helgwen

Ca y est je viens de trouver, c'était dans le dossier "Mes documents récents". C'est supprimé. Je poste le rapport du scan dés qu'il est fini.

Le scan est encore en cours depuis hier. Par contre, je n'arrive pas à supprimer : C:\Documents and Settings\Windows XP\Recent\Cle D'activation Bitdefender 2008 Crack.lnk. Lorsque je vais dans C:\Documents and Settings\Windows XP, il n'y a pas le dossier "Recent". Comment dois-je procéder pour arriver à le supprimer?

Lors de l'exécution de FindyKill, j'ai eu plusieurs messages : "Windows - Pas de Disque - Exception Processing Message c0000013 Parameters 75afbf7c 4 75afbf7c 75afbf7c - Annuler - Recommencer - Continuer". J'ai tenté de cliquer sur Recommencer mais sans succés, j'ai donc cliqué sur Continuer : Voici le rapport : ----------------- FindyKill V4.095 ------------------ * User : Windows XP - D94E3DE60AD8484 * Emplacement : C:\Program Files\FindyKill * Outils Mis a jours le 07/11/08 par Chiquitine29 * Suppression effectuée à 10:03:48 le 2008-11-09 * Windows XP - Internet Explorer 7.0.5730.13 ((((((((((((((( *** Suppression *** )))))))))))))))))) --------------- [ Processus actifs ] ---------------- C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\logonui.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe C:\WINDOWS\system32\userinit.exe --------------- [ Fichiers/Dossiers infectieux ] ---------------- »»»» Suppression des fichiers dans C: »»»» Suppression des fichiers dans C:\WINDOWS »»»» Suppression des fichiers dans C:\WINDOWS\Prefetch »»»» Suppression des fichiers dans C:\WINDOWS\system32 »»»» Suppression des fichiers dans C:\WINDOWS\system32\drivers »»»» Suppression des fichiers dans C:\Documents and Settings\Windows XP\Application Data »»»» Suppression des fichiers dans C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp »»»» Suppression des fichiers dans C:\Documents and Settings\Windows XP\Local Settings\Temporary Internet Files\Content.IE5 --------------- [ Registre / Clés infectieuses ] ---------------- Supprimé ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa Supprimé ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa Supprimé ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA Supprimé ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\hldrrr Supprimé ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\install_crack Supprimé ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\mdelk Supprimé ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\winfilse --------------- [ Etat / Redémarage des services ] ---------------- +- Services : [ Auto=2 / Demande=3 / Désactivé=4 ] Ndisuio - Type de démarrage = 3 EapHost - Type de démarrage = 2 Ip6Fw - Type de démarrage = 2 SharedAccess - Type de démarrage = 2 wuauserv - Type de démarrage = 2 wscsvc - Type de démarrage = 2 --------------- [ Nettoyage des supports amovibles ] ---------------- +- Informations : C: - Lecteur fixe F: - Lecteur fixe K: - Lecteur amovible L: - Lecteur fixe +- Suppression des fichiers : --------------- [ Registre / Moutpoint2 ] ---------------- -> Recherche négative. --------------- [ Recherche Cracks / Keygen ] ---------------- C:\Documents and Settings\Windows XP\Local Settings\Application Data\IM\Animation\firecracker.ima C:\Documents and Settings\Windows XP\Local Settings\Application Data\IM\Notifier\cracking_up.imn C:\Documents and Settings\Windows XP\Recent\Cle D'activation Bitdefender 2008 Crack.lnk C:\Documents and Settings\All Users\Application Data\IncrediMail\Data\Sound\tchaikovsky_the_nutcracker.imw ---------------- ! Fin du rapport ! ------------------ Les programmes s'ouvrent correctement,je n'ai plus de message d'erreur. J'ai réinstallé Avira (qui avait disparu lors du problème). Concernant les dysfonctionnements restant, pour l'instant je n'ai pu noter qu'un problème de connexion à internet, je peux me connecter au démarrage, puis au bout d'environ 5 minutes j'ai un message d'erreur "délai d'attente dépassé", et il m'est alors impossible de me connecter.

Voilà les 2 rapports : COMBOFIX : ComboFix 08-11-07.01 - Windows XP 2008-11-08 20:22:02.5 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.179 [GMT 1:00] Lancé depuis: c:\documents and settings\Windows XP\Bureau\Combo-Fix.exe Commutateurs utilisés :: c:\documents and settings\Windows XP\Bureau\CFScript.txt * Un nouveau point de restauration a été créé AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! FILE :: c:\windows\system32\drivers\srosa2.sys . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\drivers\srosa2.sys . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SK9OU0S -------\Service_sK9Ou0s ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-08 au 2008-11-08 )))))))))))))))))))))))))))))))))))) . 2008-11-08 18:25 . 2008-11-08 18:25 <REP> dr------- C:\Mes documents 2008-11-08 16:47 . 2008-11-08 16:47 <REP> dr------- c:\documents and settings\Administrateur\Favoris 2008-11-07 18:59 . 2008-11-07 18:59 <REP> d-------- c:\program files\CCleaner 2008-11-07 06:10 . 2008-11-07 06:10 <REP> d-------- c:\documents and settings\Windows XP\Application Data\Bitdefender 2008-11-07 06:03 . 2008-11-07 06:08 81,984 --a------ c:\windows\system32\bdod.bin 2008-11-07 05:56 . 2008-11-07 05:56 <REP> d-------- c:\program files\Softwin 2008-11-07 05:56 . 2008-11-07 05:58 <REP> d-------- c:\documents and settings\All Users\Application Data\BitDefender 2008-11-07 05:53 . 2008-11-07 19:04 <REP> d-------- c:\program files\Fichiers communs\Softwin 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\system32\fr 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\system32\bits 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\l2schemas 2008-11-01 08:36 . 2008-11-01 08:43 <REP> d-------- c:\windows\ServicePackFiles 2008-11-01 08:19 . 2008-11-01 08:19 <REP> d-------- c:\windows\EHome 2008-10-31 19:37 . 2004-08-03 22:41 1,041,536 --------- c:\windows\system32\drivers\hsfdpsp2.sys 2008-10-31 19:37 . 2004-08-03 22:41 685,056 --------- c:\windows\system32\drivers\hsfcxts2.sys 2008-10-31 19:37 . 2004-08-03 22:41 220,032 --------- c:\windows\system32\drivers\hsfbs2s2.sys 2008-10-31 19:37 . 2004-07-17 22:55 129,045 --------- c:\windows\system32\drivers\cxthsfs2.cty 2008-10-31 19:37 . 2004-08-03 22:41 11,868 --------- c:\windows\system32\drivers\mdmxsdk.sys 2008-10-31 19:26 . 2008-09-08 11:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys 2008-10-31 19:26 . 2008-08-14 11:04 138,496 -----c--- c:\windows\system32\dllcache\afd.sys 2008-10-31 19:25 . 2008-09-15 16:26 1,846,528 -----c--- c:\windows\system32\dllcache\win32k.sys 2008-10-31 19:24 . 2008-08-14 14:23 2,191,232 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,147,328 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,068,096 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,025,984 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe 2008-10-31 19:24 . 2008-05-01 15:36 331,776 -----c--- c:\windows\system32\dllcache\msadce.dll 2008-10-31 19:21 . 2008-04-11 20:05 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll 2008-10-29 20:21 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll 2008-10-25 07:44 . 2008-11-07 04:49 <REP> d-------- c:\program files\SpeedFan 2008-10-25 07:44 . 2008-10-25 07:44 45 --a------ c:\windows\system32\initdebug.nfo 2008-10-18 18:34 . 2008-10-18 19:04 <REP> d-------- c:\documents and settings\Windows XP\Application Data\Grisbi 2008-10-16 18:08 . 2008-10-18 18:26 <REP> d-------- c:\program files\BankPerfect . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-08 18:35 --------- d-----w c:\program files\DVD Shrink 2008-11-08 17:25 --------- d-----w c:\documents and settings\Windows XP\Application Data\ScanSoft 2008-11-08 16:55 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-08 16:55 --------- d-----w c:\program files\Ubisoft 2008-11-07 18:37 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater 2008-11-07 05:13 320,492 --sha-w c:\windows\system32\drivers\fidbox.idx 2008-11-07 05:13 27,217,952 --sha-w c:\windows\system32\drivers\fidbox.dat 2008-11-07 03:56 --------- d-----w c:\program files\Disney Interactive 2008-11-07 03:54 --------- d-----w c:\program files\PC Doc Pro 2008-11-05 13:32 --------- d-----w c:\documents and settings\Windows XP\Application Data\PlayFirst 2008-11-02 07:39 --------- d-----w c:\documents and settings\Windows XP\Application Data\OpenOffice.org2 2008-11-01 06:27 --------- d-----w c:\program files\Microsoft Silverlight 2008-10-30 06:21 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-29 18:15 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-10-23 04:04 --------- d-----w c:\documents and settings\Windows XP\Application Data\gtk-2.0 2008-10-22 09:04 --------- d-----w c:\documents and settings\Windows XP\Application Data\Dr. DivX 2.0 OSS 2008-10-19 10:29 --------- d-----w c:\documents and settings\Windows XP\Application Data\Ahead 2008-10-03 18:53 91,744 ----a-w c:\windows\BPMNT.dll 2008-10-03 18:53 71,749 ----a-w c:\windows\hcextoutput.dll 2008-10-03 18:53 333,576 ----a-w c:\windows\tsc.exe 2008-10-03 18:53 1,213,784 ----a-w c:\windows\vsapi32.dll 2008-09-20 17:22 --------- d-----w c:\documents and settings\All Users\Application Data\UniversalisV12 2008-09-13 11:47 --------- d-----w c:\program files\Pirate Poppers 2008-09-10 06:25 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard 2008-09-10 05:23 --------- d-----w c:\program files\Turtle Odyssey 2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys 2008-05-06 17:01 750 ----a-w c:\documents and settings\Windows XP\Application Data\waver_2.95.dat 2007-05-22 07:44 87,608 ----a-w c:\documents and settings\Windows XP\Application Data\ezpinst.exe 2007-05-22 07:44 47,360 ----a-w c:\documents and settings\Windows XP\Application Data\pcouffin.sys 2005-09-23 06:28 53,248 ----a-w c:\program files\Fichiers communs\RegAsm.exe 2005-09-23 06:01 97,472 ----a-w c:\program files\Fichiers communs\gacutil.exe 2005-03-11 17:42 59,392 ----a-w c:\program files\Fichiers communs\isxdl.dll 2001-12-03 13:17 417 ----a-w c:\documents and settings\Windows XP\layout.bin 2000-10-05 14:00 54,272 ----a-w c:\documents and settings\Windows XP\Setup.exe 2007-10-31 12:41 23 --sha-w c:\windows\system32\bea_g.dll . ((((((((((((((((((((((((((((( snapshot_2008-11-08_14.21.52.18 ))))))))))))))))))))))))))))))))))))))))) . - 2008-11-01 08:21:44 1,963,152 ----a-w c:\windows\system32\FNTCACHE.DAT + 2008-11-08 17:31:51 1,900,832 ----a-w c:\windows\system32\FNTCACHE.DAT . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] "IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2008-07-24 243072] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-14 39408] "Eraser"="c:\program files\Eraser\Eraser.exe" [2007-07-28 277328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-11-08 266497] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-10-04 8491008] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-10-04 81920] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-04-17 196608] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-04-13 69632] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-11-08 919016] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-09-27 29744] "nwiz"="nwiz.exe" [2007-10-04 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-09 110592] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=sockspy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.MJPG"= M3JPEG32.dll "vidc.dmb1"= M3JPEG32.dll "vidc.jpeg"= M3JPEG32.dll "VIDC.PIXL"= pclepixl.dll "VIDC.PIM1"= pclepim1.dll "VIDC.NTN1"= NUVision.ax "VIDC.JDCT"= jl_jdct.drv "vidc.DIV3"= DivXc32.dll "vidc.DIV4"= DivXc32f.dll "msacm.divxa32"= DivXa32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "FirewallOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"= "f:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\IncrediMail\\bin\\IMApp.exe"= "c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"= "c:\\Program Files\\NDrive\\NDrive Update Agent\\NDriveAgent.exe"= "c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service "57482:TCP"= 57482:TCP:Pando P2P TCP Listening Port "57482:UDP"= 57482:UDP:Pando P2P UDP Listening Port R3 NUVision;Pinnacle Fusion Video;c:\windows\system32\DRIVERS\nuvvid2.sys [2001-12-03 155264] R3 USBSTOR;Pilote de stockage de masse USB;c:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S2 AdobeManager;AdobeManager;c:\windows\system32\adobemanager.exe [ ] S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-09-27 29744] S3 Hifslhdcrma;Hifslhdcrma;c:\windows\system32\drivers\rmcast.sys [2008-05-08 203136] S3 JL2005C;Dual Mode Camera;c:\windows\system32\Drivers\jl2005c.sys [ ] S3 LVBulk;LVBulk Service;c:\windows\system32\DRIVERS\LVBulk.sys [2002-09-20 10382] S3 PID_0960_V;Logitech ClickSmart 420(PID_0960_V);c:\windows\system32\DRIVERS\LVVIMULB.SYS [2002-09-20 163328] S3 usbscan;Pilote de scanneur USB;c:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104] . Contenu du dossier 'Tâches planifiées' 2008-08-29 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2008-11-08 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20] . - - - - ORPHELINS SUPPRIMES - - - - MSConfigStartUp-PDF4 Registry Controller - c:\program files\ScanSoft\PDF Professional 4.0\\RegistryController.exe MSConfigStartUp-ScanSoft PDF Professional 4-reminder - c:\program files\ScanSoft\PDF Professional 4.0\Ereg\ereg.exe ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-08 20:27:24 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\rundll32.exe c:\program files\Microsoft ActiveSync\rapimgr.exe c:\program files\IncrediMail\bin\IMApp.exe . ************************************************************************** . Heure de fin: 2008-11-08 20:34:31 - La machine a redémarré ComboFix-quarantined-files.txt 2008-11-08 19:34:03 ComboFix2.txt 2008-11-08 13:30:04 ComboFix3.txt 2007-10-19 05:59:27 Avant-CF: 38 033 711 104 octets libres Après-CF: 38,018,408,448 octets libres 212 --- E O F --- 2008-11-01 06:24:04 *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-**-*-*-*-*-*-*-*-*-*-*-*-*-*-*- FindyKill ----------------- FindyKill V4.095 ------------------ * User : Windows XP - D94E3DE60AD8484 * Emplacement : C:\Program Files\FindyKill * Outils Mis a jours le 07/11/08 par Chiquitine29 * Recherche effectuée à 20:46:04 le 2008-11-08 * Windows XP - Internet Explorer 7.0.5730.13 ((((((((((((((((( *** Recherche *** )))))))))))))))))) --------------- [ Processus actifs ] ---------------- C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\Wcescomm.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Eraser\Eraser.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\IncrediMail\bin\IMApp.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\WINDOWS\explorer.exe C:\Program Files\IncrediMail\bin\IncMail.exe --------------- [ Fichiers/Dossiers infectieux ] ---------------- »»»» Presence des fichiers dans C: »»»» Presence des fichiers dans C:\WINDOWS »»»» Presence des fichiers dans C:\WINDOWS\Prefetch »»»» Presence des fichiers dans C:\WINDOWS\system32 »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers »»»» Presence des fichiers dans C:\Documents and Settings\Windows XP\Application Data »»»» Presence des fichiers dans C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp »»»» Presence des fichiers dans C:\Documents and Settings\Windows XP\Local Settings\Temporary Internet Files\Content.IE5 --------------- [ Registre / Startup ] ---------------- ! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup nwiz REG_SZ nwiz.exe /install NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" ISUSPM Startup REG_SZ C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup ISUSScheduler REG_SZ "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime ZoneAlarm Client REG_SZ "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe H/PC Connection Agent REG_SZ "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe Eraser REG_SZ C:\Program Files\Eraser\Eraser.exe -hide HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater --------------- [ Registre / Clés infectieuses ] ---------------- Présent ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\hldrrr Présent ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\install_crack Présent ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\mdelk Présent ! - HKEY_USERS\S-1-5-21-1202660629-484061587-839522115-1004\Software\Local AppWizard-Generated Applications\winfilse Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\hldrrr Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\install_crack Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\mdelk Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winfilse Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA Présent ! - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Security Center\Svc] | EnableLUA --------------- [ Etat / Services ] ---------------- +- Services : [ Auto=2 / Demande=3 / Désactivé=4 ] /!\ Ndisuio - Type de démarrage = 4 EapHost - Type de démarrage = 3 /!\ Ip6Fw - Type de démarrage = 4 SharedAccess - Type de démarrage = 2 wuauserv - Type de démarrage = 2 wscsvc - Type de démarrage = 2 --------------- [ Recherche dans supports amovibles] ---------------- +- Informations : C: - Lecteur fixe F: - Lecteur fixe K: - Lecteur amovible L: - Lecteur fixe +- presence des fichiers : --------------- [ Registre / Moutpoint2 ] ---------------- -> Recherche négative. ------------------- ! Fin du rapport ! --------------------

Et voici le rapport HiijackThis du portable. *********************** Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:16:00, on 08/11/2008 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16711) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\System32\rundll32.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\BisonCam\BisonHK.exe C:\Program Files\Power Manager\PM.exe C:\Windows\System32\rundll32.exe C:\Program Files\Realtek Semiconductor Corp\Realtek Card Reader Monitor\CardReaderMonitor.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Windows\WindowsMobile\wmdSync.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\OpenOffice.org 2.3\program\soffice.exe C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe C:\Windows\system32\conime.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\wuauclt.exe C:\Windows\explorer.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe C:\Windows\system32\NOTEPAD.EXE C:\Windows\system32\SearchFilterHost.exe C:\Users\Hélène\Documents\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.madstef.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O1 - Hosts: ::1 localhost O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\Windows\system32\BhoECart.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [bisonHK] C:\Windows\BisonCam\BisonHK.exe O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe O4 - HKLM\..\Run: [CardReaderMonitor] C:\Program Files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [eCarteBleue-LPV-P1] "C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe" /dontopenmycards O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe O4 - Global Startup: Bluetooth Manager.lnk = ? O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Desktop Manager 5.1.709.19590 (GoogleDesktopManager-091907-194040) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- End of file - 9620 bytes

