1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive [InActive] Windows explorer was canceller to prevent damage.

Discussion in 'Malware and Virus Removal Archive' started by blacklogman, 2009/03/02.

Page 1 of 2
  1. 2009/03/02
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    Hello,

    Any help will be greatly appreciated. I recently have started to have problems with my computer. It started with the blue screen of death, now sometimes when i start my computer it will say that windows explorer was closed or something close to that and then only my background will appear. i can hit Control+Alt+Delete and lock my computer and even run some programs but i can't do much else. My internet will also fail when trying to enable the connection sometimes. Thanks again for any help.

    blacklogman
     
    blacklogman,
    #1
  2. 2009/03/02
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Why did you post this in the Malware and Virus Removal forum? Did you read the rules?
     
    Admin.,
    #2


  3. to hide this advert.

  4. 2009/03/02
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    Admin,

    Sorry, I think the problems are stemming from a virus on my computer. I used Combofix and that solved some problems but not all of them.

    Thanks

    DDS (Ver_09-02-01.01) - NTFSx86
    Run by Ty Reiber at 22:09:52.70 on Mon 03/02/2009
    Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_07
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.421 [GMT -5:00]

    AV: AVG 7.5.519 *On-access scanning enabled* (Outdated)

    ============== Running Processes ===============

    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\afisicx.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\mabidwe.exe
    C:\WINDOWS\ehome\RMSvc.exe
    C:\WINDOWS\system32\sopidkc.exe
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Dell\Media Experience\DMXLauncher.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    F:\iTunes\iTunesHelper.exe
    svchost.exe C:\WINDOWS\TEMP\VRT1.tmp
    C:\WINDOWS\system32\hgcheck.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
    C:\WINDOWS\ehome\RMSysTry.exe
    C:\Program Files\Palm\Hotsync.exe
    C:\WINDOWS\SCMain.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Ty Reiber\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.aol.com/?src=aim
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mStart Page = hxxp://www.comcast.net/
    mWindow Title = Windows Internet Explorer provided by Comcast
    uInternet Settings,ProxyOverride = *.local
    uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
    BHO: {022bd500-c9f9-41f7-b97e-4744f5cce2f9} - c:\windows\system32\gupegopa.dll
    BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
    BHO: {912ba615-8bc0-dd39-7b44-c57506d5786a}: {a6875d60-575c-44b7-93dd-0cb8516ab219} - c:\windows\system32\qgcgdp.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.0.926.3450\swg.dll
    BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
    TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
    TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
    EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
    uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe "
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9
    uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
    uRun: [prunnet] "c:\windows\system32\prunnet.exe "
    uRun: [comidle] "c:\documents and settings\ty reiber\application data\comidle\comidle.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
    mRun: [ehTray] c:\windows\ehome\ehtray.exe
    mRun: [SigmatelSysTrayApp] stsystra.exe
    mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe "
    mRun: [DMXLauncher] c:\program files\dell\media experience\DMXLauncher.exe
    mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
    mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
    mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
    mRun: [BuildBU] c:\dell\bldbubg.exe
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe "
    mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
    mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "f:\itunes\iTunesHelper.exe "
    mRun: [kepodotiva] Rundll32.exe "c:\windows\system32\tebulufo.dll ",s
    mRun: [prunnet] "c:\windows\system32\prunnet.exe "
    mRun: [hgcheck] c:\windows\system32\hgcheck.exe
    mRun: [DLCFCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLCFtime.dll,_RunDLLEntry@16
    mRun: [1405971b] rundll32.exe "c:\windows\system32\norulabo.dll ",b
    mRun: [CPM1736a487] Rundll32.exe "c:\windows\system32\japuduho.dll ",a
    mRun: [000000af] rundll32.exe "c:\windows\system32\norulabo.dll ",b
    mRun: [Explorer] c:\windows\system32\msrstart.exe
    mRun: [AVG7_CC] c:\progra~1\grisoft\avg7\avgcc.exe /STARTUP
    dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
    dRun: [comidle] "c:\documents and settings\ty reiber\application data\comidle\comidle.exe" 61A847B5BBF728103B9D3B466188719AB689201522886B092CBD44BD8689220221DD3257
    dRun: [AVG7_Run] c:\progra~1\grisoft\avg7\avgw.exe /RUNONCE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\extend~1.lnk - c:\windows\ehome\RMSysTry.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hotsyn~1.lnk - c:\program files\palm\Hotsync.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\stardu~1.lnk - c:\windows\SCMain.exe
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
    DPF: {0DB074F0-617E-4EE9-912C-2965CF2AA5A4} - hxxp://download.microsoft.com/download/0/f/b/0fb0fab9-7f09-4bb6-86d8-8e791ba99ac5/VirtualEarth3D.cab
    DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - hxxp://www.kaspersky.com/kos/eng/partner/us/kavwebscan_unicode.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab
    DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    AppInit_DLLs: c:\windows\system32\mafoyina.dll c:\windows\system32\japuduho.dll,c:\windows\system32\jujimiva.dll c:\progra~1\google\google~1\goec62~1.dll,c:\windows\system32\yodohala.dll c:\progra~1\google\google~1\GOEC62~1.DLL
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\japuduho.dll
    STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\japuduho.dll
    LSA: Notification Packages = scecli c:\windows\system32\mafoyina.dll c:\windows\system32\jujimiva.dll c:\windows\system32\yodohala.dll

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\tyreib~1\applic~1\mozilla\firefox\profiles\ikwedq45.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/calendar/render?hl=en&sourceid=navclient-ff|https://webmail.psu.edu/|http://www...w-tab.html|http://mail.google.com/mail/#inbox
    FF - prefs.js: keyword.URL - about:neterror?e=query&u=
    FF - component: c:\program files\mozilla firefox\components\ffwt.dll
    FF - plugin: c:\progra~1\palm\packag~1\NPInstal.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\NPTURNMED.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
    FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
    FF - plugin: f:\itunes\mozilla plugins\npitunes.dll

    ============= SERVICES / DRIVERS ===============

    R1 Avg7Core;AVG7 Kernel;c:\windows\system32\drivers\avg7core.sys [2009-3-2 821856]
    R1 Avg7RsW;AVG7 Wrap Driver;c:\windows\system32\drivers\avg7rsw.sys [2009-3-2 4224]
    R1 Avg7RsXP;AVG7 Resident Driver XP;c:\windows\system32\drivers\avg7rsxp.sys [2009-3-2 27776]
    R1 AvgClean;AVG7 Clean Driver;c:\windows\system32\drivers\avgclean.sys [2009-3-2 10760]
    R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-7-31 213640]
    R2 aawservice;Ad-Aware 2007 Service;c:\program files\lavasoft\ad-aware 2007\aawservice.exe [2008-1-4 607576]
    R2 afisicx;afisicx Service;c:\windows\system32\afisicx.exe [2004-8-10 199680]
    R2 ASKService;ASKService;c:\program files\askbardis\bar\bin\AskService.exe [2009-2-17 464264]
    R2 ASKUpgrade;ASKUpgrade;c:\program files\askbardis\bar\bin\ASKUpgrade.exe [2009-2-17 234888]
    R2 Avg7Alrt;AVG7 Alert Manager Server;c:\progra~1\grisoft\avg7\avgamsvr.exe [2009-3-2 436224]
    R2 Avg7UpdSvc;AVG7 Update Service;c:\progra~1\grisoft\avg7\avgupsvc.exe [2009-3-2 67072]
    R2 mabidwe;mabidwe Service;c:\windows\system32\mabidwe.exe [2004-8-10 199680]
    R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\McrdSvc.exe [2005-10-20 113152]
    R2 sopidkc;sopidkc Service;c:\windows\system32\sopidkc.exe [2004-8-10 65536]
    R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2007-10-16 45132]
    S2 BCMLogon;BCMLogon;c:\windows\system32\BCMLogon.dll [2007-12-23 700416]
    S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-7-31 79304]
    S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-7-31 35272]
    S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-7-31 34216]
    S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-7-31 40552]
    S3 NdisWDM;Dynex Wireless G USB Network Adapter Service;c:\windows\system32\drivers\NdisWDM.sys [2007-12-23 198528]
    S3 pcistub;pcistub;c:\windows\system32\pcistub.sys [2005-8-16 2176]

    ============== File Associations ===============

    txtfile= "c:\windows\system32\nxtepad.exe" "%1 "

    =============== Created Last 30 ================

    2009-03-02 22:03 578,560 a------- c:\windows\system32\wabjsolx
    2009-03-02 22:03 105,984 a------- c:\windows\system32\C.tmp
    2009-03-02 22:03 40 a------- c:\windows\system32\B.tmp
    2009-03-02 18:41 125,052 a------- c:\windows\system32\~.exe
    2009-03-02 18:20 578,560 a------- c:\windows\system32\xaoa
    2009-03-02 18:20 105,984 a------- c:\windows\system32\A.tmp
    2009-03-02 18:20 40 a------- c:\windows\system32\9.tmp
    2009-03-02 17:19 <DIR> --d----- c:\docume~1\tyreib~1\applic~1\AVG7
    2009-03-02 17:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Grisoft
    2009-03-02 17:15 105,984 a------- c:\windows\system32\7.tmp
    2009-03-02 17:15 40 a------- c:\windows\system32\6.tmp
    2009-03-02 11:58 129,024 a--sh--- c:\windows\system32\qgcgdp.dll
    2009-03-02 11:57 1,629,035 ---sh--- c:\windows\system32\obaluron.ini
    2009-03-02 11:56 1,629,035 ---sh--- c:\windows\system32\ipukisos.ini
    2009-03-02 11:55 578,560 a------- c:\windows\system32\bekurwlv
    2009-03-02 11:55 0 a------- c:\windows\system32\8.tmp
    2009-03-02 11:55 40 a------- c:\windows\system32\2.tmp
    2009-03-01 21:34 578,560 a------- c:\windows\system32\xagjfiez
    2009-03-01 21:33 40 a------- c:\windows\system32\4.tmp
    2009-03-01 21:27 578,560 a------- c:\windows\system32\giatqt
    2009-03-01 21:27 40 a------- c:\windows\system32\5.tmp
    2009-03-01 21:20 179,200 a------- c:\windows\SWREG.exe
    2009-03-01 21:20 116,224 a------- c:\windows\sed.exe
    2009-03-01 21:13 1,437 a------- c:\windows\system32\work.ini
    2009-03-01 21:13 345,974 a------- c:\windows\system32\hguest.exe
    2009-03-01 21:13 140,232 a------- c:\windows\system32\hgcheck.exe
    2009-03-01 21:13 227 a------- c:\windows\system32\hgset.ini
    2009-03-01 21:12 77,824 a------- c:\windows\system32\u21195328.dll
    2009-03-01 21:10 578,560 a------- c:\windows\system32\xssehfikhv
    2009-03-01 21:10 40 a------- c:\windows\system32\3.tmp
    2009-03-01 19:52 0 a------- c:\windows\mqcd.dbt
    2009-03-01 19:52 <DIR> --d----- c:\docume~1\tyreib~1\applic~1\comidle
    2009-02-17 12:42 <DIR> --d----- c:\program files\AskBarDis
    2009-02-17 12:25 107,368 a------- c:\windows\system32\GEARAspi.dll
    2009-02-17 12:25 15,464 a------- c:\windows\system32\drivers\GEARAspiWDM.sys
    2009-02-17 12:25 <DIR> --d----- c:\program files\iPod
    2009-02-17 12:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2009-02-01 00:54 <DIR> --d----- c:\program files\Star Alliance Auto Update Conduit (English)

    ==================== Find3M ====================

    2009-03-02 17:15 578,560 a------- c:\windows\system32\user32.DLL
    2009-03-02 17:15 578,560 a------- c:\windows\system32\dllcache\user32.dll
    2009-03-02 17:15 262,144 a------- c:\windows\system32\nvtpm32.dll
    2009-03-02 11:58 129,024 a--sh--- c:\windows\system32\begataje.dll
    2009-03-02 11:58 84,992 a--sh--- c:\windows\system32\japuduho.dll
    2009-03-02 11:57 79,872 a--sh--- c:\windows\system32\norulabo.dll
    2009-03-01 19:51 105,984 a------- c:\windows\system32\677.tmp
    2009-03-01 19:40 84,992 a--sh--- c:\windows\system32\tafukore.dll
    2009-02-26 21:11 5,308 a------- c:\windows\system32\d3d9caps.dat
    2009-01-31 19:26 88,467 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
    2009-01-16 21:35 3,594,752 a------- c:\windows\system32\dllcache\mshtml.dll
    2009-01-09 12:03 213,640 a------- c:\windows\system32\drivers\mfehidk.sys
    2009-01-09 12:03 79,304 a------- c:\windows\system32\drivers\mfeavfk.sys
    2009-01-09 12:03 40,552 a------- c:\windows\system32\drivers\mfesmfk.sys
    2009-01-09 12:03 35,272 a------- c:\windows\system32\drivers\mfebopk.sys
    2009-01-09 12:03 34,216 a------- c:\windows\system32\drivers\mferkdk.sys
    2008-12-19 04:10 70,656 -------- c:\windows\system32\dllcache\ie4uinit.exe
    2008-12-19 04:10 13,824 -------- c:\windows\system32\dllcache\ieudinit.exe
    2008-12-19 00:25 634,024 -------- c:\windows\system32\dllcache\iexplore.exe
    2008-12-19 00:23 161,792 -------- c:\windows\system32\dllcache\ieakui.dll
    2008-12-11 05:57 333,952 -------- c:\windows\system32\dllcache\srv.sys
    2008-03-29 17:47 10 a------- c:\program files\.autoreg
    2007-02-08 01:37 251 a------- c:\program files\wt3d.ini
    2006-10-23 21:17 88 ---shr-- c:\windows\system32\AB5937B8DB.sys
    0000-00-00 00:00 47,616 a--sh--- c:\windows\system32\fowehuri.dll
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\gupegopa.dll
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\jujimiva.dll
    2006-10-23 21:17 3,350 a--sh--- c:\windows\system32\KGyGaAvL.sys
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\tebulufo.dll
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\tibijuve.dll
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\tilevibu.dll
    0000-00-00 00:00 125,052 a--sh--- c:\windows\system32\yodohala.dll
    0000-00-00 00:00 47,616 a--sh--- c:\windows\system32\zijifusi.dll

    ============= FINISH: 22:10:52.76 ===============
     
    blacklogman,
    #3
  5. 2009/03/04
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi blacklogman
    Welcome to WindowsBBS.

    You have quite the mess going on here.

    Please post the combofix log that it generated when you ran it.

    It should be located here.
    C:\combofix.txt

    Thanks
    Geri
     
    Geri,
    #4
  6. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    This File was very long, like 587564 characters.
    Here is the beginning, did you want the whole thing.

    ComboFix 09-03-01.01 - Ty Reiber 2009-03-02 11:50:13.6 - NTFSx86 MINIMAL
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.758 [GMT -5:00]
    Running from: c:\documents and settings\Ty Reiber\Desktop\ComboFix.exe

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\Install.txt
    c:\windows\system32\6.tmp
    c:\windows\system32\afisicx.exe
    c:\windows\system32\comsa32.sys
    c:\windows\system32\Install.txt
    c:\windows\system32\ipukisos.ini
    c:\windows\system32\mabidwe.exe
    c:\windows\system32\prbgadc.dll
    c:\windows\system32\tpszxyd.sys
    .
    ---- Previous Run -------
    .
    c:\documents and settings\Ty Reiber\Local Settings\Temporary Internet Files\fbk.sts
    c:\windows\Install.txt
    c:\windows\system32\200931244.dll
    c:\windows\system32\4.tmp
    c:\windows\system32\6.tmp
    c:\windows\system32\afisicx.exe
    c:\windows\system32\comsa32.sys
    c:\windows\system32\drivers\seneka.sys
    c:\windows\system32\drivers\senekaijapwvwe.sys
    c:\windows\system32\inf\rundll33.exe
    c:\windows\system32\inf\xccdfb16_090131.dll
    c:\windows\system32\inf\xccefb090131.scr
    c:\windows\system32\Install.txt
    c:\windows\system32\ipukisos.ini
    c:\windows\system32\mabidwe.exe
    c:\windows\system32\mafoyina.dll
    c:\windows\system32\prbgadc.dll
    c:\windows\system32\prunnet.exe
    c:\windows\system32\senekalkvrlccv.dat
    c:\windows\system32\senekanppemkna.dll
    c:\windows\system32\senekaulgakwgj.dat
    c:\windows\system32\senekaxufublmw.dll
    c:\windows\system32\senekayerndukh.dll
    c:\windows\system32\tmpxccacj0.exe
    c:\windows\system32\tpszxyd.sys
    c:\windows\system32\ubtehk.dll
    c:\windows\system32\w.exe
    c:\windows\system32\xcchit32.ini
    c:\windows\system32\yerofapu.dll
    c:\windows\Tasks\At1.job
    c:\windows\xccdf16_090131a.dll
    c:\windows\xccdf32_090131a.dll
    c:\windows\xccwinsys.ini

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_SENEKA
    -------\Legacy_6TO4
    -------\Legacy_AFISICX
    -------\Legacy_DEFAULTLIB
    -------\Legacy_MABIDWE
    -------\Legacy_SOFTYINFORWOW1
    -------\Legacy_WKVSWJFT
    -------\Service_6to4
    -------\Service_afisicx
    -------\Service_defaultlib
    -------\Service_mabidwe
    -------\Service_softyinforwow1
    -------\Service_wkvswjft
    -------\Legacy_6TO4
    -------\Legacy_AFISICX
    -------\Legacy_DEFAULTLIB
    -------\Legacy_MABIDWE
    -------\Legacy_SOFTYINFORWOW1
    -------\Legacy_WKVSWJFT
    -------\Service_afisicx
    -------\Service_mabidwe
    -------\Service_wkvswjft


    ((((((((((((((((((((((((( Files Created from 2009-02-02 to 2009-03-02 )))))))))))))))))))))))))))))))
    .

    2009-03-02 11:55 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\bekurwlv
    2009-03-02 11:55 . 2009-03-02 11:55 40 --a------ c:\windows\system32\2.tmp
    2009-03-02 11:55 . 2009-03-02 11:55 0 --a------ c:\windows\system32\8.tmp
    2009-03-02 00:18 . 2009-03-02 00:18 <DIR> d-------- c:\documents and settings\LocalService\Application Data\AdobeUM
    2009-03-01 21:34 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\xagjfiez
    2009-03-01 21:33 . 2009-03-01 21:33 40 --a------ c:\windows\system32\4.tmp
    2009-03-01 21:27 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\giatqt
    2009-03-01 21:27 . 2009-03-01 21:27 40 --a------ c:\windows\system32\5.tmp
    2009-03-01 21:13 . 2009-03-01 21:13 345,974 --a------ c:\windows\system32\hguest.exe
    2009-03-01 21:13 . 2009-03-01 21:13 140,232 --a------ c:\windows\system32\hgcheck.exe
    2009-03-01 21:13 . 2009-03-01 21:24 1,437 --a------ c:\windows\system32\work.ini
    2009-03-01 21:13 . 2009-03-02 11:56 227 --a------ c:\windows\system32\hgset.ini
    2009-03-01 21:12 . 2009-03-01 21:12 77,824 --a------ c:\windows\system32\u21195328.dll
    2009-03-01 21:10 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\xssehfikhv
    2009-03-01 21:10 . 2009-03-01 21:10 40 --a------ c:\windows\system32\3.tmp
    2009-03-01 19:52 . 2009-03-01 19:53 <DIR> d-------- c:\documents and settings\Ty Reiber\Application Data\comidle
    2009-03-01 19:52 . 2009-03-01 19:52 0 --a------ c:\windows\mqcd.dbt
    2009-02-17 12:42 . 2009-02-17 12:42 <DIR> d-------- c:\program files\AskBarDis
    2009-02-17 12:25 . 2009-02-17 12:25 <DIR> d-------- c:\program files\iPod
    2009-02-17 12:25 . 2009-02-17 12:25 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2009-02-17 12:25 . 2008-04-17 13:12 107,368 --a------ c:\windows\system32\GEARAspi.dll
    2009-02-17 12:25 . 2008-04-17 13:12 15,464 --a------ c:\windows\system32\drivers\GEARAspiWDM.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-02 16:46 --------- d-----w c:\program files\Common Files\AOL
    2009-03-02 16:42 --------- d-----w c:\program files\AIM
    2009-03-02 16:41 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\Aim
    2009-03-02 02:09 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee
    2009-02-26 09:08 --------- d-----w c:\program files\Microsoft Silverlight
    2009-02-24 03:42 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\Azureus
    2009-02-17 17:25 --------- d-----w c:\program files\Common Files\Apple
    2009-02-17 17:23 --------- d-----w c:\program files\QuickTime
    2009-02-17 17:04 --------- d-----w c:\program files\LimeWire
    2009-02-17 16:58 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\LimeWire
    2009-02-05 15:55 --------- d-----w c:\program files\Dl_cats
    2009-02-01 05:54 --------- d-----w c:\program files\Star Alliance Auto Update Conduit (English)
    2009-01-19 17:26 --------- d-----w c:\program files\Google
    2009-01-12 00:03 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore
    2009-01-09 17:03 79,304 ----a-w c:\windows\system32\drivers\mfeavfk.sys
    2009-01-09 17:03 40,552 ----a-w c:\windows\system32\drivers\mfesmfk.sys
    2009-01-09 17:03 35,272 ----a-w c:\windows\system32\drivers\mfebopk.sys
    2009-01-09 17:03 34,216 ----a-w c:\windows\system32\drivers\mferkdk.sys
    2009-01-09 17:03 213,640 ----a-w c:\windows\system32\drivers\mfehidk.sys
    2008-03-29 22:47 10 ----a-w c:\program files\.autoreg
    2007-02-08 06:37 251 ----a-w c:\program files\wt3d.ini
    2008-03-29 22:47 69,632 ----a-w c:\program files\mozilla firefox\components\ffwt.dll
    2006-10-24 02:17 88 --sh--r c:\windows\system32\AB5937B8DB.sys
    1601-01-01 00:12 47,616 --sha-w c:\windows\system32\fowehuri.dll
    2006-10-24 02:17 3,350 --sha-w c:\windows\system32\KGyGaAvL.sys
    1601-01-01 00:12 47,616 --sha-w c:\windows\system32\zijifusi.dll
    .
    c:\windows\system32\user32.dll ... is infected !!
    577,024 2005-03-02 18:19:56 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
    578,048 2007-03-08 15:48:36 c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    577,536 2007-03-08 15:36:28 c:\windows\$NtServicePackUninstall$\user32.dll
    577,024 2004-08-10 09:00:00 c:\windows\$NtUninstallKB890859$\user32.dll
    577,024 2005-03-02 18:09:30 c:\windows\$NtUninstallKB925902$\user32.dll
    578,560 2008-04-14 00:12:08 c:\windows\ServicePackFiles\i386\user32.dll
    578,560 2009-03-02 00:51:40 c:\windows\system32\user32.DLL
    578,560 2009-03-02 00:51:40 c:\windows\system32\dllcache\user32.dll


    ------- Sigcheck -------

    2005-03-02 13:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
    2007-03-08 10:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    2007-03-08 10:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\$NtServicePackUninstall$\user32.dll
    2004-08-10 04:00 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\$NtUninstallKB890859$\user32.dll
    2005-03-02 13:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\$NtUninstallKB925902$\user32.dll
    2008-04-13 19:12 578560 b26b135ff1b9f60c9388b4a7d16f600b c:\windows\ServicePackFiles\i386\user32.dll
    2009-03-01 19:51 578560 cf5c68caec76f82e07ed8c84df23cc4e c:\windows\system32\user32.DLL
    2009-03-01 19:51 578560 cf5c68caec76f82e07ed8c84df23cc4e c:\windows\system32\dllcache\user32.dll

    2008-04-13 19:12 1051136 32969625d7f101431e89fae645753129 c:\windows\explorer.exe
    2007-06-13 06:26 1050112 c37fa45cb76ac550acc3fb856aba1fdc c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    2007-06-13 05:23 1050624 15ac1ec83d02cac78de5490b5130f59a c:\windows\$NtServicePackUninstall$\explorer.exe
    2004-08-10 04:00 1049088 e42a6a3386741897a0f1946e5c497a80 c:\windows\$NtUninstallKB938828$\explorer.exe
    2008-04-13 19:12 1050624 70f02081a3076f36781e1a64001c1baa c:\windows\ServicePackFiles\i386\explorer.exe

    2004-08-10 04:00 32256 03252e86390fe54a565e66f14c1d9fdc c:\windows\$NtServicePackUninstall$\ctfmon.exe
    2008-04-13 19:12 32256 13056aecdcd13842114d0b6e1e27559a c:\windows\ServicePackFiles\i386\ctfmon.exe
    2008-04-13 19:12 32256 6e62f2c15a1a66c7d303180e6912e937 c:\windows\system32\ctfmon.exe

    2005-06-10 19:17 75264 138faea6af48a6d82c0f43ab1195db95 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    2005-06-10 18:53 74752 137411fe712fe93fdb2262f63b5899a2 c:\windows\$NtServicePackUninstall$\spoolsv.exe
    2008-04-13 19:12 75264 2ddf3842cce5cd14bc8a635960722798 c:\windows\ServicePackFiles\i386\spoolsv.exe
    2008-04-13 19:12 75264 ba9bf58338f884f5a6dbcabc303c673d c:\windows\system32\spoolsv.exe

    2004-08-10 04:00 41472 f85b05a91203fba2ed682253e211c4ba c:\windows\$NtServicePackUninstall$\userinit.exe
    2008-04-13 19:12 43008 4aafbc055894cd7ad0e61fad969314cc c:\windows\ServicePackFiles\i386\userinit.exe
    2008-04-13 19:12 43008 4e8e946900cae9d2ee11850aad775e1b c:\windows\system32\userinit.exe
    .
    ((((((((((((((((((((((((((((( snapshot@2008-12-15_13.00.50.71 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-12-11 10:24:44 333,184 ----a-w c:\windows\$hf_mig$\KB958687\SP2QFE\srv.sys
    + 2008-12-11 10:57:09 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3GDR\srv.sys
    + 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
    + 2008-12-13 06:26:56 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
    + 2008-06-17 19:04:34 8,461,824 ----a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
    + 2008-07-09 07:38:24 17,272 ----a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
    + 2008-07-09 07:38:25 231,288 ----a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
    + 2008-07-09 07:38:24 26,488 ----a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB967715\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
    + 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-10 09:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-10 09:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-10 09:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-10 09:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-10 09:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-10 09:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-10 09:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-10 09:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-10 09:00:00 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-10 09:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-10 09:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-10 09:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-10 09:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-10 09:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-10 09:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-10 09:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-10 09:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-08-14 09:51:43 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-10 09:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 13:54:18 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:58:57 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-10 09:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-04 03:07:42 42,368 -c----w c:\windows\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 03:07:44 44,928 -c----w c:\windows\$NtServicePackUninstall$\agpcpq.sys
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-10 09:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-10 09:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 03:07:42 42,752 -c----w c:\windows\$NtServicePackUninstall$\alim1541.sys
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 03:07:44 43,008 -c----w c:\windows\$NtServicePackUninstall$\amdagp.sys
    + 2004-08-10 09:00:00 36,992 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-10 09:00:00 37,376 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-10 09:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-10 09:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-10 09:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-10 09:00:00 295,936 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-10 09:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2002-06-21 21:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
    + 2007-01-02 20:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
    + 2004-08-04 02:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
    + 2002-06-21 21:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
    + 2007-01-02 20:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-10 09:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 02:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-10 09:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-10 09:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2005-03-02 18:09:29 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-10 09:00:00 588,800 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-10 09:00:00 602,624 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-10 09:00:00 580,608 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-10 09:00:00 84,992 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-10 09:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-04 03:10:14 11,776 -c----w c:\windows\$NtServicePackUninstall$\bdasup.sys
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-10 09:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-10 09:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-10-23 15:34:19 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-10 09:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-10 09:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-10 09:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-10 09:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:39:42 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:39:43 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-04 03:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-10 09:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2006-10-23 15:34:19 151,040 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-10 09:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-10 09:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-10 09:00:00 457,728 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-10 09:00:00 1,352,192 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-10 09:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-10 09:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:39:43 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:43 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-10 09:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-10 09:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-10 09:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-10 09:00:00 388,608 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-10 09:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:39:43 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-10 09:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:39:44 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-10 09:00:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-10 09:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:44 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-10 09:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-10 09:00:00 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-10 09:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:39:44 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:45 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-10 09:00:00 1,032,192 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-10 09:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-10 09:00:00 345,600 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-10 09:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2007-01-09 00:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-10 09:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-10 09:00:00 36,480 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-10 09:00:00 597,504 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-10 09:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-10 09:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-10 09:00:00 512,512 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-10 09:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-10 09:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-10 09:00:00 326,656 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2006-06-03 11:40:49 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-10 09:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-10 09:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-10 09:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2006-10-23 15:34:20 1,054,208 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-10 09:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-10 09:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-10 09:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-10 09:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-10 09:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-10 09:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-10 09:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-10 09:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-10 09:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-10 09:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-10 09:00:00 370,176 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-10 09:00:00 539,136 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-10 09:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-10 09:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-10 09:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-10 09:00:00 1,501,696 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-10 09:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-10 09:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-10 09:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-10 09:00:00 224,768 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-10 09:00:00 799,744 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-10 09:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-10 09:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-10 09:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-10 09:00:00 153,344 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-10 09:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-10 09:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-10 09:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-10 09:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 03:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-10 09:00:00 52,224 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-10 09:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-10 09:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-10 09:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-10 09:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-10 09:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-10 09:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-10 09:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-04 04:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 03:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-10 09:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-10 09:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-10 09:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-10 09:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-10 09:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-10 09:00:00 142,336 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-10 09:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-10 09:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-10 09:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-10 09:00:00 113,152 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-10 09:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-10 09:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-10 09:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-10 09:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-10 09:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-10 09:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-10 09:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-10 09:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-22 09:05:26 498,742 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2004-08-10 09:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-10 09:00:00 183,296 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2008-07-07 20:32:22 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-10 09:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-10 09:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-10 09:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-10 09:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-10 09:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-10 09:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-10 09:00:00 117,760 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-10 09:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-10 09:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-10 09:00:00 34,944 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-10 09:00:00 87,552 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2004-08-10 09:00:00 382,976 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:14:45 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-10 09:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-10 09:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2003-03-24 20:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-10 09:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-10 09:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-10 09:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-10 09:00:00 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-10 09:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-10 09:00:00 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-10 09:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-10 09:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-10 09:00:00 267,776 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-10 09:00:00 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-10 09:00:00 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-10 09:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-10 09:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-10 09:00:00 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-09-29 22:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
    + 2008-10-23 13:01:36 283,648 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-10 09:00:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-10 09:00:00 566,784 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-10 09:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-10 09:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-10 09:00:00 198,656 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-10 09:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-10 09:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-12 21:45:54 137,728 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-10 09:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-10 09:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 02:04:27 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-10 09:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2006-01-11 00:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
    + 2006-01-11 00:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys.000
    + 2004-08-10 09:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 04:56:44 21,504 -c----w c:\windows\$NtServicePackUninstall$\hidserv.dll
    + 2001-08-17 18:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:24:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-10 09:00:00 344,064 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-10 09:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-10 09:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-10 09:00:00 41,984 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-11-17 17:41:24 347,136 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-04 03:00:52 8,192 -c----w c:\windows\$NtServicePackUninstall$\i2omgmt.sys
    + 2004-08-04 03:00:52 18,560 -c----w c:\windows\$NtServicePackUninstall$\i2omp.sys
    + 2004-08-10 09:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-10 09:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-10 09:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 01:46:00 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-10 09:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-10 09:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-10 09:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 17:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-10 09:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-10 09:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-10 09:00:00 505,344 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-10 09:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-10 09:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-10 09:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-10 09:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-10 09:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-10 09:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-10 09:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2008-04-11 18:50:43 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-10 09:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 02:59:42 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-10 09:00:00 36,096 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-10 09:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 12:59:41 94,720 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-10 09:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-10 09:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-10 09:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-10 09:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-10 09:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-10 09:00:00 349,696 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-10 09:00:00 182,784 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-10 09:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-10 09:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 2004-08-10 09:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-10 09:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-10 09:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-10 09:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-10 09:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2006-01-11 00:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
    + 2006-01-11 00:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys.000
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2001-08-17 17:58:02 35,840 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 02:04:27 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:04:27 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-10 09:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-04 04:56:44 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 17:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
     
    blacklogman,
    #5
  7. 2009/03/05
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Yes I need to see the whole log.

    Thanks
    Geri
     
    Geri,
    #6
  8. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    ComboFix 09-03-01.01 - Ty Reiber 2009-03-02 11:50:13.6 - NTFSx86 MINIMAL
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.758 [GMT -5:00]
    Running from: c:\documents and settings\Ty Reiber\Desktop\ComboFix.exe

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\Install.txt
    c:\windows\system32\6.tmp
    c:\windows\system32\afisicx.exe
    c:\windows\system32\comsa32.sys
    c:\windows\system32\Install.txt
    c:\windows\system32\ipukisos.ini
    c:\windows\system32\mabidwe.exe
    c:\windows\system32\prbgadc.dll
    c:\windows\system32\tpszxyd.sys
    .
    ---- Previous Run -------
    .
    c:\documents and settings\Ty Reiber\Local Settings\Temporary Internet Files\fbk.sts
    c:\windows\Install.txt
    c:\windows\system32\200931244.dll
    c:\windows\system32\4.tmp
    c:\windows\system32\6.tmp
    c:\windows\system32\afisicx.exe
    c:\windows\system32\comsa32.sys
    c:\windows\system32\drivers\seneka.sys
    c:\windows\system32\drivers\senekaijapwvwe.sys
    c:\windows\system32\inf\rundll33.exe
    c:\windows\system32\inf\xccdfb16_090131.dll
    c:\windows\system32\inf\xccefb090131.scr
    c:\windows\system32\Install.txt
    c:\windows\system32\ipukisos.ini
    c:\windows\system32\mabidwe.exe
    c:\windows\system32\mafoyina.dll
    c:\windows\system32\prbgadc.dll
    c:\windows\system32\prunnet.exe
    c:\windows\system32\senekalkvrlccv.dat
    c:\windows\system32\senekanppemkna.dll
    c:\windows\system32\senekaulgakwgj.dat
    c:\windows\system32\senekaxufublmw.dll
    c:\windows\system32\senekayerndukh.dll
    c:\windows\system32\tmpxccacj0.exe
    c:\windows\system32\tpszxyd.sys
    c:\windows\system32\ubtehk.dll
    c:\windows\system32\w.exe
    c:\windows\system32\xcchit32.ini
    c:\windows\system32\yerofapu.dll
    c:\windows\Tasks\At1.job
    c:\windows\xccdf16_090131a.dll
    c:\windows\xccdf32_090131a.dll
    c:\windows\xccwinsys.ini

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_SENEKA
    -------\Legacy_6TO4
    -------\Legacy_AFISICX
    -------\Legacy_DEFAULTLIB
    -------\Legacy_MABIDWE
    -------\Legacy_SOFTYINFORWOW1
    -------\Legacy_WKVSWJFT
    -------\Service_6to4
    -------\Service_afisicx
    -------\Service_defaultlib
    -------\Service_mabidwe
    -------\Service_softyinforwow1
    -------\Service_wkvswjft
    -------\Legacy_6TO4
    -------\Legacy_AFISICX
    -------\Legacy_DEFAULTLIB
    -------\Legacy_MABIDWE
    -------\Legacy_SOFTYINFORWOW1
    -------\Legacy_WKVSWJFT
    -------\Service_afisicx
    -------\Service_mabidwe
    -------\Service_wkvswjft


    ((((((((((((((((((((((((( Files Created from 2009-02-02 to 2009-03-02 )))))))))))))))))))))))))))))))
    .

