D924C020EB6A7C5BBC35336F185B\681E3BBDEDD8D924C020EB6A7C5BBC35336F185B\Data.dat
    + 2008-11-30 19:01:53 3,532 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\C2ADCAFAE3B4F20297210C01E88F5709BF43045C\C2ADCAFAE3B4F20297210C01E88F5709BF43045C\Data.dat
    + 2008-11-30 19:01:26 5,722 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\CD0122E52A7F5228E67DF537D503618B453572A2\CD0122E52A7F5228E67DF537D503618B453572A2\Data.dat
    + 2008-11-30 19:04:50 3,378 ----a-w c:\windows\system32\config\systemprofile\Application Data\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\FCB751C54B64D96B0892FD809BDE464D4097AB76\FCB751C54B64D96B0892FD809BDE464D4097AB76\Data.dat
    - 2007-10-08 05:28:34 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-11-30 19:35:12 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-10-16 08:44:47 64,192 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    - 2007-10-08 05:28:34 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-11-30 19:35:12 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-09-19 15:55:02 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008091920080920\index.dat
    - 2007-10-08 05:28:34 81,920 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2008-11-30 19:35:12 98,304 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2002-09-03 16:29:21 345,600 ----a-w c:\windows\system32\confmsp.dll
    + 2008-04-14 00:11:51 357,888 ----a-w c:\windows\system32\confmsp.dll
    - 2004-08-04 07:56:48 27,648 ----a-w c:\windows\system32\conime.exe
    + 2008-04-14 00:12:15 27,648 ----a-w c:\windows\system32\conime.exe
     
    FLYNDAGGER,
    #16
  18. 2008/11/30
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    Okay, thanks, here goes the rest...


    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "H/PC Connection Agent "= "c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-06-20 1207080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "mcagent_exe "= "c:\program files\McAfee.com\Agent\mcagent.exe" [2008-07-11 641208]
    "IntelliPoint "= "c:\program files\Microsoft IntelliPoint\point32.exe" [2003-05-15 163840]
    "DellTouch "= "c:\windows\MMKeybd.exe" [2002-01-16 163840]
    "NvCplDaemon "= "c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
    "acEventServ "= "c:\program files\ActivCard\ActivCard Gold\acevtsrv.exe" [2004-06-15 28672]
    "NvMediaCenter "= "c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]
    "nwiz "= "nwiz.exe" [2008-05-16 c:\windows\system32\nwiz.exe]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    ActivCard Gold Smart Card Agent.lnk - c:\program files\ActivCard\ActivCard Gold\agquickp.exe [2004-06-15 147456]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "NoCommonGroups "= 0 (0x0)
    "NoFileSharing "= 0 (0x0)
    "NoPrintSharing "= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\acAuth]
    2004-06-15 09:34 65536 c:\windows\system32\acauth.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "MSACM.CEGSM "= mobilev.acm
    "vidc.ffds "= ffdshow.ax
    "msacm.ac3filter "= ac3filter.acm

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" -atboottime
    "RetroExpress "=c:\progra~1\RETROS~1\RETROS~1.1\RetroExpress.exe /h
    "SunJavaUpdateSched "= "c:\program files\Java\jre1.6.0_07\bin\jusched.exe "
    "TkBellExe "= "c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
    "AppleSyncNotifier "=c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify "=dword:00000001
    "UpdatesDisableNotify "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
    "DisableMonitoring "=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall "= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "c:\program files\Microsoft ActiveSync\rapimgr.exe "= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
    "c:\program files\Microsoft ActiveSync\wcescomm.exe "= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
    "c:\program files\Microsoft ActiveSync\WCESMgr.exe "= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
    "c:\\Program Files\\uTorrent\\uTorrent.exe "=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
    "c:\\Program Files\\iTunes\\iTunes.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\MSN Messenger\\msnmsgr.exe "=
    "c:\\Program Files\\MSN Messenger\\livecall.exe "=
    "c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe "=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "26675:TCP "= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

    R2 ACachSrv;ActivCard Authentication Service;c:\program files\Common Files\ActivCard\acachsrv.exe [2004-06-15 135168]
    R2 acautoreg;ActivCard Gold Autoregister;c:\program files\Common Files\ActivCard\acautoreg.exe [2004-06-15 53248]
    R2 Accoca;ActivCard Gold service;c:\program files\Common Files\ActivCard\accoca.exe [2004-06-15 159744]
    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; "c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-09-04 203280]
    R2 Nhksrv;Netropa NHK Server;c:\windows\Nhksrv.exe [2005-04-30 28672]
    R3 Msikbd2k;DellTouch;c:\windows\system32\DRIVERS\msikbd2k.sys [2005-04-30 6656]
    R3 SCRx31 USB Reader;SCRx31 USB Reader;c:\windows\system32\DRIVERS\stc2.sys [2002-07-03 56320]
    S3 bcgame;Nostromo HID Device Minidriver;c:\windows\system32\drivers\bcgame.sys []
    S3 dwusbdnt;dwusbdnt;c:\windows\system32\DRIVERS\dwusbdnt.sys [2002-05-24 10368]
    .
    Contents of the 'Scheduled Tasks' folder