Voici le rapport de combofix effectué sur mon PC fixe. Je poste juste après le rapport HiijackThis du portable. Merci+++ ******************** ComboFix 08-11-07.01 - Windows XP 2008-11-08 14:06:12.4 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.304 [GMT 1:00] * Un nouveau point de restauration a été créé AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Windows XP\Application Data\m c:\documents and settings\Windows XP\Application Data\m\data.oct c:\documents and settings\Windows XP\Application Data\m\flec006.exe c:\documents and settings\Windows XP\Application Data\m\list.oct c:\documents and settings\Windows XP\Application Data\m\shared\1Click Time Synchronizer 1.1.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\2006 Tax Calculator 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\3D Amazing Clouds Screen Saver 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\3D_Ultra_Cool_Pool_8-ball_internet_demo.zip c:\documents and settings\Windows XP\Application Data\m\shared\Adsen_FavIcon_1.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\Advanced_Find_Files_2.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\Advanced_XP_Tweak_2.52.zip c:\documents and settings\Windows XP\Application Data\m\shared\Ahsay Offsite Backup Server 5.2.2.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\AirStrike_3D_Operation_WAT_1.65.zip c:\documents and settings\Windows XP\Application Data\m\shared\Alarm_Master_Plus_4.21_Key.zip c:\documents and settings\Windows XP\Application Data\m\shared\Anetto_Password_Saver_3.1_[KeyGen].zip c:\documents and settings\Windows XP\Application Data\m\shared\ArcSoft_ShowBiz_DVD_2.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Attention_Recorder_0.65.zip c:\documents and settings\Windows XP\Application Data\m\shared\AVI_IO_C_03.24_(Serial).zip c:\documents and settings\Windows XP\Application Data\m\shared\Azam_3.0.0.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Belkasoft IE Favorites Extractor 2.01.zip c:\documents and settings\Windows XP\Application Data\m\shared\Brush_Set_5_'Inky'_1.0.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Bt_Watcher_Pro_1.2.1_With_Crack.zip c:\documents and settings\Windows XP\Application Data\m\shared\Calculator+ 0.8.zip c:\documents and settings\Windows XP\Application Data\m\shared\CD_Duplibase_1.45_Key.zip c:\documents and settings\Windows XP\Application Data\m\shared\Coastal Clips 3.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\ColorPic 4.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Components Engine 5.0.0.0 [Key+Serial].zip c:\documents and settings\Windows XP\Application Data\m\shared\Consumer Way 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Crofoname_1.06.zip c:\documents and settings\Windows XP\Application Data\m\shared\Crypto Anywhere - OpenPGP Edition 3.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\CU2 1.5.8.zip c:\documents and settings\Windows XP\Application Data\m\shared\Date_Wheel_2.06.zip c:\documents and settings\Windows XP\Application Data\m\shared\DB_Visual_Architect_for_Java_Platform_4.1_(Serial).zip c:\documents and settings\Windows XP\Application Data\m\shared\Debugger_Selector_1.11.zip c:\documents and settings\Windows XP\Application Data\m\shared\Dial-Up_Optimiser_1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Diamond Vision 2.1.22.zip c:\documents and settings\Windows XP\Application Data\m\shared\DiskSearch 1.2.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\DIY_DataRecovery_iRecover_2.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Drag and Drop Robot 1.10.01.zip c:\documents and settings\Windows XP\Application Data\m\shared\DynaZip-NX_5.00.07_(Key+Serial).zip c:\documents and settings\Windows XP\Application Data\m\shared\EAN13 1.0 Key+Serial.zip c:\documents and settings\Windows XP\Application Data\m\shared\EarthView_3.6.9_(Key).zip c:\documents and settings\Windows XP\Application Data\m\shared\Echoview Pro 6.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Ejection 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Electric_Shoebox_1.0.6.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Email_Watcher_1.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\EV GetIP 1.01.zip c:\documents and settings\Windows XP\Application Data\m\shared\eventSherpa 2.1 Build 1397.zip c:\documents and settings\Windows XP\Application Data\m\shared\Exl-Plan Ultra 2.62.zip c:\documents and settings\Windows XP\Application Data\m\shared\EZ Backup Thunderbird Pro 4.7 (Serial).zip c:\documents and settings\Windows XP\Application Data\m\shared\Fast Shutdown Gadget 1.0.0.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\FastTrack_Mail_8.38.zip c:\documents and settings\Windows XP\Application Data\m\shared\febooti_fileTweak_2.2_[serial].zip c:\documents and settings\Windows XP\Application Data\m\shared\Flightmap 1.2.00.zip c:\documents and settings\Windows XP\Application Data\m\shared\FX_Fighter_demo.zip c:\documents and settings\Windows XP\Application Data\m\shared\Galaxy_Stir_1.50.zip c:\documents and settings\Windows XP\Application Data\m\shared\GameBiz - The Magical Years 1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Gogglebox_TV_1.0.0.3_(Serial).zip c:\documents and settings\Windows XP\Application Data\m\shared\Google_Toolbar_History_Mate_1.10_[Patch].zip c:\documents and settings\Windows XP\Application Data\m\shared\Graphics Browser 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\HandyFind_2.0.6.zip c:\documents and settings\Windows XP\Application Data\m\shared\HP0-409 Practice Exam Testing Engine Software 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\HTML_2_PHP_Convertor_4.0.0.807_(Crack).zip c:\documents and settings\Windows XP\Application Data\m\shared\IconoMaker_3.zip c:\documents and settings\Windows XP\Application Data\m\shared\IconsExtract_1.41.zip c:\documents and settings\Windows XP\Application Data\m\shared\Inventory Management Database Software 7.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Investment_Studio_Lite_1.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\IPSentry_Network_Monitoring_Suite_5.0.30.zip c:\documents and settings\Windows XP\Application Data\m\shared\John Peterson Pictures 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Jordan Retro Shoes Screensaver 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\JumpBack_1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\K-Lite_Pro_2.0.0.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Layer_Pilot_1.zip c:\documents and settings\Windows XP\Application Data\m\shared\Length Optimizer Multiple List Version 1.0 With Crack.zip c:\documents and settings\Windows XP\Application Data\m\shared\LetsPowwow Collaboration Software 1.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\LingvoSoft Dictionary 2006 German Polish for Windows 3.1.41.zip c:\documents and settings\Windows XP\Application Data\m\shared\LoneMail_Collector_2006_1.zip c:\documents and settings\Windows XP\Application Data\m\shared\LucidLog.Net_1.0.0_KeyGen.zip c:\documents and settings\Windows XP\Application Data\m\shared\LyricsManager 5.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\MACCC_1.4.zip c:\documents and settings\Windows XP\Application Data\m\shared\McAfee.Personal.Firewall.Plus.2005.French.Iso-Cryotik.zip c:\documents and settings\Windows XP\Application Data\m\shared\McPherran Utilities 1.0 Key.zip c:\documents and settings\Windows XP\Application Data\m\shared\MemSL_4.zip c:\documents and settings\Windows XP\Application Data\m\shared\MemWatcher_4.2_KeyGen.zip c:\documents and settings\Windows XP\Application Data\m\shared\Mexico_Postal_Code_Database_(Premium_Edition)_July_2007_(With_Crack).zip c:\documents and settings\Windows XP\Application Data\m\shared\MHX_Physics_Helper_1.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\MITCalc_1.40.zip c:\documents and settings\Windows XP\Application Data\m\shared\Mobiola WebCam for UIQ3 phones 2.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\MP3_Boss_0.615_Key.zip c:\documents and settings\Windows XP\Application Data\m\shared\Newyeah CD Ripper 2.10.zip c:\documents and settings\Windows XP\Application Data\m\shared\Patient Manager Express 1.0 (Crack).zip c:\documents and settings\Windows XP\Application Data\m\shared\Personalwatchdog_1.1_[Crack].zip c:\documents and settings\Windows XP\Application Data\m\shared\PhpGreetCards_3.6.zip c:\documents and settings\Windows XP\Application Data\m\shared\PicoViewer_6502_1.01.zip c:\documents and settings\Windows XP\Application Data\m\shared\PL.Ewido.Anti-Spyware.v.4.0.0.172.+.serial.zip c:\documents and settings\Windows XP\Application Data\m\shared\PLUM Browser 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Portable Abilon 2.5.3 Build 196.zip c:\documents and settings\Windows XP\Application Data\m\shared\Project_Cost_Controler_1.0_[Key].zip c:\documents and settings\Windows XP\Application Data\m\shared\PyramexServer 2.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\RapidTree 8.0.5.zip c:\documents and settings\Windows XP\Application Data\m\shared\Reclip_2.2.2_KeyGen.zip c:\documents and settings\Windows XP\Application Data\m\shared\RMRExpenses_(PPC) -_Expenses_Account_Tracker_1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\RVLister_1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Scorch_an_Island_1.11.zip c:\documents and settings\Windows XP\Application Data\m\shared\Screen_Calendar_for_Outlook_7.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\SmartButler_1.17.0.7_KeyGen.zip c:\documents and settings\Windows XP\Application Data\m\shared\SMTP_Preprocessor_1.04.zip c:\documents and settings\Windows XP\Application Data\m\shared\SPX_Bundle_1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Stretch_2004.zip c:\documents and settings\Windows XP\Application Data\m\shared\Syntax_Suite_3.53.zip c:\documents and settings\Windows XP\Application Data\m\shared\The_PC_Detective_Pro_2.9.8_Key+Serial.zip c:\documents and settings\Windows XP\Application Data\m\shared\TM Job Bag 1.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\TMCoPFile 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\TouchBoard_3.6.zip c:\documents and settings\Windows XP\Application Data\m\shared\TouchPro_5.0.1.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\Trainz_demo.zip c:\documents and settings\Windows XP\Application Data\m\shared\TrendySavers Nature Screensaver 1.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\Undelete It! 1.1.4.zip c:\documents and settings\Windows XP\Application Data\m\shared\Unreal Tournament 2003 - Terminator model.zip c:\documents and settings\Windows XP\Application Data\m\shared\Unreal Tournament 2004 HaloShield mutator.zip c:\documents and settings\Windows XP\Application Data\m\shared\Unreal_Tournament_2004_DM_Sacrifice_Map.zip c:\documents and settings\Windows XP\Application Data\m\shared\Unreal_Tournament_2004_Ninja_Rope_2_Mutator.zip c:\documents and settings\Windows XP\Application Data\m\shared\Visualizer_Image_Browser_2.3.zip c:\documents and settings\Windows XP\Application Data\m\shared\W2kTotalPowerWhere 1.0.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\Wantasoft Cycles Calendar 1.0.25.32.zip c:\documents and settings\Windows XP\Application Data\m\shared\WebMixer 3.0.6.0.zip c:\documents and settings\Windows XP\Application Data\m\shared\WinPersonalizer_5.3.2.zip c:\documents and settings\Windows XP\Application Data\m\shared\Wintuneup Pro 1.02.zip c:\documents and settings\Windows XP\Application Data\m\shared\WireChanger_3.6_With_Crack.zip c:\documents and settings\Windows XP\Application Data\m\shared\WordSecretary_English_1.1_(Cracked).zip c:\documents and settings\Windows XP\Application Data\m\shared\Xounds_2.3.1.zip c:\documents and settings\Windows XP\Application Data\m\shared\ZylCPUUsage_2.0.zip c:\documents and settings\Windows XP\Application Data\m\srvlist.oct c:\documents and settings\Windows XP\Local Settings\Temporary Internet Files\EUP6E2.tmp c:\documents and settings\Windows XP\Local Settings\Temporary Internet Files\EUP6F2.tmp c:\documents and settings\Windows XP\Local Settings\Temporary Internet Files\EUP6FA.tmp c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe c:\windows\Downloaded Program Files\setup.inf c:\windows\system32\ban_list.txt c:\windows\system32\dao350.dll c:\windows\system32\drivers\downld c:\windows\system32\drivers\downld\104140.exe c:\windows\system32\drivers\downld\107296.exe c:\windows\system32\drivers\downld\108718.exe c:\windows\system32\drivers\downld\109937.exe c:\windows\system32\drivers\downld\110531.exe c:\windows\system32\drivers\downld\110640.exe c:\windows\system32\drivers\downld\118203.exe c:\windows\system32\drivers\downld\118437.exe c:\windows\system32\drivers\downld\119578.exe c:\windows\system32\drivers\downld\119703.exe c:\windows\system32\drivers\downld\120906.exe c:\windows\system32\drivers\downld\121515.exe c:\windows\system32\drivers\downld\122281.exe c:\windows\system32\drivers\downld\122468.exe c:\windows\system32\drivers\downld\122703.exe c:\windows\system32\drivers\downld\123859.exe c:\windows\system32\drivers\downld\124734.exe c:\windows\system32\drivers\downld\127859.exe c:\windows\system32\drivers\downld\127906.exe c:\windows\system32\drivers\downld\129671.exe c:\windows\system32\drivers\downld\130375.exe c:\windows\system32\drivers\downld\131406.exe c:\windows\system32\drivers\downld\131859.exe c:\windows\system32\drivers\downld\132781.exe c:\windows\system32\drivers\downld\133984.exe c:\windows\system32\drivers\downld\134859.exe c:\windows\system32\drivers\downld\139156.exe c:\windows\system32\drivers\downld\143750.exe c:\windows\system32\drivers\downld\145562.exe c:\windows\system32\drivers\downld\146953.exe c:\windows\system32\drivers\downld\149171.exe c:\windows\system32\drivers\downld\150093.exe c:\windows\system32\drivers\downld\152453.exe c:\windows\system32\drivers\downld\152750.exe c:\windows\system32\drivers\downld\153390.exe c:\windows\system32\drivers\downld\155125.exe c:\windows\system32\drivers\downld\158765.exe c:\windows\system32\drivers\downld\159015.exe c:\windows\system32\drivers\downld\160531.exe c:\windows\system32\drivers\downld\162281.exe c:\windows\system32\drivers\downld\163828.exe c:\windows\system32\drivers\downld\167312.exe c:\windows\system32\drivers\downld\181734.exe c:\windows\system32\drivers\downld\203062.exe c:\windows\system32\drivers\downld\204937.exe c:\windows\system32\drivers\downld\225078.exe c:\windows\system32\drivers\downld\235109.exe c:\windows\system32\drivers\downld\236796.exe c:\windows\system32\drivers\downld\240234.exe c:\windows\system32\drivers\downld\240750.exe c:\windows\system32\drivers\downld\254859.exe c:\windows\system32\drivers\downld\258671.exe c:\windows\system32\drivers\downld\262750.exe c:\windows\system32\drivers\downld\266578.exe c:\windows\system32\drivers\downld\267781.exe c:\windows\system32\drivers\downld\271296.exe c:\windows\system32\drivers\downld\274515.exe c:\windows\system32\drivers\downld\275187.exe c:\windows\system32\drivers\downld\275578.exe c:\windows\system32\drivers\downld\280953.exe c:\windows\system32\drivers\downld\289125.exe c:\windows\system32\drivers\downld\291250.exe c:\windows\system32\drivers\downld\292984.exe c:\windows\system32\drivers\downld\293171.exe c:\windows\system32\drivers\downld\294875.exe c:\windows\system32\drivers\downld\296031.exe c:\windows\system32\drivers\downld\300640.exe c:\windows\system32\drivers\downld\309062.exe c:\windows\system32\drivers\downld\349593.exe c:\windows\system32\drivers\downld\362046.exe c:\windows\system32\drivers\downld\364203.exe c:\windows\system32\drivers\downld\382343.exe c:\windows\system32\drivers\downld\390375.exe c:\windows\system32\drivers\downld\484437.exe c:\windows\system32\drivers\downld\496093.exe c:\windows\system32\drivers\downld\498984.exe c:\windows\system32\drivers\downld\81875.exe c:\windows\system32\drivers\downld\82625.exe c:\windows\system32\drivers\downld\84953.exe c:\windows\system32\drivers\downld\87187.exe c:\windows\system32\drivers\downld\96531.exe c:\windows\system32\drivers\downld\97671.exe c:\windows\system32\drivers\downld\98859.exe c:\windows\system32\drivers\downld\99968.exe c:\windows\system32\drivers\srosa.sys c:\windows\system32\drivers\winfilse.exe c:\windows\system32\mdelk.exe c:\windows\system32\wintems.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_SROSA -------\Legacy_SROSA -------\Legacy_BOONTY_GAMES -------\Service_Boonty Games ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-08 au 2008-11-08 )))))))))))))))))))))))))))))))))))) . 2008-11-07 18:59 . 2008-11-07 18:59 <REP> d-------- c:\program files\CCleaner 2008-11-07 06:11 . 2008-11-08 13:24 7,168 --a------ c:\windows\system32\drivers\srosa2.sys 2008-11-07 06:10 . 2008-11-07 06:10 <REP> d-------- c:\documents and settings\Windows XP\Application Data\Bitdefender 2008-11-07 06:03 . 2008-11-07 06:08 81,984 --a------ c:\windows\system32\bdod.bin 2008-11-07 05:56 . 2008-11-07 05:56 <REP> d-------- c:\program files\Softwin 2008-11-07 05:56 . 2008-11-07 05:58 <REP> d-------- c:\documents and settings\All Users\Application Data\BitDefender 2008-11-07 05:53 . 2008-11-07 19:04 <REP> d-------- c:\program files\Fichiers communs\Softwin 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\system32\fr 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\system32\bits 2008-11-01 08:42 . 2008-11-01 08:42 <REP> d-------- c:\windows\l2schemas 2008-11-01 08:36 . 2008-11-01 08:43 <REP> d-------- c:\windows\ServicePackFiles 2008-11-01 08:19 . 2008-11-01 08:19 <REP> d-------- c:\windows\EHome 2008-10-31 19:37 . 2004-08-03 22:41 1,041,536 --------- c:\windows\system32\drivers\hsfdpsp2.sys 2008-10-31 19:37 . 2004-08-03 22:41 685,056 --------- c:\windows\system32\drivers\hsfcxts2.sys 2008-10-31 19:37 . 2004-08-03 22:41 220,032 --------- c:\windows\system32\drivers\hsfbs2s2.sys 2008-10-31 19:37 . 2004-07-17 22:55 129,045 --------- c:\windows\system32\drivers\cxthsfs2.cty 2008-10-31 19:37 . 2004-08-03 22:41 11,868 --------- c:\windows\system32\drivers\mdmxsdk.sys 2008-10-31 19:26 . 2008-09-08 11:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys 2008-10-31 19:26 . 2008-08-14 11:04 138,496 -----c--- c:\windows\system32\dllcache\afd.sys 2008-10-31 19:25 . 2008-09-15 16:26 1,846,528 -----c--- c:\windows\system32\dllcache\win32k.sys 2008-10-31 19:24 . 2008-08-14 14:23 2,191,232 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,147,328 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,068,096 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe 2008-10-31 19:24 . 2008-08-14 14:23 2,025,984 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe 2008-10-31 19:24 . 2008-05-01 15:36 331,776 -----c--- c:\windows\system32\dllcache\msadce.dll 2008-10-31 19:21 . 2008-04-11 20:05 691,712 -----c--- c:\windows\system32\dllcache\inetcomm.dll 2008-10-29 20:21 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll 2008-10-25 07:44 . 2008-11-07 04:49 <REP> d-------- c:\program files\SpeedFan 2008-10-25 07:44 . 2008-10-25 07:44 45 --a------ c:\windows\system32\initdebug.nfo 2008-10-18 18:34 . 2008-10-18 19:04 <REP> d-------- c:\documents and settings\Windows XP\Application Data\Grisbi 2008-10-16 18:08 . 2008-10-18 18:26 <REP> d-------- c:\program files\BankPerfect . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-11-07 18:37 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater 2008-11-07 05:13 320,492 --sha-w c:\windows\system32\drivers\fidbox.idx 2008-11-07 05:13 27,217,952 --sha-w c:\windows\system32\drivers\fidbox.dat 2008-11-07 05:09 1,784,832 ----a-w c:\windows\Internet Logs\xDBD.tmp 2008-11-07 03:56 --------- d-----w c:\program files\Disney Interactive 2008-11-07 03:54 --------- d-----w c:\program files\PC Doc Pro 2008-11-07 03:52 --------- d--h--w c:\program files\InstallShield Installation Information 2008-11-06 17:35 1,751,552 ----a-w c:\windows\Internet Logs\xDBC.tmp 2008-11-06 17:34 103,901 ----a-w c:\windows\Internet Logs\vsmon_2nd_2008_11_06_18_25_47_small.dmp.zip 2008-11-06 17:25 9,216 ----a-w c:\windows\Internet Logs\xDBA.tmp 2008-11-06 17:24 573,440 ----a-w c:\windows\Internet Logs\xDB9.tmp 2008-11-06 17:24 1,751,552 ----a-w c:\windows\Internet Logs\xDBB.tmp 2008-11-05 13:32 --------- d-----w c:\documents and settings\Windows XP\Application Data\PlayFirst 2008-11-05 06:00 2,121,743 ----a-w c:\windows\Internet Logs\tvDebug.zip 2008-11-04 13:43 1,745,920 ----a-w c:\windows\Internet Logs\xDB8.tmp 2008-11-04 13:43 1,636,864 ----a-w c:\windows\Internet Logs\xDB7.tmp 2008-11-02 07:39 --------- d-----w c:\documents and settings\Windows XP\Application Data\OpenOffice.org2 2008-11-01 06:27 --------- d-----w c:\program files\Microsoft Silverlight 2008-10-30 06:21 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-29 18:15 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-10-29 06:23 17,408 ----a-w c:\windows\Internet Logs\xDB6.tmp 2008-10-29 06:22 1,210,368 ----a-w c:\windows\Internet Logs\xDB5.tmp 2008-10-28 05:15 1,676,288 ----a-w c:\windows\Internet Logs\xDB4.tmp 2008-10-23 04:04 --------- d-----w c:\documents and settings\Windows XP\Application Data\gtk-2.0 2008-10-23 02:50 3,055,616 ----a-w c:\windows\Internet Logs\xDB2.tmp 2008-10-23 02:50 1,656,832 ----a-w c:\windows\Internet Logs\xDB3.tmp 2008-10-22 09:04 --------- d-----w c:\documents and settings\Windows XP\Application Data\Dr. DivX 2.0 OSS 2008-10-19 10:29 --------- d-----w c:\documents and settings\Windows XP\Application Data\Ahead 2008-10-03 18:53 91,744 ----a-w c:\windows\BPMNT.dll 2008-10-03 18:53 71,749 ----a-w c:\windows\hcextoutput.dll 2008-10-03 18:53 333,576 ----a-w c:\windows\tsc.exe 2008-10-03 18:53 1,213,784 ----a-w c:\windows\vsapi32.dll 2008-09-30 16:22 1,565,696 ----a-w c:\windows\Internet Logs\xDB1.tmp 2008-09-24 12:00 --------- d-----w c:\documents and settings\All Users\Application Data\ScanSoft 2008-09-20 17:22 --------- d-----w c:\documents and settings\All Users\Application Data\UniversalisV12 2008-09-13 11:47 --------- d-----w c:\program files\Pirate Poppers 2008-09-10 06:25 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard 2008-09-10 05:23 --------- d-----w c:\program files\Turtle Odyssey 2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys 2008-05-06 17:01 750 ----a-w c:\documents and settings\Windows XP\Application Data\waver_2.95.dat 2007-05-22 07:44 87,608 ----a-w c:\documents and settings\Windows XP\Application Data\ezpinst.exe 2007-05-22 07:44 47,360 ----a-w c:\documents and settings\Windows XP\Application Data\pcouffin.sys 2005-09-23 06:28 53,248 ----a-w c:\program files\Fichiers communs\RegAsm.exe 2005-09-23 06:01 97,472 ----a-w c:\program files\Fichiers communs\gacutil.exe 2005-03-11 17:42 59,392 ----a-w c:\program files\Fichiers communs\isxdl.dll 2001-12-03 13:17 417 ----a-w c:\documents and settings\Windows XP\layout.bin 2000-10-05 14:00 54,272 ----a-w c:\documents and settings\Windows XP\Setup.exe 2007-10-31 12:41 23 --sha-w c:\windows\system32\bea_g.dll . ((((((((((((((((((((((((((((( snapshot@2007-10-18_19.08.18,09 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-02 18:13:23 2,181,632 ----a-w c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe + 2005-02-24 17:35:26 730,336 ----a-w c:\windows\$hf_mig$\KB890859\update\update.exe + 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe + 2007-02-28 16:08:21 2,184,192 ----a-w c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe + 2005-10-12 23:15:28 727,776 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe + 2008-02-26 11:49:32 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll + 2007-10-29 22:36:31 1,293,824 ----a-w c:\windows\$hf_mig$\KB941568\SP2QFE\quartz.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941568\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941568\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941568\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941568\update\updspapi.dll + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll + 2008-03-20 07:56:50 1,846,016 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll + 2007-10-10 23:22:14 124,928 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll + 2007-10-10 23:22:14 214,528 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll + 2007-10-10 23:22:14 132,608 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll + 2007-10-10 23:22:14 63,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll + 2007-10-10 08:16:47 70,656 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe + 2007-10-10 23:22:14 153,088 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll + 2007-10-10 23:22:14 230,400 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll + 2007-10-10 05:47:20 161,792 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat + 2007-10-10 23:22:14 383,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll + 2007-10-10 23:22:15 388,096 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll + 2007-10-10 23:22:16 6,067,200 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll + 2007-10-10 23:22:16 44,544 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll + 2007-10-10 23:22:16 267,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll + 2007-10-10 08:16:47 13,824 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe + 2007-10-10 08:16:56 625,664 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe + 2007-10-10 23:22:16 27,648 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll + 2007-10-10 23:22:16 459,264 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll + 2007-10-10 23:22:16 52,224 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll + 2007-10-30 23:40:57 3,593,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll + 2007-10-10 23:22:18 478,208 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll + 2007-10-10 23:22:18 193,024 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll + 2007-10-10 23:22:18 671,232 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll + 2007-10-10 23:22:18 102,912 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll + 2007-10-10 23:22:18 105,984 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\url.dll + 2007-10-10 23:22:19 1,162,240 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll + 2007-10-10 23:22:19 233,472 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll + 2007-10-10 23:22:19 825,344 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\spcustom.dll + 2007-06-30 18:47:16 727,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\update.exe + 2007-06-30 20:24:42 394,976 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\updspapi.dll + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE\tzchange.exe + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll + 2007-12-04 18:30:15 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll + 2007-11-07 09:50:06 733,696 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll + 2007-12-18 14:32:57 450,560 ----a-w c:\windows\$hf_mig$\KB944338-v2\SP2QFE\jscript.dll + 2007-12-18 14:32:57 417,792 ----a-w c:\windows\$hf_mig$\KB944338-v2\SP2QFE\vbscript.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944338-v2\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944338-v2\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944338-v2\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944338-v2\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944338-v2\update\updspapi.dll + 2007-12-07 01:42:15 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll + 2007-12-19 22:20:28 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll + 2007-12-07 01:42:15 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll + 2007-12-07 01:42:15 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll + 2007-12-07 01:42:15 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe + 2007-12-07 01:42:15 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll + 2007-12-07 01:42:16 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat + 2007-12-07 01:42:16 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll + 2007-12-07 01:42:16 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll + 2007-12-07 01:42:19 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll + 2007-12-07 01:42:19 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll + 2007-12-07 01:42:19 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe + 2007-12-07 01:42:20 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll + 2007-12-07 01:42:20 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll + 2007-12-07 01:42:20 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll + 2007-12-07 01:42:21 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll + 2007-12-07 01:42:21 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll + 2007-12-07 01:42:21 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll + 2007-12-07 01:42:21 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll + 2007-12-07 01:42:21 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll + 2008-01-11 05:54:27 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll + 2007-12-07 01:42:21 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll + 2007-12-07 01:42:22 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll + 2007-12-07 01:42:22 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll + 2007-12-07 01:42:22 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll + 2008-02-20 05:20:23 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll + 2008-02-20 18:50:24 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll + 2008-03-01 12:34:26 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll + 2008-03-01 12:34:26 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll + 2008-03-01 12:34:26 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll + 2008-03-01 12:34:27 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll + 2008-03-01 12:34:27 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe + 2008-03-01 12:34:27 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll + 2008-03-01 12:34:27 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat + 2008-03-01 12:34:27 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll + 2008-03-01 12:34:27 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll + 2008-03-01 12:34:29 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll + 2008-03-01 12:34:29 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll + 2008-03-01 12:34:29 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe + 2008-03-01 12:34:30 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll + 2008-03-01 12:34:30 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll + 2008-03-01 12:34:30 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll + 2008-03-01 12:34:32 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll + 2008-03-01 12:34:32 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll + 2008-03-01 12:34:32 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll + 2008-03-01 12:34:32 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll + 2008-03-01 12:34:32 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll + 2008-03-01 12:34:32 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll + 2008-03-01 12:34:32 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll + 2008-03-01 12:34:33 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll + 2008-03-01 12:34:33 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll + 2008-03-01 12:34:33 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll + 2008-02-20 06:52:42 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-25 06:56:31 194,144 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-11-01 05:15:27 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll + 2008-04-23 07:19:26 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll + 2008-04-23 07:19:26 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll + 2008-04-23 07:19:26 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll + 2008-04-23 07:19:26 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll + 2008-04-23 07:19:26 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe + 2008-04-23 07:19:26 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll + 2008-04-23 07:19:26 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat + 2008-04-23 07:19:26 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll + 2008-04-23 07:19:26 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll + 2008-04-23 07:19:26 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll + 2008-04-23 07:19:26 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll + 2008-04-23 07:19:26 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe + 2008-04-23 07:19:26 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll + 2008-04-23 07:19:27 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll + 2008-04-23 07:19:27 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll + 2008-04-23 07:19:27 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll + 2008-04-23 07:19:27 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll + 2008-04-23 07:19:27 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll + 2008-04-23 07:19:27 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll + 2008-04-23 07:19:27 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll + 2008-04-23 07:19:27 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll + 2008-04-23 07:19:27 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll + 2008-04-23 07:19:27 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll + 2008-04-23 07:19:27 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll + 2008-04-23 07:19:27 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll + 2008-07-07 20:18:27 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll + 2008-06-14 18:03:13 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys + 2008-06-14 17:33:37 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys + 2008-06-14 17:40:19 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll + 2008-04-14 16:17:04 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys + 2008-04-14 15:59:30 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys + 2008-04-14 16:22:05 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll + 2008-05-07 04:55:47 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:59 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll + 2004-08-05 12:00:00 30,080 -c----w c:\windows\$NtUninstallKB909394$\rndismp.sys + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB909394$\spuninst\spuninst.exe + 2005-10-12 23:12:34 371,424 -c----w c:\windows\$NtUninstallKB909394$\spuninst\updspapi.dll + 2004-08-05 12:00:00 12,672 -c----w c:\windows\$NtUninstallKB909394$\usb8023.sys + 2004-08-05 12:00:00 294,400 -c----w c:\windows\$NtUninstallKB932823-v3$\msctf.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\updspapi.dll + 2005-08-30 03:55:43 1,293,312 -c----w c:\windows\$NtUninstallKB941568$\quartz.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941568$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941568$\spuninst\updspapi.dll + 2005-06-28 09:23:40 216,800 -c----w c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe + 2005-06-28 09:23:54 371,424 -c----w c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll + 2006-10-18 19:47:18 222,208 -c----w c:\windows\$NtUninstallKB941569$\wmasf.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941644$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941644$\spuninst\updspapi.dll + 2006-04-20 11:51:50 359,808 -c----w c:\windows\$NtUninstallKB941644$\tcpip.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941693$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941693$\spuninst\updspapi.dll + 2007-03-08 15:33:58 1,843,712 -c----w c:\windows\$NtUninstallKB941693$\win32k.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB942763$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB942763$\spuninst\updspapi.dll + 2007-07-18 12:42:22 60,416 -c----w c:\windows\$NtUninstallKB942763$\tzchange.exe + 2007-05-17 11:29:50 549,376 -c----w c:\windows\$NtUninstallKB943055$\oleaut32.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB943055$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB943055$\spuninst\updspapi.dll + 2006-12-19 21:49:47 8,509,952 -c----w c:\windows\$NtUninstallKB943460$\shell32.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB943460$\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w c:\windows\$NtUninstallKB943460$\spuninst\updspapi.dll + 2007-06-18 22:24:36 369,152 -c----w c:\windows\$NtUninstallKB943460$\xpsp3res.dll + 2006-08-17 12:29:49 728,576 -c----w c:\windows\$NtUninstallKB943485$\lsasrv.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB943485$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB943485$\spuninst\updspapi.dll + 2007-10-16 18:26:12 163,644 -c----w c:\windows\$NtUninstallKB944653$\secdrv.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB944653$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB944653$\spuninst\updspapi.dll + 2006-06-26 17:41:32 148,480 -c----w c:\windows\$NtUninstallKB945553$\dnsapi.dll + 2004-08-05 12:00:00 45,568 -c----w c:\windows\$NtUninstallKB945553$\dnsrslvr.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB945553$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB945553$\spuninst\updspapi.dll + 2004-08-05 12:00:00 181,248 -c----w c:\windows\$NtUninstallKB946026$\mrxdav.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB946026$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB946026$\spuninst\updspapi.dll + 2007-06-19 13:32:25 282,112 -c----w c:\windows\$NtUninstallKB948590$\gdi32.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB948590$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB948590$\spuninst\updspapi.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB948881$\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w c:\windows\$NtUninstallKB948881$\spuninst\updspapi.dll + 2004-08-05 12:00:00 561,179 -c----w c:\windows\$NtUninstallKB950749$\dao360.dll + 2004-08-05 12:00:00 512,029 -c----w c:\windows\$NtUninstallKB950749$\msexch40.dll + 2004-08-05 12:00:00 319,517 -c----w c:\windows\$NtUninstallKB950749$\msexcl40.dll + 2004-08-05 12:00:00 1,507,356 -c----w c:\windows\$NtUninstallKB950749$\msjet40.dll + 2004-08-05 12:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetol1.dll + 2004-08-05 12:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetoledb40.dll + 2004-08-05 12:00:00 184,351 -c----w c:\windows\$NtUninstallKB950749$\msjint40.dll + 2004-08-05 12:00:00 53,279 -c----w c:\windows\$NtUninstallKB950749$\msjter40.dll + 2004-08-05 12:00:00 241,693 -c----w c:\windows\$NtUninstallKB950749$\msjtes40.dll + 2004-08-05 12:00:00 213,023 -c----w c:\windows\$NtUninstallKB950749$\msltus40.dll + 2004-08-05 12:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\mspbde40.dll + 2004-08-05 12:00:00 421,919 -c----w c:\windows\$NtUninstallKB950749$\msrd2x40.dll + 2004-08-05 12:00:00 315,423 -c----w c:\windows\$NtUninstallKB950749$\msrd3x40.dll + 2004-08-05 12:00:00 552,989 -c----w c:\windows\$NtUninstallKB950749$\msrepl40.dll + 2004-08-05 12:00:00 258,077 -c----w c:\windows\$NtUninstallKB950749$\mstext40.dll + 2004-08-05 12:00:00 831,519 -c----w c:\windows\$NtUninstallKB950749$\mswdat10.dll + 2004-08-05 12:00:00 614,429 -c----w c:\windows\$NtUninstallKB950749$\mswstr10.dll + 2004-08-05 12:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\msxbde40.