    2009-03-02 11:55 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\bekurwlv
    2009-03-02 11:55 . 2009-03-02 11:55 40 --a------ c:\windows\system32\2.tmp
    2009-03-02 11:55 . 2009-03-02 11:55 0 --a------ c:\windows\system32\8.tmp
    2009-03-02 00:18 . 2009-03-02 00:18 <DIR> d-------- c:\documents and settings\LocalService\Application Data\AdobeUM
    2009-03-01 21:34 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\xagjfiez
    2009-03-01 21:33 . 2009-03-01 21:33 40 --a------ c:\windows\system32\4.tmp
    2009-03-01 21:27 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\giatqt
    2009-03-01 21:27 . 2009-03-01 21:27 40 --a------ c:\windows\system32\5.tmp
    2009-03-01 21:13 . 2009-03-01 21:13 345,974 --a------ c:\windows\system32\hguest.exe
    2009-03-01 21:13 . 2009-03-01 21:13 140,232 --a------ c:\windows\system32\hgcheck.exe
    2009-03-01 21:13 . 2009-03-01 21:24 1,437 --a------ c:\windows\system32\work.ini
    2009-03-01 21:13 . 2009-03-02 11:56 227 --a------ c:\windows\system32\hgset.ini
    2009-03-01 21:12 . 2009-03-01 21:12 77,824 --a------ c:\windows\system32\u21195328.dll
    2009-03-01 21:10 . 2009-03-01 19:51 578,560 --a------ c:\windows\system32\xssehfikhv
    2009-03-01 21:10 . 2009-03-01 21:10 40 --a------ c:\windows\system32\3.tmp
    2009-03-01 19:52 . 2009-03-01 19:53 <DIR> d-------- c:\documents and settings\Ty Reiber\Application Data\comidle
    2009-03-01 19:52 . 2009-03-01 19:52 0 --a------ c:\windows\mqcd.dbt
    2009-02-17 12:42 . 2009-02-17 12:42 <DIR> d-------- c:\program files\AskBarDis
    2009-02-17 12:25 . 2009-02-17 12:25 <DIR> d-------- c:\program files\iPod
    2009-02-17 12:25 . 2009-02-17 12:25 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2009-02-17 12:25 . 2008-04-17 13:12 107,368 --a------ c:\windows\system32\GEARAspi.dll
    2009-02-17 12:25 . 2008-04-17 13:12 15,464 --a------ c:\windows\system32\drivers\GEARAspiWDM.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-02 16:46 --------- d-----w c:\program files\Common Files\AOL
    2009-03-02 16:42 --------- d-----w c:\program files\AIM
    2009-03-02 16:41 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\Aim
    2009-03-02 02:09 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee
    2009-02-26 09:08 --------- d-----w c:\program files\Microsoft Silverlight
    2009-02-24 03:42 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\Azureus
    2009-02-17 17:25 --------- d-----w c:\program files\Common Files\Apple
    2009-02-17 17:23 --------- d-----w c:\program files\QuickTime
    2009-02-17 17:04 --------- d-----w c:\program files\LimeWire
    2009-02-17 16:58 --------- d-----w c:\documents and settings\Ty Reiber\Application Data\LimeWire
    2009-02-05 15:55 --------- d-----w c:\program files\Dl_cats
    2009-02-01 05:54 --------- d-----w c:\program files\Star Alliance Auto Update Conduit (English)
    2009-01-19 17:26 --------- d-----w c:\program files\Google
    2009-01-12 00:03 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore
    2009-01-09 17:03 79,304 ----a-w c:\windows\system32\drivers\mfeavfk.sys
    2009-01-09 17:03 40,552 ----a-w c:\windows\system32\drivers\mfesmfk.sys
    2009-01-09 17:03 35,272 ----a-w c:\windows\system32\drivers\mfebopk.sys
    2009-01-09 17:03 34,216 ----a-w c:\windows\system32\drivers\mferkdk.sys
    2009-01-09 17:03 213,640 ----a-w c:\windows\system32\drivers\mfehidk.sys
    2008-03-29 22:47 10 ----a-w c:\program files\.autoreg
    2007-02-08 06:37 251 ----a-w c:\program files\wt3d.ini
    2008-03-29 22:47 69,632 ----a-w c:\program files\mozilla firefox\components\ffwt.dll
    2006-10-24 02:17 88 --sh--r c:\windows\system32\AB5937B8DB.sys
    1601-01-01 00:12 47,616 --sha-w c:\windows\system32\fowehuri.dll
    2006-10-24 02:17 3,350 --sha-w c:\windows\system32\KGyGaAvL.sys
    1601-01-01 00:12 47,616 --sha-w c:\windows\system32\zijifusi.dll
    .
    c:\windows\system32\user32.dll ... is infected !!
    577,024 2005-03-02 18:19:56 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
    578,048 2007-03-08 15:48:36 c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    577,536 2007-03-08 15:36:28 c:\windows\$NtServicePackUninstall$\user32.dll
    577,024 2004-08-10 09:00:00 c:\windows\$NtUninstallKB890859$\user32.dll
    577,024 2005-03-02 18:09:30 c:\windows\$NtUninstallKB925902$\user32.dll
    578,560 2008-04-14 00:12:08 c:\windows\ServicePackFiles\i386\user32.dll
    578,560 2009-03-02 00:51:40 c:\windows\system32\user32.DLL
    578,560 2009-03-02 00:51:40 c:\windows\system32\dllcache\user32.dll


    ------- Sigcheck -------

    2005-03-02 13:19 577024 1800f293bccc8ede8a70e12b88d80036 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
    2007-03-08 10:48 578048 7aa4f6c00405dfc4b70ed4214e7d687b c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
    2007-03-08 10:36 577536 b409909f6e2e8a7067076ed748abf1e7 c:\windows\$NtServicePackUninstall$\user32.dll
    2004-08-10 04:00 577024 c72661f8552ace7c5c85e16a3cf505c4 c:\windows\$NtUninstallKB890859$\user32.dll
    2005-03-02 13:09 577024 de2db164bbb35db061af0997e4499054 c:\windows\$NtUninstallKB925902$\user32.dll
    2008-04-13 19:12 578560 b26b135ff1b9f60c9388b4a7d16f600b c:\windows\ServicePackFiles\i386\user32.dll
    2009-03-01 19:51 578560 cf5c68caec76f82e07ed8c84df23cc4e c:\windows\system32\user32.DLL
    2009-03-01 19:51 578560 cf5c68caec76f82e07ed8c84df23cc4e c:\windows\system32\dllcache\user32.dll

    2008-04-13 19:12 1051136 32969625d7f101431e89fae645753129 c:\windows\explorer.exe
    2007-06-13 06:26 1050112 c37fa45cb76ac550acc3fb856aba1fdc c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    2007-06-13 05:23 1050624 15ac1ec83d02cac78de5490b5130f59a c:\windows\$NtServicePackUninstall$\explorer.exe
    2004-08-10 04:00 1049088 e42a6a3386741897a0f1946e5c497a80 c:\windows\$NtUninstallKB938828$\explorer.exe
    2008-04-13 19:12 1050624 70f02081a3076f36781e1a64001c1baa c:\windows\ServicePackFiles\i386\explorer.exe

    2004-08-10 04:00 32256 03252e86390fe54a565e66f14c1d9fdc c:\windows\$NtServicePackUninstall$\ctfmon.exe
    2008-04-13 19:12 32256 13056aecdcd13842114d0b6e1e27559a c:\windows\ServicePackFiles\i386\ctfmon.exe
    2008-04-13 19:12 32256 6e62f2c15a1a66c7d303180e6912e937 c:\windows\system32\ctfmon.exe

    2005-06-10 19:17 75264 138faea6af48a6d82c0f43ab1195db95 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    2005-06-10 18:53 74752 137411fe712fe93fdb2262f63b5899a2 c:\windows\$NtServicePackUninstall$\spoolsv.exe
    2008-04-13 19:12 75264 2ddf3842cce5cd14bc8a635960722798 c:\windows\ServicePackFiles\i386\spoolsv.exe
    2008-04-13 19:12 75264 ba9bf58338f884f5a6dbcabc303c673d c:\windows\system32\spoolsv.exe

    2004-08-10 04:00 41472 f85b05a91203fba2ed682253e211c4ba c:\windows\$NtServicePackUninstall$\userinit.exe
    2008-04-13 19:12 43008 4aafbc055894cd7ad0e61fad969314cc c:\windows\ServicePackFiles\i386\userinit.exe
    2008-04-13 19:12 43008 4e8e946900cae9d2ee11850aad775e1b c:\windows\system32\userinit.exe
    .
    ((((((((((((((((((((((((((((( snapshot@2008-12-15_13.00.50.71 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:45:15 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:45:16 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:45:16 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:45:16 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:45:17 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:18 755,576 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:19 382,840 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-12-11 10:24:44 333,184 ----a-w c:\windows\$hf_mig$\KB958687\SP2QFE\srv.sys
    + 2008-12-11 10:57:09 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3GDR\srv.sys
    + 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
    + 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
    + 2008-12-13 06:26:56 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    + 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
    + 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
    + 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
    + 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
    + 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
    + 2008-06-17 19:04:34 8,461,824 ----a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
    + 2008-07-09 07:38:24 17,272 ----a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
    + 2008-07-09 07:38:25 231,288 ----a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
    + 2008-07-09 07:38:24 26,488 ----a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
    + 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB967715\update\update.exe
    + 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
    + 2006-08-16 11:58:05 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-10 09:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-10 09:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-10 09:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-10 09:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-10 09:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-10 09:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-10 09:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-10 09:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-10 09:00:00 187,776 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-10 09:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-10 09:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-10 09:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-10 09:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-10 09:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-10 09:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-10 09:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-10 09:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-08-14 09:51:43 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-10 09:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 13:54:18 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:58:57 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-10 09:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-04 03:07:42 42,368 -c----w c:\windows\$NtServicePackUninstall$\agp440.sys
    + 2004-08-04 03:07:44 44,928 -c----w c:\windows\$NtServicePackUninstall$\agpcpq.sys
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-10 09:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-10 09:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-04 03:07:42 42,752 -c----w c:\windows\$NtServicePackUninstall$\alim1541.sys
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-04 03:07:44 43,008 -c----w c:\windows\$NtServicePackUninstall$\amdagp.sys
    + 2004-08-10 09:00:00 36,992 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-10 09:00:00 37,376 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-10 09:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-10 09:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-10 09:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-10 09:00:00 295,936 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-10 09:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2002-06-21 21:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
    + 2007-01-02 20:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
    + 2004-08-04 02:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
    + 2002-06-21 21:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
    + 2007-01-02 20:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-10 09:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 02:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-10 09:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-10 09:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
     
    blacklogman,
    #7
  9. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2005-03-02 18:09:29 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-10 09:00:00 588,800 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-10 09:00:00 602,624 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-10 09:00:00 580,608 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-10 09:00:00 84,992 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-10 09:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-04 03:10:14 11,776 -c----w c:\windows\$NtServicePackUninstall$\bdasup.sys
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-10 09:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-10 09:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-10-23 15:34:19 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-10 09:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-13 13:10:50 272,128 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-10 09:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-10 09:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-10 09:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:39:42 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:39:43 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-04 03:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-10 09:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2006-10-23 15:34:19 151,040 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:53:41 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-10 09:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-10 09:00:00 194,560 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-10 09:00:00 457,728 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-10 09:00:00 1,352,192 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:06:29 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-10 09:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-10 09:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:39:43 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:43 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-10 09:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-10 09:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-10 09:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-10 09:00:00 388,608 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-10 09:00:00 185,344 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:39:43 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-10 09:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:39:44 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:45:58 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-10 09:00:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-10 09:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:44 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-10 09:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-10 09:00:00 792,064 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-10 09:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:39:44 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:45 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-10 09:00:00 1,032,192 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-10 09:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-10 09:00:00 345,600 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-10 09:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2007-01-09 00:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-10 09:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-10 09:00:00 36,480 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-10 09:00:00 597,504 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-10 09:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-10 09:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-10 09:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-10 09:00:00 512,512 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-10 09:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-10 09:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-10 09:00:00 326,656 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2006-06-03 11:40:49 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-10 09:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-10 09:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-10 09:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2006-10-23 15:34:20 1,054,208 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-10 09:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-10 09:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-10 09:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-10 09:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-10 09:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-10 09:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-10 09:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-10 09:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-10 09:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-10 09:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 12:59:41 111,616 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-10 09:00:00 370,176 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-10 09:00:00 539,136 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-10 09:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-10 09:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:12:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-10 09:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-10 09:00:00 1,501,696 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-10 09:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-10 09:00:00 163,840 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-10 09:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-10 09:00:00 224,768 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-10 09:00:00 799,744 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-10 09:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-10 09:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-10 09:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-10 09:00:00 153,344 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-10 09:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-10 09:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-10 09:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-10 09:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 03:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-10 09:00:00 52,224 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:10 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:32:43 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-10 09:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-10 09:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-10 09:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-10 09:00:00 212,480 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-10 09:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-10 09:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-10 09:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-04 04:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-04 03:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-10 09:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-10 09:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-10 09:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-10 09:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-10 09:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-10 09:00:00 142,336 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-10 09:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-10 09:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-10 09:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-10 09:00:00 113,152 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-10 09:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-10 09:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-10 09:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-10 09:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-10 09:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-10 09:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-10 09:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-10 09:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-22 09:05:26 498,742 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2004-08-10 09:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-10 09:00:00 183,296 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2008-07-07 20:32:22 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:20:03 1,082,368 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-10 09:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-10 09:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2007-06-13 10:23:07 1,033,216 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-10 09:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-10 09:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-10 09:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-10 09:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-10 09:00:00 117,760 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-10 09:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-10 09:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-10 09:00:00 34,944 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-10 09:00:00 87,552 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:21:06 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2004-08-10 09:00:00 382,976 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:14:45 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-10 09:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-10 09:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2003-03-24 20:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-10 09:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-10 09:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-10 09:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-10 09:00:00 452,096 -c----w c:\windows\$NtServicePackUninstall$\fxsapi.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fxsclnt.exe
    + 2004-08-10 09:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\fxscom.dll
    + 2004-08-10 09:00:00 285,184 -c----w c:\windows\$NtServicePackUninstall$\fxscomex.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\fxscover.exe
    + 2004-08-10 09:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\fxsdrv.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\fxsevent.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsext32.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\fxsmon.dll
    + 2004-08-10 09:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2004-08-10 09:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\fxsperf.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\fxsres.dll
    + 2004-08-10 09:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\fxsst.dll
    + 2004-08-10 09:00:00 267,776 -c----w c:\windows\$NtServicePackUninstall$\fxssvc.exe
    + 2004-08-10 09:00:00 246,272 -c----w c:\windows\$NtServicePackUninstall$\fxst30.dll
    + 2004-08-10 09:00:00 397,312 -c----w c:\windows\$NtServicePackUninstall$\fxstiff.dll
    + 2004-08-10 09:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\fxsui.dll
    + 2004-08-10 09:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\fxswzrd.dll
    + 2004-08-10 09:00:00 400,384 -c----w c:\windows\$NtServicePackUninstall$\fxsxp32.dll
    + 2004-09-29 22:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
    + 2008-10-23 13:01:36 283,648 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-10 09:00:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-10 09:00:00 566,784 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-10 09:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-10 09:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-10 09:00:00 198,656 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-10 09:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-10 09:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
    + 2005-06-23 00:05:52 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-12 21:45:54 137,728 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-10 09:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-10 09:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 02:04:27 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-10 09:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2006-01-11 00:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
    + 2006-01-11 00:48:53 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys.000
    + 2004-08-10 09:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2004-08-04 04:56:44 21,504 -c----w c:\windows\$NtServicePackUninstall$\hidserv.dll
    + 2001-08-17 18:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:24:43 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-10 09:00:00 344,064 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-10 09:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-10 09:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-10 09:00:00 41,984 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-11-17 17:41:24 347,136 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-04 03:00:52 8,192 -c----w c:\windows\$NtServicePackUninstall$\i2omgmt.sys
    + 2004-08-04 03:00:52 18,560 -c----w c:\windows\$NtServicePackUninstall$\i2omp.sys
    + 2004-08-10 09:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-10 09:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-10 09:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 01:46:00 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-10 09:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-10 09:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-10 09:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 17:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-10 09:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-10 09:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-10 09:00:00 505,344 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-10 09:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-10 09:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-10 09:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-10 09:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-10 09:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-10 09:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-10 09:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2008-04-11 18:50:43 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-10 09:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 02:59:42 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-10 09:00:00 36,096 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-10 09:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 12:59:41 94,720 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-10 09:00:00 154,112 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-10 09:00:00 331,264 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-10 09:00:00 330,752 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-10 09:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-10 09:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-10 09:00:00 349,696 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-10 09:00:00 182,784 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-10 09:00:00 384,000 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-10 09:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 2004-08-10 09:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 2004-08-10 09:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 2004-08-10 09:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
    + 2004-08-10 09:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 2004-08-10 09:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2006-01-11 00:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
    + 2006-01-11 00:48:58 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys.000
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2001-08-17 17:58:02 35,840 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 02:04:27 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:04:27 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-10 09:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-04 04:56:44 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:47:07 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:47:07 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 17:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2001-08-17 18:55:56 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbd106.dll
    + 2004-08-04 02:58:34 24,576 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-04 02:58:36 14,848 -c----w c:\windows\$NtServicePackUninstall$\kbdhid.sys
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-10 09:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-10 09:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsno.dll
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdukx.dll
    + 2004-08-10 09:00:00 7,424 -c----w c:\windows\$NtServicePackUninstall$\kd1394.dll
    + 2005-06-15 17:49:30 295,936 -c----w c:\windows\$NtServicePackUninstall$\kerberos.dll
    + 2007-04-16 15:52:53 984,576 -c----w c:\windows\$NtServicePackUninstall$\kernel32.dll
    + 2004-08-10 09:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\keymgr.dll
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys
    + 2006-06-14 08:47:45 172,416 -c----w c:\windows\$NtServicePackUninstall$\kmixer.sys.000
     
    blacklogman,
    #8
  10. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 04:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    + 2004-08-10 09:00:00 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 04:56:44 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-10 09:00:00 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-10 09:00:00 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-10 09:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-10 09:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    + 2004-08-10 09:00:00 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    + 2004-08-10 09:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-10 09:00:00 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
    + 2004-08-10 09:00:00 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    + 2004-08-10 09:00:00 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    + 2004-08-10 09:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    + 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-10 09:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-10 09:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-10 09:00:00 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-10 09:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    + 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
    + 2004-08-10 09:00:00 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
    + 2004-08-10 09:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    + 2004-08-10 09:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-10 09:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    + 2004-08-10 09:00:00 240,128 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
    + 2004-08-10 09:00:00 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    + 2004-08-10 09:00:00 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    + 2004-08-10 09:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-10 09:00:00 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-10 09:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-10 09:00:00 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-10 09:00:00 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    + 2004-08-10 09:00:00 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
    + 2004-08-10 09:00:00 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    + 2004-08-04 02:58:34 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-10 09:00:00 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-10 09:00:00 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-04 03:10:14 15,360 -c----w c:\windows\$NtServicePackUninstall$\mpe.sys
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    + 2004-08-10 09:00:00 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
    + 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
    + 2007-07-06 12:46:59 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
    + 2007-07-06 12:46:59 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
    + 2007-07-06 12:46:59 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
    + 2004-08-10 09:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
    + 2004-08-10 09:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
    + 2007-07-06 12:46:59 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
    + 2007-07-06 12:46:59 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
    + 2007-07-06 12:46:59 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
    + 2004-08-10 09:00:00 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
    + 2004-08-10 09:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
    + 2004-08-10 09:00:00 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
    + 2004-08-10 09:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
    + 2007-07-06 12:46:59 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
    + 2007-07-06 12:46:59 471,552 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
    + 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    + 2008-10-24 11:10:42 453,632 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.000
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-10 09:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-10 09:00:00 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-10 09:00:00 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    + 2008-06-24 16:23:05 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    + 2005-09-27 00:34:26 169,984 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    + 2007-01-02 20:28:28 2,273,280 -c----w c:\windows\$NtServicePackUninstall$\mscorsvr.dll
    + 2007-01-02 20:28:46 2,281,472 -c----w c:\windows\$NtServicePackUninstall$\mscorwks.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-10 09:00:00 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-10 09:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-10 09:00:00 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-10 09:00:00 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-10 09:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2004-08-10 09:00:00 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-10 09:00:00 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    + 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    + 2004-08-10 09:00:00 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    + 2004-08-10 09:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-10 09:00:00 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-04 05:06:34 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-10 09:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-10 09:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
    + 2004-08-04 04:56:58 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
    + 2004-08-10 09:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    + 2004-08-10 09:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2005-05-04 23:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
    + 2005-05-04 23:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
    + 2004-08-10 09:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2005-05-04 23:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-10 09:00:00 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2005-05-04 23:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    + 2004-08-04 02:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-10 09:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
    + 2004-10-13 16:24:37 1,694,208 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-10 09:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-10 09:00:00 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-10 09:00:00 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-10 09:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    + 2004-08-10 09:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-10 09:00:00 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-10 09:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-10 09:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 02:58:40 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 02:58:42 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    + 2004-03-17 20:05:52 134,144 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 03:07:48 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
    + 2004-08-10 09:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-10 09:00:00 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 02:58:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\mstee.sys
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-10 09:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-10 09:00:00 407,552 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    + 2004-08-10 09:00:00 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    + 2004-08-10 09:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    + 2004-08-10 09:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    + 2004-08-10 09:00:00 1,392,671 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-10 09:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-10 09:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-10 09:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-10 09:00:00 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-10 09:00:00 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    + 2004-08-10 09:00:00 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    + 2005-09-08 05:03:50 86,728 -c----w c:\windows\$NtServicePackUninstall$\msxml6r.dll
    + 2004-08-04 04:56:46 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-10 09:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
    + 2004-08-10 09:00:00 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-10 09:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 03:10:30 85,376 -c----w c:\windows\$NtServicePackUninstall$\nabtsfec.sys
    + 2004-08-10 09:00:00 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
    + 2004-08-10 09:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    + 2004-08-10 09:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-10 09:00:00 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 03:10:14 10,880 -c----w c:\windows\$NtServicePackUninstall$\ndisip.sys
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-10 09:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
    + 2005-06-20 17:52:56 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    + 2005-06-20 17:52:56 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys.000
    + 2004-08-10 09:00:00 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-10 09:00:00 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    + 2004-08-10 09:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    + 2008-10-15 16:57:55 332,800 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    + 2004-08-10 09:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    + 2004-08-10 09:00:00 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    + 2004-08-10 09:00:00 622,080 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-10 09:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    + 2007-01-15 20:11:26 73,728 -c----w c:\windows\$NtServicePackUninstall$\netfxupdate.exe
    + 2004-08-10 09:00:00 139,264 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    + 2004-08-10 09:00:00 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    + 2004-08-10 09:00:00 875,008 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
    + 2004-08-10 09:00:00 329,728 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    + 2005-06-21 14:00:18 1,705,472 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    + 2004-08-10 09:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    + 2004-08-10 09:00:00 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    + 2004-08-10 09:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    + 2004-08-10 09:00:00 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-10 09:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-10 09:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-10 09:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-10 09:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    + 2004-08-10 09:00:00 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-10 09:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    + 2004-08-10 09:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-10 09:00:00 1,200,128 -c----w c:\windows\$NtServicePackUninstall$\ntbackup.exe
    + 2004-08-10 09:00:00 708,096 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-10 09:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-10 09:00:00 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    + 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe.000
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe.000
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-10 09:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-10 09:00:00 179,712 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-10 09:00:00 488,448 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-10 09:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2004-08-10 09:00:00 91,136 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-10 09:00:00 143,872 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-10 09:00:00 419,840 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
    + 2004-08-04 04:56:46 4,274,816 -c----w c:\windows\$NtServicePackUninstall$\nv4_disp.dll
    + 2006-10-13 12:35:12 64,000 -c----w c:\windows\$NtServicePackUninstall$\nwapi32.dll
    + 2004-08-10 09:00:00 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    + 2006-10-13 12:35:12 142,336 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 10:23:15 163,584 -c----w c:\windows\$NtServicePackUninstall$\nwrdr.sys
    + 2006-10-13 12:35:12 65,536 -c----w c:\windows\$NtServicePackUninstall$\nwwks.dll
    + 2004-08-10 09:00:00 266,752 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\obelog.dll
    + 2004-08-10 09:00:00 966,656 -c----w c:\windows\$NtServicePackUninstall$\obemetal.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\obemtllc.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\obepopc.dll
    + 2004-08-10 09:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-10 09:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-10 09:00:00 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-10 09:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-10 09:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-10 09:00:00 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-10 09:00:00 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-10 09:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-10 09:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-10 09:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2005-07-26 04:39:48 1,285,120 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 04:39:48 74,752 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 04:39:49 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
    + 2004-08-10 09:00:00 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
    + 2004-08-10 09:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-10 09:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-10 09:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\openfiles.exe
    + 2004-08-10 09:00:00 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-10 09:00:00 215,552 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
    + 2004-08-10 09:00:00 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
    + 2004-08-10 09:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
    + 2004-08-10 09:00:00 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    + 2004-08-10 09:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2004-08-10 09:00:00 80,128 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2004-08-10 09:00:00 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-10 09:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-04 03:07:48 68,224 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    + 2004-08-04 02:59:42 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-10 09:00:00 119,936 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-10 09:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-10 09:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    + 2004-08-10 09:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2006-10-24 16:30:20 412,160 -c----w c:\windows\$NtServicePackUninstall$\photometadatahandler.dll
    + 2004-08-10 09:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-10 09:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-10 09:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
    + 2004-08-10 09:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\policman.dll
    + 2004-08-10 09:00:00 105,472 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    + 2004-03-16 15:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-03-16 15:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys.000
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
    + 2005-06-24 15:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys
    + 2005-06-24 15:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys.000
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-10 09:00:00 560,640 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    + 2004-08-10 09:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    + 2004-08-10 09:00:00 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-10 09:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
    + 1980-06-03 03:00:00 135,248 -c----w c:\windows\$NtServicePackUninstall$\ps5ui.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    + 2004-08-10 09:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 1980-06-03 03:00:00 470,608 -c----w c:\windows\$NtServicePackUninstall$\pscript5.dll
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-10 09:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-10 09:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    + 2004-08-10 09:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    + 2005-06-28 17:55:08 385,024 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-10 09:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    + 2004-08-10 09:00:00 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-10 09:00:00 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    + 2008-05-07 04:55:40 1,288,192 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2006-06-26 17:37:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    + 2004-08-10 09:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-10 09:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    + 2004-08-10 09:00:00 657,920 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-10 09:00:00 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    + 2006-06-22 10:47:18 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    + 2004-08-10 09:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-10 09:00:00 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-10 09:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-10 09:00:00 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-10 09:00:00 112,128 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    + 2004-08-10 09:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-10 09:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    + 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    + 2004-08-10 09:00:00 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-10 09:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-10 09:00:00 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 03:01:16 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    + 2005-06-10 04:09:46 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    + 2004-08-10 09:00:00 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-10 09:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-04 02:59:38 57,472 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    + 2004-08-10 09:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    + 2004-08-10 09:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-10 09:00:00 397,824 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-10 09:00:00 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2006-11-27 14:54:06 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys.000
    + 2007-07-09 13:16:16 582,656 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    + 2005-07-26 04:39:49 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-10 09:00:00 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-10 09:00:00 107,520 -c----w c:\windows\$NtServicePackUninstall$\rsnotify.exe
    + 2004-08-10 09:00:00 380,416 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-10 09:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-10 09:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-10 09:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-10 09:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-10 09:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    + 2004-08-10 09:00:00 415,744 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-10 09:00:00 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
    + 2005-05-31 15:46:30 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys
    + 2005-05-31 15:46:30 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys.000
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-10 09:00:00 95,744 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-10 09:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-10 09:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    + 2004-08-10 09:00:00 313,856 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    + 2004-08-10 09:00:00 190,976 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\schtasks.exe
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-10 09:00:00 202,752 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    + 2004-08-10 09:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-10 09:00:00 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-10 09:00:00 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-10 09:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\secedit.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    + 2004-08-10 09:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
    + 2004-08-10 09:00:00 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    + 2004-08-10 09:00:00 64,896 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    + 2004-08-10 09:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-10 09:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    + 2004-08-10 09:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-10 09:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    + 2007-01-15 20:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\setregni.exe
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    + 2004-08-10 09:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    + 2004-08-10 09:00:00 983,552 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-10 09:00:00 101,376 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    + 2004-08-10 09:00:00 140,288 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-10 09:00:00 1,580,544 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-10 09:00:00 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-10 09:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
    + 2004-08-10 09:00:00 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-10 09:00:00 549,376 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    + 2006-10-23 15:34:22 1,497,600 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    + 2007-10-26 03:34:01 8,460,288 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-10 09:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-10 09:00:00 438,272 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    + 2006-10-23 15:34:22 474,112 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
     