    2008-11-24 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    2008-10-15 c:\windows\Tasks\McDefragTask.job
    - c:\program files\mcafee\mqc\QcConsol.exe [2008-07-09 17:10]

    2008-11-01 c:\windows\Tasks\McQcTask.job
    - c:\program files\mcafee\mqc\QcConsol.exe [2008-07-09 17:10]
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{8ab08215-d877-4552-9907-87c8ca2f4948} - c:\windows\system32\zomiyiwu.dll
    HKLM-Run-golakewayi - c:\windows\system32\popubome.dll


    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - c:\documents and settings\Rich\Application Data\Mozilla\Firefox\Profiles\h16d7gvf.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com/
    FF -: plugin - c:\progra~1\Yahoo!\Common\npyaxmpb.dll
    FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
    FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll
    FF -: plugin - c:\program files\Java\jre6\bin\new_plugin\npjp2.dll
    FF -: plugin - c:\program files\Real\RhapsodyPlayerEngine\nprhapengine.dll
    FF -: plugin - c:\program files\Yahoo!\Shared\npYState.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-11-30 13:35:58
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\LEXBCES.EXE
    c:\program files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe
    c:\windows\system32\scardsvr.exe
    c:\windows\system32\LEXPPS.EXE
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\progra~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\Common Files\McAfee\MNA\McNASvc.exe
    c:\progra~1\COMMON~1\McAfee\McProxy\McProxy.exe
    c:\progra~1\McAfee\VIRUSS~1\Mcshield.exe
    c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    c:\program files\McAfee\MPF\MpfSrv.exe
    c:\program files\McAfee\MSK\msksrver.exe
    c:\windows\system32\nvsvc32.exe
    c:\progra~1\RETROS~1\RETROS~1.1\retrorun.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\progra~1\MI3AA1~1\rapimgr.exe
    c:\program files\Netropa\OSD.exe
    .
    **************************************************************************
    .
    Completion time: 2008-11-30 13:39:28 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-11-30 19:39:06

    Pre-Run: 10,177,888,256 bytes free
    Post-Run: 10,215,002,112 bytes free

    10161 --- E O F --- 2008-11-13 09:06:00
     
    FLYNDAGGER,
    #17
  19. 2008/11/30
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Appears as though ComboFix has removed the remainder of the infection. Lets get an online scan to see if there's anything else hiding. Please do an online scan with Kaspersky Online Scanner

    Click Accept, when prompted to download and install the program files and database of malware definitions.
    • Click Run at the Security prompt.
    • The program will then begin downloading and installing and will also update the database.
    • Please be patient as this can take several minutes.
    • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
    • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
    • Click View scan report at the bottom.
    • Click the Save Report As... button.
    • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
    **Note**

    To optimize scanning time and produce a more sensible report for review:
    • Close any open programs.
    • Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
    Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.


    Post the Kaspersky log here and let me know if any issues remain.
     
    noahdfear,
    #18
  20. 2008/12/01
    FLYNDAGGER

    FLYNDAGGER Inactive Thread Starter

    Joined:
    2008/10/12
    Messages:
    24
    Likes Received:
    0
    Here's the Kaspersky log:

    --------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER 7 REPORT
    Monday, December 1, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Monday, December 01, 2008 05:13:15
    Records in database: 1428828
    --------------------------------------------------------------------------------

    Scan settings:
    Scan using the following database: extended
    Scan archives: yes
    Scan mail databases: yes

    Scan area - My Computer:
    A:\
    C:\
    D:\
    E:\
    F:\

    Scan statistics:
    Files scanned: 67345
    Threat name: 2
    Infected objects: 2
    Suspicious objects: 0
    Duration of the scan: 01:08:59


    File name / Threat name / Threats count
    C:\qoobox\Quarantine\C\WINDOWS\system32\bivihowo.dll.vir Infected: Trojan-Spy.Win32.Agent.fdp 1
    C:\qoobox\Quarantine\C\WINDOWS\system32\welatili.dll.vir Infected: Trojan.Win32.Monder.aamw 1

    The selected area was scanned.
     
    FLYNDAGGER,
    #19
  21. 2008/12/01
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Looks great! If you're satisfied everything is working properly, lets clean up.

    Open MBAM and remove any items quarantined. Do the same with your resident antivirus.

    Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing any infected files there as well.
    Verify the C:\Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.
    You can delete any other logs that were created/saved too.
    You may also remove the RSIT.exe file and the C:\rsit folder.

    Download ATF Cleaner by Atribune and save it to your Desktop.
    • Double click ATF-Cleaner.exe to run the program.
    • Check the boxes to the left of:

      • Windows Temp
      • Current User Temp
      • All Users Temp
      • Temporary Internet Files
      • Prefetch
      • Java Cache
      • Recycle bin

    • The rest are optional - if you want it to remove everything check "Select All ".
    • Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK.
    Reboot


    That should do it. Let me know how things are working after the above and if we can mark this resolved.
     
    noahdfear,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...