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB950749$\spuninst\updspapi.dll + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762_0$\rmcast.sys + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950762_0$\spuninst\updspapi.dll + 2008-04-14 15:52:45 272,768 -c----w c:\windows\$NtUninstallKB951376-v2_0$\bthport.sys + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB951376_0$\spuninst\updspapi.dll + 2007-10-29 22:43:32 1,293,824 -c----w c:\windows\$NtUninstallKB951698_0$\quartz.dll + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB951698_0$\spuninst\updspapi.dll - 2005-10-20 15:12:00 217,088 ----a-w c:\windows\alcrmv.exe + 2006-07-31 10:27:30 217,088 ----a-w c:\windows\Alcrmv.exe - 2005-08-12 16:40:00 307,200 ----a-w c:\windows\alcupd.exe + 2006-07-31 10:19:00 315,392 ----a-w c:\windows\alcupd.exe - 2006-10-04 14:05:26 39,424 ------w c:\windows\AppPatch\acadproc.dll + 2008-04-14 02:33:18 39,424 ----a-w c:\windows\AppPatch\acadproc.dll - 2004-08-05 12:00:00 1,852,416 ----a-w c:\windows\AppPatch\AcGenral.dll + 2008-04-14 02:33:18 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll - 2004-08-05 12:00:00 450,048 ----a-w c:\windows\AppPatch\AcLayers.dll + 2008-04-14 02:33:18 451,072 ----a-w c:\windows\AppPatch\aclayers.dll - 2004-08-05 12:00:00 137,728 ----a-w c:\windows\AppPatch\AcLua.dll + 2008-04-14 02:33:18 141,312 ----a-w c:\windows\AppPatch\aclua.dll - 2004-08-05 12:00:00 244,736 ----a-w c:\windows\AppPatch\AcSpecfc.dll + 2008-04-14 02:33:18 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll - 2004-08-05 12:00:00 116,224 ----a-w c:\windows\AppPatch\AcXtrnal.dll + 2008-04-14 02:33:18 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll + 2008-08-29 07:31:33 12,288 ----a-w c:\windows\assembly\GAC\cli_basetypes\1.0.10.0__ce2cb7e279207b9e\cli_basetypes.dll + 2008-08-29 07:31:33 32,256 ----a-w c:\windows\assembly\GAC\cli_cppuhelper\1.0.13.0__ce2cb7e279207b9e\cli_cppuhelper.dll + 2008-08-29 07:31:33 847,872 ----a-w c:\windows\assembly\GAC\cli_types\1.1.13.0__ce2cb7e279207b9e\cli_types.dll + 2008-08-29 07:31:34 8,192 ----a-w c:\windows\assembly\GAC\cli_ure\1.0.13.0__ce2cb7e279207b9e\cli_ure.dll - 2007-10-16 18:16:15 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2007-10-29 17:37:05 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll - 2007-10-16 18:16:15 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2007-10-29 17:37:06 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll - 2007-10-16 18:16:16 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2007-10-29 17:37:06 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll - 2007-10-11 19:25:13 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2007-10-29 17:37:07 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-16 18:16:17 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2007-10-29 17:37:08 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll - 2007-10-16 18:16:18 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2007-10-29 17:37:09 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll - 2007-10-16 18:16:18 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2007-10-29 17:37:11 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll - 2007-10-16 18:16:19 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2007-10-29 17:37:12 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll - 2007-10-16 18:16:14 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2007-10-29 17:37:04 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2008-08-29 07:30:36 3,072 ----a-w c:\windows\assembly\GAC\policy.1.0.cli_basetypes\9.1.0.0__ce2cb7e279207b9e\policy.1.0.cli_basetypes.dll + 2008-08-29 07:30:36 3,072 ----a-w c:\windows\assembly\GAC\policy.1.0.cli_cppuhelper\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_cppuhelper.dll + 2008-08-29 07:30:37 3,072 ----a-w c:\windows\assembly\GAC\policy.1.0.cli_ure\13.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_ure.dll + 2008-08-29 07:31:46 3,072 ----a-w c:\windows\assembly\GAC\policy.1.1.cli_types\13.0.0.0__ce2cb7e279207b9e\policy.1.1.cli_types.dll - 2007-07-11 18:44:23 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-04-11 16:01:56 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2007-07-11 18:44:36 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-04-11 16:02:10 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2007-07-11 18:44:37 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-04-11 16:01:21 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2007-07-11 18:44:39 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-04-11 16:02:13 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2007-07-11 18:44:32 2,902,016 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2008-04-11 16:01:35 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2007-07-11 18:44:14 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-04-11 16:02:18 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2007-07-11 18:44:14 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-04-11 16:02:18 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2007-07-11 18:44:47 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2008-04-11 16:02:10 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2007-07-11 18:44:27 5,156,864 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2008-04-11 16:01:31 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2007-07-11 18:44:21 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-04-11 16:01:51 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2007-07-11 18:44:13 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-04-11 16:01:32 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2007-07-11 18:44:16 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2008-04-11 16:01:56 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2007-07-11 18:44:35 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2008-04-11 16:02:02 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2007-07-11 18:44:35 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2008-04-11 16:02:05 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2007-07-11 18:44:36 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-04-11 16:02:06 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2007-07-11 18:44:18 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2008-04-11 16:02:19 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2007-07-11 18:44:19 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-04-11 16:02:20 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2007-07-11 18:44:20 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2008-04-11 16:02:22 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2007-07-11 18:44:21 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2008-04-11 16:02:24 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2007-07-11 18:44:18 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-04-11 16:02:07 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2007-07-11 18:44:50 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-04-11 16:02:03 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2007-07-11 18:44:49 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2008-04-11 16:02:00 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2007-07-11 18:44:10 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2008-04-11 16:02:14 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2007-07-11 18:44:48 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-04-11 16:01:59 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2007-07-11 18:44:51 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2008-04-11 16:01:24 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2007-07-11 18:44:12 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-04-11 16:02:16 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2007-07-11 18:44:11 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2008-04-11 16:01:58 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2007-07-11 18:44:12 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-04-11 16:01:57 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2007-07-11 18:44:43 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2008-04-11 16:02:08 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2007-07-11 18:44:23 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-04-11 16:02:08 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2007-07-11 18:44:44 413,696 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2008-04-11 16:01:34 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2007-07-11 18:44:40 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2008-04-11 16:01:37 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2007-07-11 18:44:15 888,832 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2008-04-11 16:01:38 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2007-07-11 18:44:33 5,001,216 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2008-04-11 16:02:26 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2007-07-11 18:44:25 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2008-04-11 16:02:21 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2007-07-11 18:44:24 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-04-11 16:01:52 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2007-07-11 18:44:26 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-04-11 16:02:15 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2007-07-11 18:44:46 577,536 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-04-11 16:01:25 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2007-07-11 18:44:40 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2008-04-11 16:02:17 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2007-07-11 18:44:46 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-04-11 16:02:14 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2007-07-11 18:44:42 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-04-11 16:02:12 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2007-07-11 18:44:42 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-04-11 16:02:11 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2007-07-11 18:44:22 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2008-04-11 16:01:27 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2007-07-11 18:44:26 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2008-04-11 16:01:28 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2007-07-11 18:44:47 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2008-04-11 16:01:48 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2007-07-11 18:44:28 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2008-04-11 16:01:50 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2007-07-11 18:44:29 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2008-04-11 16:01:42 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2007-07-11 18:44:30 5,152,768 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2008-04-11 16:01:54 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2007-07-11 18:44:31 2,027,520 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2008-04-11 16:01:29 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2007-07-11 18:44:45 2,940,928 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2008-04-11 16:01:40 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2008-04-11 16:34:40 27,136 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll + 2008-04-11 16:34:59 884,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll + 2008-04-11 16:35:05 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll + 2008-04-11 16:35:02 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe + 2008-04-11 16:35:15 876,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll + 2008-04-11 16:35:16 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll + 2008-04-11 16:35:32 1,695,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll + 2008-04-11 16:35:35 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll + 2008-04-11 16:35:46 1,740,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll + 2008-04-11 16:06:12 11,722,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll + 2008-04-11 16:35:52 1,011,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll + 2008-04-11 16:08:14 7,049,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll + 2008-04-11 16:36:00 1,798,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll + 2008-04-11 16:09:13 10,969,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll + 2008-04-11 16:36:07 1,224,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll + 2008-04-11 16:36:12 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll + 2008-04-11 16:09:25 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll + 2008-04-11 16:09:21 1,667,072 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll + 2008-04-11 16:36:19 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll + 2008-04-11 16:36:18 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll + 2008-04-11 16:36:23 733,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll + 2008-04-11 16:36:27 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll + 2008-04-11 16:36:31 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll + 2008-04-11 16:37:40 2,342,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll + 2008-04-11 16:37:43 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll + 2008-04-11 16:37:54 1,986,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll + 2008-04-11 16:37:23 12,509,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll + 2008-04-11 16:10:31 13,193,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll + 2008-04-11 16:11:12 5,771,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll + 2008-04-11 16:07:26 8,265,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll + 2008-09-24 03:12:28 71,749 ----a-w c:\windows\AU_Temp\1\27\hcextoutput.dll + 2008-09-24 03:12:28 333,576 ----a-w c:\windows\AU_Temp\1\27\TSC.exe + 2006-11-22 15:48:28 91,744 ----a-w c:\windows\AU_Temp\2\4\BPMNT.dll + 2008-03-30 16:55:22 1,213,784 ----a-w c:\windows\AU_Temp\2\4\vsapi32.dll - 2006-11-15 09:22:17 163,328 ----a-w c:\windows\BDOSCAN8\bdcore.dll + 2008-11-07 04:41:34 102,400 ----a-w c:\windows\BDOSCAN8\bdcore.dll - 2006-11-15 09:22:42 133,120 ----a-w c:\windows\BDOSCAN8\libfn.dll + 2007-10-19 06:50:09 142,848 ----a-w c:\windows\BDOSCAN8\libfn.dll + 2008-09-13 11:49:49 4,096 ----a-w c:\windows\d3dx.dat + 2008-03-24 17:33:02 1,527,056 ----a-w c:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe - 2002-07-25 15:05:32 172,032 ----a-w c:\windows\Downloaded Program Files\isusweb.dll + 2004-04-13 04:04:24 307,200 ----a-w c:\windows\Downloaded Program Files\isusweb.dll + 2008-06-14 17:33:37 272,768 ------w c:\windows\Driver Cache\i386\bthport.sys - 2007-02-28 16:02:21 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe + 2008-08-14 13:23:44 2,147,328 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe - 2007-02-28 16:02:36 2,059,648 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe + 2008-08-14 13:23:49 2,068,096 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe - 2007-02-28 16:02:21 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe + 2008-08-14 13:23:44 2,025,984 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe + 2008-08-14 13:23:49 2,191,232 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE - 2007-06-13 13:22:28 1,037,312 ----a-w c:\windows\explorer.exe + 2008-04-14 02:34:03 1,037,824 ----a-w c:\windows\explorer.exe + 2000-08-31 07:00:00 89,504 ----a-w c:\windows\fdsv.exe + 2004-05-04 09:53:40 1,645,320 ----a-w c:\windows\gdiplus.dll + 2000-08-31 07:00:00 80,412 ----a-w c:\windows\grep.exe - 2004-08-05 12:00:00 34,816 ----a-w c:\windows\Help\sniffpol.dll + 2008-04-14 02:33:41 34,816 ----a-w c:\windows\Help\sniffpol.dll - 2004-08-05 12:00:00 33,280 ----a-w c:\windows\Help\sstub.dll + 2008-04-14 02:33:46 33,280 ----a-w c:\windows\Help\sstub.dll - 2004-08-05 12:00:00 279,040 ----a-w c:\windows\Help\tshoot.dll + 2008-04-14 02:33:46 279,040 ----a-w c:\windows\Help\tshoot.dll - 2005-05-26 23:22:01 10,752 ----a-w c:\windows\hh.exe + 2008-04-14 02:34:06 10,752 ----a-w c:\windows\hh.exe - 2006-11-17 18:28:20 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe + 2007-09-26 17:32:30 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe + 2007-08-20 09:59:29 124,928 -c----w c:\windows\ie7updates\KB942615-IE7\advpack.dll + 2007-08-20 09:59:29 214,528 -c----w c:\windows\ie7updates\KB942615-IE7\dxtrans.dll + 2007-08-20 09:59:29 132,608 -c----w c:\windows\ie7updates\KB942615-IE7\extmgr.dll + 2007-08-20 09:59:29 63,488 -c----w c:\windows\ie7updates\KB942615-IE7\icardie.dll + 2007-08-17 10:22:11 63,488 -c----w c:\windows\ie7updates\KB942615-IE7\ie4uinit.exe + 2007-08-20 09:59:29 153,088 -c----w c:\windows\ie7updates\KB942615-IE7\ieakeng.dll + 2007-08-20 09:59:29 230,400 -c----w c:\windows\ie7updates\KB942615-IE7\ieaksie.dll + 2007-08-17 07:34:25 161,792 -c----w c:\windows\ie7updates\KB942615-IE7\ieakui.dll + 2007-08-20 09:59:29 383,488 -c----w c:\windows\ie7updates\KB942615-IE7\ieapfltr.dll + 2007-08-20 09:59:29 384,512 -c----w c:\windows\ie7updates\KB942615-IE7\iedkcs32.dll + 2007-08-20 09:59:29 6,058,496 -c----w c:\windows\ie7updates\KB942615-IE7\ieframe.dll + 2007-08-20 09:59:29 44,544 -c----w c:\windows\ie7updates\KB942615-IE7\iernonce.dll + 2007-08-20 09:59:30 267,776 -c----w c:\windows\ie7updates\KB942615-IE7\iertutil.dll + 2007-08-17 10:22:11 13,824 -c----w c:\windows\ie7updates\KB942615-IE7\ieudinit.exe + 2007-08-17 10:22:32 625,152 -c----w c:\windows\ie7updates\KB942615-IE7\iexplore.exe + 2007-08-20 09:59:30 27,648 -c----w c:\windows\ie7updates\KB942615-IE7\jsproxy.dll + 2007-08-20 09:59:30 459,264 -c----w c:\windows\ie7updates\KB942615-IE7\msfeeds.dll + 2007-08-20 09:59:30 52,224 -c----w c:\windows\ie7updates\KB942615-IE7\msfeedsbs.dll + 2007-08-20 09:59:30 3,584,512 -c----w c:\windows\ie7updates\KB942615-IE7\mshtml.dll + 2007-08-20 09:59:30 477,696 -c----w c:\windows\ie7updates\KB942615-IE7\mshtmled.dll + 2007-08-20 09:59:30 193,024 -c----w c:\windows\ie7updates\KB942615-IE7\msrating.dll + 2007-08-20 09:59:30 671,232 -c----w c:\windows\ie7updates\KB942615-IE7\mstime.dll + 2007-08-20 09:59:31 102,400 -c----w c:\windows\ie7updates\KB942615-IE7\occache.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB942615-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB942615-IE7\spuninst\updspapi.dll + 2007-08-20 09:59:31 105,984 -c----w c:\windows\ie7updates\KB942615-IE7\url.dll + 2007-08-20 09:59:31 1,152,000 -c----w c:\windows\ie7updates\KB942615-IE7\urlmon.dll + 2007-08-20 09:59:31 232,960 -c----w c:\windows\ie7updates\KB942615-IE7\webcheck.dll + 2007-08-20 09:59:31 824,832 -c----w c:\windows\ie7updates\KB942615-IE7\wininet.dll + 2007-10-10 23:49:42 124,928 -c----w c:\windows\ie7updates\KB944533-IE7\advpack.dll + 2007-08-13 17:35:46 346,624 -c----w c:\windows\ie7updates\KB944533-IE7\dxtmsft.dll + 2007-10-10 23:49:42 214,528 -c----w c:\windows\ie7updates\KB944533-IE7\dxtrans.dll + 2007-10-10 23:49:42 132,608 -c----w c:\windows\ie7updates\KB944533-IE7\extmgr.dll + 2007-10-10 23:49:42 63,488 -c----w c:\windows\ie7updates\KB944533-IE7\icardie.dll + 2007-10-10 11:00:41 70,656 -c----w c:\windows\ie7updates\KB944533-IE7\ie4uinit.exe + 2007-10-10 23:49:42 153,088 -c----w c:\windows\ie7updates\KB944533-IE7\ieakeng.dll + 2007-10-10 23:49:42 230,400 -c----w c:\windows\ie7updates\KB944533-IE7\ieaksie.dll + 2007-10-10 05:46:55 161,792 -c----w c:\windows\ie7updates\KB944533-IE7\ieakui.dll + 2007-10-10 23:49:42 383,488 -c----w c:\windows\ie7updates\KB944533-IE7\ieapfltr.dll + 2007-10-10 23:49:42 384,512 -c----w c:\windows\ie7updates\KB944533-IE7\iedkcs32.dll + 2007-10-10 23:49:43 6,065,664 -c----w c:\windows\ie7updates\KB944533-IE7\ieframe.dll + 2007-10-10 23:49:43 44,544 -c----w c:\windows\ie7updates\KB944533-IE7\iernonce.dll + 2007-10-10 23:49:43 267,776 -c----w c:\windows\ie7updates\KB944533-IE7\iertutil.dll + 2007-10-10 10:59:40 13,824 -c----w c:\windows\ie7updates\KB944533-IE7\ieudinit.exe + 2007-10-10 11:00:59 625,152 -c----w c:\windows\ie7updates\KB944533-IE7\iexplore.exe + 2007-10-10 23:49:44 27,648 -c----w c:\windows\ie7updates\KB944533-IE7\jsproxy.dll + 2007-10-10 23:49:44 459,264 -c----w c:\windows\ie7updates\KB944533-IE7\msfeeds.dll + 2007-10-10 23:49:44 52,224 -c----w c:\windows\ie7updates\KB944533-IE7\msfeedsbs.dll + 2007-10-30 23:23:48 3,590,656 -c----w c:\windows\ie7updates\KB944533-IE7\mshtml.dll + 2007-10-10 23:49:44 478,208 -c----w c:\windows\ie7updates\KB944533-IE7\mshtmled.dll + 2007-10-10 23:49:44 193,024 -c----w c:\windows\ie7updates\KB944533-IE7\msrating.dll + 2007-10-10 23:49:45 671,232 -c----w c:\windows\ie7updates\KB944533-IE7\mstime.dll + 2007-10-10 23:49:45 102,400 -c----w c:\windows\ie7updates\KB944533-IE7\occache.dll + 2007-08-13 17:36:12 44,544 -c----w c:\windows\ie7updates\KB944533-IE7\pngfilt.