    blacklogman,
    #9
  11. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\krnlprov.dll
    + 2004-08-04 04:15:22 140,928 -c----w c:\windows\$NtServicePackUninstall$\ks.sys
    + 2004-08-10 09:00:00 92,032 -c----w c:\windows\$NtServicePackUninstall$\ksecdd.sys
    + 2004-08-04 04:56:44 4,096 -c----w c:\windows\$NtServicePackUninstall$\ksuser.dll
    + 2004-08-10 09:00:00 423,936 -c----w c:\windows\$NtServicePackUninstall$\licdll.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\licwmi.dll
    + 2005-09-01 01:41:53 19,968 -c----w c:\windows\$NtServicePackUninstall$\linkinfo.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\lmhsvc.dll
    + 2004-08-10 09:00:00 399,872 -c----w c:\windows\$NtServicePackUninstall$\lmrt.dll
    + 2004-08-10 09:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\loadperf.dll
    + 2004-08-10 09:00:00 221,696 -c----w c:\windows\$NtServicePackUninstall$\localsec.dll
    + 2004-08-10 09:00:00 341,504 -c----w c:\windows\$NtServicePackUninstall$\localspl.dll
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\localui.dll
    + 2004-08-10 09:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\locator.exe
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\log.dll
    + 2004-08-10 09:00:00 59,392 -c----w c:\windows\$NtServicePackUninstall$\logman.exe
    + 2004-08-10 09:00:00 220,672 -c----w c:\windows\$NtServicePackUninstall$\logon.scr
    + 2004-08-10 09:00:00 514,560 -c----w c:\windows\$NtServicePackUninstall$\logonui.exe
    + 2004-08-10 09:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\lpk.dll
    + 2004-08-10 09:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\lprhelp.dll
    + 2007-11-07 09:26:56 721,920 -c----w c:\windows\$NtServicePackUninstall$\lsasrv.dll
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\lsass.exe
    + 2004-08-10 09:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\magnify.exe
    + 2004-08-10 09:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\makecab.exe
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mcastmib.dll
    + 2004-08-10 09:00:00 84,480 -c----w c:\windows\$NtServicePackUninstall$\mciavi32.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\mciqtz32.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\mciseq.dll
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\mciwave.dll
    + 2004-08-10 09:00:00 118,272 -c----w c:\windows\$NtServicePackUninstall$\mdminst.dll
    + 2004-08-10 09:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\mf.sys
    + 2007-03-08 15:36:28 40,960 -c----w c:\windows\$NtServicePackUninstall$\mf3216.dll
    + 2006-11-01 19:17:45 927,504 -c----w c:\windows\$NtServicePackUninstall$\mfc40u.dll
    + 2004-08-10 09:00:00 1,028,096 -c----w c:\windows\$NtServicePackUninstall$\mfc42.dll
    + 2004-08-10 09:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\mfcsubs.dll
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\mgmtapi.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\midimap.dll
    + 2004-08-10 09:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\migism.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\miglibnt.dll
    + 2004-08-10 09:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\migload.exe
    + 2004-08-10 09:00:00 240,128 -c----w c:\windows\$NtServicePackUninstall$\migwiz.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\mimefilt.dll
    + 2004-08-10 09:00:00 586,240 -c----w c:\windows\$NtServicePackUninstall$\mlang.dll
    + 2004-08-10 09:00:00 815,104 -c----w c:\windows\$NtServicePackUninstall$\mmc.exe
    + 2004-08-10 09:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\mmcbase.dll
    + 2004-08-10 09:00:00 1,192,960 -c----w c:\windows\$NtServicePackUninstall$\mmcndmgr.dll
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\mmcshext.dll
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\mmfutil.dll
    + 2004-08-10 09:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\mnmdd.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\mnmsrvc.exe
    + 2004-08-10 09:00:00 207,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\mobsync.exe
    + 2004-08-10 09:00:00 30,080 -c----w c:\windows\$NtServicePackUninstall$\modem.sys
    + 2004-08-10 09:00:00 153,600 -c----w c:\windows\$NtServicePackUninstall$\modemui.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\mofcomp.exe
    + 2004-08-10 09:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\mofd.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\more.com
    + 2004-08-10 09:00:00 216,064 -c----w c:\windows\$NtServicePackUninstall$\moricons.dll
    + 2004-08-04 02:58:34 23,040 -c----w c:\windows\$NtServicePackUninstall$\mouclass.sys
    + 2004-08-10 09:00:00 42,240 -c----w c:\windows\$NtServicePackUninstall$\mountmgr.sys
    + 2004-08-10 09:00:00 3,555,328 -c----w c:\windows\$NtServicePackUninstall$\moviemk.exe
    + 2004-08-04 03:10:14 15,360 -c----w c:\windows\$NtServicePackUninstall$\mpe.sys
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mplay32.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\mpr.dll
    + 2004-08-10 09:00:00 87,040 -c----w c:\windows\$NtServicePackUninstall$\mprapi.dll
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\mprdim.dll
    + 2007-07-06 10:05:47 72,960 -c----w c:\windows\$NtServicePackUninstall$\mqac.sys
    + 2007-07-06 12:46:59 138,240 -c----w c:\windows\$NtServicePackUninstall$\mqad.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\mqbkup.exe
    + 2007-07-06 12:46:59 47,104 -c----w c:\windows\$NtServicePackUninstall$\mqdscli.dll
    + 2007-07-06 12:46:59 16,896 -c----w c:\windows\$NtServicePackUninstall$\mqise.dll
    + 2004-08-10 09:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\mqlogmgr.dll
    + 2004-08-10 09:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\mqoa.dll
    + 2007-07-06 12:46:59 660,992 -c----w c:\windows\$NtServicePackUninstall$\mqqm.dll
    + 2007-07-06 12:46:59 177,152 -c----w c:\windows\$NtServicePackUninstall$\mqrt.dll
    + 2004-08-10 09:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\mqrtdep.dll
    + 2007-07-06 12:46:59 95,744 -c----w c:\windows\$NtServicePackUninstall$\mqsec.dll
    + 2004-08-10 09:00:00 517,632 -c----w c:\windows\$NtServicePackUninstall$\mqsnap.dll
    + 2004-08-10 09:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\mqsvc.exe
    + 2004-08-10 09:00:00 117,248 -c----w c:\windows\$NtServicePackUninstall$\mqtgsvc.exe
    + 2004-08-10 09:00:00 186,880 -c----w c:\windows\$NtServicePackUninstall$\mqtrig.dll
    + 2007-07-06 12:46:59 48,640 -c----w c:\windows\$NtServicePackUninstall$\mqupgrd.dll
    + 2007-07-06 12:46:59 471,552 -c----w c:\windows\$NtServicePackUninstall$\mqutil.dll
    + 2007-12-18 09:51:35 179,584 -c----w c:\windows\$NtServicePackUninstall$\mrxdav.sys
    + 2008-10-24 11:10:42 453,632 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 -c----w c:\windows\$NtServicePackUninstall$\mrxsmb.sys.000
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\msacm32.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msadcer.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msadcf.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcfr.dll
    + 2006-03-23 05:44:21 143,360 -c----w c:\windows\$NtServicePackUninstall$\msadco.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msadcor.dll
    + 2004-08-10 09:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\msadcs.dll
    + 2004-08-10 09:00:00 155,648 -c----w c:\windows\$NtServicePackUninstall$\msadds.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msaddsr.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msader15.dll
    + 2006-12-26 13:07:23 536,576 -c----w c:\windows\$NtServicePackUninstall$\msado15.dll
    + 2006-12-26 13:07:23 180,224 -c----w c:\windows\$NtServicePackUninstall$\msadomd.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msador15.dll
    + 2006-12-26 13:07:23 200,704 -c----w c:\windows\$NtServicePackUninstall$\msadox.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msadrh15.dll
    + 2004-08-10 09:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\msafd.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\msapsspc.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\msasn1.dll
    + 2004-08-10 09:00:00 220,160 -c----w c:\windows\$NtServicePackUninstall$\mscandui.dll
    + 2008-06-24 16:23:05 74,240 -c----w c:\windows\$NtServicePackUninstall$\mscms.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\msconf.dll
    + 2005-09-27 00:34:26 169,984 -c----w c:\windows\$NtServicePackUninstall$\msconfig.exe
    + 2007-01-02 20:28:28 2,273,280 -c----w c:\windows\$NtServicePackUninstall$\mscorsvr.dll
    + 2007-01-02 20:28:46 2,281,472 -c----w c:\windows\$NtServicePackUninstall$\mscorwks.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mscpx32r.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\mscpxl32.dll
    + 2008-02-26 11:59:50 294,912 -c----w c:\windows\$NtServicePackUninstall$\msctf.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\msctfp.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdadc.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdadiag.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaenum.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaer.dll
    + 2004-08-10 09:00:00 233,472 -c----w c:\windows\$NtServicePackUninstall$\msdaora.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaorar.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\msdaosp.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaprsr.dll
    + 2004-08-10 09:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\msdaprst.dll
    + 2004-08-10 09:00:00 204,800 -c----w c:\windows\$NtServicePackUninstall$\msdaps.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\msdarem.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdaremr.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\msdart.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdasc.dll
    + 2004-08-10 09:00:00 315,392 -c----w c:\windows\$NtServicePackUninstall$\msdasql.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msdasqlr.dll
    + 2004-08-10 09:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\msdatl3.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msdatt.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\msdaurl.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\msdfmap.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\msdmo.dll
    + 2004-08-10 09:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\msdtc.exe
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\msdtclog.dll
    + 2006-03-01 19:42:42 426,496 -c----w c:\windows\$NtServicePackUninstall$\msdtcprx.dll
    + 2004-08-10 09:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\msdtcstp.dll
    + 2006-03-01 19:42:42 956,416 -c----w c:\windows\$NtServicePackUninstall$\msdtctm.dll
    + 2006-03-01 19:42:42 161,280 -c----w c:\windows\$NtServicePackUninstall$\msdtcuiu.dll
    + 2004-08-10 09:00:00 4,126 -c----w c:\windows\$NtServicePackUninstall$\msdxmlc.dll
    + 2004-08-10 09:00:00 19,072 -c----w c:\windows\$NtServicePackUninstall$\msfs.sys
    + 2006-11-27 14:54:06 539,136 -c----w c:\windows\$NtServicePackUninstall$\msftedit.dll
    + 2004-08-10 09:00:00 994,304 -c----w c:\windows\$NtServicePackUninstall$\msgina.dll
    + 2004-08-10 09:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\msgpc.sys
    + 2004-08-10 09:00:00 3,166,208 -c----w c:\windows\$NtServicePackUninstall$\msgr3en.dll
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\msgrocm.dll
    + 2004-08-04 05:06:34 180,224 -c----w c:\windows\$NtServicePackUninstall$\msgslang.dll
    + 2004-08-10 09:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\msgsvc.dll
    + 2004-08-10 09:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\msh261.drv
    + 2004-08-04 04:56:58 294,912 -c----w c:\windows\$NtServicePackUninstall$\msh263.drv
    + 2007-04-18 16:12:23 2,854,400 -c----w c:\windows\$NtServicePackUninstall$\msi.dll
    + 2004-08-10 09:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\msident.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\msidle.dll
    + 2004-08-10 09:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\msieftp.dll
    + 2005-05-04 23:45:36 78,848 -c----w c:\windows\$NtServicePackUninstall$\msiexec.exe
    + 2005-05-04 23:45:36 271,360 -c----w c:\windows\$NtServicePackUninstall$\msihnd.dll
    + 2004-08-10 09:00:00 4,608 -c----w c:\windows\$NtServicePackUninstall$\msimg32.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\msimn.exe
    + 2005-05-04 23:45:36 884,736 -c----w c:\windows\$NtServicePackUninstall$\msimsg.dll
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\msimtf.dll
    + 2004-08-10 09:00:00 376,320 -c----w c:\windows\$NtServicePackUninstall$\msinfo.dll
    + 2005-05-04 23:45:36 15,360 -c----w c:\windows\$NtServicePackUninstall$\msisip.dll
    + 2008-03-27 08:12:54 151,583 -c----w c:\windows\$NtServicePackUninstall$\msjint40.dll
    + 2006-12-26 13:07:23 102,400 -c----w c:\windows\$NtServicePackUninstall$\msjro.dll
    + 2004-08-04 02:58:42 7,552 -c----w c:\windows\$NtServicePackUninstall$\mskssrv.sys
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mslbui.dll
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\mslwvtts.dll
    + 2004-08-10 09:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\msmqocm.dll
    + 2004-10-13 16:24:37 1,694,208 -c----w c:\windows\$NtServicePackUninstall$\msmsgs.exe
    + 2004-08-10 09:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\msnsspc.dll
    + 2004-08-10 09:00:00 122,368 -c----w c:\windows\$NtServicePackUninstall$\msobcomm.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\msobdl.dll
    + 2004-08-10 09:00:00 561,664 -c----w c:\windows\$NtServicePackUninstall$\msobmain.dll
    + 2004-08-10 09:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\msobshel.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\msobweb.dll
    + 2007-05-16 15:12:08 1,314,816 -c----w c:\windows\$NtServicePackUninstall$\msoe.dll
    + 2004-08-10 09:00:00 252,928 -c----w c:\windows\$NtServicePackUninstall$\msoeacct.dll
    + 2004-08-10 09:00:00 2,479,616 -c----w c:\windows\$NtServicePackUninstall$\msoeres.dll
    + 2004-08-10 09:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\msoert2.dll
    + 2004-08-10 09:00:00 28,160 -c----w c:\windows\$NtServicePackUninstall$\msoobe.exe
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\msorc32r.dll
    + 2004-08-10 09:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\msorcl32.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\mspaint.exe
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\mspatcha.dll
    + 2004-08-04 02:58:40 5,376 -c----w c:\windows\$NtServicePackUninstall$\mspclock.sys
    + 2004-08-04 02:58:42 4,992 -c----w c:\windows\$NtServicePackUninstall$\mspqm.sys
    + 2004-08-10 09:00:00 48,128 -c----w c:\windows\$NtServicePackUninstall$\msprivs.dll
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\msrle32.dll
    + 2004-03-17 20:05:52 134,144 -c----w c:\windows\$NtServicePackUninstall$\mssap.dll
    + 2004-08-04 03:07:48 15,488 -c----w c:\windows\$NtServicePackUninstall$\mssmbios.sys
    + 2004-08-10 09:00:00 274,432 -c----w c:\windows\$NtServicePackUninstall$\mst120.dll
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\mst123.dll
    + 2004-08-10 09:00:00 274,944 -c----w c:\windows\$NtServicePackUninstall$\mstask.dll
    + 2004-08-04 02:58:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\mstee.sys
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\mstinit.exe
    + 2004-08-10 09:00:00 115,712 -c----w c:\windows\$NtServicePackUninstall$\mstlsapi.dll
    + 2004-08-10 09:00:00 407,552 -c----w c:\windows\$NtServicePackUninstall$\mstsc.exe
    + 2004-08-10 09:00:00 655,360 -c----w c:\windows\$NtServicePackUninstall$\mstscax.dll
    + 2004-08-10 09:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\msutb.dll
    + 2004-08-10 09:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\msv1_0.dll
    + 2004-08-10 09:00:00 1,392,671 -c----w c:\windows\$NtServicePackUninstall$\msvbvm60.dll
    + 2004-08-10 09:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\msvcirt.dll
    + 2004-08-10 09:00:00 413,696 -c----w c:\windows\$NtServicePackUninstall$\msvcp60.dll
    + 2004-08-10 09:00:00 343,040 -c----w c:\windows\$NtServicePackUninstall$\msvcrt.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\msvcrt40.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\msvfw32.dll
    + 2004-08-10 09:00:00 72,704 -c----w c:\windows\$NtServicePackUninstall$\msw3prt.dll
    + 2004-08-10 09:00:00 204,288 -c----w c:\windows\$NtServicePackUninstall$\mswebdvd.dll
    + 2008-06-20 17:41:10 245,248 -c----w c:\windows\$NtServicePackUninstall$\mswsock.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\msxactps.dll
    + 2004-08-10 09:00:00 506,368 -c----w c:\windows\$NtServicePackUninstall$\msxml.dll
    + 2004-08-10 09:00:00 701,440 -c----w c:\windows\$NtServicePackUninstall$\msxml2.dll
    + 2005-09-08 05:03:50 86,728 -c----w c:\windows\$NtServicePackUninstall$\msxml6r.dll
    + 2004-08-04 04:56:46 17,408 -c----w c:\windows\$NtServicePackUninstall$\msyuv.dll
    + 2006-03-01 19:42:42 66,560 -c----w c:\windows\$NtServicePackUninstall$\mtxclu.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\mtxdm.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\mtxex.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\mtxlegih.dll
    + 2006-03-01 19:42:42 91,136 -c----w c:\windows\$NtServicePackUninstall$\mtxoci.dll
    + 2004-08-10 09:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\muisetup.exe
    + 2004-08-10 09:00:00 107,904 -c----w c:\windows\$NtServicePackUninstall$\mup.sys
    + 2004-08-10 09:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\mydocs.dll
    + 2004-08-04 03:10:30 85,376 -c----w c:\windows\$NtServicePackUninstall$\nabtsfec.sys
    + 2004-08-10 09:00:00 221,184 -c----w c:\windows\$NtServicePackUninstall$\nac.dll
     
    blacklogman,
    #10
  12. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-10 09:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\narrator.exe
    + 2004-08-10 09:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\ncobjapi.dll
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ncprov.dll
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\nddeapi.dll
    + 2004-08-10 09:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\nddeapir.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\nddenb32.dll
    + 2004-08-10 09:00:00 182,912 -c----w c:\windows\$NtServicePackUninstall$\ndis.sys
    + 2004-08-04 03:10:14 10,880 -c----w c:\windows\$NtServicePackUninstall$\ndisip.sys
    + 2004-08-10 09:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\ndisnpp.dll
    + 2004-08-10 09:00:00 9,600 -c----w c:\windows\$NtServicePackUninstall$\ndistapi.sys
    + 2005-06-20 17:52:56 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys
    + 2005-06-20 17:52:56 14,592 -c----w c:\windows\$NtServicePackUninstall$\ndisuio.sys.000
    + 2004-08-10 09:00:00 91,776 -c----w c:\windows\$NtServicePackUninstall$\ndiswan.sys
    + 2004-08-10 09:00:00 38,016 -c----w c:\windows\$NtServicePackUninstall$\ndproxy.sys
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\net.exe
    + 2004-08-10 09:00:00 124,928 -c----w c:\windows\$NtServicePackUninstall$\net1.exe
    + 2008-10-15 16:57:55 332,800 -c----w c:\windows\$NtServicePackUninstall$\netapi32.dll
    + 2004-08-10 09:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\netbios.sys
    + 2004-08-10 09:00:00 162,816 -c----w c:\windows\$NtServicePackUninstall$\netbt.sys
    + 2004-08-10 09:00:00 622,080 -c----w c:\windows\$NtServicePackUninstall$\netcfgx.dll
    + 2004-08-10 09:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\netdde.exe
    + 2007-01-15 20:11:26 73,728 -c----w c:\windows\$NtServicePackUninstall$\netfxupdate.exe
    + 2004-08-10 09:00:00 139,264 -c----w c:\windows\$NtServicePackUninstall$\netid.dll
    + 2004-08-10 09:00:00 407,040 -c----w c:\windows\$NtServicePackUninstall$\netlogon.dll
    + 2005-08-22 18:29:46 197,632 -c----w c:\windows\$NtServicePackUninstall$\netman.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\netoc.dll
    + 2004-08-10 09:00:00 875,008 -c----w c:\windows\$NtServicePackUninstall$\netplwiz.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\netrap.dll
    + 2004-08-10 09:00:00 329,728 -c----w c:\windows\$NtServicePackUninstall$\netsetup.exe
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\netsh.exe
    + 2005-06-21 14:00:18 1,705,472 -c----w c:\windows\$NtServicePackUninstall$\netshell.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\netstat.exe
    + 2004-08-10 09:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\netui0.dll
    + 2004-08-10 09:00:00 245,760 -c----w c:\windows\$NtServicePackUninstall$\netui1.dll
    + 2004-08-10 09:00:00 248,832 -c----w c:\windows\$NtServicePackUninstall$\newdev.dll
    + 2004-08-10 09:00:00 61,824 -c----w c:\windows\$NtServicePackUninstall$\nic1394.sys
    + 2004-08-10 09:00:00 103,936 -c----w c:\windows\$NtServicePackUninstall$\nlhtml.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\nmas.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmasnt.dll
    + 2004-08-10 09:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\nmchat.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\nmcom.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\nmft.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\nmmkcert.dll
    + 2004-08-10 09:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\nmnt.sys
    + 2004-08-10 09:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\nmoldwb.dll
    + 2004-08-10 09:00:00 188,416 -c----w c:\windows\$NtServicePackUninstall$\nmwb.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\notepad.exe
    + 2004-08-10 09:00:00 30,848 -c----w c:\windows\$NtServicePackUninstall$\npfs.sys
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\nppagent.exe
    + 2004-08-10 09:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\npptools.dll
    + 2004-08-10 09:00:00 76,800 -c----w c:\windows\$NtServicePackUninstall$\nslookup.exe
    + 2004-08-10 09:00:00 1,200,128 -c----w c:\windows\$NtServicePackUninstall$\ntbackup.exe
    + 2004-08-10 09:00:00 708,096 -c----w c:\windows\$NtServicePackUninstall$\ntdll.dll
    + 2004-08-10 09:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\ntdsapi.dll
    + 2004-08-10 09:00:00 212,992 -c----w c:\windows\$NtServicePackUninstall$\ntevt.dll
    + 2007-02-09 11:10:35 574,464 -c----w c:\windows\$NtServicePackUninstall$\ntfs.sys
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlmp.exe.000
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe
    + 2008-08-14 09:18:46 2,020,864 -c----w c:\windows\$NtServicePackUninstall$\ntkrpamp.exe.000
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\ntlanman.dll
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\ntlsapi.dll
    + 2004-08-10 09:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\ntmarta.dll
    + 2004-08-10 09:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\ntmsapi.dll
    + 2004-08-10 09:00:00 179,712 -c----w c:\windows\$NtServicePackUninstall$\ntmsdba.dll
    + 2004-08-10 09:00:00 488,448 -c----w c:\windows\$NtServicePackUninstall$\ntmsmgr.dll
    + 2004-08-10 09:00:00 435,200 -c----w c:\windows\$NtServicePackUninstall$\ntmssvc.dll
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\ntoc.dll
    + 2008-08-14 09:55:01 2,142,720 -c----w c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
    + 2004-08-10 09:00:00 91,136 -c----w c:\windows\$NtServicePackUninstall$\ntprint.dll
    + 2004-08-10 09:00:00 143,872 -c----w c:\windows\$NtServicePackUninstall$\ntshrui.dll
    + 2004-08-10 09:00:00 419,840 -c----w c:\windows\$NtServicePackUninstall$\ntvdm.exe
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\ntvdmd.dll
    + 2004-08-04 04:56:46 4,274,816 -c----w c:\windows\$NtServicePackUninstall$\nv4_disp.dll
    + 2006-10-13 12:35:12 64,000 -c----w c:\windows\$NtServicePackUninstall$\nwapi32.dll
    + 2004-08-10 09:00:00 88,448 -c----w c:\windows\$NtServicePackUninstall$\nwlnkipx.sys
    + 2006-10-13 12:35:12 142,336 -c----w c:\windows\$NtServicePackUninstall$\nwprovau.dll
    + 2006-10-13 10:23:15 163,584 -c----w c:\windows\$NtServicePackUninstall$\nwrdr.sys
    + 2006-10-13 12:35:12 65,536 -c----w c:\windows\$NtServicePackUninstall$\nwwks.dll
    + 2004-08-10 09:00:00 266,752 -c----w c:\windows\$NtServicePackUninstall$\oakley.dll
    + 2004-08-10 09:00:00 229,376 -c----w c:\windows\$NtServicePackUninstall$\obelog.dll
    + 2004-08-10 09:00:00 966,656 -c----w c:\windows\$NtServicePackUninstall$\obemetal.dll
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\obemtllc.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\obepopc.dll
    + 2004-08-10 09:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\objsel.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\ocgen.dll
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\ocmanage.dll
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\ocmsn.dll
    + 2004-08-10 09:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\odbc32.dll
    + 2004-08-10 09:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\odbc32gt.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\odbcad32.exe
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\odbcbcp.dll
    + 2004-08-10 09:00:00 135,168 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\odbcconf.exe
    + 2004-08-10 09:00:00 106,496 -c----w c:\windows\$NtServicePackUninstall$\odbccp32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccr32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\odbccu32.dll
    + 2004-08-10 09:00:00 94,208 -c----w c:\windows\$NtServicePackUninstall$\odbcint.dll
    + 2004-08-10 09:00:00 53,279 -c----w c:\windows\$NtServicePackUninstall$\odbcji32.dll
    + 2004-08-10 09:00:00 278,559 -c----w c:\windows\$NtServicePackUninstall$\odbcjt32.dll
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\odbcp32r.dll
    + 2004-08-10 09:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\odbctrac.dll
    + 2004-08-10 09:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\oddbse32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odexl32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odfox32.dll
    + 2004-08-10 09:00:00 20,510 -c----w c:\windows\$NtServicePackUninstall$\odpdx32.dll
    + 2004-08-10 09:00:00 20,511 -c----w c:\windows\$NtServicePackUninstall$\odtext32.dll
    + 2004-08-10 09:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\oeimport.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\oemig50.exe
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\oemiglib.dll
    + 2004-08-10 09:00:00 120,832 -c----w c:\windows\$NtServicePackUninstall$\offfilt.dll
    + 2005-07-26 04:39:48 1,285,120 -c----w c:\windows\$NtServicePackUninstall$\ole32.dll
    + 2007-12-04 18:38:13 550,912 -c----w c:\windows\$NtServicePackUninstall$\oleaut32.dll
    + 2005-07-26 04:39:48 74,752 -c----w c:\windows\$NtServicePackUninstall$\olecli32.dll
    + 2005-07-26 04:39:49 37,888 -c----w c:\windows\$NtServicePackUninstall$\olecnv32.dll
    + 2004-08-10 09:00:00 487,424 -c----w c:\windows\$NtServicePackUninstall$\oledb32.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\oledb32r.dll
    + 2006-10-16 16:15:00 122,880 -c----w c:\windows\$NtServicePackUninstall$\oledlg.dll
    + 2004-08-10 09:00:00 107,008 -c----w c:\windows\$NtServicePackUninstall$\oleprn.dll
    + 2004-08-10 09:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\olepro32.dll
    + 2004-08-10 09:00:00 51,200 -c----w c:\windows\$NtServicePackUninstall$\oobebaln.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\openfiles.exe
    + 2004-08-10 09:00:00 713,728 -c----w c:\windows\$NtServicePackUninstall$\opengl32.dll
    + 2004-08-10 09:00:00 215,552 -c----w c:\windows\$NtServicePackUninstall$\osk.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\osuninst.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\p2p.dll
    + 2004-08-10 09:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\p2pgasvc.dll
    + 2004-08-10 09:00:00 312,320 -c----w c:\windows\$NtServicePackUninstall$\p2pgraph.dll
    + 2004-08-10 09:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\p2pnetsh.dll
    + 2004-08-10 09:00:00 526,848 -c----w c:\windows\$NtServicePackUninstall$\p2psvc.dll
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\p3.sys
    + 2004-08-10 09:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\packager.exe
    + 2004-08-10 09:00:00 80,128 -c----w c:\windows\$NtServicePackUninstall$\parport.sys
    + 2004-08-10 09:00:00 18,688 -c----w c:\windows\$NtServicePackUninstall$\partmgr.sys
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\pautoenr.dll
    + 2004-08-10 09:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\pchshell.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\pchsvc.dll
    + 2004-08-04 03:07:48 68,224 -c----w c:\windows\$NtServicePackUninstall$\pci.sys
    + 2004-08-04 02:59:42 25,088 -c----w c:\windows\$NtServicePackUninstall$\pciidex.sys
    + 2004-08-10 09:00:00 119,936 -c----w c:\windows\$NtServicePackUninstall$\pcmcia.sys
    + 2004-08-10 09:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\pdh.dll
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\perfctrs.dll
    + 2004-08-10 09:00:00 26,624 -c----w c:\windows\$NtServicePackUninstall$\perfdisk.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\perfmon.exe
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\perfnet.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\perfos.dll
    + 2004-08-10 09:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\perfproc.dll
    + 2006-10-24 16:30:20 412,160 -c----w c:\windows\$NtServicePackUninstall$\photometadatahandler.dll
    + 2004-08-10 09:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\photowiz.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\pid.dll
    + 2004-08-10 09:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\pidgen.dll
    + 2004-08-10 09:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\pinball.exe
    + 2004-08-10 09:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\ping.exe
    + 2004-08-10 09:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\pjlmon.dll
    + 2004-08-10 09:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\pnrpnsp.dll
    + 2004-08-10 09:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\policman.dll
    + 2004-08-10 09:00:00 105,472 -c----w c:\windows\$NtServicePackUninstall$\polstore.dll
    + 2004-03-16 15:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys
    + 2004-03-16 15:58:20 136,960 -c----w c:\windows\$NtServicePackUninstall$\portcls.sys.000
    + 2004-08-10 09:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\powercfg.exe
    + 2005-06-24 15:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys
    + 2005-06-24 15:47:40 8,832 -c----w c:\windows\$NtServicePackUninstall$\powerfil.sys.000
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\powrprof.dll
    + 2004-08-10 09:00:00 560,640 -c----w c:\windows\$NtServicePackUninstall$\printui.dll
    + 2004-08-10 09:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\processr.sys
    + 2004-08-10 09:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\profmap.dll
    + 2004-08-10 09:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\progman.exe
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\proquota.exe
    + 2004-08-10 09:00:00 237,056 -c----w c:\windows\$NtServicePackUninstall$\provthrd.dll
    + 2004-08-10 09:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\proxycfg.exe
    + 1980-06-03 03:00:00 135,248 -c----w c:\windows\$NtServicePackUninstall$\ps5ui.dll
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\psapi.dll
    + 2004-08-10 09:00:00 96,768 -c----w c:\windows\$NtServicePackUninstall$\psbase.dll
    + 2004-08-10 09:00:00 69,120 -c----w c:\windows\$NtServicePackUninstall$\psched.sys
    + 1980-06-03 03:00:00 470,608 -c----w c:\windows\$NtServicePackUninstall$\pscript5.dll
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\pstorec.dll
    + 2004-08-10 09:00:00 34,304 -c----w c:\windows\$NtServicePackUninstall$\pstorsvc.dll
    + 2004-08-10 09:00:00 192,512 -c----w c:\windows\$NtServicePackUninstall$\qcap.dll
    + 2004-08-10 09:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\qdv.dll
    + 2005-06-28 17:55:08 385,024 -c----w c:\windows\$NtServicePackUninstall$\qdvd.dll
    + 2004-08-10 09:00:00 562,176 -c----w c:\windows\$NtServicePackUninstall$\qedit.dll
    + 2004-08-10 09:00:00 733,696 -c----w c:\windows\$NtServicePackUninstall$\qedwipes.dll
    + 2004-08-10 09:00:00 382,464 -c----w c:\windows\$NtServicePackUninstall$\qmgr.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\qmgrprxy.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\qprocess.exe
    + 2008-05-07 04:55:40 1,288,192 -c----w c:\windows\$NtServicePackUninstall$\quartz.dll
    + 2006-06-22 05:06:30 1,435,648 -c----w c:\windows\$NtServicePackUninstall$\query.dll
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\racpldlg.dll
    + 2006-06-26 17:37:10 8,192 -c----w c:\windows\$NtServicePackUninstall$\rasadhlp.dll
    + 2004-08-10 09:00:00 236,544 -c----w c:\windows\$NtServicePackUninstall$\rasapi32.dll
    + 2004-08-10 09:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\rasauto.dll
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\raschap.dll
    + 2004-08-10 09:00:00 657,920 -c----w c:\windows\$NtServicePackUninstall$\rasdlg.dll
    + 2004-08-10 09:00:00 51,328 -c----w c:\windows\$NtServicePackUninstall$\rasl2tp.sys
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rasman.dll
    + 2006-06-22 10:47:18 181,248 -c----w c:\windows\$NtServicePackUninstall$\rasmans.dll
    + 2004-08-10 09:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\rasphone.exe
    + 2004-08-10 09:00:00 206,336 -c----w c:\windows\$NtServicePackUninstall$\rasppp.dll
    + 2004-08-10 09:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\raspppoe.sys
    + 2004-08-10 09:00:00 48,384 -c----w c:\windows\$NtServicePackUninstall$\raspptp.sys
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\rassapi.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\rastapi.dll
    + 2004-08-10 09:00:00 112,128 -c----w c:\windows\$NtServicePackUninstall$\rastls.dll
    + 2004-08-10 09:00:00 102,400 -c----w c:\windows\$NtServicePackUninstall$\rcbdyctl.dll
    + 2004-08-10 09:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\rcimlby.exe
    + 2004-08-10 09:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\rcp.exe
    + 2006-05-05 09:47:57 174,592 -c----w c:\windows\$NtServicePackUninstall$\rdbss.sys
    + 2004-08-10 09:00:00 147,968 -c----w c:\windows\$NtServicePackUninstall$\rdchost.dll
    + 2004-08-10 09:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\rdpclip.exe
    + 2004-08-10 09:00:00 92,168 -c----w c:\windows\$NtServicePackUninstall$\rdpdd.dll
    + 2004-08-04 03:01:16 196,864 -c----w c:\windows\$NtServicePackUninstall$\rdpdr.sys
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\rdpsnd.dll
    + 2005-06-10 04:09:46 139,528 -c----w c:\windows\$NtServicePackUninstall$\rdpwd.sys
    + 2004-08-10 09:00:00 87,176 -c----w c:\windows\$NtServicePackUninstall$\rdpwsx.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rdsaddin.exe
    + 2004-08-10 09:00:00 67,072 -c----w c:\windows\$NtServicePackUninstall$\rdshost.exe
    + 2004-08-04 02:59:38 57,472 -c----w c:\windows\$NtServicePackUninstall$\redbook.sys
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\reg.exe
    + 2004-08-10 09:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\regapi.dll
    + 2004-08-10 09:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\regedit.exe
    + 2004-08-10 09:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\regsvc.dll
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\regsvr32.exe
    + 2004-08-10 09:00:00 397,824 -c----w c:\windows\$NtServicePackUninstall$\regwizc.dll
    + 2004-08-10 09:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\remotepg.dll
    + 2004-08-10 09:00:00 177,152 -c----w c:\windows\$NtServicePackUninstall$\repdrvfs.dll
    + 2004-08-10 09:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\resutils.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\rexec.exe
    + 2006-11-27 14:54:06 433,152 -c----w c:\windows\$NtServicePackUninstall$\riched20.dll
    + 2008-05-08 12:28:49 202,752 -c----w c:\windows\$NtServicePackUninstall$\rmcast.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismp.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys
    + 2004-11-30 22:28:36 30,464 -c----w c:\windows\$NtServicePackUninstall$\rndismpx.sys.000
    + 2007-07-09 13:16:16 582,656 -c----w c:\windows\$NtServicePackUninstall$\rpcrt4.dll
    + 2005-07-26 04:39:49 397,824 -c----w c:\windows\$NtServicePackUninstall$\rpcss.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\rrcm.dll
    + 2004-08-10 09:00:00 152,576 -c----w c:\windows\$NtServicePackUninstall$\rsaenh.dll
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\rsh.exe
    + 2004-08-10 09:00:00 39,936 -c----w c:\windows\$NtServicePackUninstall$\rshx32.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\rsmps.dll
    + 2004-08-10 09:00:00 107,520 -c----w c:\windows\$NtServicePackUninstall$\rsnotify.exe
    + 2004-08-10 09:00:00 380,416 -c----w c:\windows\$NtServicePackUninstall$\rstrui.exe
    + 2004-08-10 09:00:00 90,112 -c----w c:\windows\$NtServicePackUninstall$\rsvpsp.dll
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\rtcshare.exe
    + 2004-08-10 09:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\rtipxmib.dll
    + 2004-08-10 09:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\rtutils.dll
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\rundll32.exe
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\runonce.exe
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\safrcdlg.dll
    + 2004-08-10 09:00:00 29,696 -c----w c:\windows\$NtServicePackUninstall$\safrdm.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\safrslv.dll
    + 2004-08-10 09:00:00 64,000 -c----w c:\windows\$NtServicePackUninstall$\samlib.dll
    + 2004-08-10 09:00:00 415,744 -c----w c:\windows\$NtServicePackUninstall$\samsrv.dll
    + 2004-08-10 09:00:00 741,376 -c----w c:\windows\$NtServicePackUninstall$\sapi.dll
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\savedump.exe
    + 2004-08-10 09:00:00 159,232 -c----w c:\windows\$NtServicePackUninstall$\sbeio.dll
     