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB944533-IE7\spuninst\updspapi.dll + 2007-10-10 23:49:45 105,984 -c----w c:\windows\ie7updates\KB944533-IE7\url.dll + 2007-10-10 23:49:45 1,159,680 -c----w c:\windows\ie7updates\KB944533-IE7\urlmon.dll + 2007-10-10 23:49:45 232,960 -c----w c:\windows\ie7updates\KB944533-IE7\webcheck.dll + 2007-10-10 23:49:45 824,832 -c----w c:\windows\ie7updates\KB944533-IE7\wininet.dll + 2007-12-07 02:08:32 124,928 -c----w c:\windows\ie7updates\KB947864-IE7\advpack.dll + 2007-12-19 22:53:23 347,136 -c----w c:\windows\ie7updates\KB947864-IE7\dxtmsft.dll + 2007-12-07 02:08:32 214,528 -c----w c:\windows\ie7updates\KB947864-IE7\dxtrans.dll + 2007-12-07 02:08:32 133,120 -c----w c:\windows\ie7updates\KB947864-IE7\extmgr.dll + 2007-12-07 02:08:32 63,488 -c----w c:\windows\ie7updates\KB947864-IE7\icardie.dll + 2007-12-06 11:02:31 70,656 -c----w c:\windows\ie7updates\KB947864-IE7\ie4uinit.exe + 2007-12-07 02:08:32 153,088 -c----w c:\windows\ie7updates\KB947864-IE7\ieakeng.dll + 2007-12-07 02:08:32 230,400 -c----w c:\windows\ie7updates\KB947864-IE7\ieaksie.dll + 2007-12-06 04:59:51 161,792 -c----w c:\windows\ie7updates\KB947864-IE7\ieakui.dll + 2007-12-07 02:08:32 383,488 -c----w c:\windows\ie7updates\KB947864-IE7\ieapfltr.dll + 2007-12-07 02:08:32 384,512 -c----w c:\windows\ie7updates\KB947864-IE7\iedkcs32.dll + 2007-12-07 02:08:33 6,066,176 -c----w c:\windows\ie7updates\KB947864-IE7\ieframe.dll + 2007-12-07 02:08:33 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\iernonce.dll + 2007-12-07 02:08:33 267,776 -c----w c:\windows\ie7updates\KB947864-IE7\iertutil.dll + 2007-12-06 11:00:58 13,824 -c----w c:\windows\ie7updates\KB947864-IE7\ieudinit.exe + 2007-12-06 11:03:16 625,664 -c----w c:\windows\ie7updates\KB947864-IE7\iexplore.exe + 2007-12-07 02:08:33 27,648 -c----w c:\windows\ie7updates\KB947864-IE7\jsproxy.dll + 2007-12-07 02:08:33 459,264 -c----w c:\windows\ie7updates\KB947864-IE7\msfeeds.dll + 2007-12-07 02:08:33 52,224 -c----w c:\windows\ie7updates\KB947864-IE7\msfeedsbs.dll + 2007-12-08 05:08:36 3,592,192 -c----w c:\windows\ie7updates\KB947864-IE7\mshtml.dll + 2007-12-07 02:08:34 478,208 -c----w c:\windows\ie7updates\KB947864-IE7\mshtmled.dll + 2007-12-07 02:08:34 193,024 -c----w c:\windows\ie7updates\KB947864-IE7\msrating.dll + 2007-12-07 02:08:34 671,232 -c----w c:\windows\ie7updates\KB947864-IE7\mstime.dll + 2007-12-07 02:08:34 102,912 -c----w c:\windows\ie7updates\KB947864-IE7\occache.dll + 2008-01-11 05:36:55 44,544 -c----w c:\windows\ie7updates\KB947864-IE7\pngfilt.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB947864-IE7\spuninst\updspapi.dll + 2007-12-07 02:08:34 105,984 -c----w c:\windows\ie7updates\KB947864-IE7\url.dll + 2007-12-07 02:08:34 1,159,680 -c----w c:\windows\ie7updates\KB947864-IE7\urlmon.dll + 2007-12-07 02:08:34 233,472 -c----w c:\windows\ie7updates\KB947864-IE7\webcheck.dll + 2007-12-07 02:08:34 824,832 -c----w c:\windows\ie7updates\KB947864-IE7\wininet.dll + 2008-03-01 12:58:06 124,928 -c----w c:\windows\ie7updates\KB950759-IE7\advpack.dll + 2008-03-01 12:58:06 347,136 -c----w c:\windows\ie7updates\KB950759-IE7\dxtmsft.dll + 2008-03-01 12:58:06 214,528 -c----w c:\windows\ie7updates\KB950759-IE7\dxtrans.dll + 2008-03-01 12:58:06 133,120 -c----w c:\windows\ie7updates\KB950759-IE7\extmgr.dll + 2008-03-01 12:58:06 63,488 -c----w c:\windows\ie7updates\KB950759-IE7\icardie.dll + 2008-02-29 08:56:41 70,656 -c----w c:\windows\ie7updates\KB950759-IE7\ie4uinit.exe + 2008-03-01 12:58:06 153,088 -c----w c:\windows\ie7updates\KB950759-IE7\ieakeng.dll + 2008-03-01 12:58:06 230,400 -c----w c:\windows\ie7updates\KB950759-IE7\ieaksie.dll + 2008-02-15 05:44:25 161,792 -c----w c:\windows\ie7updates\KB950759-IE7\ieakui.dll + 2008-03-01 12:58:07 383,488 -c----w c:\windows\ie7updates\KB950759-IE7\ieapfltr.dll + 2008-03-01 12:58:07 384,512 -c----w c:\windows\ie7updates\KB950759-IE7\iedkcs32.dll + 2008-03-01 12:58:08 6,066,176 -c----w c:\windows\ie7updates\KB950759-IE7\ieframe.dll + 2008-03-01 12:58:08 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\iernonce.dll + 2008-03-01 12:58:08 267,776 -c----w c:\windows\ie7updates\KB950759-IE7\iertutil.dll + 2008-02-22 10:00:51 13,824 -c----w c:\windows\ie7updates\KB950759-IE7\ieudinit.exe + 2008-02-29 08:57:05 625,664 -c----w c:\windows\ie7updates\KB950759-IE7\iexplore.exe + 2008-03-01 12:58:08 27,648 -c----w c:\windows\ie7updates\KB950759-IE7\jsproxy.dll + 2008-03-01 12:58:08 459,264 -c----w c:\windows\ie7updates\KB950759-IE7\msfeeds.dll + 2008-03-01 12:58:08 52,224 -c----w c:\windows\ie7updates\KB950759-IE7\msfeedsbs.dll + 2008-03-01 16:28:10 3,591,680 -c----w c:\windows\ie7updates\KB950759-IE7\mshtml.dll + 2008-03-01 12:58:09 478,208 -c----w c:\windows\ie7updates\KB950759-IE7\mshtmled.dll + 2008-03-01 12:58:10 193,024 -c----w c:\windows\ie7updates\KB950759-IE7\msrating.dll + 2008-03-01 12:58:10 671,232 -c----w c:\windows\ie7updates\KB950759-IE7\mstime.dll + 2008-03-01 12:58:10 102,912 -c----w c:\windows\ie7updates\KB950759-IE7\occache.dll + 2008-03-01 12:58:10 44,544 -c----w c:\windows\ie7updates\KB950759-IE7\pngfilt.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB950759-IE7\spuninst\updspapi.dll + 2008-03-01 12:58:10 105,984 -c----w c:\windows\ie7updates\KB950759-IE7\url.dll + 2008-03-01 12:58:10 1,159,680 -c----w c:\windows\ie7updates\KB950759-IE7\urlmon.dll + 2008-03-01 12:58:11 233,472 -c----w c:\windows\ie7updates\KB950759-IE7\webcheck.dll + 2008-03-01 12:58:11 826,368 -c----w c:\windows\ie7updates\KB950759-IE7\wininet.dll + 2008-04-23 04:16:39 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll + 2008-04-23 04:16:39 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll + 2008-04-23 04:16:39 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll + 2008-04-23 04:16:39 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll + 2008-04-23 04:16:39 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll + 2008-04-22 07:41:08 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe + 2008-04-23 04:16:39 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll + 2008-04-23 04:16:39 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll + 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll + 2008-04-23 04:16:39 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll + 2008-04-23 04:16:39 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll + 2008-04-23 04:16:39 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll + 2008-04-23 04:16:39 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll + 2008-04-23 04:16:39 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll + 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe + 2008-04-22 07:41:30 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe + 2008-04-23 04:16:40 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll + 2008-04-23 04:16:40 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll + 2008-04-23 04:16:40 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll + 2008-04-23 20:16:42 3,591,680 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll + 2008-04-23 04:16:40 478,208 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll + 2008-04-23 04:16:40 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll + 2008-04-23 04:16:40 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll + 2008-04-23 04:16:40 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll + 2008-04-23 04:16:40 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll + 2008-04-23 04:16:40 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll + 2008-04-23 04:16:40 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll + 2008-04-23 04:16:40 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll + 2008-04-23 04:16:40 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll - 2004-08-05 12:00:00 220,160 ----a-w c:\windows\ime\mscandui.dll + 2008-04-14 02:33:30 220,160 ----a-w c:\windows\ime\mscandui.dll - 2004-08-05 12:00:00 130,048 ----a-w c:\windows\ime\SOFTKBD.DLL + 2008-04-14 02:33:41 130,048 ----a-w c:\windows\ime\softkbd.dll - 2004-08-05 12:00:00 62,976 ----a-w c:\windows\ime\SPGRMR.dll + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\ime\spgrmr.dll - 2004-08-05 12:00:00 272,384 ----a-w c:\windows\ime\SPTIP.dll + 2008-04-14 02:33:46 272,384 ----a-w c:\windows\ime\sptip.dll + 2006-10-26 18:12:58 396,592 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\MOC.EXE + 2006-10-27 13:26:40 16,870,712 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\MSO.DLL + 2006-10-26 18:42:36 8,423,224 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\OARTCONV.DLL + 2006-10-27 13:18:36 1,658,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\OGL.DLL + 2006-10-26 19:08:00 1,764,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\PPCNV.DLL + 2006-10-26 19:07:50 67,920 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\PXBCOM.EXE + 2006-10-27 13:11:38 4,235,560 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\WRD12CNV.DLL + 2006-10-27 13:11:36 21,264 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\WRD12EXE.EXE + 2006-10-26 19:13:08 14,674,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.4518\XL12CNV.EXE + 2007-09-14 20:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.6215\MSO.DLL + 2007-08-28 23:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\000021090200C0400000000000F01FEC\12.0.6215\OGL.DLL + 2007-05-31 11:41:06 10,352,472 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\EXCEL.EXE + 2007-06-18 15:16:32 12,259,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSO.DLL + 2007-05-10 11:35:04 6,747,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSPUB.EXE + 2007-05-31 11:35:22 6,420,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE + 2007-05-31 11:35:46 133,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PRTF9.DLL + 2007-05-31 11:36:08 612,184 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PTXT9.DLL + 2007-05-10 11:34:48 562,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PUBCONV.DLL + 2007-05-09 15:19:48 2,585,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\VBE6.DLL + 2007-05-31 11:37:40 12,310,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\WINWORD.EXE + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ARPPRODUCTICON.exe + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe + 2008-08-14 17:49:08 26,694 ----a-r c:\windows\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\UNINST_Uninstall_G_408FFBEED62349E08B232864A94D2864.exe + 2007-11-01 09:19:54 25,214 ----a-r c:\windows\Installer\{3F262ADC-5AD2-48E5-A586-44315E04A9E9}\PSV2.exe + 2008-08-31 18:37:51 61,440 ----a-r c:\windows\Installer\{40B0A7CC-1676-43E9-8444-2EF2377E87B8}\ARPPRODUCTICON.exe + 2008-08-31 18:37:51 61,440 ----a-r c:\windows\Installer\{40B0A7CC-1676-43E9-8444-2EF2377E87B8}\NewShortcut2_FDED4C00359C40EE93F29F8E5CD8EA91.exe + 2008-08-31 18:37:51 61,440 ----a-r c:\windows\Installer\{40B0A7CC-1676-43E9-8444-2EF2377E87B8}\NewShortcut3_FDED4C00359C40EE93F29F8E5CD8EA91.exe + 2008-08-31 18:37:51 22,486 ----a-r c:\windows\Installer\{40B0A7CC-1676-43E9-8444-2EF2377E87B8}\NewShortcut4_25B372AE87B642B18A1CBAFB81AE7C56.exe + 2007-11-01 09:16:57 25,214 ----a-r c:\windows\Installer\{42756145-9997-4D28-809B-8756BFD00109}\PI_v9.exe + 2007-11-01 09:16:57 25,214 ----a-r c:\windows\Installer\{42756145-9997-4D28-809B-8756BFD00109}\PI2_v9.exe + 2007-11-01 09:16:57 25,214 ----a-r c:\windows\Installer\{42756145-9997-4D28-809B-8756BFD00109}\PIE_v9.exe + 2008-05-18 16:51:58 54,444 ----a-r c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\ARPPRODUCTICON.exe + 2008-05-18 16:51:59 10,134 ----a-r c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\SHORTCUT_EP_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe + 2008-05-18 16:51:59 1,718 ----a-r c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\Shortcut_EventPlan_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe + 2008-05-18 16:51:59 54,444 ----a-r c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\Shortcut_HCS_2007_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe + 2008-05-18 16:51:59 54,444 ----a-r c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\Shortcut_HCS_Deskt_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe + 2008-08-15 10:58:56 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe - 2007-10-10 01:01:50 593,920 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe + 2008-11-01 06:21:41 593,920 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe - 2007-10-10 01:01:50 12,288 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2008-11-01 06:21:41 12,288 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe - 2007-10-10 01:01:51 86,016 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe + 2008-11-01 06:21:41 86,016 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe - 2007-10-10 01:01:50 135,168 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe + 2008-11-01 06:21:41 135,168 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-10-10 01:01:51 11,264 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe + 2008-11-01 06:21:41 11,264 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe - 2007-10-10 01:01:51 27,136 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe + 2008-11-01 06:21:41 27,136 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2007-10-10 01:01:51 4,096 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-11-01 06:21:41 4,096 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe - 2007-10-10 01:01:51 794,624 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe + 2008-11-01 06:21:41 794,624 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe - 2007-10-10 01:01:50 249,856 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe + 2008-11-01 06:21:41 249,856 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe - 2007-10-10 01:01:50 61,440 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe + 2008-11-01 06:21:41 61,440 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe - 2007-10-10 01:01:51 23,040 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe + 2008-11-01 06:21:41 23,040 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe - 2007-10-10 01:01:50 286,720 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe + 2008-11-01 06:21:41 286,720 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe - 2007-10-10 01:01:50 409,600 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe + 2008-11-01 06:21:41 409,600 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe + 2008-11-01 06:20:28 35,600 ----a-r c:\windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe + 2007-12-21 10:00:16 22,486 ----a-r c:\windows\Installer\{99052DB7-9592-4522-A558-5417BBAD48EE}\ARPPRODUCTICON.exe + 2007-12-21 10:00:16 22,486 ----a-r c:\windows\Installer\{99052DB7-9592-4522-A558-5417BBAD48EE}\WCESMgrIcon.exe + 2008-08-29 07:33:24 2,363,392 ----a-r c:\windows\Installer\{A122962F-331A-4C2E-93DB-AD92D8A4FB14}\soffice.exe + 2008-02-09 07:37:23 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe + 2008-05-21 18:51:57 32,768 ----a-r c:\windows\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe + 2007-10-29 17:36:14 10,134 ----a-r c:\windows\Installer\{CC35B08B-4EC1-4759-B159-0EC4E69C3E7C}\ARPPRODUCTICON.exe + 2007-12-09 22:09:09 140,262 ----a-r c:\windows\Installer\{D2D7529F-6B55-4C1C-BC9C-D6F1BCC066B6}\_6FEFF9B68218417F98F549.exe + 2007-12-12 07:31:15 2,359,296 ----a-r c:\windows\Installer\{E17146DC-DD09-4DE1-AB1F-DAFCD5D59E4A}\soffice.exe + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs + 2008-04-14 02:33:06 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll - 2005-03-18 15:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2005-03-18 16:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll - 2005-03-18 15:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2005-03-18 16:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll - 2005-03-18 15:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll + 2005-03-18 16:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll - 2005-03-18 15:23:10 145,920 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll + 2005-03-18 16:23:10 145,920 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll - 2005-03-18 15:23:10 159,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll + 2005-03-18 16:23:10 159,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll - 2005-03-18 15:23:14 364,544 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll + 2005-03-18 16:23:14 364,544 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll - 2005-03-18 15:23:12 178,176 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll + 2005-03-18 16:23:12 178,176 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll - 2005-03-18 15:23:14 223,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll + 2005-03-18 16:23:14 223,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll - 2005-03-18 15:23:14 567,296 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll + 2005-03-18 16:23:14 567,296 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll - 2005-09-23 05:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2007-10-23 23:47:38 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe - 2005-09-23 05:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2007-10-23 23:47:38 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll - 2005-09-23 05:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2007-10-23 23:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll - 2005-09-23 05:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2007-10-23 23:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll - 2005-09-23 05:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll + 2007-10-23 23:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll - 2005-09-23 05:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2007-10-23 23:47:38 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll - 2005-09-23 05:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2007-10-23 23:47:26 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll - 2005-09-23 05:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2007-10-23 23:47:30 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll - 2005-09-23 05:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2007-10-23 23:47:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2005-09-23 05:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2007-10-23 23:47:48 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll - 2005-09-23 05:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2007-10-23 23:47:20 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll - 2005-09-23 05:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2007-10-23 23:47:40 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll - 2005-09-23 05:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2007-10-23 23:47:42 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll - 2005-09-23 05:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2007-10-23 23:47:26 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll - 2007-04-13 01:21:18 58,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2007-10-23 23:47:42 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe - 2005-09-23 05:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2007-10-23 23:47:22 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe - 2007-04-13 01:20:52 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2007-10-23 23:47:22 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll - 2007-04-13 01:20:52 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2007-10-23 23:47:22 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll - 2007-04-13 01:20:52 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2007-10-23 23:47:22 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll - 2007-04-13 01:20:50 75,264 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2007-10-23 23:47:22 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll - 2005-09-23 05:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2007-10-23 23:47:22 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe - 2007-04-13 01:20:52 32,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe + 2007-10-23 23:47:22 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe - 2005-09-23 05:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe + 2007-10-23 23:47:22 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe - 2007-04-13 01:20:52 33,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2007-10-23 23:47:22 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe - 2007-04-13 01:20:52 32,600 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2007-10-23 23:47:22 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe - 2007-04-13 01:20:52 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll + 2007-10-23 23:47:22 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll - 2005-09-23 05:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe + 2007-10-23 23:47:40 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe - 2007-04-13 01:21:16 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2007-10-23 23:47:40 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll - 2005-09-23 05:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2007-10-23 23:47:30 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe - 2005-09-23 05:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll + 2007-10-23 23:47:30 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll - 2005-09-23 05:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2007-10-23 23:47:30 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll - 2005-09-23 05:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2007-10-23 23:47:42 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - 2005-09-23 05:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2007-10-23 23:47:40 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll - 2005-09-23 05:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe + 2007-10-23 23:47:30 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe - 2005-09-23 05:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2007-10-23 23:47:28 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll - 2007-04-13 01:20:58 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2007-10-23 23:47:28 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe - 2005-09-23 05:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2007-10-23 23:47:54 572,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll - 2005-09-23 05:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2007-10-23 23:47:40 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll - 2005-09-23 05:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2007-10-23 23:47:36 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll - 2007-04-13 01:21:16 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe + 2007-10-23 23:47:40 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe - 2005-09-23 05:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2007-10-23 23:47:40 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll - 2005-09-23 05:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2007-10-23 23:47:40 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll - 2005-09-23 05:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2007-10-23 23:47:40 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll - 2007-04-13 01:21:16 228,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2007-10-23 23:47:40 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe - 2007-04-13 01:21:16 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2007-10-23 23:47:40 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe - 2005-09-23 05:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll + 2007-10-23 23:47:40 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll - 2005-09-23 05:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2007-10-23 23:47:40 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll - 2005-09-23 05:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe + 2007-10-23 23:47:34 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe - 2007-04-13 01:21:10 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll + 2007-10-23 23:47:36 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll - 2005-09-23 05:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2007-10-23 23:47:36 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll - 2007-04-13 01:21:10 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2007-10-23 23:47:36 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll - 2005-09-23 05:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2007-10-23 23:47:36 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll - 2007-04-13 01:21:08 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2007-10-23 23:47:34 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll - 2005-09-23 05:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll + 2007-10-23 23:47:52 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll - 2005-09-23 05:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2007-10-23 23:47:52 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll - 2005-09-23 05:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll + 2007-10-23 23:47:50 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll - 2005-09-23 05:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2007-10-23 23:47:20 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll - 2005-09-23 05:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll + 2007-10-23 23:47:52 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll - 2005-09-23 05:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2007-10-23 23:47:20 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll - 2005-09-23 05:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2007-10-23 23:47:20 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2005-09-23 05:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2007-10-23 23:47:20 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll - 2007-04-13 01:20:52 87,040 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2007-10-23 23:47:22 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll - 2005-09-23 05:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2007-10-23 23:47:36 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe - 2007-04-13 01:21:18 802,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2007-10-23 23:47:40 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2005-09-23 05:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2007-10-23 23:47:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll - 2005-09-23 05:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2007-10-23 23:47:40 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll - 2007-04-13 01:21:16 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2007-10-23 23:47:40 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll - 2007-04-13 01:21:16 326,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2007-10-23 23:47:40 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2005-09-23 05:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2007-10-23 23:47:40 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll - 2007-04-13 01:21:16 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2007-10-23 23:47:40 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2007-04-13 01:21:16 102,912 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2007-10-23 23:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll - 2005-09-23 05:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2007-10-23 23:47:44 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll - 2005-09-23 05:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2007-10-23 23:47:40 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - 2005-09-23 05:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2007-10-23 23:47:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll - 2007-04-13 01:21:18 227,328 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2007-10-23 23:47:40 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll - 2007-04-13 01:21:18 68,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2007-10-23 23:47:40 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - 2005-09-23 05:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2007-10-23 23:47:40 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll - 2007-04-13 01:21:12 5,634,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2007-10-23 23:47:36 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2005-09-23 05:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll + 2007-10-23 23:47:44 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll - 2007-04-13 01:21:16 99,152 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2007-10-23 23:47:40 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe - 2007-04-13 01:21:18 15,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2007-10-23 23:47:40 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll - 2005-09-23 05:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll + 2007-10-23 23:47:40 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll - 2007-04-13 01:21:12 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2007-10-23 23:47:36 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll - 2005-09-23 05:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2007-10-23 23:47:40 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe - 2005-09-23 05:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2007-10-23 23:47:40 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe - 2005-09-23 05:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe + 2007-10-23 23:47:46 61,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe - 2005-09-23 05:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2007-10-23 23:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll - 2005-09-23 05:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2007-10-23 23:47:40 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll - 2005-09-23 05:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2007-10-23 23:47:44 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll - 2007-04-13 01:21:18 382,464 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2007-10-23 23:47:40 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2007-04-13 01:21:18 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2007-10-23 23:47:40 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll - 2007-04-13 01:21:18 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll + 2007-10-23 23:47:42 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll - 2005-09-23 05:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2007-10-23 23:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll - 2007-04-13 01:21:16 2,902,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll + 2007-10-23 23:47:40 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll - 2007-04-13 01:21:18 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2007-10-23 23:47:40 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll - 2007-04-13 01:21:18 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2007-10-23 23:47:40 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll - 2007-04-13 01:20:58 888,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2007-10-23 23:47:28 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll - 2007-04-13 01:21:16 5,001,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2007-10-23 23:47:40 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2005-09-23 05:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2007-10-23 23:47:40 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll - 2007-04-13 01:21:18 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll + 2007-10-23 23:47:40 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll - 2007-04-13 01:21:16 2,940,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2007-10-23 23:47:40 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll - 2005-09-23 05:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2007-10-23 23:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll - 2007-04-13 01:21:16 577,536 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2007-10-23 23:47:40 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2007-04-13 01:21:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2007-10-23 23:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll - 2007-04-13 01:21:18 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2007-10-23 23:47:40 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll - 2007-04-13 01:21:18 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2007-10-23 23:47:40 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll - 2007-04-13 01:21:16 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll + 2007-10-23 23:47:40 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll - 2005-09-23 05:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2007-10-23 23:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll - 2007-04-13 01:21:16 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2007-10-23 23:47:40 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll - 2005-09-23 05:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2007-10-23 23:47:40 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll - 2005-09-23 05:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2007-10-23 23:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll - 2005-09-23 05:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2007-10-23 23:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll - 2007-04-13 01:21:18 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2007-10-23 23:47:40 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll - 2007-04-13 01:21:16 5,156,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2007-10-23 23:47:40 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2005-09-23 05:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2007-10-23 23:47:40 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll - 2005-09-23 05:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll + 2007-10-23 23:47:40 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll - 2005-09-23 05:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2007-10-23 23:47:40 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll - 2007-04-13 01:21:16 5,152,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2007-10-23 23:47:40 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2007-04-13 01:21:16 2,027,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll + 2007-10-23 23:47:40 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll - 2005-09-23 05:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2007-10-23 23:47:40 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL - 2007-04-13 01:21:28 1,166,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe + 2007-10-23 23:47:48 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe - 2007-04-13 01:20:50 1,330,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll + 2007-10-23 23:47:20 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll - 2007-04-13 01:20:52 406,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2007-10-23 23:47:22 434,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2005-09-23 05:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2007-10-23 23:47:40 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll - 2006-08-28 17:06:23 3,571 ----a-w c:\windows\mozver.dat + 2007-11-08 19:19:10 4,172 ----a-w c:\windows\mozver.dat - 2004-08-05 12:00:00 24,064 ----a-w c:\windows\msagent\agentanm.dll + 2008-04-14 02:33:18 24,064 ----a-w c:\windows\msagent\agentanm.dll - 2004-08-05 12:00:00 214,016 ----a-w c:\windows\msagent\agentctl.dll + 2008-04-14 02:33:18 214,016 ----a-w c:\windows\msagent\agentctl.dll - 2006-10-12 14:04:13 42,496 ----a-w c:\windows\msagent\agentdp2.dll + 2008-04-14 02:33:18 42,496 ----a-w c:\windows\msagent\agentdp2.dll - 2007-03-09 14:00:38 57,344 ----a-w c:\windows\msagent\agentdpv.dll + 2008-04-14 02:33:18 57,344 ----a-w c:\windows\msagent\agentdpv.dll - 2004-08-05 12:00:00 49,152 ----a-w c:\windows\msagent\agentmpx.dll + 2008-04-14 02:33:18 49,152 ----a-w c:\windows\msagent\agentmpx.dll - 2004-08-05 12:00:00 24,064 ----a-w c:\windows\msagent\agentpsh.dll + 2008-04-14 02:33:18 24,064 ----a-w c:\windows\msagent\agentpsh.dll - 2004-08-05 12:00:00 44,032 ----a-w c:\windows\msagent\agentsr.dll + 2008-04-14 02:33:18 44,032 ----a-w c:\windows\msagent\agentsr.dll - 2006-10-12 11:09:53 256,512 ----a-w c:\windows\msagent\agentsvr.exe + 2008-04-14 02:33:53 256,512 ----a-w c:\windows\msagent\agentsvr.exe - 2004-08-05 12:00:00 24,064 ----a-w c:\windows\msagent\agtintl.dll + 2008-04-14 02:33:19 24,064 ----a-w c:\windows\msagent\agtintl.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll - 2004-08-05 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll - 2004-08-05 12:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll + 2007-04-02 18:26:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll + 2008-04-13 17:32:28 19,968 ----a-w c:\windows\msagent\intl\agt0409.