    blacklogman,
    #11
  13. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2005-05-31 15:46:30 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys
    + 2005-05-31 15:46:30 43,264 -c----w c:\windows\$NtServicePackUninstall$\sbp2port.sys.000
    + 2004-08-10 09:00:00 69,632 -c----w c:\windows\$NtServicePackUninstall$\scarddlg.dll
    + 2004-08-10 09:00:00 95,744 -c----w c:\windows\$NtServicePackUninstall$\scardsvr.exe
    + 2004-08-10 09:00:00 171,008 -c----w c:\windows\$NtServicePackUninstall$\sccsccp.dll
    + 2004-08-10 09:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\scecli.dll
    + 2004-08-10 09:00:00 313,856 -c----w c:\windows\$NtServicePackUninstall$\scesrv.dll
    + 2007-04-25 14:21:15 144,896 -c----w c:\windows\$NtServicePackUninstall$\schannel.dll
    + 2004-08-10 09:00:00 190,976 -c----w c:\windows\$NtServicePackUninstall$\schedsvc.dll
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\schtasks.exe
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\sclgntfy.dll
    + 2004-08-10 09:00:00 36,864 -c----w c:\windows\$NtServicePackUninstall$\scrcons.exe
    + 2004-08-10 09:00:00 202,752 -c----w c:\windows\$NtServicePackUninstall$\script.dll
    + 2004-08-10 09:00:00 9,216 -c----w c:\windows\$NtServicePackUninstall$\scrnsave.scr
    + 2004-08-10 09:00:00 159,744 -c----w c:\windows\$NtServicePackUninstall$\scrobj.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\scrrun.dll
    + 2004-08-10 09:00:00 96,256 -c----w c:\windows\$NtServicePackUninstall$\scsiport.sys
    + 2004-08-10 09:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\sdbinst.exe
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sdbus.sys
    + 2004-08-10 09:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sdhcinst.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\secedit.exe
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\seclogon.dll
    + 2004-08-10 09:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\secur32.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\security.dll
    + 2004-08-10 09:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\sendcmsg.dll
    + 2004-08-10 09:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\sendmail.dll
    + 2004-08-10 09:00:00 38,912 -c----w c:\windows\$NtServicePackUninstall$\sens.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\sensapi.dll
    + 2004-08-10 09:00:00 15,488 -c----w c:\windows\$NtServicePackUninstall$\serenum.sys
    + 2004-08-10 09:00:00 64,896 -c----w c:\windows\$NtServicePackUninstall$\serial.sys
    + 2004-08-10 09:00:00 56,320 -c----w c:\windows\$NtServicePackUninstall$\servdeps.dll
    + 2004-08-10 09:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\services.exe
    + 2004-08-10 09:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\sessmgr.exe
    + 2004-08-10 09:00:00 31,232 -c----w c:\windows\$NtServicePackUninstall$\sethc.exe
    + 2007-01-15 20:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\setregni.exe
    + 2004-08-10 09:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\setup.exe
    + 2004-08-10 09:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\setup50.exe
    + 2004-08-10 09:00:00 983,552 -c----w c:\windows\$NtServicePackUninstall$\setupapi.dll
    + 2004-08-10 09:00:00 101,376 -c----w c:\windows\$NtServicePackUninstall$\setupqry.dll
    + 2004-08-10 09:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\sfc.dll
    + 2004-08-10 09:00:00 140,288 -c----w c:\windows\$NtServicePackUninstall$\sfc_os.dll
    + 2004-08-10 09:00:00 1,580,544 -c----w c:\windows\$NtServicePackUninstall$\sfcfiles.dll
    + 2004-08-10 09:00:00 11,136 -c----w c:\windows\$NtServicePackUninstall$\sffdisk.sys
    + 2004-08-10 09:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\sffp_sd.sys
    + 2004-08-10 09:00:00 11,392 -c----w c:\windows\$NtServicePackUninstall$\sfloppy.sys
    + 2004-08-10 09:00:00 549,376 -c----w c:\windows\$NtServicePackUninstall$\shdoclc.dll
    + 2006-10-23 15:34:22 1,497,600 -c----w c:\windows\$NtServicePackUninstall$\shdocvw.dll
    + 2007-10-26 03:34:01 8,460,288 -c----w c:\windows\$NtServicePackUninstall$\shell32.dll
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\shfolder.dll
    + 2004-08-10 09:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\shgina.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\shimeng.dll
    + 2004-08-10 09:00:00 438,272 -c----w c:\windows\$NtServicePackUninstall$\shimgvw.dll
    + 2006-10-23 15:34:22 474,112 -c----w c:\windows\$NtServicePackUninstall$\shlwapi.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\shmedia.dll
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\shmgrate.exe
    + 2004-08-10 09:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\shrpubw.exe
    + 2004-08-10 09:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\shscrap.dll
    + 2006-12-19 21:52:18 134,656 -c----w c:\windows\$NtServicePackUninstall$\shsvcs.dll
    + 2004-08-10 09:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\shutdown.exe
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\sigtab.dll
    + 2004-08-10 09:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\sigverif.exe
    + 2004-08-04 03:07:44 41,088 -c----w c:\windows\$NtServicePackUninstall$\sisagp.sys
    + 2004-08-10 09:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\skeys.exe
    + 2004-08-10 09:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\slayerxp.dll
    + 2004-08-10 09:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\slbiop.dll
    + 2004-08-04 03:10:18 11,136 -c----w c:\windows\$NtServicePackUninstall$\slip.sys
    + 2004-08-10 09:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\smbinst.exe
    + 2004-08-10 09:00:00 363,008 -c----w c:\windows\$NtServicePackUninstall$\smlogcfg.dll
    + 2004-08-10 09:00:00 89,600 -c----w c:\windows\$NtServicePackUninstall$\smlogsvc.exe
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\smss.exe
    + 2004-08-10 09:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\sndrec32.exe
    + 2004-08-10 09:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\sniffpol.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\snmpapi.dll
    + 2004-08-10 09:00:00 182,272 -c----w c:\windows\$NtServicePackUninstall$\snmpsnap.dll
    + 2004-08-10 09:00:00 130,048 -c----w c:\windows\$NtServicePackUninstall$\softkbd.dll
    + 2004-08-10 09:00:00 25,472 -c----w c:\windows\$NtServicePackUninstall$\sonydcam.sys
    + 2004-08-10 09:00:00 23,552 -c----w c:\windows\$NtServicePackUninstall$\sort.exe
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\spgrmr.dll
    + 2004-08-10 09:00:00 538,624 -c----w c:\windows\$NtServicePackUninstall$\spider.exe
    + 2004-08-10 09:00:00 12,800 -c----w c:\windows\$NtServicePackUninstall$\spiisupd.exe
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys
    + 2006-06-14 08:47:46 6,400 -c----w c:\windows\$NtServicePackUninstall$\splitter.sys.000
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\spnpinst.exe
    + 2004-08-10 09:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\spoolss.dll
    + 2005-06-10 23:53:32 57,856 -c----w c:\windows\$NtServicePackUninstall$\spoolsv.exe
    + 2004-08-10 09:00:00 250,880 -c----w c:\windows\$NtServicePackUninstall$\sptip.dll
    + 2008-04-14 09:42:08 438,272 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spcompat.dll
    + 2007-08-11 00:46:18 231,288 -c----w c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe
    + 2007-08-11 00:46:28 382,840 -c----w c:\windows\$NtServicePackUninstall$\spuninst\updspapi.dll
    + 2004-08-10 09:00:00 151,552 -c----w c:\windows\$NtServicePackUninstall$\sqldb20.dll
    + 2004-08-10 09:00:00 528,384 -c----w c:\windows\$NtServicePackUninstall$\sqloledb.dll
    + 2004-08-10 09:00:00 462,848 -c----w c:\windows\$NtServicePackUninstall$\sqlqp20.dll
    + 2004-08-10 09:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\sqlse20.dll
    + 2004-08-10 09:00:00 442,368 -c----w c:\windows\$NtServicePackUninstall$\sqlsrv32.dll
    + 2004-08-10 09:00:00 180,800 -c----w c:\windows\$NtServicePackUninstall$\sqlunirl.dll
    + 2004-08-10 09:00:00 217,088 -c----w c:\windows\$NtServicePackUninstall$\sqlxmlx.dll
    + 2004-08-10 09:00:00 73,472 -c----w c:\windows\$NtServicePackUninstall$\sr.sys
    + 2004-08-10 09:00:00 58,434 -c----w c:\windows\$NtServicePackUninstall$\srchctls.dll
    + 2004-08-10 09:00:00 725,566 -c----w c:\windows\$NtServicePackUninstall$\srchui.dll
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\srclient.dll
    + 2004-08-10 09:00:00 239,104 -c----w c:\windows\$NtServicePackUninstall$\srrstr.dll
    + 2004-08-10 09:00:00 170,496 -c----w c:\windows\$NtServicePackUninstall$\srsvc.dll
    + 2008-12-11 11:57:21 333,184 -c----w c:\windows\$NtServicePackUninstall$\srv.sys
    + 2004-12-07 19:32:34 96,768 -c----w c:\windows\$NtServicePackUninstall$\srvsvc.dll
    + 2004-08-10 09:00:00 704,512 -c----w c:\windows\$NtServicePackUninstall$\ss3dfo.scr
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ssbezier.scr
    + 2004-08-10 09:00:00 34,816 -c----w c:\windows\$NtServicePackUninstall$\ssdpapi.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
    + 2004-08-10 09:00:00 393,216 -c----w c:\windows\$NtServicePackUninstall$\ssflwbox.scr
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ssmarque.scr
    + 2004-08-10 09:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\ssmypics.scr
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\ssmyst.scr
    + 2004-08-10 09:00:00 610,304 -c----w c:\windows\$NtServicePackUninstall$\sspipes.scr
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\ssstars.scr
    + 2004-08-10 09:00:00 679,936 -c----w c:\windows\$NtServicePackUninstall$\sstext3d.scr
    + 2004-08-10 09:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\sstub.dll
    + 2004-08-10 09:00:00 54,272 -c----w c:\windows\$NtServicePackUninstall$\stclient.dll
    + 2004-08-10 09:00:00 86,528 -c----w c:\windows\$NtServicePackUninstall$\stdprov.dll
    + 2004-08-10 09:00:00 67,584 -c----w c:\windows\$NtServicePackUninstall$\sti.dll
    + 2004-08-10 09:00:00 136,704 -c----w c:\windows\$NtServicePackUninstall$\sti_ci.dll
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\stimon.exe
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\stobject.dll
    + 2004-08-04 04:56:46 74,752 -c----w c:\windows\$NtServicePackUninstall$\storprop.dll
    + 2004-08-04 04:08:04 48,640 -c----w c:\windows\$NtServicePackUninstall$\stream.sys
    + 2004-08-04 03:10:14 15,360 -c----w c:\windows\$NtServicePackUninstall$\streamip.sys
    + 2004-08-10 09:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\strmfilt.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\svchost.exe
    + 2004-08-04 02:58:42 4,352 -c----w c:\windows\$NtServicePackUninstall$\swenum.sys
    + 2001-08-17 18:00:52 54,272 -c----w c:\windows\$NtServicePackUninstall$\swmidi.sys
    + 2006-10-19 13:56:32 713,216 -c----w c:\windows\$NtServicePackUninstall$\sxs.dll
    + 2004-08-10 09:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\synceng.dll
    + 2004-08-10 09:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\syncui.dll
    + 2004-08-04 03:15:56 60,800 -c----w c:\windows\$NtServicePackUninstall$\sysaudio.sys
    + 2004-08-10 09:00:00 168,960 -c----w c:\windows\$NtServicePackUninstall$\sysmod.dll
    + 2004-08-10 09:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\sysocmgr.exe
    + 2004-08-10 09:00:00 984,576 -c----w c:\windows\$NtServicePackUninstall$\syssetup.dll
    + 2004-07-19 22:54:18 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\system.dll
    + 2004-08-10 09:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\systeminfo.exe
    + 2005-10-17 21:14:46 118,272 -c----w c:\windows\$NtServicePackUninstall$\t2embed.dll
    + 2004-08-10 09:00:00 33,792 -c----w c:\windows\$NtServicePackUninstall$\tabletoc.dll
    + 2004-08-10 09:00:00 14,976 -c----w c:\windows\$NtServicePackUninstall$\tape.sys
    + 2004-08-10 09:00:00 858,624 -c----w c:\windows\$NtServicePackUninstall$\tapi3.dll
    + 2004-08-10 09:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\tapi32.dll
    + 2005-07-08 16:27:56 249,344 -c----w c:\windows\$NtServicePackUninstall$\tapisrv.dll
    + 2004-08-10 09:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\taskkill.exe
    + 2004-08-10 09:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\tasklist.exe
    + 2004-08-10 09:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\taskmgr.exe
    + 2008-06-20 10:45:13 360,320 -c----w c:\windows\$NtServicePackUninstall$\tcpip.sys
    + 2008-06-20 09:52:06 225,920 -c----w c:\windows\$NtServicePackUninstall$\tcpip6.sys
    + 2004-08-10 09:00:00 14,848 -c----w c:\windows\$NtServicePackUninstall$\tcpmib.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmon.dll
    + 2004-08-10 09:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\tcpmonui.dll
    + 2004-08-10 09:00:00 18,560 -c----w c:\windows\$NtServicePackUninstall$\tdi.sys
    + 2004-08-10 09:00:00 12,040 -c----w c:\windows\$NtServicePackUninstall$\tdpipe.sys
    + 2004-08-10 09:00:00 21,896 -c----w c:\windows\$NtServicePackUninstall$\tdtcp.sys
    + 2005-05-10 23:45:48 75,776 -c----w c:\windows\$NtServicePackUninstall$\telnet.exe
    + 2004-08-04 05:01:08 40,840 -c----w c:\windows\$NtServicePackUninstall$\termdd.sys
    + 2004-08-10 09:00:00 358,400 -c----w c:\windows\$NtServicePackUninstall$\termmgr.dll
    + 2008-04-15 14:53:29 295,424 -c----w c:\windows\$NtServicePackUninstall$\termsrv.dll
    + 2004-08-10 09:00:00 385,536 -c----w c:\windows\$NtServicePackUninstall$\themeui.dll
    + 2004-08-10 09:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\tlntadmn.exe
    + 2004-08-10 09:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\tlntsess.exe
    + 2004-08-10 09:00:00 73,216 -c----w c:\windows\$NtServicePackUninstall$\tlntsvr.exe
    + 2004-08-10 09:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\tlntsvrp.dll
    + 2007-01-15 20:11:30 57,344 -c----w c:\windows\$NtServicePackUninstall$\togac.exe
    + 2004-08-10 09:00:00 347,136 -c----w c:\windows\$NtServicePackUninstall$\tourstart.exe
    + 2004-08-10 09:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\tracerpt.exe
    + 2004-08-10 09:00:00 12,288 -c----w c:\windows\$NtServicePackUninstall$\tracert.exe
    + 2004-08-10 09:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\tree.com
    + 2004-08-10 09:00:00 153,088 -c----w c:\windows\$NtServicePackUninstall$\triedit.dll
    + 2004-08-10 09:00:00 90,624 -c----w c:\windows\$NtServicePackUninstall$\trkwks.dll
    + 2004-08-10 09:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\tscfgwmi.dll
    + 2004-08-10 09:00:00 12,168 -c----w c:\windows\$NtServicePackUninstall$\tsddd.dll
    + 2004-08-10 09:00:00 279,040 -c----w c:\windows\$NtServicePackUninstall$\tshoot.dll
    + 2004-08-10 09:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\tsoc.dll
    + 2004-08-10 09:00:00 12,416 -c----w c:\windows\$NtServicePackUninstall$\tunmp.sys
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\twain_32.dll
    + 2004-08-10 09:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\twext.dll
    + 2005-07-26 04:39:49 101,376 -c----w c:\windows\$NtServicePackUninstall$\txflog.dll
    + 2008-10-22 09:47:07 62,976 -c----w c:\windows\$NtServicePackUninstall$\tzchange.exe
    + 2004-08-10 09:00:00 66,176 -c----w c:\windows\$NtServicePackUninstall$\udfs.sys
    + 2004-08-10 09:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\udhisapi.dll
    + 2004-08-10 09:00:00 275,456 -c----w c:\windows\$NtServicePackUninstall$\ulib.dll
    + 2004-08-10 09:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\umandlg.dll
    + 2005-08-23 03:35:42 123,392 -c----w c:\windows\$NtServicePackUninstall$\umpnpmgr.dll
    + 2004-08-04 05:56:48 264,704 -c----w c:\windows\$NtServicePackUninstall$\unidrv.dll
    + 2004-08-04 05:56:48 197,120 -c----w c:\windows\$NtServicePackUninstall$\unidrvui.dll
    + 2004-08-10 09:00:00 74,240 -c----w c:\windows\$NtServicePackUninstall$\unimdmat.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\uniplat.dll
    + 2004-08-04 05:56:36 619,520 -c----w c:\windows\$NtServicePackUninstall$\unires.dll
    + 2004-08-10 09:00:00 316,416 -c----w c:\windows\$NtServicePackUninstall$\untfs.dll
    + 2007-04-23 10:32:54 364,160 -c----w c:\windows\$NtServicePackUninstall$\update.sys
    + 2004-08-10 09:00:00 150,528 -c----w c:\windows\$NtServicePackUninstall$\uploadm.exe
    + 2004-08-10 09:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\upnp.dll
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\upnpcont.exe
    + 2007-02-05 20:17:02 185,344 -c----w c:\windows\$NtServicePackUninstall$\upnphost.dll
    + 2004-08-10 09:00:00 239,616 -c----w c:\windows\$NtServicePackUninstall$\upnpui.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\ups.exe
    + 2004-12-08 13:34:36 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023.sys
    + 2004-12-08 13:34:36 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023x.sys
    + 2004-12-08 13:34:36 12,800 -c----w c:\windows\$NtServicePackUninstall$\usb8023x.sys.000
    + 2004-08-10 09:00:00 23,808 -c----w c:\windows\$NtServicePackUninstall$\usbcamd.sys
    + 2004-08-10 09:00:00 23,936 -c----w c:\windows\$NtServicePackUninstall$\usbcamd2.sys
    + 2005-10-25 23:39:41 27,264 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys
    + 2005-10-25 23:39:41 27,264 -c----w c:\windows\$NtServicePackUninstall$\usbehci.sys.000
    + 2004-08-04 03:08:44 57,600 -c----w c:\windows\$NtServicePackUninstall$\usbhub.sys
    + 2004-08-10 09:00:00 16,000 -c----w c:\windows\$NtServicePackUninstall$\usbintel.sys
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\usbmon.dll
    + 2005-10-25 23:39:41 143,104 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys
    + 2005-10-25 23:39:41 143,104 -c----w c:\windows\$NtServicePackUninstall$\usbport.sys.000
    + 2004-08-04 03:01:26 25,856 -c----w c:\windows\$NtServicePackUninstall$\usbprint.sys
    + 2004-08-04 03:58:46 15,104 -c----w c:\windows\$NtServicePackUninstall$\usbscan.sys
    + 2004-08-04 03:08:48 26,496 -c----w c:\windows\$NtServicePackUninstall$\usbstor.sys
    + 2004-08-04 03:08:38 20,480 -c----w c:\windows\$NtServicePackUninstall$\usbuhci.sys
    + 2004-08-04 04:56:48 74,240 -c----w c:\windows\$NtServicePackUninstall$\usbui.dll
    + 2007-03-08 15:36:28 577,536 -c----w c:\windows\$NtServicePackUninstall$\user32.dll
    + 2004-08-10 09:00:00 723,456 -c----w c:\windows\$NtServicePackUninstall$\userenv.dll
    + 2004-08-10 09:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\userinit.exe
    + 2004-08-10 09:00:00 406,528 -c----w c:\windows\$NtServicePackUninstall$\usp10.dll
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\utilman.exe
    + 2004-08-10 09:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\uxtheme.dll
    + 2004-08-10 09:00:00 30,749 -c----w c:\windows\$NtServicePackUninstall$\vbajet32.dll
    + 2006-11-08 02:03:36 413,696 -c----w c:\windows\$NtServicePackUninstall$\vbscript.dll
    + 2004-08-10 09:00:00 26,112 -c----w c:\windows\$NtServicePackUninstall$\vdmdbg.dll
    + 2004-08-10 09:00:00 51,712 -c----w c:\windows\$NtServicePackUninstall$\vdmredir.dll
    + 2006-03-17 00:38:01 28,672 -c----w c:\windows\$NtServicePackUninstall$\verclsid.exe
    + 2004-08-10 09:00:00 13,312 -c----w c:\windows\$NtServicePackUninstall$\verifier.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\version.dll
     
    blacklogman,
    #12
  14. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-04 04:56:48 53,760 -c----w c:\windows\$NtServicePackUninstall$\vfwwdm32.dll
    + 2004-08-10 09:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\vga.sys
    + 2004-08-04 03:07:44 42,240 -c----w c:\windows\$NtServicePackUninstall$\viaagp.sys
    + 2004-08-04 02:59:44 5,376 -c----w c:\windows\$NtServicePackUninstall$\viaide.sys
    + 2004-08-10 09:00:00 79,744 -c----w c:\windows\$NtServicePackUninstall$\videoprt.sys
    + 2004-08-10 09:00:00 131,584 -c----w c:\windows\$NtServicePackUninstall$\viewprov.dll
    + 2004-08-10 09:00:00 52,352 -c----w c:\windows\$NtServicePackUninstall$\volsnap.sys
    + 2004-08-10 09:00:00 430,592 -c----w c:\windows\$NtServicePackUninstall$\vssapi.dll
    + 2004-08-10 09:00:00 289,792 -c----w c:\windows\$NtServicePackUninstall$\vssvc.exe
    + 2004-08-10 09:00:00 174,592 -c----w c:\windows\$NtServicePackUninstall$\w32time.dll
    + 2004-08-10 09:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\w3ssl.dll
    + 2004-08-10 09:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\wab.exe
    + 2007-05-16 15:12:12 510,976 -c----w c:\windows\$NtServicePackUninstall$\wab32.dll
    + 2004-08-10 09:00:00 249,856 -c----w c:\windows\$NtServicePackUninstall$\wab32res.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\wabfind.dll
    + 2007-05-16 15:12:15 85,504 -c----w c:\windows\$NtServicePackUninstall$\wabimp.dll
    + 2004-08-10 09:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\wabmig.exe
    + 2004-08-10 09:00:00 34,560 -c----w c:\windows\$NtServicePackUninstall$\wanarp.sys
    + 2004-08-10 09:00:00 17,664 -c----w c:\windows\$NtServicePackUninstall$\watchdog.sys
    + 2004-08-10 09:00:00 208,896 -c----w c:\windows\$NtServicePackUninstall$\wavemsp.dll
    + 2004-08-10 09:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wbemcntl.dll
    + 2004-08-10 09:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wbemcomn.dll
    + 2004-08-10 09:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\wbemcons.dll
    + 2004-08-10 09:00:00 530,944 -c----w c:\windows\$NtServicePackUninstall$\wbemcore.dll
    + 2004-08-10 09:00:00 178,176 -c----w c:\windows\$NtServicePackUninstall$\wbemdisp.dll
    + 2004-08-10 09:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\wbemess.dll
    + 2004-08-10 09:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\wbemperf.dll
    + 2004-08-10 09:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\wbemprox.dll
    + 2004-08-10 09:00:00 43,520 -c----w c:\windows\$NtServicePackUninstall$\wbemsvc.dll
    + 2004-08-10 09:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\wbemtest.exe
    + 2004-08-10 09:00:00 197,120 -c----w c:\windows\$NtServicePackUninstall$\wbemupgd.dll
    + 2006-03-24 04:37:50 49,152 -c----w c:\windows\$NtServicePackUninstall$\wdigest.dll
    + 2004-08-04 04:56:58 23,552 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.drv
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys
    + 2006-06-14 09:00:45 82,944 -c----w c:\windows\$NtServicePackUninstall$\wdmaud.sys.000
    + 2006-01-04 03:35:05 68,096 -c----w c:\windows\$NtServicePackUninstall$\webclnt.dll
    + 2004-08-10 09:00:00 135,680 -c----w c:\windows\$NtServicePackUninstall$\webvw.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wextract.exe
    + 2004-08-10 09:00:00 433,664 -c----w c:\windows\$NtServicePackUninstall$\wiaacmgr.exe
    + 2004-08-10 09:00:00 463,360 -c----w c:\windows\$NtServicePackUninstall$\wiadefui.dll
    + 2004-08-10 09:00:00 124,416 -c----w c:\windows\$NtServicePackUninstall$\wiadss.dll
    + 2004-08-10 09:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\wiascr.dll
    + 2006-12-19 18:16:47 333,824 -c----w c:\windows\$NtServicePackUninstall$\wiaservc.dll
    + 2004-08-10 09:00:00 589,312 -c----w c:\windows\$NtServicePackUninstall$\wiashext.dll
    + 2004-08-10 09:00:00 111,104 -c----w c:\windows\$NtServicePackUninstall$\wiavideo.dll
    + 2008-09-15 11:57:41 1,846,016 -c----w c:\windows\$NtServicePackUninstall$\win32k.sys
    + 2004-08-10 09:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\win32spl.dll
    + 2004-08-10 09:00:00 937,984 -c----w c:\windows\$NtServicePackUninstall$\winbrand.dll
    + 2006-10-24 16:30:06 716,288 -c----w c:\windows\$NtServicePackUninstall$\windowscodecs.dll
    + 2006-10-24 16:29:50 352,256 -c----w c:\windows\$NtServicePackUninstall$\windowscodecsext.dll
    + 2004-08-10 09:00:00 283,648 -c----w c:\windows\$NtServicePackUninstall$\winhlp32.exe
    + 2004-08-10 09:00:00 351,232 -c----w c:\windows\$NtServicePackUninstall$\winhttp.dll
    + 2004-08-10 09:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\winipsec.dll
    + 2004-08-10 09:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\winlogon.exe
    + 2004-08-10 09:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\winmm.dll
    + 2004-08-10 09:00:00 764,928 -c----w c:\windows\$NtServicePackUninstall$\winntbbu.dll
    + 2004-08-10 09:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\winrnr.dll
    + 2004-08-10 09:00:00 99,328 -c----w c:\windows\$NtServicePackUninstall$\winscard.dll
    + 2004-08-10 09:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\winshfhc.dll
    + 2004-08-10 09:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\winspool.drv
    + 2007-03-17 13:43:01 292,864 -c----w c:\windows\$NtServicePackUninstall$\winsrv.dll
    + 2004-08-10 09:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\winsta.dll
    + 2004-08-10 09:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\wintrust.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\winver.exe
    + 2006-08-17 12:28:27 132,096 -c----w c:\windows\$NtServicePackUninstall$\wkssvc.dll
    + 2004-08-10 09:00:00 172,032 -c----w c:\windows\$NtServicePackUninstall$\wldap32.dll
    + 2004-08-10 09:00:00 92,672 -c----w c:\windows\$NtServicePackUninstall$\wlnotify.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmi.dll
    + 2004-08-10 09:00:00 196,608 -c----w c:\windows\$NtServicePackUninstall$\wmiadap.exe
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wmiapres.dll
    + 2004-08-10 09:00:00 89,088 -c----w c:\windows\$NtServicePackUninstall$\wmiaprpl.dll
    + 2004-08-10 09:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\wmiapsrv.exe
    + 2004-08-10 09:00:00 358,912 -c----w c:\windows\$NtServicePackUninstall$\wmic.exe
    + 2004-08-10 09:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\wmicookr.dll
    + 2004-08-10 09:00:00 140,800 -c----w c:\windows\$NtServicePackUninstall$\wmidcprv.dll
    + 2004-08-10 09:00:00 156,672 -c----w c:\windows\$NtServicePackUninstall$\wmipcima.dll
    + 2004-08-10 09:00:00 132,096 -c----w c:\windows\$NtServicePackUninstall$\wmipdskq.dll
    + 2004-08-10 09:00:00 62,464 -c----w c:\windows\$NtServicePackUninstall$\wmipiprt.dll
    + 2004-08-10 09:00:00 62,976 -c----w c:\windows\$NtServicePackUninstall$\wmipjobj.dll
    + 2004-08-10 09:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmiprov.dll
    + 2004-08-10 09:00:00 437,248 -c----w c:\windows\$NtServicePackUninstall$\wmiprvsd.dll
    + 2004-08-10 09:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\wmiprvse.exe
    + 2004-08-10 09:00:00 41,472 -c----w c:\windows\$NtServicePackUninstall$\wmipsess.dll
    + 2004-08-10 09:00:00 144,896 -c----w c:\windows\$NtServicePackUninstall$\wmisvc.dll
    + 2004-08-10 09:00:00 95,232 -c----w c:\windows\$NtServicePackUninstall$\wmiutils.dll
    + 2004-08-10 09:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\wmm2ae.dll
    + 2004-08-10 09:00:00 402,432 -c----w c:\windows\$NtServicePackUninstall$\wmm2filt.dll
    + 2004-08-10 09:00:00 502,272 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxa.dll
    + 2004-08-10 09:00:00 325,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2fxb.dll
    + 2004-08-10 09:00:00 4,256,768 -c----w c:\windows\$NtServicePackUninstall$\wmm2res.dll
    + 2004-08-10 09:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\wmm2res2.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcd.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpcore.dll
    + 2006-10-24 16:30:00 276,992 -c----w c:\windows\$NtServicePackUninstall$\wmphoto.dll
    + 2004-08-10 09:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\wmpui.dll
    + 2004-08-10 09:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\wmsdmoe.dll
    + 2004-08-10 09:00:00 303,616 -c----w c:\windows\$NtServicePackUninstall$\wmstream.dll
    + 2004-08-10 09:00:00 214,528 -c----w c:\windows\$NtServicePackUninstall$\wordpad.exe
    + 2004-08-10 09:00:00 264,192 -c----w c:\windows\$NtServicePackUninstall$\wow32.dll
    + 2004-08-10 09:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpabaln.exe
    + 2004-08-10 09:00:00 32,256 -c----w c:\windows\$NtServicePackUninstall$\wpnpinst.exe
    + 2004-08-10 09:00:00 82,944 -c----w c:\windows\$NtServicePackUninstall$\ws2_32.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\ws2help.dll
    + 2004-08-10 09:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\wscntfy.exe
    + 2004-08-10 09:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\wscript.exe
    + 2004-08-10 09:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\wscsvc.dll
    + 2004-08-10 09:00:00 596,992 -c----w c:\windows\$NtServicePackUninstall$\wsecedit.dll
    + 2004-08-10 09:00:00 108,032 -c----w c:\windows\$NtServicePackUninstall$\wshbth.dll
    + 2004-08-10 09:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\wshcon.dll
    + 2004-08-10 09:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\wshext.dll
    + 2004-08-10 09:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\wship6.dll
    + 2004-08-10 09:00:00 11,776 -c----w c:\windows\$NtServicePackUninstall$\wshrm.dll
    + 2004-08-10 09:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\wshtcpip.dll
    + 2004-08-10 09:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\wsnmp32.dll
    + 2004-08-10 09:00:00 22,528 -c----w c:\windows\$NtServicePackUninstall$\wsock32.dll
    + 2004-08-04 03:10:22 19,328 -c----w c:\windows\$NtServicePackUninstall$\wstcodec.sys
    + 2004-08-10 09:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\wstdecod.dll
    + 2004-08-10 09:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\wtsapi32.dll
    + 2004-08-10 09:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\wuauserv.dll
    + 2005-06-21 14:00:18 383,488 -c----w c:\windows\$NtServicePackUninstall$\wzcdlg.dll
    + 2005-06-21 14:00:18 52,736 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll
    + 2005-06-21 14:00:18 52,736 -c----w c:\windows\$NtServicePackUninstall$\wzcsapi.dll.000
    + 2005-06-21 14:00:18 474,624 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll
    + 2005-06-21 14:00:18 474,624 -c----w c:\windows\$NtServicePackUninstall$\wzcsvc.dll.000
    + 2004-08-10 09:00:00 91,648 -c----w c:\windows\$NtServicePackUninstall$\xactsrv.dll
    + 2004-08-10 09:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\xcopy.exe
    + 2006-07-14 15:51:51 121,856 -c----w c:\windows\$NtServicePackUninstall$\xmllite.dll
    + 2004-08-10 09:00:00 129,536 -c----w c:\windows\$NtServicePackUninstall$\xmlprov.dll
    + 2004-08-10 09:00:00 50,176 -c----w c:\windows\$NtServicePackUninstall$\xmlprovi.dll
    + 2006-03-01 19:42:42 11,776 -c----w c:\windows\$NtServicePackUninstall$\xolehlp.dll
    + 2006-10-10 12:44:50 557,568 -c----w c:\windows\$NtServicePackUninstall$\xpnetdiag.exe
    + 2004-08-10 09:00:00 438,784 -c----w c:\windows\$NtServicePackUninstall$\xpob2res.dll
    + 2004-08-10 09:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll
    + 2004-08-10 09:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\xpsp1res.dll.026
    + 2004-08-10 09:00:00 2,897,920 -c----w c:\windows\$NtServicePackUninstall$\xpsp2res.dll
    + 2007-10-29 10:04:03 350,720 -c----w c:\windows\$NtServicePackUninstall$\xpsp3res.dll
    + 2004-08-10 09:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\zipfldr.dll
    - 2005-03-09 23:49:52 295,424 -c----w c:\windows\$NtUninstallKB895961-v4$\termsrv.dll
    + 2008-04-14 00:12:07 295,424 -c----w c:\windows\$NtUninstallKB895961-v4$\termsrv.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB895961-v4_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB895961-v4_0$\spuninst\updspapi.dll
    + 2005-03-09 23:49:52 295,424 -c----w c:\windows\$NtUninstallKB895961-v4_0$\termsrv.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB938464_0$\spuninst\updspapi.dll
    - 2004-08-04 05:06:34 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2008-05-02 14:22:02 83,968 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2004-08-04 05:06:34 82,944 -c----w c:\windows\$NtUninstallKB946648_0$\msgsc.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB946648_0$\spuninst\updspapi.dll
    - 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2008-04-13 18:55:08 202,624 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
    + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762_0$\rmcast.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll
    - 2005-07-26 04:39:45 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2008-04-14 00:11:53 246,272 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2005-07-26 04:39:45 243,200 -c----w c:\windows\$NtUninstallKB950974_0$\es.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB950974_0$\spuninst\updspapi.dll
    - 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2008-04-14 00:11:54 691,712 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2007-08-21 06:15:44 683,520 -c----w c:\windows\$NtUninstallKB951066_0$\inetcomm.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951066_0$\spuninst\updspapi.dll
    - 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2008-04-13 18:46:32 273,024 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys
    + 2008-04-14 11:01:02 272,128 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
    - 2007-10-29 22:35:13 1,287,680 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2008-04-14 00:12:03 1,288,192 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
    + 2007-10-29 22:35:13 1,287,680 -c----w c:\windows\$NtUninstallKB951698_0$\quartz.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll
    - 2004-08-10 09:00:00 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    + 2008-04-13 19:19:23 138,112 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
    - 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    + 2008-04-14 00:11:52 147,968 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
    - 2004-08-10 09:00:00 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    + 2008-04-14 00:12:01 245,248 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
    - 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    + 2008-04-13 19:20:16 361,344 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
    - 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2008-04-13 19:00:02 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
    + 2004-08-10 09:00:00 138,496 -c----w c:\windows\$NtUninstallKB951748_0$\afd.sys
    + 2008-02-20 05:32:43 148,992 -c----w c:\windows\$NtUninstallKB951748_0$\dnsapi.dll
    + 2004-08-10 09:00:00 245,248 -c----w c:\windows\$NtUninstallKB951748_0$\mswsock.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:19 382,840 -c----w c:\windows\$NtUninstallKB951748_0$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748_0$\tcpip6.sys
    - 2004-08-10 09:00:00 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2008-05-01 14:30:33 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2004-08-10 09:00:00 331,776 -c----w c:\windows\$NtUninstallKB952287_0$\msadce.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB952287_0$\spuninst\updspapi.dll
    - 2005-06-29 01:46:00 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2008-04-14 00:11:58 73,728 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2005-06-29 01:46:00 74,240 -c----w c:\windows\$NtUninstallKB952954_0$\mscms.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB952954_0$\spuninst\updspapi.dll
    - 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2008-04-13 19:30:10 1,845,632 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954211_0$\spuninst\spuninst.exe
    + 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB954211_0$\spuninst\updspapi.dll
    + 2008-03-19 09:47:00 1,845,248 -c----w c:\windows\$NtUninstallKB954211_0$\win32k.sys
    - 2006-08-21 14:52:08 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
    + 2008-10-03 10:15:47 247,326 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954600_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB954600_0$\spuninst\updspapi.dll
    + 2006-08-21 14:52:08 246,814 -c----w c:\windows\$NtUninstallKB954600_0$\strmdll.dll
    - 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2008-09-04 16:42:02 1,106,944 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2007-06-26 06:08:16 1,104,896 -c----w c:\windows\$NtUninstallKB955069_0$\msxml3.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB955069_0$\spuninst\spuninst.exe
    + 2008-07-09 18:08:38 382,840 -c----w c:\windows\$NtUninstallKB955069_0$\spuninst\updspapi.dll
    - 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
    + 2008-04-14 00:11:54 285,184 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
    + 2008-02-20 06:51:05 282,624 -c----w c:\windows\$NtUninstallKB956802_0$\gdi32.dll
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB956802_0$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956802_0$\spuninst\updspapi.dll
    - 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2008-06-20 11:40:08 138,496 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803_0$\afd.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956803_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB956803_0$\spuninst\updspapi.dll
    - 2007-02-28 09:15:59 2,017,280 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    - 2007-02-28 09:53:04 2,137,600 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2008-04-13 19:24:37 2,145,280 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-02-28 09:53:04 2,137,600 -c----w c:\windows\$NtUninstallKB956841_0$\ntkrnlmp.exe
    + 2007-02-28 09:15:59 2,017,280 -c----w c:\windows\$NtUninstallKB956841_0$\ntkrnlpa.exe
    + 2007-02-28 09:15:59 2,017,280 -c----w c:\windows\$NtUninstallKB956841_0$\ntkrpamp.exe
    + 2007-02-28 09:53:04 2,137,600 -c----w c:\windows\$NtUninstallKB956841_0$\ntoskrnl.exe
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB956841_0$\spuninst\spuninst.exe
    + 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956841_0$\spuninst\updspapi.dll
    - 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2008-04-13 19:15:11 334,848 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB957095_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB957095_0$\spuninst\updspapi.dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095_0$\srv.sys
    - 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-04-13 19:17:01 456,576 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtUninstallKB957097_0$\mrxsmb.sys
    + 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB957097_0$\spuninst\spuninst.exe
    + 2008-07-08 13:02:12 382,840 -c----w c:\windows\$NtUninstallKB957097_0$\spuninst\updspapi.dll
    - 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
    + 2008-04-14 00:12:01 337,408 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
    + 2006-08-17 12:28:27 332,288 -c----w c:\windows\$NtUninstallKB958644_0$\netapi32.dll
    + 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB958644_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958644_0$\spuninst\updspapi.dll
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB958687$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958687$\spuninst\updspapi.dll
    + 2008-09-08 10:41:42 333,824 -c----w c:\windows\$NtUninstallKB958687$\srv.sys
    + 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB958687_0$\spuninst\spuninst.exe
    + 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958687_0$\spuninst\updspapi.dll
    + 2008-08-28 10:04:17 333,056 -c----w c:\windows\$NtUninstallKB958687_0$\srv.sys
    - 2006-10-04 14:05:26 39,424 ------w c:\windows\AppPatch\acadproc.dll
    + 2008-04-14 00:11:48 39,424 ----a-w c:\windows\AppPatch\acadproc.dll
    - 2004-08-10 09:00:00 1,852,416 ----a-w c:\windows\AppPatch\AcGenral.dll
    + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
    - 2004-08-10 09:00:00 450,048 ----a-w c:\windows\AppPatch\AcLayers.dll
    + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll
    - 2004-08-10 09:00:00 137,728 ----a-w c:\windows\AppPatch\AcLua.dll
    + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll
    - 2004-08-10 09:00:00 244,736 ----a-w c:\windows\AppPatch\AcSpecfc.dll
    + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll
    - 2004-08-10 09:00:00 116,224 ----a-w c:\windows\AppPatch\AcXtrnal.dll
    + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll
    - 2005-08-16 08:39:32 8,704 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-02-01 00:26:22 8,704 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.3300.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2006-08-22 18:58:14 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    + 2009-02-01 01:13:56 117,248 ----a-w c:\windows\assembly\GAC\BDATunePIA\6.0.3000.0__31bf3856ad364e35\bdatunepia.dll
    - 2005-08-16 08:39:32 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-02-01 00:26:17 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.3300.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2005-08-16 08:39:32 34,816 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-02-01 00:26:22 34,816 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2006-08-22 18:58:13 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    + 2009-02-01 01:13:55 102,400 ----a-w c:\windows\assembly\GAC\ehCIR\6.0.3000.0__31bf3856ad364e35\ehCIR.dll
    - 2008-11-20 19:42:58 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
    + 2009-02-01 01:13:56 1,863,680 ----a-w c:\windows\assembly\GAC\EhCM\6.0.3000.0__31bf3856ad364e35\EhCM.dll
    - 2006-08-22 18:58:14 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    + 2009-02-01 01:13:56 192,512 ----a-w c:\windows\assembly\GAC\ehcommon\6.0.3000.0__31bf3856ad364e35\ehcommon.dll
    - 2007-03-21 16:26:09 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    + 2009-02-01 01:13:56 868,352 ----a-w c:\windows\assembly\GAC\ehepg\6.0.3000.0__31bf3856ad364e35\ehepg.dll
    - 2006-08-22 18:58:13 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    + 2009-02-01 01:13:55 126,976 ----a-w c:\windows\assembly\GAC\ehepgdat\6.0.3000.0__31bf3856ad364e35\ehepgdat.dll
    - 2006-08-22 18:58:14 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    + 2009-02-01 01:13:56 110,592 ----a-w c:\windows\assembly\GAC\ehExtCOM\6.0.3000.0__31bf3856ad364e35\ehExtCOM.dll
    - 2006-08-22 18:58:13 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    + 2009-02-01 01:13:55 8,192 ----a-w c:\windows\assembly\GAC\ehiExtCOM\6.0.3000.0__31bf3856ad364e35\ehiExtCOM.dll
    - 2006-08-22 18:58:13 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    + 2009-02-01 01:13:55 73,728 ----a-w c:\windows\assembly\GAC\ehiExtens\6.0.3000.0__31bf3856ad364e35\ehiExtens.dll
    - 2006-08-22 18:58:14 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    + 2009-02-01 01:13:56 167,936 ----a-w c:\windows\assembly\GAC\ehiMsgr\6.0.3000.0__31bf3856ad364e35\ehiMsgr.dll
    - 2007-03-21 16:26:10 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiplay.dll
    + 2009-02-01 01:13:55 204,800 ----a-w c:\windows\assembly\GAC\ehiPlay\6.0.3000.0__31bf3856ad364e35\ehiPlay.dll
    - 2006-08-22 18:58:14 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    + 2009-02-01 01:13:55 389,120 ----a-w c:\windows\assembly\GAC\ehiProxy\6.0.3000.0__31bf3856ad364e35\ehiProxy.dll
    - 2006-08-22 18:58:14 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    + 2009-02-01 01:13:55 18,944 ----a-w c:\windows\assembly\GAC\ehiUserXp\6.0.3000.0__31bf3856ad364e35\ehiuserxp.dll
    - 2006-08-22 18:58:14 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    + 2009-02-01 01:13:56 278,528 ----a-w c:\windows\assembly\GAC\ehiVidCtl\6.0.3000.0__31bf3856ad364e35\ehiVidCtl.dll
    - 2006-08-22 18:58:13 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    + 2009-02-01 01:13:55 122,880 ----a-w c:\windows\assembly\GAC\ehiwmp\6.0.3000.0__31bf3856ad364e35\ehiwmp.dll
    - 2006-08-22 18:58:14 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    + 2009-02-01 01:13:56 53,248 ----a-w c:\windows\assembly\GAC\ehiWUapi\6.0.3000.0__31bf3856ad364e35\ehiWUapi.dll
    - 2006-08-22 18:58:13 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    + 2009-02-01 01:13:55 389,120 ----a-w c:\windows\assembly\GAC\ehRecObj\6.0.3000.0__31bf3856ad364e35\ehRecObj.dll
    - 2005-08-16 08:39:34 7,168 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-02-01 00:26:33 7,168 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.3300.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2005-08-16 08:39:34 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-02-01 00:26:34 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.3300.0__b03f5f7f11d50a3a\IEHost.dll
    - 2005-08-16 08:39:34 4,096 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-02-01 00:26:35 4,096 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.3300.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2005-08-16 08:39:34 27,136 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-02-01 00:26:35 27,136 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.3300.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2005-08-16 08:39:32 712,704 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-02-01 00:26:18 712,704 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2006-08-22 18:58:14 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    + 2009-02-01 01:13:56 45,056 ----a-w c:\windows\assembly\GAC\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
    - 2005-08-16 08:39:32 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-02-01 00:26:16 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2005-08-16 08:39:32 286,720 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-02-01 00:26:19 286,720 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2005-08-16 08:39:32 5,632 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    + 2009-02-01 00:26:20 5,632 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    - 2005-08-16 08:39:32 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-02-01 00:26:14 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-08-16 08:39:32 18,944 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-02-01 00:26:16 18,944 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2005-08-16 08:39:32 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-02-01 00:26:15 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.3300.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2005-08-16 08:39:34 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    + 2009-02-01 00:26:36 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.3300.0__b03f5f7f11d50a3a\mscorcfg.dll
    - 2005-08-16 08:39:32 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    + 2009-02-01 00:26:20 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.3300.0__b03f5f7f11d50a3a\RegCode.dll
    - 2006-08-22 18:58:14 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    + 2009-02-01 01:13:56 77,824 ----a-w c:\windows\assembly\GAC\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0\SonicMCEBurnEngine.dll
    - 2005-08-16 08:39:32 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-02-01 00:26:23 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.3300.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2005-08-16 08:39:34 1,179,648 ----a-w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    + 2009-02-01 00:26:28 1,179,648 ----a-w c:\windows\assembly\GAC\System.Data\1.0.3300.0__b77a5c561934e089\System.Data.dll
    - 2005-08-16 08:39:34 1,695,744 ----a-w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-02-01 00:26:29 1,695,744 ----a-w c:\windows\assembly\GAC\System.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Design.dll
    - 2005-08-16 08:39:32 86,016 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-02-01 00:26:23 86,016 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.3300.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2005-08-16 08:39:32 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-02-01 00:26:24 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2005-08-16 08:39:34 462,848 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-02-01 00:26:30 462,848 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2005-08-16 08:39:32 212,992 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-02-01 00:26:20 212,992 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2005-08-16 08:39:32 48,640 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    + 2009-02-01 00:26:21 48,640 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.3300.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    - 2005-08-16 08:39:34 352,256 ----a-w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-02-01 00:26:37 352,256 ----a-w c:\windows\assembly\GAC\System.Management\1.0.3300.0__b03f5f7f11d50a3a\System.Management.dll
    - 2005-08-16 08:39:34 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-02-01 00:26:31 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.3300.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2005-08-16 08:39:34 311,296 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-02-01 00:26:37 311,296 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.3300.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2005-08-16 08:39:34 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-02-01 00:26:38 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.3300.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-08-16 08:39:32 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-02-01 00:26:21 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    - 2005-08-16 08:39:32 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-02-01 00:26:24 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.3300.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2005-08-16 08:39:32 61,440 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-02-01 00:26:26 61,440 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.3300.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2005-08-16 08:39:32 507,904 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-02-01 00:26:26 507,904 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.3300.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2007-07-11 07:00:53 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-02-01 00:26:25 1,200,128 ----a-w c:\windows\assembly\GAC\System.Web\1.0.3300.0__b03f5f7f11d50a3a\System.Web.dll
    - 2005-08-16 08:39:32 2,002,944 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-02-01 00:26:27 2,002,944 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.3300.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2005-08-16 08:39:32 1,302,528 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    + 2009-02-01 00:26:27 1,302,528 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.3300.0__b77a5c561934e089\System.Xml.dll
    - 2005-08-16 08:39:34 1,179,648 ----a-w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    + 2009-02-01 00:26:30 1,179,648 ----a-w c:\windows\assembly\GAC\System\1.0.3300.0__b77a5c561934e089\System.dll
    + 2009-02-01 00:24:03 61,440 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\CustomMarshalers\1.0.3300.0__b03f5f7f11d50a3a_5ee66eca\CustomMarshalers.dll
    + 2009-02-01 00:24:09 3,301,376 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\mscorlib\1.0.3300.0__b77a5c561934e089_84ee567f\mscorlib.dll
    + 2009-02-01 00:24:30 1,454,080 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Design\1.0.3300.0__b03f5f7f11d50a3a_c1cad7ee\System.Design.dll
    + 2009-02-01 00:24:34 90,112 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a_99258509\System.Drawing.Design.dll
    + 2009-02-01 00:24:33 847,872 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a_278c02aa\System.Drawing.dll
    + 2009-02-01 00:24:40 2,953,216 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Windows.Forms\1.0.3300.0__b77a5c561934e089_af143b00\System.Windows.Forms.dll
    + 2009-02-01 00:24:44 2,027,520 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System.Xml\1.0.3300.0__b77a5c561934e089_353030ef\System.Xml.dll
    + 2009-02-01 00:24:25 1,855,488 ----a-w c:\windows\assembly\NativeImages1_v1.0.3705\System\1.0.3300.0__b77a5c561934e089_ad174b00\System.dll
    + 2009-02-01 01:13:34 258,048 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\BDATunePIA\6.0.3000.0__31bf3856ad364e35_9c95780a\BDATunePIA.dll
    + 2009-02-01 01:13:08 159,744 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehCIR\6.0.3000.0__31bf3856ad364e35_418f2ef2\ehCIR.dll
    + 2009-02-01 01:13:32 2,326,528 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\EhCM\6.0.3000.0__31bf3856ad364e35_7a774de0\EhCM.dll
    + 2009-02-01 01:13:33 299,008 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehcommon\6.0.3000.0__31bf3856ad364e35_c1ebd4fd\ehcommon.dll
    + 2009-02-01 01:13:28 1,306,624 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepg\6.0.3000.0__31bf3856ad364e35_92f0a3f7\ehepg.dll
    + 2009-02-01 01:13:09 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehepgdat\6.0.3000.0__31bf3856ad364e35_0049990f\ehepgdat.dll
    + 2009-02-01 01:13:38 167,936 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtCOM\6.0.3000.0__31bf3856ad364e35_c953594a\ehExtCOM.dll
    + 2009-02-01 01:13:52 155,648 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehExtHost\6.0.3000.0__31bf3856ad364e35_4b67acc4\ehExtHost.exe
    + 2009-02-01 01:12:57 10,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtCOM\6.0.3000.0__31bf3856ad364e35_b9733c24\ehiExtCOM.dll
    + 2009-02-01 01:12:58 102,400 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiExtens\6.0.3000.0__31bf3856ad364e35_41e5388d\ehiExtens.dll
    + 2009-02-01 01:13:23 266,240 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiMsgr\6.0.3000.0__31bf3856ad364e35_06c66f3b\ehiMsgr.dll
    + 2009-02-01 01:13:09 380,928 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiPlay\6.0.3000.0__31bf3856ad364e35_c95f5fd6\ehiPlay.dll
    + 2009-02-01 01:13:10 565,248 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiProxy\6.0.3000.0__31bf3856ad364e35_8297fd45\ehiProxy.dll
    + 2009-02-01 01:13:11 40,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiUserXp\6.0.3000.0__31bf3856ad364e35_bd5e65be\ehiUserXp.dll
    + 2009-02-01 01:13:13 458,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiVidCtl\6.0.3000.0__31bf3856ad364e35_c76c3d76\ehiVidCtl.dll
    + 2009-02-01 01:12:56 180,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiwmp\6.0.3000.0__31bf3856ad364e35_fc11ae59\ehiwmp.dll
    + 2009-02-01 01:13:34 69,632 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehiWUapi\6.0.3000.0__31bf3856ad364e35_d52d8908\ehiWUapi.dll
    + 2009-02-01 01:13:07 684,032 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehRecObj\6.0.3000.0__31bf3856ad364e35_72c1e8f5\ehRecObj.dll
    + 2009-02-01 01:13:51 6,352,896 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\ehshell\6.0.3000.0__31bf3856ad364e35_085826be\ehshell.exe
    + 2009-02-01 01:13:35 65,536 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\Microsoft.MediaCenter\6.0.3100.0__31bf3856ad364e35_3be73c43\Microsoft.MediaCenter.dll
    + 2009-02-01 01:13:37 20,480 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\SonicMCEBurnEngine\0.9.0.0__17c52700e9a64fd0_d92a2d3e\SonicMCEBurnEngine.dll
    - 2008-06-13 13:10:50 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    + 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\i386\bthport.sys
    - 2008-10-24 11:10:42 453,632 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    - 2008-08-14 09:55:01 2,142,720 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2008-08-14 09:18:44 2,062,976 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2008-08-14 09:18:46 2,020,864 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2008-08-14 09:57:20 2,185,984 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2005-08-05 17:28:00 106,496 ----a-w c:\windows\ehome\ehExtHost.exe
    + 2005-08-05 17:28:00 126,976 ----a-w c:\windows\ehome\ehExtHost.exe
    - 2005-08-05 17:56:28 46,592 ----a-w c:\windows\ehome\ehmsas.exe
    + 2005-08-05 17:56:28 64,000 ----a-w c:\windows\ehome\ehmsas.exe
    - 2005-08-05 17:56:28 65,536 ----a-w c:\windows\ehome\ehRec.exe
    + 2005-08-05 17:56:28 82,432 ----a-w c:\windows\ehome\ehRec.exe
    - 2006-10-09 20:16:56 237,568 ----a-w c:\windows\ehome\ehrecvr.exe
    + 2006-10-09 20:16:56 254,976 ----a-w c:\windows\ehome\ehrecvr.exe
    - 2005-08-05 17:56:32 102,912 ----a-w c:\windows\ehome\ehSched.exe
    + 2005-08-05 17:56:32 119,808 ----a-w c:\windows\ehome\ehSched.exe
     