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll + 2007-04-02 18:26:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll - 2004-08-05 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll + 2007-04-02 18:26:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll + 2007-04-02 18:26:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll + 2007-04-02 18:26:01 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll + 2007-04-02 18:26:01 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll + 2007-04-02 18:26:02 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll + 2007-04-02 18:26:02 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll - 2004-08-05 12:00:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll + 2008-04-14 02:33:32 39,936 ----a-w c:\windows\msagent\mslwvtts.dll - 2006-06-02 19:32:20 33,792 ------w c:\windows\network diagnostic\custsat.dll + 2008-04-14 02:33:22 33,792 ------w c:\windows\network diagnostic\custsat.dll - 2006-10-10 12:44:50 557,568 ------w c:\windows\network diagnostic\xpnetdiag.exe + 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe - 2007-06-16 22:11:58 51,200 ----a-w c:\windows\NirCmd.exe + 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NirCmd.exe - 2004-08-05 12:00:00 70,656 ----a-w c:\windows\NOTEPAD.EXE + 2008-04-14 02:34:15 70,656 ----a-w c:\windows\notepad.exe + 2007-08-14 10:09:02 84,480 ----a-w c:\windows\OPTIONS\CABS\lanset64.exe + 2007-08-14 10:08:44 55,808 ----a-w c:\windows\OPTIONS\CABS\lansetm.exe + 2007-08-14 10:08:52 59,392 ----a-w c:\windows\OPTIONS\CABS\lansetup.exe + 2007-08-14 10:08:56 57,344 ----a-w c:\windows\OPTIONS\CABS\lansetx.exe + 2007-07-12 10:49:06 94,592 ----a-w c:\windows\OPTIONS\CABS\Rtnic.sys + 2007-07-12 10:49:26 114,688 ----a-w c:\windows\OPTIONS\CABS\Rtnic64.sys + 2007-07-12 10:49:16 96,384 ----a-w c:\windows\OPTIONS\CABS\Rtnicxp.sys - 2004-08-05 12:00:00 768,512 ----a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe + 2008-04-14 02:34:06 769,024 ----a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe - 2004-08-05 12:00:00 743,936 ----a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe + 2008-04-14 02:34:06 744,448 ----a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe + 2008-04-14 02:34:06 18,432 ----a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe - 2004-08-05 12:00:00 160,768 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe + 2008-04-14 02:34:12 172,544 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe - 2004-08-05 12:00:00 381,952 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll + 2008-04-14 02:33:32 382,464 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll - 2004-08-05 12:00:00 102,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll + 2008-04-14 02:33:38 102,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll - 2004-08-05 12:00:00 38,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll + 2008-04-14 02:33:38 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll - 2006-07-26 08:51:24 76,507 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat + 2008-11-01 07:46:05 76,507 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat + 2008-11-01 07:46:05 2,704 ----a-w c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin - 2004-08-05 12:00:00 151,040 ----a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe + 2008-04-14 02:34:26 151,040 ----a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe - 2004-08-05 12:00:00 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll + 2008-04-14 02:33:46 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll - 2004-08-05 12:00:00 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll + 2008-04-14 02:33:46 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll - 2004-08-05 12:00:00 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll + 2008-04-14 02:33:46 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll - 2004-08-05 12:00:00 153,088 ----a-w c:\windows\regedit.exe + 2008-04-14 02:34:19 153,088 ----a-w c:\windows\regedit.exe + 2000-08-31 07:00:00 98,816 ----a-w c:\windows\sed.exe + 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys + 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys + 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys + 2008-04-14 02:33:18 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll + 2008-04-14 02:33:18 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll + 2004-08-03 21:32:22 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys + 2004-08-03 21:32:32 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys + 2008-04-14 02:33:18 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll + 2008-04-14 02:33:53 190,464 ------w c:\windows\ServicePackFiles\i386\accwiz.exe + 2008-04-14 02:33:18 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll + 2008-04-14 02:33:18 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll + 2008-04-14 02:33:18 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll + 2008-04-14 02:33:18 120,320 ------w c:\windows\ServicePackFiles\i386\aclui.dll + 2008-04-14 01:52:42 188,672 ------w c:\windows\ServicePackFiles\i386\acpi.sys + 2008-04-14 02:33:18 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll + 2008-04-14 02:33:18 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll + 2008-04-14 02:33:53 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe + 2008-04-14 02:33:18 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll + 2008-04-14 02:33:18 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll + 2008-04-14 02:33:18 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll + 2008-04-14 02:33:53 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe + 2004-08-03 21:32:24 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys + 2008-04-14 02:33:18 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll + 2008-04-14 02:33:18 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll + 2008-04-14 02:33:18 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll + 2008-04-14 02:33:18 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll + 2008-04-14 02:33:18 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll + 2008-04-14 02:33:18 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll + 2008-04-14 02:33:18 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll + 2008-04-14 02:33:18 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll + 2008-04-14 02:33:18 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll + 2008-04-14 02:33:18 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll + 2008-04-14 02:33:18 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll + 2008-04-14 02:33:18 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll + 2008-04-14 02:33:18 685,568 ------w c:\windows\ServicePackFiles\i386\advapi32.dll + 2008-04-14 02:33:18 101,888 ------w c:\windows\ServicePackFiles\i386\advpack.dll + 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys + 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys + 2008-04-14 02:33:18 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll + 2008-04-14 02:33:18 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll + 2008-04-14 02:33:18 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll + 2008-04-14 02:33:18 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll + 2008-04-14 02:33:18 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll + 2008-04-14 02:33:18 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll + 2008-04-14 02:33:18 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll + 2008-04-14 02:33:53 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe + 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys + 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll + 2008-04-14 02:33:19 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll + 2008-04-14 02:33:53 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe + 2008-04-14 02:33:53 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe + 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys + 2008-04-14 02:33:19 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll + 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys + 2008-04-14 01:54:28 41,472 ------w c:\windows\ServicePackFiles\i386\amdk6.sys + 2008-04-14 01:54:29 41,856 ------w c:\windows\ServicePackFiles\i386\amdk7.sys + 2008-04-14 02:33:19 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll + 2004-08-03 21:31:20 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys + 2008-04-14 02:33:19 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll + 2008-04-14 02:33:19 334,336 ------w c:\windows\ServicePackFiles\i386\aqueue.dll + 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys + 2008-04-14 02:33:19 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll + 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys + 2008-04-14 02:33:53 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe + 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys + 2004-08-03 21:29:30 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys + 2004-08-03 21:29:30 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys + 2004-08-03 21:29:30 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys + 2004-08-03 21:29:32 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys + 2004-08-03 21:29:32 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys + 2004-08-03 21:29:32 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys + 2004-08-03 21:29:32 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys + 2004-08-03 21:29:32 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys + 2004-08-03 21:29:32 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys + 2004-08-03 21:29:32 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys + 2008-04-14 02:33:19 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll + 2008-04-14 02:33:19 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll + 2008-04-14 02:33:19 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll + 2004-08-03 23:38:42 327,168 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys + 2004-08-04 00:38:44 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys + 2008-04-14 02:33:19 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll + 2008-04-14 02:33:19 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll + 2008-04-14 02:33:19 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll + 2004-08-03 21:29:28 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys + 2004-08-03 21:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys + 2004-08-03 21:29:30 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys + 2004-08-03 21:29:30 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys + 2004-08-03 21:29:32 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys + 2004-08-03 21:29:32 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys + 2004-08-03 21:29:32 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys + 2004-08-03 21:29:32 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys + 2004-08-03 21:29:32 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys + 2004-08-03 21:29:32 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys + 2008-04-14 02:33:19 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll + 2008-04-14 02:33:19 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll + 2008-04-14 02:33:19 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll + 2008-04-14 02:33:53 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe + 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys + 2008-04-14 02:31:00 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll + 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys + 2008-04-14 02:33:19 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll + 2008-04-14 02:33:53 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe + 2008-04-14 02:33:19 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll + 2008-04-14 02:33:19 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll + 2008-04-14 02:33:19 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll + 2008-04-14 02:33:19 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll + 2008-04-14 02:33:19 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll + 2008-04-14 02:33:19 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll + 2008-04-14 02:33:53 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe + 2008-04-14 02:33:19 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll + 2008-04-14 02:33:53 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe + 2008-04-14 02:33:19 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll + 2008-04-14 02:33:53 625,152 ------w c:\windows\ServicePackFiles\i386\autochk.exe + 2008-04-14 02:33:53 638,976 ------w c:\windows\ServicePackFiles\i386\autoconv.exe + 2008-04-14 02:33:54 616,960 ------w c:\windows\ServicePackFiles\i386\autofmt.exe + 2008-04-14 02:33:54 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe + 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys + 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys + 2008-04-14 02:33:19 85,504 ------w c:\windows\ServicePackFiles\i386\avifil32.dll + 2008-04-14 02:33:19 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll + 2008-04-14 02:33:19 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll + 2008-04-14 02:33:19 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll + 2008-04-14 02:33:19 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys + 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys + 2008-04-14 02:33:19 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll + 2008-04-14 02:33:19 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll + 2008-04-14 02:33:19 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll + 2008-04-14 02:33:19 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll + 2008-04-14 02:33:55 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe + 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys + 2008-04-14 01:57:48 70,144 ------w c:\windows\ServicePackFiles\i386\browselc.dll + 2008-04-14 02:33:20 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll + 2008-04-14 02:33:20 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll + 2008-04-14 02:33:20 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll + 2008-04-14 02:33:20 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll + 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys + 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys + 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys + 2008-04-14 01:58:00 273,664 ------w c:\windows\ServicePackFiles\i386\bthport.sys + 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys + 2008-04-14 02:33:20 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll + 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys + 2008-04-14 02:33:20 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll + 2008-04-14 02:33:20 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll + 2008-04-14 02:33:20 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll + 2008-04-14 02:33:20 85,504 ------w c:\windows\ServicePackFiles\i386\cabview.dll + 2008-04-14 02:33:55 20,992 ------w c:\windows\ServicePackFiles\i386\cacls.exe + 2008-04-14 02:33:20 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll + 2008-04-14 02:33:20 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll + 2008-04-14 02:33:20 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll + 2008-04-14 02:33:20 153,600 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll + 2008-04-14 02:33:20 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll + 2008-04-14 02:33:20 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll + 2008-04-14 02:33:20 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll + 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys + 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys + 2008-04-14 02:33:20 152,064 ------w c:\windows\ServicePackFiles\i386\cdfview.dll + 2008-04-14 02:33:20 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll + 2008-04-14 02:33:20 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll + 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys + 2008-04-14 02:33:20 200,192 ------w c:\windows\ServicePackFiles\i386\certcli.dll + 2008-04-14 02:33:20 467,968 ------w c:\windows\ServicePackFiles\i386\certmgr.dll + 2008-04-14 02:33:20 39,424 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll + 2008-04-14 02:31:03 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll + 2008-04-14 02:33:56 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe + 2008-04-14 02:33:20 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll + 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys + 2008-04-14 02:33:20 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll + 2008-04-14 02:33:20 1,359,360 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll + 2008-04-14 02:33:20 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll + 2008-04-14 02:33:57 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys + 2008-04-14 02:33:21 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll + 2008-04-14 02:33:21 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll + 2008-04-14 02:33:57 65,536 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe + 2008-04-14 02:33:21 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll + 2008-04-14 02:33:57 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe + 2008-04-14 02:33:57 104,448 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe + 2008-04-14 02:33:57 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe + 2008-04-14 02:33:21 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys + 2008-04-14 02:33:21 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll + 2008-04-14 02:33:57 401,408 ------w c:\windows\ServicePackFiles\i386\cmd.exe + 2008-04-14 02:33:21 353,280 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll + 2008-04-14 02:33:57 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe + 2008-04-14 02:33:57 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe + 2008-04-14 02:33:21 191,488 ------w c:\windows\ServicePackFiles\i386\cmprops.dll + 2008-04-14 02:33:21 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll + 2008-04-14 02:33:57 65,536 ------w c:\windows\ServicePackFiles\i386\cmstp.exe + 2008-04-14 02:33:21 40,960 ------w c:\windows\ServicePackFiles\i386\cmutil.dll + 2008-04-14 02:33:21 50,688 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll + 2008-04-14 02:33:21 83,968 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll + 2008-04-14 02:33:21 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll + 2008-04-14 02:33:21 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll + 2008-04-14 02:33:21 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll + 2008-04-14 02:33:21 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll + 2008-04-14 02:33:21 281,600 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll + 2008-04-14 02:33:21 253,440 ------w c:\windows\ServicePackFiles\i386\compatui.dll + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys + 2008-04-14 02:33:21 230,912 ------w c:\windows\ServicePackFiles\i386\compstui.dll + 2008-04-14 02:33:21 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll + 2008-04-14 02:33:57 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe + 2008-04-14 02:33:57 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe + 2008-04-14 02:33:21 851,968 ------w c:\windows\ServicePackFiles\i386\comres.dll + 2008-04-14 02:33:21 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll + 2008-04-14 02:33:21 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll + 2008-04-14 02:33:21 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll + 2008-04-14 02:33:21 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll + 2008-04-14 02:33:58 1,044,480 ------w c:\windows\ServicePackFiles\i386\conf.exe + 2008-04-14 02:33:21 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll + 2008-04-14 02:33:21 358,400 ------w c:\windows\ServicePackFiles\i386\confmsp.dll + 2008-04-14 02:33:59 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe + 2008-04-14 02:33:21 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll + 2008-04-14 02:33:21 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll + 2008-04-14 02:33:21 165,888 ------w c:\windows\ServicePackFiles\i386\credui.dll + 2008-04-14 02:02:47 40,960 ------w c:\windows\ServicePackFiles\i386\crusoe.sys + 2008-04-14 02:33:21 606,208 ------w c:\windows\ServicePackFiles\i386\crypt32.dll + 2008-04-14 02:33:21 75,776 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll + 2008-04-14 02:33:21 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll + 2008-04-14 02:33:21 54,784 ------w c:\windows\ServicePackFiles\i386\cryptext.dll + 2008-04-14 02:33:21 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll + 2008-04-14 02:33:21 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll + 2008-04-14 02:33:21 530,432 ------w c:\windows\ServicePackFiles\i386\cryptui.dll + 2008-04-14 02:33:21 102,912 ------w c:\windows\ServicePackFiles\i386\cscdll.dll + 2008-04-14 02:33:59 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe + 2008-04-14 02:33:21 337,920 ------w c:\windows\ServicePackFiles\i386\cscui.dll + 2008-04-14 02:33:22 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll + 2008-04-14 02:33:59 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe + 2008-04-14 02:33:59 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe + 2008-04-14 02:33:22 252,416 