    blacklogman,
    #13
  15. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    - 2006-10-09 21:19:14 3,223,552 ----a-w c:\windows\ehome\ehshell.exe
    + 2006-10-09 21:19:14 3,244,032 ----a-w c:\windows\ehome\ehshell.exe
    - 2005-09-29 18:01:14 67,584 ----a-w c:\windows\ehome\ehtray.exe
    + 2005-09-29 18:01:14 84,992 ----a-w c:\windows\ehome\ehtray.exe
    - 2005-10-21 00:55:50 96,256 ----a-w c:\windows\ehome\McrdSvc.exe
    + 2005-10-21 00:55:50 113,152 ----a-w c:\windows\ehome\McrdSvc.exe
    - 2005-10-21 00:55:40 28,160 ----a-w c:\windows\ehome\RMSvc.exe
    + 2005-10-21 00:55:40 45,568 ----a-w c:\windows\ehome\RMSvc.exe
    - 2005-10-21 00:55:40 18,432 ----a-w c:\windows\ehome\RMSysTry.exe
    + 2005-10-21 00:55:40 35,840 ----a-w c:\windows\ehome\RMSysTry.exe
    - 2005-10-21 01:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
    + 2005-10-21 01:02:28 184,320 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
    - 2005-10-21 01:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
    + 2005-10-21 01:02:28 184,320 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
    - 2000-08-31 13:00:00 89,504 ----a-w c:\windows\fdsv.exe
    + 2000-08-31 13:00:00 109,984 ----a-w c:\windows\fdsv.exe
    - 2000-08-31 13:00:00 80,412 ----a-w c:\windows\grep.exe
    + 2000-08-31 13:00:00 97,820 ----a-w c:\windows\grep.exe
    - 2004-08-10 09:00:00 34,816 ----a-w c:\windows\Help\sniffpol.dll
    + 2008-04-14 00:12:06 34,816 ----a-w c:\windows\Help\sniffpol.dll
    - 2004-08-10 09:00:00 33,280 ----a-w c:\windows\Help\sstub.dll
    + 2008-04-14 00:12:07 33,280 ----a-w c:\windows\Help\sstub.dll
    - 2004-08-10 09:00:00 279,040 ----a-w c:\windows\Help\tshoot.dll
    + 2008-04-14 00:12:07 279,040 ----a-w c:\windows\Help\tshoot.dll
    - 2005-05-26 23:22:01 10,752 ----a-w c:\windows\hh.exe
    + 2008-04-14 00:12:21 28,160 ----a-w c:\windows\hh.exe
    + 2008-10-17 07:08:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:34 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
    + 2008-10-16 20:38:34 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
    + 2008-10-16 20:38:34 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
    + 2008-10-16 20:38:35 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
    + 2008-10-16 20:38:35 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
    + 2008-10-16 13:11:09 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
    + 2008-10-16 20:38:35 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
    + 2008-10-16 20:38:35 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
    + 2008-10-15 07:04:53 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
    + 2008-10-16 20:38:35 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
    + 2008-10-16 20:38:35 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
    + 2008-10-16 20:38:37 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
    + 2008-10-16 20:38:37 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
    + 2008-10-16 20:38:37 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
    + 2008-10-16 13:11:09 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
    + 2008-10-15 07:06:26 633,632 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
    + 2008-10-16 20:38:37 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
    + 2008-10-16 20:38:37 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
    + 2008-10-16 20:38:37 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
    + 2008-12-13 06:40:02 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
    + 2008-10-16 20:38:38 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
    + 2008-10-16 20:38:38 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
    + 2008-10-16 20:38:39 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
    + 2008-10-16 20:38:39 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
    + 2008-10-16 20:38:39 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
    + 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:38:39 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
    + 2008-10-16 20:38:39 1,160,192 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
    + 2008-10-16 20:38:39 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
    + 2008-10-16 20:38:40 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
    - 2004-08-10 09:00:00 220,160 ----a-w c:\windows\ime\mscandui.dll
    + 2008-04-14 00:11:58 220,160 ----a-w c:\windows\ime\mscandui.dll
    - 2004-08-10 09:00:00 130,048 ----a-w c:\windows\ime\SOFTKBD.DLL
    + 2008-04-14 00:12:06 130,048 ----a-w c:\windows\ime\softkbd.dll
    - 2004-08-10 09:00:00 62,976 ----a-w c:\windows\ime\SPGRMR.dll
    + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll
    - 2004-08-10 09:00:00 250,880 ----a-w c:\windows\ime\SPTIP.dll
    + 2008-04-14 00:12:06 250,368 ----a-w c:\windows\ime\sptip.dll
    - 2008-04-01 22:54:16 73,728 ----a-r c:\windows\Installer\{2CD6BBA0-17C8-4789-9B9B-B36F7E815F6A}\Aoem162_icon.exe
    + 2008-04-01 22:54:16 94,208 ----a-r c:\windows\Installer\{2CD6BBA0-17C8-4789-9B9B-B36F7E815F6A}\Aoem162_icon.exe
    - 2006-08-22 19:00:24 49,152 ----a-r c:\windows\Installer\{5905F42D-3F5F-4916-ADA6-94A3646AEE76}\ARPPRODUCTICON.exe
    + 2006-08-22 19:00:24 69,632 ----a-r c:\windows\Installer\{5905F42D-3F5F-4916-ADA6-94A3646AEE76}\ARPPRODUCTICON.exe
    - 2006-08-22 19:00:24 49,152 ----a-r c:\windows\Installer\{5905F42D-3F5F-4916-ADA6-94A3646AEE76}\NewShortcut1.exe
    + 2006-08-22 19:00:24 69,632 ----a-r c:\windows\Installer\{5905F42D-3F5F-4916-ADA6-94A3646AEE76}\NewShortcut1.exe
    - 2008-05-14 01:10:48 65,536 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\NewShortcut2_F04825A0D1E9444AA8D32CE95CBF1716.exe
    + 2008-05-14 01:10:48 86,016 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\NewShortcut2_F04825A0D1E9444AA8D32CE95CBF1716.exe
    - 2008-05-14 01:10:48 65,536 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_CheckNow_S_A865F9643D344747AD8AA93191B65DD3.exe
    + 2008-05-14 01:10:48 86,016 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_CheckNow_S_A865F9643D344747AD8AA93191B65DD3.exe
    - 2008-05-14 01:10:48 65,536 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_FAQ_SC1_A865F9643D344747AD8AA93191B65DD3.exe
    + 2008-05-14 01:10:48 86,016 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_FAQ_SC1_A865F9643D344747AD8AA93191B65DD3.exe
    - 2008-05-14 01:10:48 45,056 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_Help_SC1_A865F9643D344747AD8AA93191B65DD3.exe
    + 2008-05-14 01:10:48 65,536 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_Help_SC1_A865F9643D344747AD8AA93191B65DD3.exe
    - 2008-05-14 01:10:48 65,536 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_Setting_SC_A865F9643D344747AD8AA93191B65DD3.exe
    + 2008-05-14 01:10:48 86,016 ----a-r c:\windows\Installer\{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}\Program_Setting_SC_A865F9643D344747AD8AA93191B65DD3.exe
    - 2006-08-22 18:58:50 40,960 ----a-r c:\windows\Installer\{83F793B5-8BBF-42FD-A8A6-868CB3E2AAEA}\PROSet.56285FC4_11A9_11D6_8473_00902745D287.exe
    + 2006-08-22 18:58:50 61,440 ----a-r c:\windows\Installer\{83F793B5-8BBF-42FD-A8A6-868CB3E2AAEA}\PROSet.56285FC4_11A9_11D6_8473_00902745D287.exe
    - 2008-12-11 09:05:51 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
    + 2009-02-12 09:02:37 614,400 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
    - 2008-12-11 09:05:51 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2009-02-12 09:02:37 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2008-12-11 09:05:51 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2009-02-12 09:02:37 106,496 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
    - 2008-12-11 09:05:50 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2009-02-12 09:02:37 155,648 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2008-12-11 09:05:51 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2009-02-12 09:02:37 28,160 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2008-12-11 09:05:51 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2009-02-12 09:02:37 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-12-11 09:05:51 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2009-02-12 09:02:37 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2008-12-11 09:05:51 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2009-02-12 09:02:38 815,104 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2008-12-11 09:05:51 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2009-02-12 09:02:37 270,336 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2008-12-11 09:05:50 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
    + 2009-02-12 09:02:37 81,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
    - 2008-12-11 09:05:51 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2009-02-12 09:02:38 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2008-12-11 09:05:50 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2009-02-12 09:02:37 307,200 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2008-12-11 09:05:50 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2009-02-12 09:02:37 430,080 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2008-08-02 00:42:57 40,960 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut1_45BA714564B04B5DBDC240E20FCDC6DC.exe
    + 2008-08-02 00:42:57 61,440 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut1_45BA714564B04B5DBDC240E20FCDC6DC.exe
    - 2008-08-02 00:42:57 77,824 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut2.041BC1C4_61CF_4566_B322_09A7A1F3FCD3.exe
    + 2008-08-02 00:42:57 98,304 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut2.041BC1C4_61CF_4566_B322_09A7A1F3FCD3.exe
    - 2008-08-02 00:42:57 40,960 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut2_CEE9A021A79C462F7256725618452FF1.exe
    + 2008-08-02 00:42:57 61,440 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut2_CEE9A021A79C462F7256725618452FF1.exe
    - 2008-08-02 00:42:57 40,960 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut6_45BA714564B04B5DBDC240E20FCDC6DC.exe
    + 2008-08-02 00:42:57 61,440 ----a-r c:\windows\Installer\{98F2555F-6749-49BA-949F-FC887831A524}\NewShortcut6_45BA714564B04B5DBDC240E20FCDC6DC.exe
    - 2006-08-22 19:12:32 53,248 ----a-r c:\windows\Installer\{B0DF58A2-40DF-4465-AA56-38623EC9938C}\ARPPRODUCTICON.exe
    + 2006-08-22 19:12:32 73,728 ----a-r c:\windows\Installer\{B0DF58A2-40DF-4465-AA56-38623EC9938C}\ARPPRODUCTICON.exe
    - 2006-08-22 19:12:32 53,248 ----a-r c:\windows\Installer\{B0DF58A2-40DF-4465-AA56-38623EC9938C}\NewShortcut11_759E0B26521F4666BEAF33B31123216E.exe
    + 2006-08-22 19:12:32 73,728 ----a-r c:\windows\Installer\{B0DF58A2-40DF-4465-AA56-38623EC9938C}\NewShortcut11_759E0B26521F4666BEAF33B31123216E.exe
    - 2006-08-22 19:12:40 53,248 ----a-r c:\windows\Installer\{B6884A07-0305-47AE-9969-8F26FADC17DE}\ARPPRODUCTICON.exe
    + 2006-08-22 19:12:40 73,728 ----a-r c:\windows\Installer\{B6884A07-0305-47AE-9969-8F26FADC17DE}\ARPPRODUCTICON.exe
    - 2006-08-22 19:12:40 53,248 ----a-r c:\windows\Installer\{B6884A07-0305-47AE-9969-8F26FADC17DE}\NewShortcut11_B6884A07030547AE99698F26FADC17DE.exe
    + 2006-08-22 19:12:40 73,728 ----a-r c:\windows\Installer\{B6884A07-0305-47AE-9969-8F26FADC17DE}\NewShortcut11_B6884A07030547AE99698F26FADC17DE.exe
    - 2008-03-31 17:35:26 1,038,336 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC.exe
    + 2008-03-31 17:35:26 1,055,232 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC.exe
    - 2008-03-31 17:35:26 178,688 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC1.exe
    + 2008-03-31 17:35:26 196,096 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC1.exe
    - 2008-03-31 17:35:26 171,008 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\IconDED53B0B.exe
    + 2008-03-31 17:35:26 188,416 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\IconDED53B0B.exe
    - 2008-03-31 17:35:26 8,704 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\IconDED53B0B1.exe
    + 2008-03-31 17:35:26 25,600 ----a-r c:\windows\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\IconDED53B0B1.exe
    - 2006-08-22 19:13:02 53,248 ----a-r c:\windows\Installer\{E42BD75A-FC23-4E3F-9F91-2658334C644F}\ARPPRODUCTICON.exe
    + 2006-08-22 19:13:02 73,728 ----a-r c:\windows\Installer\{E42BD75A-FC23-4E3F-9F91-2658334C644F}\ARPPRODUCTICON.exe
    - 2006-08-22 19:13:02 53,248 ----a-r c:\windows\Installer\{E42BD75A-FC23-4E3F-9F91-2658334C644F}\NewShortcut11_E42BD75AFC234E3F9F912658334C644F.exe
    + 2006-08-22 19:13:02 73,728 ----a-r c:\windows\Installer\{E42BD75A-FC23-4E3F-9F91-2658334C644F}\NewShortcut11_E42BD75AFC234E3F9F912658334C644F.exe
    + 2009-02-17 17:26:17 102,400 ----a-r c:\windows\Installer\{F5C63795-2708-4D15-BF18-5ABBFF7DFFC8}\iTunesIco.exe
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll
    - 2006-03-21 03:23:12 23,040 ------w c:\windows\kb913800.exe
    + 2006-03-21 03:23:12 40,448 ------w c:\windows\kb913800.exe
    - 2002-06-21 21:31:20 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_filter.dll
    + 2008-04-13 16:09:58 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_filter.dll
    - 2007-01-02 20:34:04 200,704 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
    + 2008-04-13 16:09:59 200,704 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
    - 2004-08-04 02:11:06 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe
    + 2008-04-13 16:10:01 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe
    - 2002-06-21 21:31:22 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_state.exe
    + 2008-04-13 16:10:01 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_state.exe
    - 2007-01-02 20:34:04 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_wp.exe
    + 2008-04-13 16:10:01 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\aspnet_wp.exe
    - 2004-09-29 22:04:48 61,440 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\gacutil.exe
    + 2008-04-13 16:10:32 61,440 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\gacutil.exe
    - 2007-01-02 20:28:28 2,273,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorsvr.dll
    + 2007-12-17 11:58:53 2,273,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorsvr.dll
    - 2007-01-02 20:28:46 2,281,472 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
    + 2007-12-17 11:59:26 2,281,472 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
    - 2007-01-15 20:11:26 73,728 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\netfxupdate.exe
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\netfxupdate.exe
    - 2007-01-15 20:11:30 57,344 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\SetRegNI.exe
    + 2007-12-17 11:59:54 66,592 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\setregni.exe
    - 2004-07-19 22:54:18 1,179,648 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\System.dll
    + 2007-12-17 11:59:56 1,179,648 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\system.dll
    - 2007-01-15 20:11:30 57,344 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\ToGac.exe
    + 2007-12-17 12:00:05 66,592 ------w c:\windows\Microsoft.NET\Framework\v1.0.3705\togac.exe
    - 2003-02-21 11:24:32 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
    + 2003-02-21 11:24:32 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
    - 2004-07-15 15:23:28 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
    + 2004-07-15 15:23:28 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
    - 2003-02-21 08:12:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
    + 2003-02-21 08:12:24 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
    - 2004-08-10 09:00:00 24,064 ----a-w c:\windows\msagent\agentanm.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentanm.dll
    - 2004-08-10 09:00:00 214,016 ----a-w c:\windows\msagent\agentctl.dll
    + 2008-04-14 00:11:48 214,016 ----a-w c:\windows\msagent\agentctl.dll
    - 2006-10-12 13:54:18 42,496 ----a-w c:\windows\msagent\agentdp2.dll
    + 2008-04-14 00:11:48 42,496 ----a-w c:\windows\msagent\agentdp2.dll
    - 2007-03-09 13:58:57 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\msagent\agentdpv.dll
    - 2004-08-10 09:00:00 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    + 2008-04-14 00:11:48 49,152 ----a-w c:\windows\msagent\agentmpx.dll
    - 2004-08-10 09:00:00 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\msagent\agentpsh.dll
    - 2004-08-10 09:00:00 44,032 ----a-w c:\windows\msagent\agentsr.dll
    + 2008-04-14 00:11:48 44,032 ----a-w c:\windows\msagent\agentsr.dll
    - 2006-10-12 11:54:07 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    + 2008-04-14 00:12:12 256,512 ----a-w c:\windows\msagent\agentsvr.exe
    - 2004-08-10 09:00:00 24,064 ----a-w c:\windows\msagent\agtintl.dll
    + 2008-04-14 00:11:49 24,064 ----a-w c:\windows\msagent\agtintl.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
    - 2004-08-10 09:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
    - 2004-08-10 09:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
    - 2004-08-10 09:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
    - 2004-08-10 09:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
    - 2004-08-10 09:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
    - 2004-08-10 09:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
    - 2004-08-10 09:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
    - 2004-08-10 09:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
    - 2004-08-10 09:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
    - 2004-08-10 09:00:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    + 2008-04-14 00:12:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
    - 2004-08-10 09:00:00 90,624 ----a-w c:\windows\mui\muisetup.exe
    + 2008-04-14 00:12:29 90,624 ----a-w c:\windows\mui\muisetup.exe
    - 2006-06-03 11:40:49 33,792 ------w c:\windows\network diagnostic\custsat.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\network diagnostic\custsat.dll
    - 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe
    - 2000-08-31 13:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
    + 2000-08-31 13:00:00 48,640 ----a-w c:\windows\NIRCMD.exe
    - 2004-08-10 09:00:00 69,120 ----a-w c:\windows\NOTEPAD.EXE
    + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\notepad.exe
    - 2004-08-10 09:00:00 768,512 ----a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
    + 2008-04-14 00:12:21 769,024 ----a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe
    - 2004-08-10 09:00:00 743,936 ----a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
    + 2008-04-14 00:12:21 761,856 ----a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    - 2004-08-10 09:00:00 18,944 ----a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
    + 2008-04-14 00:12:21 18,432 ----a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe
    - 2005-09-27 00:34:26 169,984 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    + 2008-04-14 00:12:27 169,984 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
    - 2004-08-10 09:00:00 376,320 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    + 2008-04-14 00:11:59 376,832 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
    - 2004-08-10 09:00:00 102,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    + 2008-04-14 00:12:02 102,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
    - 2004-08-10 09:00:00 38,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    - 2006-08-22 18:49:55 88,467 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    + 2009-02-01 00:26:13 88,467 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
    - 2006-08-22 18:49:55 4,636 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    + 2009-02-01 00:26:13 5,374 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
    - 2004-08-10 09:00:00 150,528 ----a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
    + 2008-04-14 00:12:38 150,528 ----a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-10 09:00:00 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
    + 2008-04-14 00:12:06 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
    - 2004-08-10 09:00:00 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
    + 2008-04-14 00:12:06 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
    - 2004-08-10 09:00:00 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
    + 2008-04-14 00:12:06 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
    - 2004-08-10 09:00:00 146,432 ----a-w c:\windows\regedit.exe
    + 2008-04-14 00:12:32 163,328 ----a-w c:\windows\regedit.exe
    - 2004-01-03 02:15:19 355,328 ----a-w c:\windows\SCMain.exe
    + 2004-01-03 02:15:19 374,784 ----a-w c:\windows\SCMain.exe
    - 2000-08-31 13:00:00 98,816 ----a-w c:\windows\sed.exe
    + 2000-08-31 13:00:00 116,224 ----a-w c:\windows\sed.exe
    + 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys
    + 2008-04-14 00:11:48 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll
    + 2004-08-04 02:32:22 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys
    + 2004-08-04 02:32:32 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys
    + 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll
     
    blacklogman,
    #14
  16. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2008-04-14 00:12:11 184,320 ------w c:\windows\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 00:11:48 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 00:11:48 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 00:11:48 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 00:11:48 115,712 ------w c:\windows\ServicePackFiles\i386\aclui.dll
    + 2008-04-13 18:36:35 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys
    + 2008-04-14 00:11:48 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 00:11:48 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 00:12:12 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 00:11:48 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 00:11:48 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 00:11:48 29,696 ------w c:\windows\ServicePackFiles\i386\admexs.dll
    + 2008-04-14 00:11:48 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe
    + 2004-08-04 02:32:24 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys
    + 2008-04-14 00:11:48 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 00:11:48 43,520 ------w c:\windows\ServicePackFiles\i386\admwprox.dll
    + 2008-04-14 00:11:48 290,816 ------w c:\windows\ServicePackFiles\i386\adsiis51.dll
    + 2008-04-14 00:11:48 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 00:11:48 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 00:11:48 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 00:11:48 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 00:11:48 123,392 ------w c:\windows\ServicePackFiles\i386\adsnw.dll
    + 2004-07-17 15:35:20 85,813 ------w c:\windows\ServicePackFiles\i386\adsutil.vbs
    + 2008-04-14 00:11:48 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 00:11:48 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 00:11:48 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 00:11:48 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 00:11:48 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 00:11:48 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 00:11:48 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 00:11:48 617,472 ------w c:\windows\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 00:11:48 99,840 ------w c:\windows\ServicePackFiles\i386\advpack.dll
    + 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys
    + 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 00:11:48 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 00:11:48 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 00:11:48 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 00:11:48 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 00:11:48 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 00:12:12 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll
    + 2008-04-14 00:11:49 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 00:12:12 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 00:12:12 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe
    + 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2008-04-14 00:11:49 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2008-04-13 18:31:32 37,376 ------w c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2008-04-13 18:31:33 37,760 ------w c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2008-04-14 00:11:49 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll
    + 2004-08-04 02:31:20 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys
    + 2008-04-14 00:11:49 108,544 ------w c:\windows\ServicePackFiles\i386\appconf.dll
    + 2008-04-14 00:11:49 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 00:11:49 167,936 ------w c:\windows\ServicePackFiles\i386\appmgmts.dll
    + 2008-04-14 00:11:49 295,936 ------w c:\windows\ServicePackFiles\i386\appmgr.dll
    + 2008-04-14 00:11:49 331,264 ------w c:\windows\ServicePackFiles\i386\aqueue.dll
    + 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2008-04-14 00:11:49 369,664 ------w c:\windows\ServicePackFiles\i386\asp51.dll
    + 2008-04-13 16:09:58 20,480 ------w c:\windows\ServicePackFiles\i386\aspnet_filter.dll
    + 2008-04-13 16:09:59 200,704 ------w c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
    + 2008-04-13 16:10:01 24,576 ------w c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_state.exe
    + 2008-04-13 16:10:01 32,768 ------w c:\windows\ServicePackFiles\i386\aspnet_wp.exe
    + 2008-04-14 00:12:12 30,208 ------w c:\windows\ServicePackFiles\i386\asr_fmt.exe
    + 2008-04-14 00:12:12 32,768 ------w c:\windows\ServicePackFiles\i386\asr_pfu.exe
    + 2008-04-14 00:11:49 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-14 00:12:12 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe
    + 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys
    + 2004-08-04 02:29:30 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys
    + 2004-08-04 02:29:30 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys
    + 2004-08-04 02:29:30 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys
    + 2004-08-04 02:29:32 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys
    + 2004-08-04 02:29:32 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys
    + 2004-08-04 02:29:32 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys
    + 2004-08-04 02:29:32 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys
    + 2004-08-04 02:29:32 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys
    + 2004-08-04 02:29:32 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys
    + 2004-08-04 02:29:32 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys
    + 2008-04-14 00:11:49 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 00:11:49 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll
    + 2004-08-04 02:29:28 327,040 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys
    + 2004-08-04 02:29:28 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 00:11:49 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll
    + 2004-08-04 02:29:28 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys
    + 2004-08-04 02:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys
    + 2004-08-04 02:29:30 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys
    + 2004-08-04 02:29:30 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys
    + 2004-08-04 02:29:32 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys
    + 2004-08-04 02:29:32 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys
    + 2004-08-04 02:29:32 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys
    + 2004-08-04 02:29:32 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys
    + 2004-08-04 02:29:32 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys
    + 2004-08-04 02:29:32 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 00:11:50 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 00:11:50 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll
    + 2008-04-14 00:12:12 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-14 00:09:01 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll
    + 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 00:12:12 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe
    + 2008-04-14 00:11:50 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 00:11:50 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 00:11:50 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 00:11:50 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 00:11:50 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 00:11:50 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 00:12:12 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 00:11:50 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll
    + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe
    + 2008-04-14 00:11:50 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll
    + 2008-04-14 00:12:12 588,800 ------w c:\windows\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 00:12:12 602,624 ------w c:\windows\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 00:12:13 580,608 ------w c:\windows\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 00:12:13 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe
    + 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-14 00:11:50 84,992 ------w c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll
    + 2008-04-14 00:11:50 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 00:11:50 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 00:11:50 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys
    + 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2008-04-14 00:11:50 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 00:11:50 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll
    + 2008-04-14 00:12:13 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2008-04-14 00:12:13 142,848 ------w c:\windows\ServicePackFiles\i386\bootcfg.exe
    + 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys
    + 2008-04-13 17:03:24 63,488 ------w c:\windows\ServicePackFiles\i386\browselc.dll
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll
    + 2008-04-14 00:11:50 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 00:11:50 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 00:11:50 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll
    + 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys
    + 2008-04-13 18:46:32 273,024 ------w c:\windows\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 00:11:50 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll
    + 2008-04-14 00:11:50 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 00:11:50 84,480 ------w c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 00:12:13 19,968 ------w c:\windows\ServicePackFiles\i386\cacls.exe
    + 2008-04-14 00:11:50 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 00:11:50 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll
    + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 00:11:50 150,016 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll
    + 2004-07-19 22:54:04 94,208 ------w c:\windows\ServicePackFiles\i386\caspol.exe
    + 2008-04-14 00:11:50 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 00:11:50 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 00:11:50 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2008-04-14 00:11:50 151,040 ------w c:\windows\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 00:11:50 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 00:11:50 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll
    + 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2008-04-14 00:11:50 194,560 ------w c:\windows\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 00:11:50 457,728 ------w c:\windows\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 00:11:50 38,912 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 00:09:05 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 00:12:14 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 00:11:50 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys
    + 2008-04-14 00:11:50 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll
    + 2008-04-14 00:11:50 1,358,848 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 00:12:14 56,832 ------w c:\windows\ServicePackFiles\i386\cipher.exe
    + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-14 00:11:51 46,592 ------w c:\windows\ServicePackFiles\i386\coadmin.dll
    + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll
    + 2008-04-14 00:11:51 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 00:11:51 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll
    + 2008-04-14 00:11:51 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 00:11:51 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 00:11:51 276,992 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 00:11:51 252,928 ------w c:\windows\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys
    + 2008-04-14 00:11:51 24,064 ------w c:\windows\ServicePackFiles\i386\compfilt.dll
    + 2008-04-14 00:11:51 229,376 ------w c:\windows\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 00:11:51 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll
    + 2008-04-14 00:12:15 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe
    + 2008-04-14 00:11:51 792,064 ------w c:\windows\ServicePackFiles\i386\comres.dll
    + 2008-04-13 18:43:32 9,728 ------w c:\windows\ServicePackFiles\i386\comsdupd.exe
    + 2008-04-14 00:11:51 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 00:11:51 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll
    + 2008-04-14 00:11:51 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 00:11:51 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 00:12:15 1,032,192 ------w c:\windows\ServicePackFiles\i386\conf.exe
    + 2008-04-14 00:11:51 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 00:11:51 357,888 ------w c:\windows\ServicePackFiles\i386\confmsp.dll
    + 2008-04-14 00:12:15 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe
    + 2004-08-04 02:11:12 69,632 ------w c:\windows\ServicePackFiles\i386\corperfmonext.dll
    + 2008-04-14 00:11:51 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll
    + 2008-04-14 00:11:51 163,840 ------w c:\windows\ServicePackFiles\i386\credui.dll
    + 2008-04-13 18:31:32 36,736 ------w c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2008-04-14 00:11:51 599,040 ------w c:\windows\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 00:11:51 74,752 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 00:11:51 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 00:11:51 53,760 ------w c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 00:11:51 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 00:11:51 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 00:11:51 512,512 ------w c:\windows\ServicePackFiles\i386\cryptui.dll
    + 2004-08-04 02:11:18 49,152 ------w c:\windows\ServicePackFiles\i386\csc.exe
    + 2008-04-14 00:11:51 101,888 ------w c:\windows\ServicePackFiles\i386\cscdll.dll
    + 2004-07-19 22:54:04 589,824 ------w c:\windows\ServicePackFiles\i386\cscomp.dll
    + 2008-04-14 00:12:15 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 00:11:51 326,656 ------w c:\windows\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 00:11:51 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 00:11:51 249,856 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll
    + 2004-08-04 02:32:26 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys
    + 2008-04-14 00:11:51 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 00:11:51 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 00:11:51 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 00:11:51 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 00:11:51 1,054,208 ------w c:\windows\ServicePackFiles\i386\danim.dll
    + 2008-03-25 04:50:25 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll
    + 2008-04-14 00:11:51 54,272 ------w c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 00:11:51 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll
    + 2008-04-14 00:12:16 42,496 ------w c:\windows\ServicePackFiles\i386\davcdata.exe
    + 2008-04-14 00:11:51 25,088 ------w c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 00:11:51 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 00:11:51 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 00:11:51 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 00:25:26 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin
    + 2008-04-14 00:11:51 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 00:11:51 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 00:12:16 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe
    + 2008-04-14 00:12:16 30,208 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 00:11:51 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 00:11:51 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 00:12:16 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 00:11:51 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 00:11:51 282,624 ------w c:\windows\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 00:12:16 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 00:12:16 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 00:11:51 39,424 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 00:11:51 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 00:11:51 111,104 ------w c:\windows\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 00:11:51 126,976 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 00:11:52 379,904 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 00:11:52 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll
    + 2008-04-14 00:12:17 539,136 ------w c:\windows\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 00:12:17 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe
    + 2004-08-10 09:00:00 884,712 ------w c:\windows\ServicePackFiles\i386\digcore.exe
    + 2008-04-14 00:11:52 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll
    + 2008-04-14 00:11:52 158,720 ------w c:\windows\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 00:11:52 181,760 ------w c:\windows\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 00:11:52 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll
    + 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll
    + 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2008-04-14 00:12:17 163,840 ------w c:\windows\ServicePackFiles\i386\diskpart.exe
    + 2008-04-14 00:11:52 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll
    + 2008-04-14 00:12:17 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe
    + 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys
    + 2008-04-14 00:12:17 224,768 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe
    + 2008-04-14 00:11:52 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll
    + 2008-04-13 18:44:48 799,744 ------w c:\windows\ServicePackFiles\i386\dmboot.sys
    + 2008-04-14 00:11:52 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-04-14 00:11:52 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll
    + 2008-04-14 00:11:52 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll
    + 2008-04-13 18:44:46 153,344 ------w c:\windows\ServicePackFiles\i386\dmio.sys
    + 2008-04-14 00:11:52 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2008-04-14 00:12:17 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2008-04-14 00:11:52 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2008-04-14 00:11:52 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll
    + 2008-04-14 00:11:52 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll
    + 2008-04-14 00:11:52 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll
    + 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2008-04-14 00:11:52 52,224 ------w c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2008-04-14 00:11:52 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll
    + 2008-04-14 00:11:52 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll
     
    blacklogman,
    #15
  17. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2008-04-14 00:11:52 48,128 ------w c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2004-08-10 09:00:00 53,840 ------w c:\windows\ServicePackFiles\i386\dosx.exe
    + 2008-04-14 00:11:52 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2008-04-14 00:11:52 57,856 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2008-04-14 00:11:52 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll
    + 2008-04-14 00:11:52 56,320 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2008-04-14 00:11:52 132,096 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll
    + 2008-04-14 00:11:52 650,752 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll
    + 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys
    + 2008-04-14 00:11:52 102,912 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll
    + 2008-04-14 00:12:17 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2008-04-14 00:11:52 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll
    + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2008-04-14 00:09:19 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll
    + 2008-04-14 00:11:52 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll
    + 2008-04-14 00:11:52 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2008-04-14 00:11:52 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-04-14 00:09:20 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll
    + 2008-04-14 00:12:17 17,920 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2008-04-14 00:11:52 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2008-04-14 00:11:52 212,480 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll
    + 2008-04-14 00:12:18 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2008-04-14 00:11:52 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll
    + 2008-04-14 00:11:52 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys
    + 2008-04-14 00:11:52 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll
    + 2008-04-14 00:12:18 62,976 ------w c:\windows\ServicePackFiles\i386\drvqry.exe
    + 2004-08-10 09:00:00 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll
    + 2008-04-14 00:11:52 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll
    + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll
    + 2008-04-14 00:11:52 71,680 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-04-14 00:11:52 92,672 ------w c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-04-14 00:11:52 155,648 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll
    + 2008-04-14 00:11:52 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll
    + 2008-04-14 00:11:52 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll
    + 2008-04-14 00:11:52 142,848 ------w c:\windows\ServicePackFiles\i386\dsprop.dll
    + 2008-04-13 17:09:30 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll
    + 2008-04-14 00:11:52 239,104 ------w c:\windows\ServicePackFiles\i386\dsquery.dll
    + 2008-04-14 00:11:52 51,200 ------w c:\windows\ServicePackFiles\i386\dssec.dll
    + 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll
    + 2008-04-14 00:11:52 113,152 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll
    + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll
    + 2008-04-14 00:12:18 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2008-04-14 00:11:52 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll
    + 2008-04-14 00:12:18 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-04-14 00:12:18 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe
    + 2008-04-14 00:11:52 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll
    + 2008-04-14 00:11:52 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll
    + 2008-04-14 00:12:18 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe
    + 2008-04-14 00:11:52 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll
    + 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys
    + 2008-04-14 00:11:52 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll
    + 2008-04-14 00:11:52 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll
    + 2008-04-14 00:11:52 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2008-04-14 00:11:52 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll
    + 2008-04-14 00:11:52 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll
    + 2008-04-14 00:11:52 94,208 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2008-04-14 00:11:52 180,224 ------w c:\windows\ServicePackFiles\i386\eapphost.dll
    + 2008-04-14 00:11:52 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2008-04-14 00:11:52 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2008-04-14 00:11:52 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2008-04-14 00:11:52 26,624 ------w c:\windows\ServicePackFiles\i386\efsadu.dll
    + 2008-04-14 00:11:53 183,296 ------w c:\windows\ServicePackFiles\i386\els.dll
    + 2008-04-14 00:11:53 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll
    + 2008-04-14 00:11:53 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll
    + 2008-04-13 16:26:02 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2004-07-17 15:39:36 120,320 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll
    + 2008-04-14 00:11:53 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2008-04-14 00:11:53 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll
    + 2008-04-14 00:11:53 1,082,368 ------w c:\windows\ServicePackFiles\i386\esent.dll
    + 2008-04-14 00:11:53 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll
    + 2004-08-04 02:32:28 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys
    + 2008-04-14 00:12:19 193,024 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe
    + 2008-04-14 00:12:19 50,688 ------w c:\windows\ServicePackFiles\i386\evcreate.exe
    + 2008-04-14 00:11:53 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2004-07-19 22:54:06 798,720 ------w c:\windows\ServicePackFiles\i386\eventlogmessages.dll
    + 2008-04-14 00:11:53 101,888 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2008-04-14 00:12:19 92,160 ------w c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2008-04-14 00:11:53 45,056 ------w c:\windows\ServicePackFiles\i386\evtgprov.dll
    + 2008-04-14 00:12:19 82,944 ------w c:\windows\ServicePackFiles\i386\evtrig.exe
    + 2008-04-14 00:11:53 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll
    + 2008-04-14 00:11:53 14,336 ------w c:\windows\ServicePackFiles\i386\exstrace.dll
    + 2008-04-14 00:11:53 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll
    + 2008-04-14 00:09:30 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll
    + 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys
    + 2008-04-14 00:11:53 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll
    + 2008-04-14 00:11:53 80,384 ------w c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys
    + 2008-04-14 00:11:53 124,928 ------w c:\windows\ServicePackFiles\i386\fde.dll
    + 2008-04-14 00:11:53 73,728 ------w c:\windows\ServicePackFiles\i386\fdeploy.dll
    + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll
    + 2008-04-14 00:11:53 337,920 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll
    + 2008-04-14 00:12:20 27,136 ------w c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-04-13 18:33:28 44,544 ------w c:\windows\ServicePackFiles\i386\fips.sys
    + 2008-04-14 00:11:53 87,552 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2008-04-14 00:11:53 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2008-04-14 00:12:20 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys
    + 2008-04-14 00:11:53 382,976 ------w c:\windows\ServicePackFiles\i386\fontext.dll
    + 2008-04-14 00:11:53 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll
    + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-04-14 00:12:20 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe
    + 2004-08-04 02:31:24 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys
    + 2008-04-14 00:12:42 29,696 ------w c:\windows\ServicePackFiles\i386\format.com
    + 2008-04-14 00:11:53 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2008-04-14 00:11:53 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll
    + 2008-04-14 00:11:53 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2008-04-14 00:11:53 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll
    + 2008-04-14 00:11:53 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2008-04-14 00:11:53 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll
    + 2008-04-14 00:11:53 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll
    + 2008-04-14 00:11:53 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2008-04-14 00:11:53 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2008-04-14 00:11:53 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2008-04-14 00:11:53 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll
    + 2008-04-14 00:12:20 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2008-04-14 00:12:20 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe
    + 2008-04-14 00:12:20 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2008-04-14 00:12:20 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe
    + 2008-04-14 00:11:53 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2008-04-14 00:11:53 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll
    + 2007-04-02 16:36:04 208,896 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll
    + 2008-04-14 00:12:20 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2008-04-14 00:12:20 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-04-14 00:09:33 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll
    + 2008-04-14 00:11:53 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll
    + 2008-04-14 00:12:20 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe
    + 2008-04-14 00:12:20 42,496 ------w c:\windows\ServicePackFiles\i386\ftp.exe
    + 2008-04-14 00:11:53 6,144 ------w c:\windows\ServicePackFiles\i386\ftpmib.dll
    + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\ftpsv251.dll
    + 2004-07-19 22:54:06 233,472 ------w c:\windows\ServicePackFiles\i386\fusion.dll
    + 2008-04-14 00:11:53 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2008-04-14 00:11:53 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll
    + 2008-04-14 00:12:21 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe
    + 2008-04-14 00:11:54 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll
    + 2008-04-14 00:12:21 229,376 ------w c:\windows\ServicePackFiles\i386\fxscover.exe
    + 2008-04-14 00:11:54 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2008-04-14 00:11:54 55,296 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2008-04-14 00:11:54 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll
    + 2008-04-14 00:11:54 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll
    + 2008-04-14 00:09:33 6,656 ------w c:\windows\ServicePackFiles\i386\fxsres.dll
    + 2008-04-14 00:11:54 562,176 ------w c:\windows\ServicePackFiles\i386\fxsst.dll
    + 2008-04-14 00:12:21 267,776 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe
    + 2008-04-14 00:11:54 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll
    + 2008-04-14 00:11:54 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll
    + 2008-04-14 00:11:54 154,112 ------w c:\windows\ServicePackFiles\i386\fxsui.dll
    + 2008-04-14 00:11:54 192,512 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll
    + 2008-04-14 00:11:54 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll
    + 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll
    + 2008-04-14 00:12:21 59,904 ------w c:\windows\ServicePackFiles\i386\getmac.exe
    + 2008-04-14 00:11:54 122,880 ------w c:\windows\ServicePackFiles\i386\glu32.dll
    + 2008-04-14 00:09:35 566,784 ------w c:\windows\ServicePackFiles\i386\gpedit.dll
    + 2004-08-10 09:00:00 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll
    + 2006-12-31 01:26:44 9,728 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll
    + 2008-04-14 00:12:21 120,832 ------w c:\windows\ServicePackFiles\i386\gprslt.exe
    + 2008-04-14 00:11:54 199,680 ------w c:\windows\ServicePackFiles\i386\gptext.dll
    + 2008-04-14 00:12:21 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2008-04-13 18:40:21 28,288 ------w c:\windows\ServicePackFiles\i386\grserial.sys
    + 2008-04-14 00:11:54 133,120 ------w c:\windows\ServicePackFiles\i386\guitrn.dll
    + 2008-04-14 00:11:54 115,200 ------w c:\windows\ServicePackFiles\i386\guitrna.dll
    + 2008-04-14 00:11:54 32,256 ------w c:\windows\ServicePackFiles\i386\gzip.dll
    + 2008-04-14 00:11:54 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2008-04-14 00:11:54 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll
    + 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll
    + 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll
    + 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll
    + 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll
    + 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll
    + 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll
    + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys
    + 2008-04-14 00:12:21 15,872 ------w c:\windows\ServicePackFiles\i386\help.exe
    + 2008-04-14 00:12:21 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe
    + 2008-04-14 00:12:21 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe
    + 2008-04-14 00:12:21 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe
    + 2008-04-14 00:11:54 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2008-04-14 00:11:54 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys
    + 2008-04-13 18:46:30 25,600 ------w c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys
    + 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2008-04-14 00:11:54 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2008-04-14 00:11:54 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll
    + 2008-04-14 00:11:54 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2008-04-14 00:11:54 344,064 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll
    + 2008-04-14 00:11:54 330,752 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll
    + 2008-04-14 00:11:54 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2008-04-14 00:11:54 144,896 ------w c:\windows\ServicePackFiles\i386\hotplug.dll
    + 2008-04-14 00:11:54 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2008-04-14 00:11:54 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-04-14 00:11:54 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2008-04-14 00:12:21 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2004-08-04 02:41:48 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
    + 2008-04-14 00:11:54 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2004-08-04 02:41:50 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys
    + 2004-08-04 02:41:56 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
    + 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys
    + 2008-04-14 00:11:54 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2008-04-14 00:11:54 268,288 ------w c:\windows\ServicePackFiles\i386\httpext.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\httpmb51.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\httpod51.dll
    + 2008-04-14 00:11:54 41,984 ------w c:\windows\ServicePackFiles\i386\htui.dll
    + 2008-04-14 00:11:54 347,136 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll
    + 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys
    + 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2008-04-13 19:18:00 52,480 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2008-04-14 00:11:54 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll
    + 2004-08-04 02:29:38 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys
    + 2008-04-14 00:11:54 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll
    + 2008-04-14 00:11:54 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2008-04-14 00:11:54 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2008-04-14 00:11:54 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll
    + 2008-04-14 00:09:40 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll
    + 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll
    + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2008-04-14 00:12:22 214,528 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe
    + 2008-04-14 00:12:22 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2008-04-14 00:11:54 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2008-04-14 00:11:54 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2008-04-14 00:11:54 172,032 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll
    + 2008-04-14 00:11:54 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2008-04-14 00:12:22 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2008-04-14 00:11:54 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2008-04-14 00:11:54 120,832 ------w c:\windows\ServicePackFiles\i386\idq.dll
    + 2008-04-14 00:12:22 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2008-04-14 00:11:54 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll
    + 2008-04-14 00:11:54 216,576 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll
    + 2008-04-14 00:11:54 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll
    + 2008-04-14 00:12:22 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2007-01-02 20:29:28 8,192 ------w c:\windows\ServicePackFiles\i386\ieexec.exe
    + 2004-07-19 22:54:06 7,168 ------w c:\windows\ServicePackFiles\i386\ieexecremote.dll
    + 2004-07-19 22:54:06 32,768 ------w c:\windows\ServicePackFiles\i386\iehost.dll
    + 2008-04-14 00:11:54 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll
    + 2008-04-14 00:11:54 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2008-04-14 00:11:54 62,976 ------w c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2008-04-14 00:12:22 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2008-04-14 00:12:22 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe
    + 2008-04-14 00:11:54 135,680 ------w c:\windows\ServicePackFiles\i386\ifmon.dll
    + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll
    + 2008-04-14 00:11:54 505,344 ------w c:\windows\ServicePackFiles\i386\iis.dll
    + 2008-04-14 00:11:54 25,088 ------w c:\windows\ServicePackFiles\i386\iisadmin.dll
    + 2008-04-14 00:11:54 145,408 ------w c:\windows\ServicePackFiles\i386\iische51.dll
    + 2008-04-14 00:11:54 68,608 ------w c:\windows\ServicePackFiles\i386\iisext51.dll
    + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\iisfecnv.dll
    + 2008-04-14 00:11:54 79,872 ------w c:\windows\ServicePackFiles\i386\iislog51.dll
    + 2008-04-14 00:11:54 64,512 ------w c:\windows\ServicePackFiles\i386\iismap.dll
    + 2008-04-14 00:12:22 30,720 ------w c:\windows\ServicePackFiles\i386\iisrstas.exe
    + 2008-04-14 00:11:54 133,632 ------w c:\windows\ServicePackFiles\i386\iisrtl.dll
    + 2004-08-04 02:11:48 184,320 ------w c:\windows\ServicePackFiles\i386\ilasm.exe
    + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll
    + 2008-04-14 00:11:54 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll
    + 2008-04-14 00:12:22 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe
    + 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys
    + 2008-04-14 00:11:54 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2008-04-14 00:11:54 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2008-04-14 00:11:54 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll
    + 2008-04-14 00:11:54 123,392 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll
    + 2008-04-14 00:11:54 274,432 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll
    + 2008-04-14 00:11:54 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll
    + 2008-04-14 00:12:22 15,360 ------w c:\windows\ServicePackFiles\i386\inetin51.exe
    + 2008-04-14 00:11:55 829,440 ------w c:\windows\ServicePackFiles\i386\inetmgr.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2008-04-14 00:11:55 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2008-04-14 00:11:55 15,872 ------w c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2008-04-13 16:22:12 48,128 ------w c:\windows\ServicePackFiles\i386\inetres.dll
    + 2008-04-14 00:12:22 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2008-04-14 00:11:55 13,312 ------w c:\windows\ServicePackFiles\i386\infoadmn.dll
    + 2008-04-14 00:11:55 257,024 ------w c:\windows\ServicePackFiles\i386\infocomm.dll
    + 2008-04-14 00:11:55 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll
    + 2008-04-14 00:11:55 123,392 ------w c:\windows\ServicePackFiles\i386\input.dll
    + 2008-04-14 00:11:55 96,256 ------w c:\windows\ServicePackFiles\i386\inseng.dll
    + 2004-07-19 22:54:06 24,576 ------w c:\windows\ServicePackFiles\i386\installutil.exe
    + 2008-04-13 18:40:29 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys
    + 2008-04-13 18:31:32 36,352 ------w c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2008-04-14 00:12:22 55,808 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2008-04-14 00:09:30 103,424 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll
    + 2008-04-14 00:09:23 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2008-04-14 00:11:55 94,720 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-04-14 00:11:55 161,280 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll
    + 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys
    + 2008-04-14 00:11:55 331,264 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll
    + 2008-04-14 00:11:55 330,752 ------w c:\windows\ServicePackFiles\i386\ippromon.dll
    + 2008-04-14 00:11:55 35,328 ------w c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-04-14 00:11:55 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll
    + 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2008-04-14 00:11:55 349,696 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll
    + 2008-04-14 00:10:45 102,912 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll
    + 2008-04-14 00:09:24 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2008-04-14 00:11:55 384,000 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll
    + 2008-04-14 00:12:23 53,248 ------w c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2008-04-14 00:11:55 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2008-04-14 00:12:23 23,552 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-04-14 00:11:55 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll
    + 2008-04-14 00:11:55 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll
    + 2008-04-14 00:11:55 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll
    + 2008-04-14 00:11:55 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll
    + 2008-04-14 00:11:55 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll
    + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll
    + 2008-04-13 18:45:34 46,592 ------w c:\windows\ServicePackFiles\i386\irbus.sys
    + 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys
    + 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys
    + 2008-04-14 00:12:23 151,552 ------w c:\windows\ServicePackFiles\i386\irftp.exe
    + 2008-04-14 00:11:55 28,160 ------w c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-04-13 18:36:41 37,248 ------w c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2008-04-14 00:11:55 68,608 ------w c:\windows\ServicePackFiles\i386\isatq.dll
    + 2008-04-14 00:11:55 26,624 ------w c:\windows\ServicePackFiles\i386\iscomlog.dll
    + 2008-04-14 00:10:32 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll
    + 2008-04-14 00:10:55 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll
    + 2008-04-14 00:10:55 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll
    + 2008-04-14 00:11:55 81,920 ------w c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-04-14 00:10:32 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll
    + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2008-04-14 00:11:55 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll
    + 2008-04-14 00:11:55 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll
    + 2008-04-14 00:11:55 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll
    + 2008-04-14 00:11:55 54,272 ------w c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2008-04-14 00:11:55 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-04-14 00:11:55 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll
    + 2008-04-14 00:11:55 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll
    + 2004-07-19 22:54:06 40,960 ------w c:\windows\ServicePackFiles\i386\jsc.exe
    + 2008-04-14 00:11:56 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll
    + 2008-04-14 00:11:56 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll
    + 2008-04-13 18:39:47 24,576 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll
    + 2008-04-13 18:39:48 14,592 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll
    + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll
    + 2008-04-14 00:09:55 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll
    + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
    + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll
    + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll
    + 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll
    + 2008-04-14 00:11:56 184,832 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll
    + 2008-04-14 00:11:56 48,640 ------w c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2008-04-14 00:11:56 253,952 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll
    + 2008-04-14 00:11:56 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll
    + 2008-04-14 00:11:56 989,696 ------w c:\windows\ServicePackFiles\i386\kernel32.dll
    + 2004-08-10 09:00:00 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys
    + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll
    + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys
    + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll
    + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll
    + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2004-08-10 09:00:00 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys
    + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll
    + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll
    + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll
    + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll
    + 2004-08-04 02:31:56 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
    + 2004-08-04 02:31:40 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
    + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
    + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
    + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
    + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
    + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2004-08-04 02:31:54 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
    + 2004-08-04 02:31:56 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
    + 2004-08-04 02:31:58 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
    + 2004-08-04 02:32:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
    + 2004-08-04 02:32:12 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe
    + 2004-08-04 02:32:16 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe
    + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
    + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll
    + 2004-08-04 02:31:50 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll
    + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
    + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2004-08-04 02:32:16 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
     
    blacklogman,
    #16
  18. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2004-08-04 02:32:16 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
    + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll
    + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe
    + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll
    + 2008-04-14 09:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll
    + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll
    + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll
    + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll
    + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr
    + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe
    + 2008-04-14 00:11:56 13,312 ------w c:\windows\ServicePackFiles\i386\lonsint.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll
    + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe
    + 2004-08-04 02:41:36 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys
    + 2004-08-04 02:41:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys
    + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys
    + 2004-08-04 02:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-04-14 00:11:56 37,888 ------w c:\windows\ServicePackFiles\i386\md5filt.dll
    + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll
    + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2004-08-04 02:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-04-14 00:11:56 16,896 ------w c:\windows\ServicePackFiles\i386\medctroc.dll
    + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-04-14 00:11:56 85,504 ------w c:\windows\ServicePackFiles\i386\metada51.dll
    + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll
    + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll
    + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll
    + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2004-07-19 22:54:06 712,704 ------w c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
    + 2004-07-19 22:54:06 286,720 ------w c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
    + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll
    + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll
    + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe
    + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe
    + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe
    + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe
    + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll
    + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe
    + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll
    + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll
    + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll
    + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll
    + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll
    + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll
    + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2004-08-10 09:00:00 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll
    + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe
    + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll
    + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll
    + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com
    + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll
    + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe
    + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe
    + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-04-13 18:39:44 92,544 ------w c:\windows\ServicePackFiles\i386\mqac.sys
    + 2008-04-14 00:11:57 138,240 ------w c:\windows\ServicePackFiles\i386\mqad.dll
    + 2008-04-14 00:12:27 19,968 ------w c:\windows\ServicePackFiles\i386\mqbkup.exe
    + 2008-04-14 00:11:57 47,616 ------w c:\windows\ServicePackFiles\i386\mqdscli.dll
    + 2008-04-14 00:11:57 16,896 ------w c:\windows\ServicePackFiles\i386\mqise.dll
    + 2008-04-14 00:11:57 89,088 ------w c:\windows\ServicePackFiles\i386\mqlogmgr.dll
    + 2008-04-14 00:11:57 225,280 ------w c:\windows\ServicePackFiles\i386\mqoa.dll
    + 2008-04-14 00:11:57 663,040 ------w c:\windows\ServicePackFiles\i386\mqqm.dll
    + 2008-04-14 00:11:57 177,152 ------w c:\windows\ServicePackFiles\i386\mqrt.dll
    + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mqrtdep.dll
    + 2008-04-14 00:11:57 95,744 ------w c:\windows\ServicePackFiles\i386\mqsec.dll
    + 2008-04-14 00:11:58 517,632 ------w c:\windows\ServicePackFiles\i386\mqsnap.dll
    + 2008-04-14 00:12:27 4,608 ------w c:\windows\ServicePackFiles\i386\mqsvc.exe
    + 2008-04-14 00:12:27 117,248 ------w c:\windows\ServicePackFiles\i386\mqtgsvc.exe
    + 2008-04-14 00:11:58 187,392 ------w c:\windows\ServicePackFiles\i386\mqtrig.dll
    + 2008-04-14 00:11:58 49,152 ------w c:\windows\ServicePackFiles\i386\mqupgrd.dll
    + 2008-04-14 00:11:58 471,552 ------w c:\windows\ServicePackFiles\i386\mqutil.dll
    + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys
    + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys
    + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll
    + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll
    + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll
    + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll
    + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll
    + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll
    + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe
    + 2007-04-02 20:01:06 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll
    + 2004-07-19 22:54:06 1,564,672 ------w c:\windows\ServicePackFiles\i386\mscorcfg.dll
    + 2004-08-04 02:12:02 69,632 ------w c:\windows\ServicePackFiles\i386\mscordbc.dll
    + 2004-08-04 02:12:02 221,184 ------w c:\windows\ServicePackFiles\i386\mscordbi.dll
    + 2007-06-27 12:55:10 131,072 ------w c:\windows\ServicePackFiles\i386\mscoree.dll
    + 2007-01-02 20:29:12 73,728 ------w c:\windows\ServicePackFiles\i386\mscorie.dll
    + 2004-07-19 22:54:08 303,104 ------w c:\windows\ServicePackFiles\i386\mscorjit.dll
    + 2007-01-02 20:29:12 86,016 ------w c:\windows\ServicePackFiles\i386\mscorld.dll
    + 2007-01-02 20:21:20 1,998,848 ------w c:\windows\ServicePackFiles\i386\mscorlib.dll
    + 2004-08-04 02:12:08 94,208 ------w c:\windows\ServicePackFiles\i386\mscorpe.dll
    + 2004-08-04 02:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
    + 2004-08-04 02:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
    + 2004-08-04 02:12:08 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.dll
    + 2004-08-04 02:12:10 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.es.dll
    + 2004-08-04 02:12:10 172,032 ------w c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
    + 2004-08-04 02:12:10 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
    + 2004-08-04 02:12:10 167,936 ------w c:\windows\ServicePackFiles\i386\mscorrc.it.dll
    + 2004-08-04 02:12:10 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
    + 2004-08-04 02:12:10 143,360 ------w c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
    + 2004-08-04 02:12:10 46,592 ------w c:\windows\ServicePackFiles\i386\mscorsec.dll
    + 2004-08-04 02:12:10 69,632 ------w c:\windows\ServicePackFiles\i386\mscorsn.dll
    + 2007-12-17 11:58:53 2,273,280 ------w c:\windows\ServicePackFiles\i386\mscorsvr.dll
    + 2004-08-04 02:12:14 8,704 ------w c:\windows\ServicePackFiles\i386\mscortim.dll
    + 2007-12-17 11:59:26 2,281,472 ------w c:\windows\ServicePackFiles\i386\mscorwks.dll
    + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll
    + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll
    + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll
    + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll
    + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll
    + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll
    + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll
    + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll
    + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll
    + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll
    + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll
    + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll
    + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe
    + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll
    + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll
    + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll
    + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys
    + 2008-03-25 04:50:28 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll
    + 2008-03-25 04:50:30 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll
    + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll
    + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll
    + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll
    + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv
    + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv
    + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll
    + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll
    + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll
    + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll
    + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll
    + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll
    + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll
    + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll
    + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll
    + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll
    + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll
    + 2008-03-25 04:50:34 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll
    + 2008-03-25 04:50:40 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll
    + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll
    + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll
    + 2008-03-25 04:50:42 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2008-03-25 04:50:42 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll
    + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys
    + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2008-03-25 04:50:44 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll
    + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-04-14 00:12:00 170,496 ------w c:\windows\ServicePackFiles\i386\msmqocm.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe
    + 2004-08-10 09:00:00 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe
    + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll
    + 2004-08-10 09:00:00 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe
    + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll
    + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll
    + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll
    + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll
    + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll
    + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll
    + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll
    + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe
    + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2008-03-25 04:50:45 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll
    + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys
    + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys
    + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll
    + 2008-03-25 04:50:47 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll
    + 2008-03-25 04:50:49 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll
    + 2008-03-25 04:50:52 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll
    + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll
    + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll
    + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll
    + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll
    + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys
    + 2008-03-25 04:50:55 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll
    + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll
    + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll
    + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll
    + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll
    + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll
    + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll
    + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll
    + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll
    + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2008-03-25 04:50:57 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll
    + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll
    + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll
    + 2008-03-25 04:50:58 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll
    + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2008-03-25 04:50:58 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll
    + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll
    + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll
    + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll
    + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2004-08-04 02:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys
    + 2004-08-04 02:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys
    + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe
    + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll
    + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll
    + 2004-08-04 02:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys
    + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys
    + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll
    + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll
    + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe
    + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll
    + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe
    + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys
    + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe
    + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe
    + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll
    + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys
    + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll
    + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe
    + 2004-08-10 09:00:00 126,976 ------w c:\windows\ServicePackFiles\i386\netfxocm.dll
    + 2007-12-17 11:59:53 82,976 ------w c:\windows\ServicePackFiles\i386\netfxupdate.exe
    + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll
    + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll
    + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll
    + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll
    + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe
    + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll
    + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll
    + 2004-08-04 02:31:42 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys
    + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll
    + 2004-08-04 02:12:20 147,456 ------w c:\windows\ServicePackFiles\i386\ngen.exe
    + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll
    + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll
    + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll
    + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\nsepm.dll
    + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-04-14 00:12:30 1,200,640 ------w c:\windows\ServicePackFiles\i386\ntbackup.exe
    + 2004-08-10 09:00:00 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll
    + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll
    + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys
    + 2004-08-10 09:00:00 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys
    + 2004-08-10 09:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2004-08-10 09:00:00 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2004-08-10 09:00:00 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2004-08-10 09:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
    + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
    + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe
    + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll
    + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll
    + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll
    + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll
    + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll
    + 2004-08-04 02:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys
    + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe
    + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll
    + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll
    + 2004-08-04 02:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys
    + 2008-04-14 00:12:02 64,000 ------w c:\windows\ServicePackFiles\i386\nwapi32.dll
    + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll
    + 2008-04-13 18:34:12 163,584 ------w c:\windows\ServicePackFiles\i386\nwrdr.sys
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\nwwks.dll
    + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll
    + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll
    + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll
    + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll
     
    blacklogman,
    #17
  19. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2008-04-13 18:40:07 393,728 ------w c:\windows\ServicePackFiles\i386\obrb0401.dll
    + 2008-04-13 18:40:23 212,480 ------w c:\windows\ServicePackFiles\i386\obrb0404.dll
    + 2008-04-13 18:40:24 428,032 ------w c:\windows\ServicePackFiles\i386\obrb0405.dll
    + 2008-04-13 18:40:27 418,816 ------w c:\windows\ServicePackFiles\i386\obrb0406.dll
    + 2008-04-13 18:40:34 403,456 ------w c:\windows\ServicePackFiles\i386\obrb0407.dll
    + 2008-04-13 18:40:30 419,328 ------w c:\windows\ServicePackFiles\i386\obrb0408.dll
    + 2008-04-13 18:40:32 405,504 ------w c:\windows\ServicePackFiles\i386\obrb040b.dll
    + 2008-04-13 18:40:33 410,624 ------w c:\windows\ServicePackFiles\i386\obrb040c.dll
    + 2008-04-13 18:40:32 384,000 ------w c:\windows\ServicePackFiles\i386\obrb040d.dll
    + 2008-04-13 18:40:39 434,176 ------w c:\windows\ServicePackFiles\i386\obrb040e.dll
    + 2008-04-13 18:40:39 413,696 ------w c:\windows\ServicePackFiles\i386\obrb0410.dll
    + 2008-04-13 18:40:44 275,456 ------w c:\windows\ServicePackFiles\i386\obrb0411.dll
    + 2008-04-13 18:40:48 306,688 ------w c:\windows\ServicePackFiles\i386\obrb0412.dll
    + 2008-04-13 18:40:44 401,920 ------w c:\windows\ServicePackFiles\i386\obrb0413.dll
    + 2008-04-13 18:40:44 353,792 ------w c:\windows\ServicePackFiles\i386\obrb0414.dll
    + 2008-04-13 18:40:47 391,680 ------w c:\windows\ServicePackFiles\i386\obrb0415.dll
    + 2008-04-13 18:40:10 409,600 ------w c:\windows\ServicePackFiles\i386\obrb0416.dll
    + 2008-04-13 18:40:50 427,008 ------w c:\windows\ServicePackFiles\i386\obrb0419.dll
    + 2008-04-13 18:40:52 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll
    + 2008-04-13 18:40:56 363,008 ------w c:\windows\ServicePackFiles\i386\obrb041d.dll
    + 2008-04-13 18:41:00 390,144 ------w c:\windows\ServicePackFiles\i386\obrb041f.dll
    + 2008-04-13 18:40:56 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll
    + 2008-04-13 18:40:24 270,336 ------w c:\windows\ServicePackFiles\i386\obrb0804.dll
    + 2008-04-13 18:40:48 435,200 ------w c:\windows\ServicePackFiles\i386\obrb0816.dll
    + 2008-04-13 18:40:30 446,464 ------w c:\windows\ServicePackFiles\i386\obrb0c0a.dll
    + 2008-04-14 00:12:02 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2008-04-14 00:12:02 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2004-08-10 09:00:00 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2008-04-14 00:12:02 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll
    + 2008-04-14 00:12:02 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-04-14 00:12:30 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-04-14 00:12:02 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-04-14 00:12:02 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll
    + 2008-04-14 00:12:30 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-04-14 00:12:02 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-04-13 17:26:05 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-04-14 00:10:31 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-04-14 00:12:02 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll
    + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-04-14 00:12:02 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-04-14 00:12:02 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll
    + 2008-04-14 00:12:30 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-04-14 00:12:02 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll
    + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-04-14 00:12:02 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll
    + 2008-04-14 00:12:02 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll
    + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2008-04-14 00:12:02 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll
    + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll
    + 2008-04-14 00:12:02 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll
    + 2008-04-14 00:12:02 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll
    + 2008-04-14 00:12:31 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-04-14 00:12:02 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll
    + 2008-04-14 00:12:31 67,584 ------w c:\windows\ServicePackFiles\i386\opnfiles.exe
    + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe
    + 2008-04-14 00:12:31 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe
    + 2008-04-13 18:31:43 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-04-14 00:12:02 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll
    + 2008-04-14 00:12:02 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll
    + 2008-04-14 00:12:02 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll
    + 2008-04-14 00:12:02 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll
    + 2008-04-13 18:31:31 42,752 ------w c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-04-14 00:12:31 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-04-13 18:40:10 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2004-08-04 02:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2008-04-14 00:12:02 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll
    + 2008-04-14 00:12:02 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-04-13 18:36:44 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll
    + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll
    + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll
    + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll
    + 2008-04-13 18:36:43 120,192 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys
    + 2004-08-04 02:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys
    + 2008-04-14 00:12:02 284,160 ------w c:\windows\ServicePackFiles\i386\pdh.dll
    + 2004-08-04 02:12:20 20,480 ------w c:\windows\ServicePackFiles\i386\perfcounter.dll
    + 2008-04-14 00:12:02 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-04-14 00:12:02 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-04-14 00:12:31 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2008-04-14 00:12:02 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-04-14 00:12:02 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-04-14 00:10:34 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll
    + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-04-14 00:10:34 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll
    + 2008-04-14 00:12:02 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll
    + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-04-14 00:11:09 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-04-14 00:12:31 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe
    + 2008-04-14 00:12:31 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-04-14 00:12:02 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll
    + 2008-04-14 00:12:02 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-04-14 00:12:02 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-04-14 00:12:02 92,672 ------w c:\windows\ServicePackFiles\i386\policman.dll
    + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll
    + 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys
    + 2008-04-14 00:12:31 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys
    + 2008-04-14 00:12:03 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2008-04-14 00:12:03 560,640 ------w c:\windows\ServicePackFiles\i386\printui.dll
    + 2008-04-13 18:31:30 35,840 ------w c:\windows\ServicePackFiles\i386\processr.sys
    + 2008-04-14 00:12:03 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll
    + 2008-04-14 00:12:31 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\proquota.exe
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll
    + 2008-04-14 00:12:32 9,216 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe
    + 2008-04-14 00:12:03 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll
    + 2008-04-14 00:12:03 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll
    + 2008-04-14 00:12:03 96,768 ------w c:\windows\ServicePackFiles\i386\psbase.dll
    + 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys
    + 2008-04-14 00:12:03 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll
    + 2008-04-14 00:12:03 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2008-04-14 00:12:03 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2008-04-14 00:12:03 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\pwsdata.dll
    + 2008-04-14 00:12:03 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll
    + 2008-04-14 00:12:03 291,328 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll
    + 2008-04-14 00:12:03 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll
    + 2008-04-14 00:12:03 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll
    + 2008-04-14 00:12:03 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll
    + 2008-04-14 00:12:03 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll
    + 2008-04-14 00:12:03 386,048 ------w c:\windows\ServicePackFiles\i386\qdvd.dll
    + 2008-04-14 00:12:03 562,176 ------w c:\windows\ServicePackFiles\i386\qedit.dll
    + 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll
    + 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll
    + 2008-04-14 00:12:03 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2008-04-14 00:12:32 19,968 ------w c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2008-04-14 00:12:03 1,288,192 ------w c:\windows\ServicePackFiles\i386\quartz.dll
    + 2008-04-14 00:12:03 1,435,648 ------w c:\windows\ServicePackFiles\i386\query.dll
    + 2008-04-14 00:12:03 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll
    + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll
    + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll
    + 2008-04-14 00:12:03 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2008-04-14 00:12:03 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll
    + 2008-04-14 00:12:03 658,432 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll
    + 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2008-04-14 00:12:03 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll
    + 2008-04-14 00:12:03 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll
    + 2008-04-14 00:12:32 56,832 ------w c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2008-04-14 00:12:03 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll
    + 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-04-14 00:12:03 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll
    + 2008-04-14 00:12:03 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2008-04-14 00:12:03 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2008-04-14 00:12:03 150,016 ------w c:\windows\ServicePackFiles\i386\rastls.dll
    + 2008-04-14 00:12:03 102,400 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll
    + 2008-04-14 00:12:32 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2008-04-14 00:12:32 21,504 ------w c:\windows\ServicePackFiles\i386\rcp.exe
    + 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys
    + 2008-04-14 00:12:03 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll
    + 2008-04-14 00:12:32 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2008-04-14 00:13:22 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys
    + 2008-04-14 00:12:04 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2008-04-14 00:13:22 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys
    + 2008-04-14 00:13:22 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2008-04-14 00:12:32 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2008-04-14 00:12:32 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2004-08-04 02:41:40 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys
    + 2008-04-13 18:40:27 57,600 ------w c:\windows\ServicePackFiles\i386\redbook.sys
    + 2004-08-10 09:00:00 3,338 ------w c:\windows\ServicePackFiles\i386\redir.exe
    + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\reg.exe
    + 2008-04-14 00:12:04 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll
    + 2004-07-19 22:54:16 28,672 ------w c:\windows\ServicePackFiles\i386\regasm.exe
    + 2004-07-19 22:54:16 32,768 ------w c:\windows\ServicePackFiles\i386\regcode.dll
    + 2008-04-14 00:12:32 146,432 ------w c:\windows\ServicePackFiles\i386\regedit.exe
    + 2008-04-14 00:12:04 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2004-07-19 22:54:16 11,264 ------w c:\windows\ServicePackFiles\i386\regsvcs.exe
    + 2008-04-14 00:12:32 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2008-04-14 00:12:04 397,824 ------w c:\windows\ServicePackFiles\i386\regwizc.dll
    + 2008-04-14 00:12:04 60,416 ------w c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2008-04-14 00:12:04 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll
    + 2008-04-14 00:12:04 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll
    + 2008-04-14 00:12:33 13,824 ------w c:\windows\ServicePackFiles\i386\rexec.exe
    + 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-04-14 00:12:04 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll
    + 2008-04-14 00:12:04 123,392 ------w c:\windows\ServicePackFiles\i386\riafres.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2008-04-14 00:12:04 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll
    + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys
    + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys
    + 2008-04-13 18:40:14 79,104 ------w c:\windows\ServicePackFiles\i386\rocket.sys
    + 2008-04-14 00:12:04 4,096 ------w c:\windows\ServicePackFiles\i386\rpcref.dll
    + 2008-04-14 00:12:04 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll
    + 2008-04-14 00:12:04 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll
    + 2008-04-14 00:12:04 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll
    + 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll
    + 2008-04-14 00:12:33 14,848 ------w c:\windows\ServicePackFiles\i386\rsh.exe
    + 2008-04-14 00:12:04 39,936 ------w c:\windows\ServicePackFiles\i386\rshx32.dll
    + 2008-04-14 00:12:04 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll
    + 2008-04-14 00:12:33 107,520 ------w c:\windows\ServicePackFiles\i386\rsnotify.exe
    + 2008-04-14 00:12:33 380,416 ------w c:\windows\ServicePackFiles\i386\rstrui.exe
    + 2008-04-14 00:12:04 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll
    + 2008-04-14 00:12:33 77,312 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe
    + 2008-04-14 00:12:04 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll
    + 2004-08-04 02:31:34 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys
    + 2008-04-14 00:12:04 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll
    + 2008-04-14 00:12:33 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe
    + 2008-04-14 00:12:33 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll
    + 2008-04-14 00:12:04 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll
    + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll
    + 2008-04-14 00:12:04 9,728 ------w c:\windows\ServicePackFiles\i386\rwnh.dll
    + 2008-04-14 00:12:04 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll
    + 2004-08-04 02:29:52 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys
    + 2008-04-14 00:12:04 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll
    + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll
    + 2008-04-14 00:12:04 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll
    + 2008-04-14 00:12:04 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll
    + 2008-04-14 00:12:04 415,744 ------w c:\windows\ServicePackFiles\i386\samsrv.dll
    + 2008-04-14 00:12:04 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll
    + 2008-04-14 00:12:33 13,312 ------w c:\windows\ServicePackFiles\i386\savedump.exe
    + 2008-04-14 00:12:04 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll
    + 2008-04-14 00:12:04 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll
    + 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys
    + 2008-04-14 00:12:04 69,632 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll
    + 2008-04-14 00:12:33 95,744 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe
    + 2004-08-10 09:00:00 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll
    + 2008-04-14 00:12:05 171,008 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll
    + 2008-04-14 00:12:05 181,248 ------w c:\windows\ServicePackFiles\i386\scecli.dll
    + 2008-04-14 00:12:05 314,880 ------w c:\windows\ServicePackFiles\i386\scesrv.dll
    + 2008-04-14 00:12:05 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll
    + 2008-04-14 00:12:05 192,512 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll
    + 2008-04-14 00:12:05 20,480 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll
    + 2008-04-14 00:12:34 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe
    + 2008-04-14 00:12:05 215,552 ------w c:\windows\ServicePackFiles\i386\script.dll
    + 2008-04-14 00:12:05 199,680 ------w c:\windows\ServicePackFiles\i386\scripta.dll
    + 2008-04-14 00:12:43 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr
    + 2008-04-14 00:12:05 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll
    + 2008-04-14 00:12:05 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll
    + 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys
    + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys
    + 2008-04-14 00:12:34 121,856 ------w c:\windows\ServicePackFiles\i386\sctasks.exe
    + 2008-04-14 00:12:34 77,312 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe
    + 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll
    + 2007-11-13 10:25:53 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys
     
    blacklogman,
    #18
  20. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    + 2008-04-14 00:12:08 74,240 ------w c:\windows\ServicePackFiles\i386\usbui.dll
    + 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys
    + 2008-04-14 00:12:08 727,040 ------w c:\windows\ServicePackFiles\i386\userenv.dll
    + 2008-04-14 00:12:08 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll
    + 2008-04-14 00:12:38 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe
    + 2008-04-14 00:12:08 218,624 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll
    + 2008-04-14 00:12:08 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll
    + 2004-07-19 22:54:22 716,800 ------w c:\windows\ServicePackFiles\i386\vbc.exe
    + 2004-08-04 02:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
    + 2004-08-04 02:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
    + 2004-08-04 02:12:48 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.dll
    + 2004-08-04 02:12:48 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
    + 2004-08-04 02:12:48 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
    + 2004-08-04 02:12:48 151,552 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
    + 2004-08-04 02:12:50 147,456 ------w c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
    + 2004-08-04 02:12:50 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
    + 2004-08-04 02:12:50 126,976 ------w c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
    + 2008-04-14 00:12:08 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll
    + 2008-04-14 00:12:08 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll
    + 2008-04-14 00:12:08 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll
    + 2008-04-14 00:12:08 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll
    + 2008-04-14 00:12:38 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe
    + 2008-04-14 00:12:08 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll
    + 2008-04-14 00:12:08 53,760 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll
    + 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys
    + 2008-04-14 00:12:08 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll
    + 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys
    + 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys
    + 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys
    + 2008-04-14 00:12:08 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll
    + 2008-04-13 18:41:01 52,352 ------w c:\windows\ServicePackFiles\i386\volsnap.sys
    + 2004-08-04 02:12:50 999,424 ------w c:\windows\ServicePackFiles\i386\vsavb7rt.dll
    + 2008-04-14 00:12:08 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll
    + 2008-04-14 00:12:38 289,792 ------w c:\windows\ServicePackFiles\i386\vssvc.exe
    + 2008-04-14 00:12:08 175,104 ------w c:\windows\ServicePackFiles\i386\w32time.dll
    + 2008-04-14 00:12:08 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll
    + 2008-04-14 00:12:08 364,032 ------w c:\windows\ServicePackFiles\i386\w3svc.dll
    + 2008-04-14 00:12:08 483,840 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll
    + 2008-04-14 00:12:38 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe
    + 2008-04-14 00:12:08 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll
    + 2008-04-13 16:21:48 249,856 ------w c:\windows\ServicePackFiles\i386\wab32res.dll
    + 2008-04-14 00:12:08 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll
    + 2008-04-14 00:12:08 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll
    + 2008-04-14 00:12:39 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe
    + 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys
    + 2004-08-04 02:29:38 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys
    + 2004-08-04 02:29:38 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys
    + 2004-08-04 02:29:38 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys
    + 2004-08-04 02:29:40 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys
    + 2004-08-04 02:29:40 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys
    + 2004-08-04 02:29:42 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys
    + 2004-08-04 02:29:42 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys
    + 2008-04-14 00:12:08 76,800 ------w c:\windows\ServicePackFiles\i386\wam51.dll
    + 2008-04-14 00:12:08 53,248 ------w c:\windows\ServicePackFiles\i386\wamreg51.dll
    + 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys
    + 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys
    + 2004-08-04 02:29:42 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys
    + 2004-08-04 02:29:44 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys
    + 2004-08-04 02:29:44 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys
    + 2004-08-04 02:29:46 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys
    + 2004-08-04 02:29:46 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys
    + 2008-04-14 00:12:08 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll
    + 2008-04-14 00:12:08 196,608 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll
    + 2008-04-14 00:12:08 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll
    + 2008-04-14 00:12:08 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll
    + 2008-04-14 00:12:08 531,456 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll
    + 2008-04-14 00:12:08 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll
    + 2008-04-14 00:12:08 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll
    + 2008-04-14 00:12:08 43,008 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll
    + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll
    + 2008-04-14 00:12:08 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll
    + 2008-04-14 00:12:39 116,224 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe
    + 2008-04-14 00:12:08 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll
    + 2008-04-13 18:45:38 31,744 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys
    + 2004-08-04 02:29:46 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys
    + 2008-04-14 00:12:08 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll
    + 2008-04-14 00:12:45 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv
    + 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys
    + 2008-04-14 00:12:08 276,480 ------w c:\windows\ServicePackFiles\i386\webcheck.dll
    + 2008-04-14 00:12:08 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll
    + 2008-04-14 00:12:08 135,680 ------w c:\windows\ServicePackFiles\i386\webvw.dll
    + 2008-04-14 00:12:39 65,024 ------w c:\windows\ServicePackFiles\i386\wextract.exe
    + 2008-04-14 00:12:39 433,664 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe
    + 2008-04-14 00:12:08 463,360 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll
    + 2008-04-14 00:12:08 124,416 ------w c:\windows\ServicePackFiles\i386\wiadss.dll
    + 2008-04-14 00:12:08 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll
    + 2008-04-14 00:12:08 333,824 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll
    + 2008-04-14 00:12:08 589,312 ------w c:\windows\ServicePackFiles\i386\wiashext.dll
    + 2008-04-14 00:12:08 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll
    + 2008-04-14 00:12:08 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll
    + 2008-04-14 00:12:08 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll
    + 2008-04-13 19:30:10 1,845,632 ------w c:\windows\ServicePackFiles\i386\win32k.sys
    + 2008-04-14 00:12:08 102,400 ------w c:\windows\ServicePackFiles\i386\win32spl.dll
    + 2008-04-13 16:48:53 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll
    + 2008-04-14 00:12:39 283,648 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe
    + 2008-04-14 00:12:08 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll
    + 2008-04-14 00:12:08 666,112 ------w c:\windows\ServicePackFiles\i386\wininet.dll
    + 2008-04-14 00:12:09 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll
    + 2008-04-14 00:12:39 507,904 ------w c:\windows\ServicePackFiles\i386\winlogon.exe
    + 2008-04-14 00:12:09 176,128 ------w c:\windows\ServicePackFiles\i386\winmm.dll
    + 2004-08-10 09:00:00 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll
    + 2008-04-14 00:11:11 756,224 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll
    + 2008-04-14 00:12:09 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll
    + 2008-04-14 00:12:09 99,328 ------w c:\windows\ServicePackFiles\i386\winscard.dll
    + 2008-04-14 00:12:09 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll
    + 2008-04-14 00:12:45 146,432 ------w c:\windows\ServicePackFiles\i386\winspool.drv
    + 2008-04-14 00:12:09 293,376 ------w c:\windows\ServicePackFiles\i386\winsrv.dll
    + 2008-04-14 00:12:09 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll
    + 2008-04-14 00:12:09 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll
    + 2008-04-14 00:12:40 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll
    + 2008-04-14 00:12:09 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll
    + 2008-04-14 00:12:09 172,032 ------w c:\windows\ServicePackFiles\i386\wldap32.dll
    + 2004-08-04 02:31:28 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys
    + 2008-04-14 00:12:09 92,672 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll
    + 2008-04-14 00:11:15 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll
    + 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys
    + 2008-04-14 00:12:40 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe
    + 2008-04-13 17:10:20 6,656 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll
    + 2008-04-14 00:12:09 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll
    + 2008-04-14 00:12:40 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe
    + 2008-04-14 00:12:40 358,912 ------w c:\windows\ServicePackFiles\i386\wmic.exe
    + 2008-04-14 00:12:09 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll
    + 2008-04-14 00:12:09 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll
    + 2008-04-14 00:12:09 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll
    + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll
    + 2008-04-14 00:12:09 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll
    + 2008-04-14 00:12:09 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll
    + 2008-04-14 00:12:09 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll
    + 2008-04-14 00:12:40 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe
    + 2008-04-14 00:12:09 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll
    + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll
    + 2008-04-14 00:12:09 95,232 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll
    + 2008-04-14 00:12:09 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll
    + 2008-04-14 00:12:09 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll
    + 2008-04-14 00:12:09 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll
    + 2008-04-14 00:12:09 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll
    + 2008-04-14 00:12:09 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll
    + 2008-04-14 00:12:09 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll
    + 2008-04-14 00:12:09 4,256,768 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll
    + 2008-04-14 00:12:09 5,632 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll
    + 2008-04-14 00:12:09 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll
    + 2008-04-14 00:12:40 214,528 ------w c:\windows\ServicePackFiles\i386\wordpad.exe
    + 2008-04-14 00:12:10 264,192 ------w c:\windows\ServicePackFiles\i386\wow32.dll
    + 2008-04-14 00:12:40 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe
    + 2008-04-14 00:12:41 11,264 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe
    + 2008-04-14 00:12:10 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll
    + 2008-04-14 00:12:10 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll
    + 2008-04-14 00:12:41 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe
    + 2008-04-14 00:12:41 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe
    + 2008-04-14 00:12:10 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll
    + 2008-04-14 00:12:10 604,160 ------w c:\windows\ServicePackFiles\i386\wsecedit.dll
    + 2008-04-14 00:12:10 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll
    + 2008-04-14 00:12:10 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll
    + 2008-04-14 00:12:10 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll
    + 2008-04-14 00:12:10 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll
    + 2008-04-14 00:12:10 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll
    + 2008-04-14 00:12:10 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll
    + 2008-04-14 00:12:10 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll
    + 2004-08-04 02:29:48 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys
    + 2008-04-14 00:12:10 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll
    + 2008-04-14 00:12:10 22,528 ------w c:\windows\ServicePackFiles\i386\wsock32.dll
    + 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys
    + 2008-04-14 00:12:10 50,688 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll
    + 2008-04-14 00:12:10 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll
    + 2008-04-14 00:12:10 430,592 ------w c:\windows\ServicePackFiles\i386\wuapi.dll
    + 2008-04-14 00:12:41 111,104 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe
    + 2008-04-14 00:12:41 165,888 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe
    + 2008-04-14 00:12:11 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll
    + 2008-04-14 00:12:11 183,296 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll
    + 2008-04-14 00:12:11 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll
    + 2008-04-14 00:12:11 112,640 ------w c:\windows\ServicePackFiles\i386\wucltui.dll
    + 2008-04-14 00:12:11 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll
    + 2008-04-14 00:12:11 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll
    + 2004-08-04 02:29:50 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys
    + 2008-04-14 00:12:11 383,488 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll
    + 2008-04-14 00:12:11 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll
    + 2008-04-14 00:12:11 483,840 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll
    + 2008-04-14 00:12:11 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll
    + 2008-04-14 00:12:41 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe
    + 2004-08-10 09:00:00 174,200 ------w c:\windows\ServicePackFiles\i386\xenroll.dll
    + 2008-04-14 00:12:11 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll
    + 2008-04-14 00:12:11 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll
    + 2008-04-14 00:12:11 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll
    + 2008-04-14 00:12:11 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll
    + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe
    + 2008-04-13 17:39:29 438,784 ------w c:\windows\ServicePackFiles\i386\xpob2res.dll
    + 2008-04-13 17:39:22 187,392 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll
    + 2008-04-13 17:39:24 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll
    + 2008-04-13 17:39:26 689,152 ------w c:\windows\ServicePackFiles\i386\xpsp3res.dll
    + 2008-04-14 00:12:11 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll
    + 2008-04-14 00:12:11 116,224 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll
    + 2008-04-14 00:12:11 338,432 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll
    + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
    + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\slrundll.exe
    - 2004-08-10 09:00:00 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    + 2008-04-14 00:11:59 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll
    - 2004-08-10 09:00:00 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    + 2008-04-14 00:12:06 58,434 ----a-w c:\windows\srchasst\srchctls.dll
    - 2004-08-10 09:00:00 725,566 ----a-w c:\windows\srchasst\srchui.dll
    + 2008-04-14 00:12:07 726,078 ----a-w c:\windows\srchasst\srchui.dll
    - 2006-02-10 22:17:04 282,624 ----a-w c:\windows\stsystra.exe
    + 2006-02-10 22:17:04 303,104 ----a-w c:\windows\stsystra.exe
    - 2000-08-31 13:00:00 161,792 ----a-w c:\windows\SWREG.exe
    + 2000-08-31 13:00:00 179,200 ----a-w c:\windows\SWREG.exe
    - 2000-08-31 13:00:00 136,704 ----a-w c:\windows\SWSC.exe
    + 2000-08-31 13:00:00 155,136 ----a-w c:\windows\SWSC.exe
    - 2000-08-31 13:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
    + 2000-08-31 13:00:00 229,888 ----a-w c:\windows\SWXCACLS.exe
    - 2004-08-10 09:00:00 146,432 ----a-w c:\windows\system\WINSPOOL.DRV
    + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system\winspool.drv
    + 2009-03-02 00:51:22 155,114 ----a-w c:\windows\system\xccef090131.exe
    - 2006-08-16 11:58:05 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\system32\6to4svc.dll
    + 2008-04-14 00:11:56 20,992 ----a-w c:\windows\system32\6to4v32.dll
    + 2008-04-14 00:11:48 136,192 ------w c:\windows\system32\aaclient.dll
    - 2004-08-10 09:00:00 183,808 ----a-w c:\windows\system32\accwiz.exe
    + 2008-04-14 00:12:11 201,728 ----a-w c:\windows\system32\accwiz.exe
    - 2004-08-10 09:00:00 114,688 ----a-w c:\windows\system32\aclui.dll
    + 2008-04-14 00:11:48 115,712 ----a-w c:\windows\system32\aclui.dll
    - 2004-08-10 09:00:00 194,048 ----a-w c:\windows\system32\activeds.dll
    + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\system32\activeds.dll
    - 2004-08-10 09:00:00 4,096 ----a-w c:\windows\system32\actmovie.exe
    + 2008-04-14 00:12:12 21,504 ----a-w c:\windows\system32\actmovie.exe
    - 2004-08-10 09:00:00 101,888 ----a-w c:\windows\system32\actxprxy.dll
    + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\system32\actxprxy.dll
    - 2008-03-19 23:26:20 110,592 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
    + 2008-03-19 23:26:20 131,072 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
    - 2004-08-10 09:00:00 175,616 ----a-w c:\windows\system32\adsldp.dll
    + 2008-04-14 00:11:48 175,616 ----a-w c:\windows\system32\adsldp.dll
    - 2004-08-10 09:00:00 143,360 ----a-w c:\windows\system32\adsldpc.dll
    + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\system32\adsldpc.dll
    - 2004-08-10 09:00:00 68,096 ----a-w c:\windows\system32\adsmsext.dll
    + 2008-04-14 00:11:48 68,096 ----a-w c:\windows\system32\adsmsext.dll
    - 2004-08-10 09:00:00 263,680 ----a-w c:\windows\system32\adsnt.dll
    + 2008-04-14 00:11:48 263,680 ----a-w c:\windows\system32\adsnt.dll
    - 2004-08-10 09:00:00 109,568 ----a-w c:\windows\system32\adsnw.dll
    + 2008-04-14 00:11:48 123,392 ----a-w c:\windows\system32\adsnw.dll
    - 2004-08-10 09:00:00 616,960 ----a-w c:\windows\system32\advapi32.dll
    + 2008-04-14 00:11:48 617,472 ----a-w c:\windows\system32\advapi32.dll
    - 2008-10-16 20:38:34 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2008-12-20 23:15:11 124,928 ----a-w c:\windows\system32\advpack.dll
    - 2004-08-10 09:00:00 98,304 ----a-w c:\windows\system32\ahui.exe
    + 2008-04-14 00:12:12 115,712 ----a-w c:\windows\system32\ahui.exe
    - 2004-08-10 09:00:00 44,544 ----a-w c:\windows\system32\alg.exe
    + 2008-04-14 00:12:12 61,440 ----a-w c:\windows\system32\alg.exe
    - 2004-08-10 09:00:00 17,408 ----a-w c:\windows\system32\alrsvc.dll
    + 2008-04-14 00:11:49 17,408 ----a-w c:\windows\system32\alrsvc.dll
    - 2004-08-10 09:00:00 70,656 ----a-w c:\windows\system32\amstream.dll
    + 2008-04-14 00:11:49 70,656 ----a-w c:\windows\system32\amstream.dll
    - 2004-08-10 09:00:00 126,976 ----a-w c:\windows\system32\apphelp.dll
    + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\system32\apphelp.dll
    - 2004-08-10 09:00:00 167,936 ----a-w c:\windows\system32\appmgmts.dll
    + 2008-04-14 00:11:49 167,936 ----a-w c:\windows\system32\appmgmts.dll
    - 2004-08-10 09:00:00 295,936 ----a-w c:\windows\system32\appmgr.dll
    + 2008-04-14 00:11:49 295,936 ----a-w c:\windows\system32\appmgr.dll
    - 2004-08-10 09:00:00 19,456 ----a-w c:\windows\system32\arp.exe
    + 2004-08-10 09:00:00 36,352 ----a-w c:\windows\system32\arp.exe
    - 2004-08-10 09:00:00 30,208 ----a-w c:\windows\system32\asr_fmt.exe
    + 2008-04-14 00:12:12 47,104 ----a-w c:\windows\system32\asr_fmt.exe
    - 2004-08-10 09:00:00 32,256 ----a-w c:\windows\system32\asr_ldm.exe
    + 2004-08-10 09:00:00 49,664 ----a-w c:\windows\system32\asr_ldm.exe
    - 2004-08-10 09:00:00 32,768 ----a-w c:\windows\system32\asr_pfu.exe
    + 2008-04-14 00:12:12 32,768 ----a-w c:\windows\system32\asr_pfu.exe
    - 2004-08-10 09:00:00 65,024 ----a-w c:\windows\system32\asycfilt.dll
    + 2008-04-14 00:11:49 65,024 ----a-w c:\windows\system32\asycfilt.dll
    - 2004-08-10 09:00:00 25,088 ----a-w c:\windows\system32\at.exe
    + 2008-04-14 00:12:12 41,984 ----a-w c:\windows\system32\at.exe
    + 2008-04-14 00:11:49 377,984 ------w c:\windows\system32\ati2dvaa.dll
    + 2008-04-14 00:11:49 870,784 ------w c:\windows\system32\ati3d1ag.dll
    + 2008-04-14 00:11:50 32,768 ------w c:\windows\system32\ativtmxx.dll
    - 2004-08-10 09:00:00 58,880 ----a-w c:\windows\system32\atl.dll
    + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\system32\atl.dll
    - 2004-08-10 09:00:00 11,264 ----a-w c:\windows\system32\atmadm.exe
    + 2008-04-14 00:12:12 28,672 ----a-w c:\windows\system32\atmadm.exe
    - 2004-08-10 09:00:00 285,696 ----a-w c:\windows\system32\atmfd.dll
    + 2008-04-14 00:09:01 285,696 ----a-w c:\windows\system32\atmfd.dll
    - 2004-08-10 09:00:00 30,208 ----a-w c:\windows\system32\atmlib.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\atmlib.dll
    - 2004-08-10 09:00:00 11,264 ----a-w c:\windows\system32\attrib.exe
    + 2008-04-14 00:12:12 29,696 ----a-w c:\windows\system32\attrib.exe
    - 2004-08-10 09:00:00 42,496 ----a-w c:\windows\system32\audiosrv.dll
    + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\system32\audiosrv.dll
    - 2004-08-10 09:00:00 14,336 ----a-w c:\windows\system32\auditusr.exe
    + 2008-04-14 00:12:12 31,232 ----a-w c:\windows\system32\auditusr.exe
    - 2005-03-02 18:09:29 56,832 ----a-w c:\windows\system32\authz.dll
    + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\system32\authz.dll
    - 2004-08-10 09:00:00 588,800 ----a-w c:\windows\system32\autochk.exe
    + 2008-04-14 00:12:12 588,800 ----a-w c:\windows\system32\autochk.exe
    - 2004-08-10 09:00:00 602,624 ----a-w c:\windows\system32\autoconv.exe
    + 2008-04-14 00:12:12 602,624 ----a-w c:\windows\system32\autoconv.exe
    - 2004-08-10 09:00:00 580,608 ----a-w c:\windows\system32\autofmt.exe
    + 2008-04-14 00:12:13 580,608 ----a-w c:\windows\system32\autofmt.exe
    - 2004-08-10 09:00:00 11,264 ----a-w c:\windows\system32\autolfn.exe
    + 2008-04-14 00:12:13 11,264 ----a-w c:\windows\system32\autolfn.exe
    - 2004-08-10 09:00:00 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 84,992 ----a-w c:\windows\system32\avifil32.dll
    + 2008-04-14 00:11:50 233,472 ------w c:\windows\system32\azroles.dll
    - 2004-08-10 09:00:00 52,736 ----a-w c:\windows\system32\basesrv.dll
    + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\system32\basesrv.dll
    - 2004-08-10 09:00:00 28,672 ----a-w c:\windows\system32\batmeter.dll
    + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\system32\batmeter.dll
    - 2004-08-10 09:00:00 8,704 ----a-w c:\windows\system32\batt.dll
    + 2008-04-14 00:11:50 8,704 ----a-w c:\windows\system32\batt.dll
    - 2007-06-14 20:52:20 1,134,592 ----a-w c:\windows\system32\bcmwltry.exe
    + 2007-06-14 20:52:20 1,155,072 ----a-w c:\windows\system32\bcmwltry.exe
    - 2007-04-26 19:55:12 184,320 ----a-w c:\windows\system32\bcmwlu00.exe
    + 2007-04-26 19:55:12 204,800 ----a-w c:\windows\system32\bcmwlu00.exe
    + 2009-03-02 16:58:09 129,024 --sha-w c:\windows\system32\begataje.dll
    - 2004-08-10 09:00:00 17,408 ----a-w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:11:50 17,408 ----a-w c:\windows\system32\bidispl.dll
    + 2008-04-14 00:12:03 409,088 ------w c:\windows\system32\bits\qmgr.dll
    - 2004-08-10 09:00:00 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    + 2008-04-14 00:11:50 8,192 ----a-w c:\windows\system32\bitsprx2.dll
    - 2004-08-10 09:00:00 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ----a-w c:\windows\system32\bitsprx3.dll
    + 2008-04-14 00:11:50 7,168 ------w c:\windows\system32\bitsprx4.dll
    - 2004-08-10 09:00:00 71,680 ----a-w c:\windows\system32\blastcln.exe
    + 2008-04-14 00:12:13 89,088 ----a-w c:\windows\system32\blastcln.exe
    - 2004-08-10 09:00:00 136,704 ----a-w c:\windows\system32\bootcfg.exe
    + 2008-04-14 00:12:13 159,744 ----a-w c:\windows\system32\bootcfg.exe
    - 2004-08-10 09:00:00 4,608 ----a-w c:\windows\system32\bootok.exe
    + 2004-08-10 09:00:00 22,016 ----a-w c:\windows\system32\bootok.exe
    - 2004-08-10 09:00:00 5,120 ----a-w c:\windows\system32\bootvrfy.exe
    + 2004-08-10 09:00:00 22,016 ----a-w c:\windows\system32\bootvrfy.exe
    - 2004-08-10 09:00:00 63,488 ----a-w c:\windows\system32\browselc.dll
    + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\system32\browselc.dll
    - 2004-08-10 09:00:00 77,312 ----a-w c:\windows\system32\browser.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\browser.dll
    - 2006-10-23 15:34:19 1,022,976 ----a-w c:\windows\system32\browseui.dll
    + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\system32\browseui.dll
    - 2004-08-10 09:00:00 78,336 ----a-w c:\windows\system32\browsewm.dll
    + 2008-04-14 00:11:50 78,336 ----a-w c:\windows\system32\browsewm.dll
    - 2004-08-10 09:00:00 20,992 ----a-w c:\windows\system32\bthci.dll
    + 2008-04-14 00:11:50 20,992 ----a-w c:\windows\system32\bthci.dll
    - 2004-08-10 09:00:00 30,208 ----a-w c:\windows\system32\bthserv.dll
    + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\system32\bthserv.dll
    - 2004-08-10 09:00:00 50,688 ----a-w c:\windows\system32\btpanui.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\btpanui.dll
    - 2004-08-10 09:00:00 59,904 ----a-w c:\windows\system32\cabinet.dll
    + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\system32\cabinet.dll
    - 2004-08-10 09:00:00 84,480 ----a-w c:\windows\system32\cabview.dll
    + 2008-04-14 00:11:50 84,480 ----a-w c:\windows\system32\cabview.dll
    - 2004-08-10 09:00:00 18,432 ----a-w c:\windows\system32\cacls.exe
    + 2008-04-14 00:12:13 19,968 ----a-w c:\windows\system32\cacls.exe
    - 2004-08-10 09:00:00 114,688 ----a-w c:\windows\system32\calc.exe
    + 2004-08-10 09:00:00 132,096 ----a-w c:\windows\system32\calc.exe
    - 2004-08-10 09:00:00 50,688 ----a-w c:\windows\system32\camocx.dll
    + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\system32\camocx.dll
    - 2004-08-10 09:00:00 142,848 ----a-w c:\windows\system32\capesnpn.dll
    + 2008-04-14 00:11:50 150,016 ----a-w c:\windows\system32\capesnpn.dll
    - 2005-07-26 04:39:42 225,792 ----a-w c:\windows\system32\catsrv.dll
    + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\system32\catsrv.dll
    - 2004-08-10 09:00:00 85,504 ----a-w c:\windows\system32\catsrvps.dll
    + 2008-04-14 00:11:50 85,504 ----a-w c:\windows\system32\catsrvps.dll
    - 2005-07-26 04:39:43 625,152 ----a-w c:\windows\system32\catsrvut.dll
    + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\system32\catsrvut.dll
    - 2006-10-23 15:34:19 151,040 ----a-w c:\windows\system32\cdfview.dll
    + 2008-04-14 00:11:50 151,040 ----a-w c:\windows\system32\cdfview.dll
    - 2005-09-10 01:53:41 2,067,968 ----a-w c:\windows\system32\cdosys.dll
    + 2008-04-14 00:11:50 2,091,520 ----a-w c:\windows\system32\cdosys.dll
    - 2004-08-10 09:00:00 194,560 ----a-w c:\windows\system32\certcli.dll
    + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\system32\certcli.dll
    - 2004-08-10 09:00:00 457,728 ----a-w c:\windows\system32\certmgr.dll
    + 2008-04-14 00:11:50 457,728 ----a-w c:\windows\system32\certmgr.dll
    - 2004-08-10 09:00:00 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    + 2008-04-14 00:11:50 38,912 ----a-w c:\windows\system32\cfgbkend.dll
    - 2004-08-10 09:00:00 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
    - 2004-08-10 09:00:00 80,384 ----a-w c:\windows\system32\charmap.exe
    + 2004-08-10 09:00:00 97,792 ----a-w c:\windows\system32\charmap.exe
    - 2004-08-10 09:00:00 109,568 ----a-w c:\windows\system32\cic.dll
    + 2008-04-14 00:11:50 148,480 ----a-w c:\windows\system32\cic.dll
    - 2006-06-22 05:06:29 69,120 ----a-w c:\windows\system32\ciodm.dll
    + 2008-04-14 00:11:50 69,120 ----a-w c:\windows\system32\ciodm.dll
    - 2004-08-10 09:00:00 56,320 ----a-w c:\windows\system32\cipher.exe
    + 2008-04-14 00:12:14 56,832 ----a-w c:\windows\system32\cipher.exe
    - 2004-08-10 09:00:00 5,632 ----a-w c:\windows\system32\cisvc.exe
    + 2008-04-14 00:12:14 5,632 ----a-w c:\windows\system32\cisvc.exe
    - 2005-07-26 04:39:43 110,080 ----a-w c:\windows\system32\clbcatex.dll
    + 2008-04-14 00:11:50 110,592 ----a-w c:\windows\system32\clbcatex.dll
    - 2005-07-26 04:39:43 498,688 ----a-w c:\windows\system32\clbcatq.dll
    + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\system32\clbcatq.dll
    - 2004-08-10 09:00:00 64,000 ----a-w c:\windows\system32\cleanmgr.exe
    + 2008-04-14 00:12:14 80,896 ----a-w c:\windows\system32\cleanmgr.exe
    - 2004-08-10 09:00:00 77,824 ----a-w c:\windows\system32\cliconfg.dll
    + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\system32\cliconfg.dll
    - 2004-08-10 09:00:00 20,480 ----a-w c:\windows\system32\cliconfg.exe
    + 2008-04-14 00:12:14 20,480 ----a-w c:\windows\system32\cliconfg.exe
    - 2004-08-10 09:00:00 102,912 ----a-w c:\windows\system32\clipbrd.exe
    + 2008-04-14 00:12:14 102,912 ----a-w c:\windows\system32\clipbrd.exe
    - 2004-08-10 09:00:00 33,280 ----a-w c:\windows\system32\clipsrv.exe
    + 2008-04-14 00:12:14 33,280 ----a-w c:\windows\system32\clipsrv.exe
    - 2004-08-10 09:00:00 57,856 ----a-w c:\windows\system32\clusapi.dll
    + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\system32\clusapi.dll
    - 2004-08-10 09:00:00 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    + 2008-04-14 00:11:50 15,872 ----a-w c:\windows\system32\cmcfg32.dll
    - 2004-08-10 09:00:00 388,608 ----a-w c:\windows\system32\cmd.exe
    + 2008-04-14 00:12:14 406,528 ----a-w c:\windows\system32\cmd.exe
    - 2004-08-10 09:00:00 343,040 ----a-w c:\windows\system32\cmdial32.dll
    + 2008-04-14 00:11:50 344,064 ----a-w c:\windows\system32\cmdial32.dll
    - 2004-08-10 09:00:00 47,104 ----a-w c:\windows\system32\cmdl32.exe
    + 2008-04-14 00:12:14 25,600 ----a-w c:\windows\system32\cmdl32.exe
    - 2004-08-10 09:00:00 39,936 ----a-w c:\windows\system32\cmmon32.exe
    + 2008-04-14 00:12:15 39,936 ----a-w c:\windows\system32\cmmon32.exe
    - 2004-08-10 09:00:00 185,344 ----a-w c:\windows\system32\cmprops.dll
    + 2008-04-14 00:11:50 185,344 ----a-w c:\windows\system32\cmprops.dll
    - 2004-08-10 09:00:00 13,824 ----a-w c:\windows\system32\cmsetACL.dll
    + 2008-04-14 00:11:50 13,312 ----a-w c:\windows\system32\cmsetacl.dll
    - 2004-08-10 09:00:00 63,488 ----a-w c:\windows\system32\cmstp.exe
    + 2008-04-14 00:12:15 63,488 ----a-w c:\windows\system32\cmstp.exe
    - 2004-08-10 09:00:00 39,936 ----a-w c:\windows\system32\cmutil.dll
    + 2008-04-14 00:11:50 39,424 ----a-w c:\windows\system32\cmutil.dll
    - 2004-08-10 09:00:00 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\system32\cnbjmon.dll
    - 2005-07-26 04:39:43 60,416 ----a-w c:\windows\system32\colbact.dll
    + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\system32\colbact.dll
    - 2005-07-26 04:39:44 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
    + 2008-04-14 00:11:51 195,072 ----a-w c:\windows\system32\Com\comadmin.dll
    - 2004-08-10 09:00:00 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
    + 2008-04-14 00:12:15 26,624 ----a-w c:\windows\system32\Com\comrepl.exe
    - 2004-08-10 09:00:00 5,120 ----a-w c:\windows\system32\Com\comrereg.exe
    + 2008-04-14 00:12:15 23,552 ----a-w c:\windows\system32\Com\comrereg.exe
    - 2004-08-10 09:00:00 25,600 ----a-w c:\windows\system32\comaddin.dll
    + 2008-04-14 00:11:51 28,160 ----a-w c:\windows\system32\comaddin.dll
    - 2006-08-25 15:45:58 617,472 ----a-w c:\windows\system32\comctl32.dll
    + 2008-04-14 00:11:51 617,472 ----a-w c:\windows\system32\comctl32.dll
    - 2004-08-10 09:00:00 276,992 ----a-w c:\windows\system32\comdlg32.dll
    + 2008-04-14 00:11:51 276,992 ----a-w c:\windows\system32\comdlg32.dll
    - 2004-08-10 09:00:00 252,928 ----a-w c:\windows\system32\compatUI.dll
    + 2008-04-14 00:11:51 252,928 ----a-w c:\windows\system32\compatui.dll
    - 2004-08-10 09:00:00 229,376 ----a-w c:\windows\system32\compstui.dll
    + 2008-04-14 00:11:51 229,376 ----a-w c:\windows\system32\compstui.dll
    - 2005-07-26 04:39:44 97,792 ----a-w c:\windows\system32\comrepl.dll
    + 2008-04-14 00:11:51 97,792 ----a-w c:\windows\system32\comrepl.dll
    - 2004-08-10 09:00:00 792,064 ----a-w c:\windows\system32\comres.dll
    + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\system32\comres.dll
    + 2008-04-13 18:43:32 9,728 ------w c:\windows\system32\comsdupd.exe
    - 2004-08-10 09:00:00 147,456 ----a-w c:\windows\system32\comsnap.dll
    + 2008-04-14 00:11:51 167,424 ----a-w c:\windows\system32\comsnap.dll
    - 2005-07-26 04:39:44 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\system32\comsvcs.dll
    - 2005-07-26 04:39:45 540,160 ----a-w c:\windows\system32\comuid.dll
    + 2008-04-14 00:11:51 539,648 ----a-w c:\windows\system32\comuid.dll
    - 2008-12-15 16:32:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-03-02 16:54:55 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2008-12-15 16:32:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-03-02 16:54:55 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-02-01 01:11:51 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009013120090201\index.dat
    + 2009-03-02 16:54:55 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2004-08-10 09:00:00 345,600 ----a-w c:\windows\system32\confmsp.dll
    + 2008-04-14 00:11:51 357,888 ----a-w c:\windows\system32\confmsp.dll
    - 2004-08-10 09:00:00 27,648 ----a-w c:\windows\system32\conime.exe
    + 2008-04-14 00:12:15 44,544 ----a-w c:\windows\system32\conime.exe
    - 2004-08-10 09:00:00 8,192 ----a-w c:\windows\system32\control.exe
    + 2004-08-10 09:00:00 25,600 ----a-w c:\windows\system32\control.exe
    - 2007-01-09 00:01:14 17,408 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 35,328 ----a-w c:\windows\system32\corpol.dll
    + 2008-04-14 00:11:51 12,800 ------w c:\windows\system32\credssp.dll
    - 2004-08-10 09:00:00 163,840 ----a-w c:\windows\system32\credui.dll
    + 2008-04-14 00:11:51 163,840 ----a-w c:\windows\system32\credui.dll
    - 2004-08-10 09:00:00 597,504 ----a-w c:\windows\system32\crypt32.dll
    + 2008-04-14 00:11:51 599,040 ----a-w c:\windows\system32\crypt32.dll
    - 2004-08-10 09:00:00 74,752 ----a-w c:\windows\system32\cryptdlg.dll
    + 2008-04-14 00:11:51 74,752 ----a-w c:\windows\system32\cryptdlg.dll
    - 2004-08-10 09:00:00 33,280 ----a-w c:\windows\system32\cryptdll.dll
    + 2008-04-14 00:11:51 33,280 ----a-w c:\windows\system32\cryptdll.dll
    - 2004-08-10 09:00:00 53,760 ----a-w c:\windows\system32\cryptext.dll
    + 2008-04-14 00:11:51 53,760 ----a-w c:\windows\system32\cryptext.dll
    - 2004-08-10 09:00:00 63,488 ----a-w c:\windows\system32\cryptnet.dll
    + 2008-04-14 00:11:51 64,512 ----a-w c:\windows\system32\cryptnet.dll
    - 2004-08-10 09:00:00 60,416 ----a-w c:\windows\system32\cryptsvc.dll
    + 2008-04-14 00:11:51 62,464 ----a-w c:\windows\system32\cryptsvc.dll
    - 2004-08-10 09:00:00 512,512 ----a-w c:\windows\system32\cryptui.dll
    + 2008-04-14 00:11:51 512,512 ----a-w c:\windows\system32\cryptui.dll
    - 2004-08-10 09:00:00 101,888 ----a-w c:\windows\system32\cscdll.dll
    + 2008-04-14 00:11:51 101,888 ----a-w c:\windows\system32\cscdll.dll
    - 2004-08-10 09:00:00 98,304 ----a-w c:\windows\system32\cscript.exe
    + 2008-05-07 09:07:23 155,648 ----a-w c:\windows\system32\cscript.exe
    - 2004-08-10 09:00:00 326,656 ----a-w c:\windows\system32\cscui.dll
    + 2008-04-14 00:11:51 326,656 ----a-w c:\windows\system32\cscui.dll
    - 2004-08-10 09:00:00 32,768 ----a-w c:\windows\system32\csrsrv.dll
    + 2008-04-14 00:11:51 32,256 ----a-w c:\windows\system32\csrsrv.dll
    - 2004-08-10 09:00:00 6,144 ----a-w c:\windows\system32\csrss.exe
    + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\system32\csrss.exe
    - 2004-08-10 09:00:00 1,179,648 ----a-w c:\windows\system32\d3d8.dll
    + 2008-04-14 00:11:51 1,179,648 ----a-w c:\windows\system32\d3d8.dll
    - 2004-08-10 09:00:00 8,192 ----a-w c:\windows\system32\d3d8thk.dll
    + 2008-04-14 00:11:51 8,192 ----a-w c:\windows\system32\d3d8thk.dll
     
    blacklogman,
    #19
  21. 2009/03/05
    blacklogman

    blacklogman Inactive Thread Starter

    Joined:
    2009/03/02
    Messages:
    28
    Likes Received:
    0
    THIS POST GOES BEFORE THE LAST ONE

    + 2008-04-14 00:12:34 18,944 ------w c:\windows\ServicePackFiles\i386\secedit.exe
    + 2008-04-14 00:12:05 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll
    + 2006-12-31 11:57:08 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll
    + 2008-04-14 00:12:05 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll
    + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll
    + 2008-04-14 00:12:05 54,784 ------w c:\windows\ServicePackFiles\i386\sendmail.dll
    + 2008-04-14 00:12:05 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll
    + 2008-04-14 00:12:05 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll
    + 2008-04-14 00:12:05 221,696 ------w c:\windows\ServicePackFiles\i386\seo.dll
    + 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys
    + 2008-04-13 19:15:45 64,512 ------w c:\windows\ServicePackFiles\i386\serial.sys
    + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll
    + 2008-04-14 00:12:34 108,544 ------w c:\windows\ServicePackFiles\i386\services.exe
    + 2008-04-14 00:12:34 141,312 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe
    + 2008-04-14 00:12:34 31,232 ------w c:\windows\ServicePackFiles\i386\sethc.exe
    + 2007-12-17 11:59:54 66,592 ------w c:\windows\ServicePackFiles\i386\setregni.exe
    + 2008-04-14 00:12:34 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe
    + 2008-04-14 00:12:34 73,216 ------w c:\windows\ServicePackFiles\i386\setup50.exe
    + 2008-04-14 09:42:06 985,088 ------w c:\windows\ServicePackFiles\i386\setupapi.dll
    + 2008-04-14 00:12:35 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe
    + 2008-04-14 00:12:05 101,376 ------w c:\windows\ServicePackFiles\i386\setupqry.dll
    + 2008-04-14 00:12:05 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll
    + 2008-04-14 00:12:05 140,288 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll
    + 2008-04-14 00:12:05 1,614,848 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll
    + 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys
    + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys
    + 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys
    + 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys
    + 2008-04-13 17:03:19 549,376 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll
    + 2008-04-14 00:12:05 1,499,136 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll
    + 2008-04-14 00:12:05 8,461,312 ------w c:\windows\ServicePackFiles\i386\shell32.dll
    + 2008-04-14 00:12:05 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll
    + 2008-04-14 00:12:05 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll
    + 2008-04-14 00:12:05 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll
    + 2008-04-14 00:12:05 438,272 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll
    + 2008-04-14 00:12:05 474,112 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll
    + 2008-04-14 00:12:35 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe
    + 2008-04-14 00:12:35 77,824 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe
    + 2008-04-14 00:12:05 27,648 ------w c:\windows\ServicePackFiles\i386\shscrap.dll
    + 2008-04-14 00:12:05 135,168 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll
    + 2008-04-14 00:12:05 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll
    + 2008-04-14 00:12:35 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe
    + 2008-04-14 00:12:35 19,456 ------w c:\windows\ServicePackFiles\i386\shutdown.exe
    + 2008-04-14 00:12:05 13,312 ------w c:\windows\ServicePackFiles\i386\sigtab.dll
    + 2008-04-14 00:12:35 70,144 ------w c:\windows\ServicePackFiles\i386\sigverif.exe
    + 2008-04-14 00:12:05 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll
    + 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys
    + 2004-08-04 02:31:36 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys
    + 2008-04-14 00:12:35 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe
    + 2004-08-04 02:31:42 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys
    + 2008-04-14 00:12:06 25,088 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll
    + 2004-08-10 09:00:00 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll
    + 2008-04-14 00:12:06 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll
    + 2008-04-14 00:12:06 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll
    + 2008-04-14 00:12:06 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll
    + 2008-04-14 00:12:06 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll
    + 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys
    + 2004-08-04 02:41:42 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys
    + 2004-08-04 02:41:44 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys
    + 2004-08-04 02:41:46 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys
    + 2008-04-14 00:12:35 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe
    + 2008-04-14 00:12:35 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe
    + 2004-08-04 02:41:46 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys
    + 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys
    + 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys
    + 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys
    + 2008-04-14 00:12:35 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe
    + 2008-04-14 00:12:35 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe
    + 2008-04-14 00:12:06 362,496 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll
    + 2008-04-14 00:12:35 89,600 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe
    + 2008-04-14 00:12:36 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe
    + 2008-04-14 00:12:06 189,440 ------w c:\windows\ServicePackFiles\i386\smtpadm.dll
    + 2008-04-14 00:12:06 10,752 ------w c:\windows\ServicePackFiles\i386\smtpapi.dll
    + 2008-04-14 00:12:06 2,134,528 ------w c:\windows\ServicePackFiles\i386\smtpsnap.dll
    + 2008-04-14 00:12:06 456,192 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll
    + 2008-04-14 00:12:36 131,584 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe
    + 2008-04-14 00:12:06 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll
    + 2008-04-14 00:12:36 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe
    + 2008-04-14 00:12:06 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll
    + 2008-04-14 00:12:06 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll
    + 2008-04-14 00:12:06 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll
    + 2008-04-14 00:12:06 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll
    + 2008-04-14 00:12:06 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll
    + 2008-04-14 00:12:06 182,272 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll
    + 2008-04-14 00:12:06 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll
    + 2008-04-14 00:12:36 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe
    + 2008-04-14 00:12:06 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll
    + 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys
    + 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys
    + 2008-04-14 00:12:36 24,576 ------w c:\windows\ServicePackFiles\i386\sort.exe
    + 2008-04-14 00:12:36 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe
    + 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll
    + 2008-04-14 00:12:36 538,624 ------w c:\windows\ServicePackFiles\i386\spider.exe
    + 2008-04-13 18:43:31 12,800 ------w c:\windows\ServicePackFiles\i386\spiisupd.exe
    + 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys
    + 2008-04-14 09:42:38 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe
    + 2008-04-14 00:12:06 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll
    + 2008-04-13 18:35:06 186,880 ------w c:\windows\ServicePackFiles\i386\spra0401.dll
    + 2008-04-13 18:35:08 189,440 ------w c:\windows\ServicePackFiles\i386\spra0402.dll
    + 2008-04-13 18:35:09 161,280 ------w c:\windows\ServicePackFiles\i386\spra0404.dll
    + 2008-04-13 18:35:09 188,928 ------w c:\windows\ServicePackFiles\i386\spra0405.dll
    + 2008-04-13 18:35:09 192,000 ------w c:\windows\ServicePackFiles\i386\spra0406.dll
    + 2008-04-13 18:35:21 199,680 ------w c:\windows\ServicePackFiles\i386\spra0407.dll
    + 2008-04-13 18:35:11 197,632 ------w c:\windows\ServicePackFiles\i386\spra0408.dll
    + 2008-04-13 18:35:11 186,368 ------w c:\windows\ServicePackFiles\i386\spra040b.dll
    + 2008-04-13 18:35:20 197,632 ------w c:\windows\ServicePackFiles\i386\spra040c.dll
    + 2008-04-13 18:35:21 181,760 ------w c:\windows\ServicePackFiles\i386\spra040d.dll
    + 2008-04-13 18:35:23 195,584 ------w c:\windows\ServicePackFiles\i386\spra040e.dll
    + 2008-04-13 18:35:23 195,072 ------w c:\windows\ServicePackFiles\i386\spra0410.dll
    + 2008-04-13 18:35:23 171,008 ------w c:\windows\ServicePackFiles\i386\spra0411.dll
    + 2008-04-13 18:35:23 167,936 ------w c:\windows\ServicePackFiles\i386\spra0412.dll
    + 2008-04-13 18:35:25 196,096 ------w c:\windows\ServicePackFiles\i386\spra0413.dll
    + 2008-04-13 18:35:25 189,440 ------w c:\windows\ServicePackFiles\i386\spra0414.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0415.dll
    + 2008-04-13 18:35:08 192,512 ------w c:\windows\ServicePackFiles\i386\spra0416.dll
    + 2008-04-13 18:35:27 190,464 ------w c:\windows\ServicePackFiles\i386\spra0418.dll
    + 2008-04-13 18:35:27 192,512 ------w c:\windows\ServicePackFiles\i386\spra0419.dll
    + 2008-04-13 18:35:21 188,928 ------w c:\windows\ServicePackFiles\i386\spra041a.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra041b.dll
    + 2008-04-13 18:35:28 188,928 ------w c:\windows\ServicePackFiles\i386\spra041d.dll
    + 2008-04-13 18:35:29 188,416 ------w c:\windows\ServicePackFiles\i386\spra041e.dll
    + 2008-04-13 18:35:30 188,928 ------w c:\windows\ServicePackFiles\i386\spra041f.dll
    + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra0424.dll
    + 2008-04-13 18:35:11 186,880 ------w c:\windows\ServicePackFiles\i386\spra0425.dll
    + 2008-04-13 18:35:24 188,928 ------w c:\windows\ServicePackFiles\i386\spra0426.dll
    + 2008-04-13 18:35:24 189,952 ------w c:\windows\ServicePackFiles\i386\spra0427.dll
    + 2008-04-13 18:35:06 161,280 ------w c:\windows\ServicePackFiles\i386\spra0804.dll
    + 2008-04-13 18:35:26 194,560 ------w c:\windows\ServicePackFiles\i386\spra0816.dll
    + 2008-04-13 18:35:11 196,096 ------w c:\windows\ServicePackFiles\i386\spra0c0a.dll
    + 2008-04-13 18:35:49 2,869,248 ------w c:\windows\ServicePackFiles\i386\sprb0401.dll
    + 2008-04-13 18:36:10 477,696 ------w c:\windows\ServicePackFiles\i386\sprb0404.dll
    + 2008-04-13 18:36:10 734,720 ------w c:\windows\ServicePackFiles\i386\sprb0405.dll
    + 2008-04-13 18:36:10 742,912 ------w c:\windows\ServicePackFiles\i386\sprb0406.dll
    + 2008-04-13 18:37:03 788,480 ------w c:\windows\ServicePackFiles\i386\sprb0407.dll
    + 2008-04-13 18:36:35 801,280 ------w c:\windows\ServicePackFiles\i386\sprb0408.dll
    + 2008-04-13 18:36:39 729,088 ------w c:\windows\ServicePackFiles\i386\sprb040b.dll
    + 2008-04-13 18:36:55 793,088 ------w c:\windows\ServicePackFiles\i386\sprb040c.dll
    + 2008-04-13 18:37:07 2,842,112 ------w c:\windows\ServicePackFiles\i386\sprb040d.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb040e.dll
    + 2008-04-13 18:37:22 769,536 ------w c:\windows\ServicePackFiles\i386\sprb0410.dll
    + 2008-04-13 18:37:34 562,688 ------w c:\windows\ServicePackFiles\i386\sprb0411.dll
    + 2008-04-13 18:37:37 543,744 ------w c:\windows\ServicePackFiles\i386\sprb0412.dll
    + 2008-04-13 18:38:00 769,024 ------w c:\windows\ServicePackFiles\i386\sprb0413.dll
    + 2008-04-13 18:38:02 716,288 ------w c:\windows\ServicePackFiles\i386\sprb0414.dll
    + 2008-04-13 18:38:05 759,808 ------w c:\windows\ServicePackFiles\i386\sprb0415.dll
    + 2008-04-13 18:35:43 752,128 ------w c:\windows\ServicePackFiles\i386\sprb0416.dll
    + 2008-04-13 18:38:28 736,768 ------w c:\windows\ServicePackFiles\i386\sprb0419.dll
    + 2008-04-13 18:38:37 757,248 ------w c:\windows\ServicePackFiles\i386\sprb041b.dll
    + 2008-04-13 18:38:47 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041d.dll
    + 2008-04-13 18:38:51 724,480 ------w c:\windows\ServicePackFiles\i386\sprb041f.dll
    + 2008-04-13 18:38:36 732,160 ------w c:\windows\ServicePackFiles\i386\sprb0424.dll
    + 2008-04-13 18:35:54 470,016 ------w c:\windows\ServicePackFiles\i386\sprb0804.dll
    + 2008-04-13 18:38:06 751,616 ------w c:\windows\ServicePackFiles\i386\sprb0816.dll
    + 2008-04-13 18:36:38 773,632 ------w c:\windows\ServicePackFiles\i386\sprb0c0a.dll
    + 2008-04-13 18:39:02 656,896 ------w c:\windows\ServicePackFiles\i386\sprc0401.dll
    + 2008-04-13 18:39:13 327,680 ------w c:\windows\ServicePackFiles\i386\sprc0404.dll
    + 2008-04-13 18:39:02 601,088 ------w c:\windows\ServicePackFiles\i386\sprc0405.dll
    + 2008-04-13 18:39:12 605,696 ------w c:\windows\ServicePackFiles\i386\sprc0406.dll
    + 2008-04-13 18:39:19 663,552 ------w c:\windows\ServicePackFiles\i386\sprc0407.dll
    + 2008-04-13 18:39:12 679,936 ------w c:\windows\ServicePackFiles\i386\sprc0408.dll
    + 2008-04-13 18:39:17 604,672 ------w c:\windows\ServicePackFiles\i386\sprc040b.dll
    + 2008-04-13 18:39:20 663,040 ------w c:\windows\ServicePackFiles\i386\sprc040c.dll
    + 2008-04-13 18:39:28 620,544 ------w c:\windows\ServicePackFiles\i386\sprc040d.dll
    + 2008-04-13 18:39:28 645,120 ------w c:\windows\ServicePackFiles\i386\sprc040e.dll
    + 2008-04-13 18:39:28 658,432 ------w c:\windows\ServicePackFiles\i386\sprc0410.dll
    + 2008-04-13 18:39:49 412,672 ------w c:\windows\ServicePackFiles\i386\sprc0411.dll
    + 2008-04-13 18:39:49 392,704 ------w c:\windows\ServicePackFiles\i386\sprc0412.dll
    + 2008-04-13 18:39:47 645,120 ------w c:\windows\ServicePackFiles\i386\sprc0413.dll
    + 2008-04-13 18:39:48 591,872 ------w c:\windows\ServicePackFiles\i386\sprc0414.dll
    + 2008-04-13 18:39:52 641,024 ------w c:\windows\ServicePackFiles\i386\sprc0415.dll
    + 2008-04-13 18:38:56 620,032 ------w c:\windows\ServicePackFiles\i386\sprc0416.dll
    + 2008-04-13 18:39:56 627,200 ------w c:\windows\ServicePackFiles\i386\sprc0419.dll
    + 2008-04-13 18:40:04 577,536 ------w c:\windows\ServicePackFiles\i386\sprc041b.dll
    + 2008-04-13 18:40:05 590,848 ------w c:\windows\ServicePackFiles\i386\sprc041d.dll
    + 2008-04-13 18:40:09 592,896 ------w c:\windows\ServicePackFiles\i386\sprc041f.dll
    + 2008-04-13 18:40:05 576,512 ------w c:\windows\ServicePackFiles\i386\sprc0424.dll
    + 2008-04-13 18:39:03 322,560 ------w c:\windows\ServicePackFiles\i386\sprc0804.dll
    + 2008-04-13 18:39:53 639,488 ------w c:\windows\ServicePackFiles\i386\sprc0816.dll
    + 2008-04-13 18:39:13 648,704 ------w c:\windows\ServicePackFiles\i386\sprc0c0a.dll
    + 2008-04-14 00:12:06 250,368 ------w c:\windows\ServicePackFiles\i386\sptip.dll
    + 2008-04-14 00:12:36 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe
    + 2008-04-14 00:12:06 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll
    + 2008-04-14 00:12:06 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll
    + 2008-04-14 00:12:06 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll
    + 2008-04-14 00:12:06 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll
    + 2008-04-14 00:12:06 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll
    + 2008-04-14 00:12:06 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll
    + 2008-04-14 00:12:06 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll
    + 2008-04-13 18:36:52 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys
    + 2008-04-14 00:12:06 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll
    + 2008-04-14 00:12:07 726,078 ------w c:\windows\ServicePackFiles\i386\srchui.dll
    + 2008-04-14 00:12:07 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll
    + 2008-04-14 00:12:07 239,104 ------w c:\windows\ServicePackFiles\i386\srrstr.dll
    + 2008-04-14 00:12:07 171,008 ------w c:\windows\ServicePackFiles\i386\srsvc.dll
    + 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys
    + 2008-04-14 00:12:07 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll
    + 2008-04-14 00:12:43 704,512 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr
    + 2008-04-14 00:12:43 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr
    + 2008-04-14 00:12:07 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll
    + 2008-04-14 00:12:07 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll
    + 2008-04-14 00:12:43 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr
    + 2008-04-14 00:12:07 45,056 ------w c:\windows\ServicePackFiles\i386\ssinc51.dll
    + 2008-04-14 00:12:44 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr
    + 2008-04-14 00:12:44 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr
    + 2008-04-14 00:12:44 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\sspifilt.dll
    + 2008-04-14 00:12:44 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr
    + 2008-04-14 00:12:44 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr
    + 2008-04-14 00:12:44 679,936 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr
    + 2008-04-14 00:12:07 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll
    + 2008-04-14 00:12:07 8,192 ------w c:\windows\ServicePackFiles\i386\staxmem.dll
    + 2008-04-14 00:12:07 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll
    + 2008-04-14 00:12:07 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll
    + 2008-04-14 00:12:07 68,096 ------w c:\windows\ServicePackFiles\i386\sti.dll
    + 2008-04-14 00:12:07 136,704 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll
    + 2008-04-14 00:12:36 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe
    + 2008-04-14 00:12:07 121,856 ------w c:\windows\ServicePackFiles\i386\stobject.dll
    + 2008-04-14 00:12:07 74,752 ------w c:\windows\ServicePackFiles\i386\storprop.dll
    + 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys
    + 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys
    + 2008-04-14 00:12:07 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll
    + 2008-04-14 00:12:36 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
    + 2008-04-14 00:12:36 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
    + 2008-04-14 00:12:07 46,592 ------w c:\windows\ServicePackFiles\i386\svcext51.dll
    + 2008-04-14 00:12:36 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe
    + 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys
    + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys
    + 2008-04-14 00:12:07 713,216 ------w c:\windows\ServicePackFiles\i386\sxs.dll
    + 2007-12-17 11:59:56 1,179,648 ------w c:\windows\ServicePackFiles\i386\sy52106.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll
    + 2008-04-14 00:12:07 191,488 ------w c:\windows\ServicePackFiles\i386\syncui.dll
    + 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys
    + 2008-04-14 00:12:36 71,680 ------w c:\windows\ServicePackFiles\i386\sysinfo.exe
    + 2008-04-14 00:12:07 193,024 ------w c:\windows\ServicePackFiles\i386\sysmod.dll
    + 2008-04-14 00:12:07 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll
    + 2008-04-14 00:12:37 106,496 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe
    + 2008-04-14 00:12:07 990,208 ------w c:\windows\ServicePackFiles\i386\syssetup.dll
    + 2004-07-19 22:54:18 77,824 ------w c:\windows\ServicePackFiles\i386\system.configuration.install.dll
    + 2004-07-19 22:54:18 1,179,648 ------w c:\windows\ServicePackFiles\i386\system.data.dll
    + 2004-07-19 22:54:18 1,695,744 ------w c:\windows\ServicePackFiles\i386\system.design.dll
    + 2004-07-19 22:54:18 86,016 ------w c:\windows\ServicePackFiles\i386\system.directoryservices.dll
    + 2004-07-19 22:54:18 65,536 ------w c:\windows\ServicePackFiles\i386\system.drawing.design.dll
    + 2004-07-19 22:54:18 462,848 ------w c:\windows\ServicePackFiles\i386\system.drawing.dll
    + 2004-07-19 22:54:18 212,992 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
    + 2004-08-04 02:12:34 48,640 ------w c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
    + 2004-07-19 22:54:18 352,256 ------w c:\windows\ServicePackFiles\i386\system.management.dll
    + 2004-07-19 22:54:18 241,664 ------w c:\windows\ServicePackFiles\i386\system.messaging.dll
    + 2004-07-19 22:54:20 311,296 ------w c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
    + 2004-07-19 22:54:20 131,072 ------w c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
    + 2004-07-19 22:54:20 77,824 ------w c:\windows\ServicePackFiles\i386\system.security.dll
    + 2004-07-19 22:54:20 126,976 ------w c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
    + 2007-01-02 20:40:24 1,200,128 ------w c:\windows\ServicePackFiles\i386\system.web.dll
    + 2004-07-19 22:54:20 61,440 ------w c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
    + 2004-07-19 22:54:20 507,904 ------w c:\windows\ServicePackFiles\i386\system.web.services.dll
    + 2004-07-19 22:54:22 2,002,944 ------w c:\windows\ServicePackFiles\i386\system.windows.forms.dll
    + 2004-07-19 22:54:22 1,302,528 ------w c:\windows\ServicePackFiles\i386\system.xml.dll
    + 2008-04-14 00:12:07 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tabletoc.dll
    + 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys
    + 2008-04-14 00:12:07 858,624 ------w c:\windows\ServicePackFiles\i386\tapi3.dll
    + 2008-04-14 00:12:07 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll
    + 2008-04-14 00:12:07 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll
    + 2008-04-14 00:12:37 76,288 ------w c:\windows\ServicePackFiles\i386\taskkill.exe
    + 2008-04-14 00:12:37 77,824 ------w c:\windows\ServicePackFiles\i386\tasklist.exe
    + 2008-04-14 00:12:37 135,680 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe
    + 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys
    + 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys
    + 2008-04-14 00:12:07 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll
    + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll
    + 2008-04-14 00:12:37 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe
    + 2007-04-02 16:36:07 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll
    + 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys
    + 2008-04-14 00:13:20 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys
    + 2008-04-14 00:13:21 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys
    + 2008-04-14 00:12:37 75,776 ------w c:\windows\ServicePackFiles\i386\telnet.exe
    + 2008-04-14 00:13:20 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys
    + 2008-04-14 00:12:07 358,400 ------w c:\windows\ServicePackFiles\i386\termmgr.dll
    + 2008-04-14 00:12:07 295,424 ------w c:\windows\ServicePackFiles\i386\termsrv.dll
    + 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys
    + 2008-04-14 00:12:07 385,536 ------w c:\windows\ServicePackFiles\i386\themeui.dll
    + 2008-04-14 00:12:37 61,440 ------w c:\windows\ServicePackFiles\i386\tlntadmn.exe
    + 2008-04-14 00:12:37 78,336 ------w c:\windows\ServicePackFiles\i386\tlntsess.exe
    + 2008-04-14 00:12:38 73,216 ------w c:\windows\ServicePackFiles\i386\tlntsvr.exe
    + 2008-04-14 00:12:07 7,168 ------w c:\windows\ServicePackFiles\i386\tlntsvrp.dll
    + 2007-12-17 12:00:05 66,592 ------w c:\windows\ServicePackFiles\i386\togac.exe
    + 2008-04-14 00:12:07 33,792 ------w c:\windows\ServicePackFiles\i386\tools.dll
    + 2008-04-14 00:12:38 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe
    + 2008-04-14 00:12:38 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe
    + 2008-04-14 00:12:38 259,584 ------w c:\windows\ServicePackFiles\i386\tracerpt.exe
    + 2008-04-14 00:12:38 12,288 ------w c:\windows\ServicePackFiles\i386\tracert.exe
    + 2008-04-14 00:12:42 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com
    + 2008-04-14 00:12:07 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll
    + 2008-04-14 00:12:07 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll
    + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat
    + 2008-04-14 00:12:07 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll
    + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs
    + 2008-04-14 00:11:31 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll
    + 2008-04-14 00:13:21 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll
    + 2008-04-14 00:12:07 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll
    + 2008-04-14 00:12:07 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll
    + 2008-04-14 00:12:07 130,048 ------w c:\windows\ServicePackFiles\i386\tsoc.dll
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll
    + 2008-04-14 00:12:07 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll
    + 2007-04-02 15:31:00 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll
    + 2008-04-14 00:12:07 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll
    + 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys
    + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll
    + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll
    + 2008-04-14 00:12:07 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll
    + 2008-04-14 00:12:38 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe
    + 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys
    + 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys
    + 2008-04-14 00:12:07 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll
    + 2008-04-14 00:12:07 103,424 ------w c:\windows\ServicePackFiles\i386\uihelper.dll
    + 2008-04-14 00:12:07 275,456 ------w c:\windows\ServicePackFiles\i386\ulib.dll
    + 2008-04-14 00:12:07 35,840 ------w c:\windows\ServicePackFiles\i386\umandlg.dll
    + 2008-04-14 00:12:07 123,392 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll
    + 2008-04-14 00:12:07 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll
    + 2008-04-14 00:12:07 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll
    + 2008-04-14 00:12:07 74,240 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll
    + 2008-04-14 00:12:07 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll
    + 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll
    + 2008-04-14 00:12:07 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll
    + 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys
    + 2008-04-14 00:12:38 150,528 ------w c:\windows\ServicePackFiles\i386\uploadm.exe
    + 2008-04-14 00:12:08 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll
    + 2008-04-14 00:12:38 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe
    + 2008-04-14 00:12:08 185,856 ------w c:\windows\ServicePackFiles\i386\upnphost.dll
    + 2008-04-14 00:12:08 239,616 ------w c:\windows\ServicePackFiles\i386\upnpui.dll
    + 2008-04-14 00:12:38 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe
    + 2008-04-14 00:12:08 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll
    + 2008-04-14 00:12:08 619,520 ------w c:\windows\ServicePackFiles\i386\urlmon.dll
    + 2004-08-04 02:31:26 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys
    + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys
    + 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys
    + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys
    + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys
    + 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys
    + 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys
    + 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys
    + 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys
    + 2008-04-14 00:12:08 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll
    + 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys
    + 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys
    + 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys
    + 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys
    + 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys
    + 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys
    + 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys
     
    blacklogman,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...