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll + 2008-04-14 02:33:22 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll + 2004-08-03 21:32:26 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys + 2008-04-14 02:33:22 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll + 2008-04-14 02:33:22 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll + 2008-04-14 02:33:22 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll + 2008-04-14 02:33:22 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll + 2008-04-14 02:33:22 1,056,768 ------w c:\windows\ServicePackFiles\i386\danim.dll + 2008-03-25 04:50:25 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll + 2008-04-14 02:33:22 55,296 ------w c:\windows\ServicePackFiles\i386\dataclen.dll + 2008-04-14 02:33:22 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll + 2008-04-14 02:33:22 25,600 ------w c:\windows\ServicePackFiles\i386\davclnt.dll + 2008-04-14 02:33:22 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll + 2008-04-14 02:33:22 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll + 2008-04-14 02:33:22 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll + 2008-04-14 02:33:22 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll + 2008-04-14 02:50:20 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin + 2008-04-14 02:33:22 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll + 2008-04-14 02:33:22 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll + 2008-04-14 02:33:59 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe + 2008-04-14 02:33:59 31,744 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe + 2008-04-14 02:33:22 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll + 2008-04-14 02:33:22 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll + 2008-04-14 02:33:59 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe + 2008-04-14 02:33:22 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll + 2008-04-14 02:33:22 290,816 ------w c:\windows\ServicePackFiles\i386\devmgr.dll + 2008-04-14 02:33:59 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe + 2008-04-14 02:33:59 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe + 2008-04-14 02:33:22 39,936 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll + 2008-04-14 02:33:22 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll + 2008-04-14 02:33:22 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll + 2008-04-14 02:33:22 115,200 ------w c:\windows\ServicePackFiles\i386\dgnet.dll + 2008-04-14 02:33:22 127,488 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll + 2008-04-14 02:33:22 411,136 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll + 2008-04-14 02:33:22 49,152 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll + 2008-04-14 02:33:59 548,352 ------w c:\windows\ServicePackFiles\i386\dialer.exe + 2008-04-14 02:34:00 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe + 2004-08-05 12:00:00 887,784 ------w c:\windows\ServicePackFiles\i386\digcore.exe + 2008-04-14 02:33:22 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll + 2008-04-14 02:33:22 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll + 2008-04-14 02:33:22 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll + 2008-04-14 02:33:22 165,376 ------w c:\windows\ServicePackFiles\i386\dinput.dll + 2008-04-14 02:33:22 187,904 ------w c:\windows\ServicePackFiles\i386\dinput8.dll + 2008-04-14 02:33:22 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll + 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys + 2008-04-14 02:33:22 1,504,768 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll + 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys + 2008-04-14 02:34:00 167,936 ------w c:\windows\ServicePackFiles\i386\diskpart.exe + 2008-04-14 02:33:22 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll + 2008-04-14 02:34:00 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe + 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys + 2008-04-14 02:34:00 225,280 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe + 2008-04-14 02:33:22 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll + 2008-04-14 02:05:07 800,256 ------w c:\windows\ServicePackFiles\i386\dmboot.sys + 2008-04-14 02:33:22 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll + 2008-04-14 02:33:22 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll + 2008-04-14 02:33:22 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll + 2008-04-14 02:33:22 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll + 2008-04-14 02:05:12 154,496 ------w c:\windows\ServicePackFiles\i386\dmio.sys + 2008-04-14 02:33:22 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll + 2008-04-14 02:34:00 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe + 2008-04-14 02:33:22 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll + 2008-04-14 02:33:22 24,576 ------w c:\windows\ServicePackFiles\i386\dmserver.dll + 2008-04-14 02:33:22 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll + 2008-04-14 02:33:22 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll + 2008-04-14 02:33:22 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll + 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys + 2008-04-14 02:33:22 58,880 ------w c:\windows\ServicePackFiles\i386\dmutil.dll + 2008-04-14 02:33:22 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll + 2008-04-14 02:33:22 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll + 2008-04-14 02:33:22 48,640 ------w c:\windows\ServicePackFiles\i386\docprop2.dll + 2004-08-05 12:00:00 54,080 ------w c:\windows\ServicePackFiles\i386\dosx.exe + 2008-04-14 02:33:22 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll + 2008-04-14 02:33:22 60,928 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll + 2008-04-14 02:33:22 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll + 2008-04-14 02:33:22 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll + 2008-04-14 02:33:22 56,832 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll + 2008-04-14 02:33:22 133,120 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll + 2008-04-14 02:33:22 651,264 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll + 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys + 2008-04-14 01:54:17 103,936 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll + 2008-04-14 02:34:01 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe + 2008-04-14 02:33:22 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll + 2008-04-14 02:33:23 24,064 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll + 2008-04-14 02:31:14 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll + 2008-04-14 02:33:23 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll + 2008-04-14 02:33:23 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll + 2008-04-14 02:33:23 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll + 2008-04-14 02:31:14 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll + 2008-04-14 02:34:01 18,432 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe + 2008-04-14 02:33:23 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll + 2008-04-14 02:33:23 213,504 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll + 2008-04-14 02:34:01 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe + 2008-04-14 02:33:23 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll + 2008-04-14 02:33:23 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll + 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys + 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys + 2008-04-14 02:33:23 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll + 2004-08-05 12:00:00 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll + 2008-04-14 02:33:23 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll + 2008-04-14 02:33:23 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll + 2008-04-14 02:33:23 72,192 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll + 2008-04-14 02:33:23 93,696 ------w c:\windows\ServicePackFiles\i386\dskquota.dll + 2008-04-14 02:33:23 161,280 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll + 2008-04-14 02:33:23 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll + 2008-04-14 02:33:23 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll + 2008-04-14 02:33:23 145,920 ------w c:\windows\ServicePackFiles\i386\dsprop.dll + 2008-04-14 02:06:29 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll + 2008-04-14 02:33:23 240,640 ------w c:\windows\ServicePackFiles\i386\dsquery.dll + 2008-04-14 02:33:23 52,736 ------w c:\windows\ServicePackFiles\i386\dssec.dll + 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll + 2008-04-14 02:33:23 113,664 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll + 2008-04-14 02:33:23 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll + 2008-04-14 02:34:01 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe + 2008-04-14 02:33:23 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll + 2008-04-14 02:34:01 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe + 2008-04-14 02:34:01 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe + 2008-04-14 02:33:23 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll + 2008-04-14 02:33:23 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll + 2008-04-14 02:34:01 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe + 2008-04-14 02:33:23 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll + 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys + 2008-04-14 02:33:23 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll + 2008-04-14 02:33:23 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll + 2008-04-14 02:33:23 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll + 2008-04-14 02:33:23 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll + 2008-04-14 02:33:23 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll + 2008-04-14 02:33:23 94,720 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll + 2008-04-14 02:33:23 180,736 ------w c:\windows\ServicePackFiles\i386\eapphost.dll + 2008-04-14 02:33:23 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll + 2008-04-14 02:33:23 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll + 2008-04-14 02:33:23 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll + 2008-04-14 02:33:23 175,616 ------w c:\windows\ServicePackFiles\i386\ediskeer.dll + 2008-04-14 02:33:23 187,392 ------w c:\windows\ServicePackFiles\i386\els.dll + 2008-04-14 02:33:23 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll + 2008-04-14 02:33:23 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll + 2008-04-14 01:56:19 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll + 2004-08-03 23:37:52 121,344 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll + 2008-04-14 02:33:24 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll + 2008-04-14 02:33:24 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll + 2008-04-14 02:33:24 1,097,728 ------w c:\windows\ServicePackFiles\i386\esent.dll + 2008-04-14 02:33:24 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll + 2004-08-03 21:32:28 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys + 2008-04-14 02:34:01 195,072 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe + 2008-04-14 02:33:24 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll + 2008-04-14 02:33:24 109,568 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll + 2008-04-14 02:34:01 26,112 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe + 2008-04-14 02:33:24 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll + 2008-04-14 02:34:02 94,720 ------w c:\windows\ServicePackFiles\i386\evntwin.exe + 2008-04-14 02:34:03 1,037,824 ------w c:\windows\ServicePackFiles\i386\explorer.exe + 2008-04-14 02:33:24 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll + 2008-04-14 02:33:24 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll + 2008-04-14 02:34:04 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe + 2008-04-14 02:33:24 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll + 2008-04-14 02:31:21 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll + 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys + 2008-04-14 02:33:24 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll + 2008-04-14 02:33:24 80,896 ------w c:\windows\ServicePackFiles\i386\faultrep.dll + 2008-04-14 02:34:04 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe + 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys + 2008-04-14 02:33:24 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll + 2008-04-14 02:33:24 348,160 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll + 2008-04-14 02:34:04 29,184 ------w c:\windows\ServicePackFiles\i386\findstr.exe + 2008-04-14 01:57:38 44,672 ------w c:\windows\ServicePackFiles\i386\fips.sys + 2008-04-14 02:33:24 88,064 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll + 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys + 2008-04-14 02:33:24 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll + 2008-04-14 02:34:04 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe + 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys + 2008-04-14 02:33:24 386,560 ------w c:\windows\ServicePackFiles\i386\fontext.dll + 2008-04-14 02:33:24 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll + 2008-04-14 02:34:04 21,504 ------w c:\windows\ServicePackFiles\i386\fontview.exe + 2008-04-14 02:34:04 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe + 2004-08-03 21:31:24 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys + 2008-04-14 02:34:31 29,696 ------w c:\windows\ServicePackFiles\i386\format.com + 2008-04-14 02:33:24 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll + 2008-04-14 02:33:24 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll + 2008-04-14 02:33:24 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll + 2008-04-14 02:33:24 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll + 2008-04-14 02:33:24 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll + 2008-04-14 02:33:24 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll + 2008-04-14 02:33:24 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll + 2008-04-14 02:33:24 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll + 2008-04-14 02:33:24 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll + 2008-04-14 02:33:24 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll + 2008-04-14 02:33:24 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll + 2008-04-14 02:34:04 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe + 2008-04-14 02:34:04 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe + 2008-04-14 02:34:04 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe + 2008-04-14 02:33:24 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll + 2008-04-14 02:34:04 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe + 2008-04-14 02:33:24 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll + 2008-04-14 02:33:25 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll + 2008-04-14 02:33:25 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll + 2003-04-14 18:29:34 217,088 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll + 2008-04-14 02:34:04 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe + 2008-04-14 02:34:04 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe + 2008-04-14 02:31:23 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll + 2008-04-14 02:33:25 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll + 2008-04-14 02:34:04 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe + 2008-04-14 02:34:04 46,080 ------w c:\windows\ServicePackFiles\i386\ftp.exe + 2008-04-14 02:33:25 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll + 2008-04-14 02:33:25 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll + 2008-04-14 02:34:04 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe + 2008-04-14 02:33:25 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll + 2008-04-14 02:33:25 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll + 2008-04-14 02:34:04 238,592 ------w c:\windows\ServicePackFiles\i386\fxscover.exe + 2008-04-14 02:33:25 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll + 2008-04-14 02:33:25 66,048 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll + 2008-04-14 02:33:25 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll + 2008-04-14 02:33:25 24,064 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll + 2008-04-14 02:33:25 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll + 2008-04-14 02:33:25 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll + 2008-04-14 02:31:25 7,168 ------w c:\windows\ServicePackFiles\i386\fxsres.dll + 2008-04-14 02:33:25 563,712 ------w c:\windows\ServicePackFiles\i386\fxsst.dll + 2008-04-14 02:34:05 268,800 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe + 2008-04-14 02:33:25 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll + 2008-04-14 02:33:25 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll + 2008-04-14 02:33:25 156,672 ------w c:\windows\ServicePackFiles\i386\fxsui.dll + 2008-04-14 02:33:25 197,120 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll + 2008-04-14 02:33:25 400,896 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll + 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys + 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys + 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys + 2008-04-14 02:33:25 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll + 2008-04-14 02:33:25 123,904 ------w c:\windows\ServicePackFiles\i386\glu32.dll + 2004-08-05 12:00:00 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll + 2008-04-14 01:59:15 10,240 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll + 2008-04-14 02:34:05 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe + 2008-04-14 01:59:21 28,544 ------w c:\windows\ServicePackFiles\i386\grserial.sys + 2008-04-14 02:33:26 134,656 ------w c:\windows\ServicePackFiles\i386\guitrn.dll + 2008-04-14 02:33:26 115,712 ------w c:\windows\ServicePackFiles\i386\guitrna.dll + 2008-04-14 02:33:26 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll + 2008-04-14 02:33:26 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll + 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll + 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll + 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll + 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll + 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll + 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll + 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll + 2008-04-14 02:33:26 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys + 2008-04-14 02:34:05 17,408 ------w c:\windows\ServicePackFiles\i386\help.exe + 2008-04-14 02:34:06 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe + 2008-04-14 02:34:06 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe + 2008-04-14 02:34:06 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe + 2008-04-14 02:33:26 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll + 2008-04-14 02:33:26 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys + 2008-04-14 01:59:54 25,856 ------w c:\windows\ServicePackFiles\i386\hidbth.sys + 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys + 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys + 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys + 2008-04-14 02:33:26 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys + 2008-04-14 02:33:26 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll + 2008-04-14 02:33:26 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll + 2008-04-14 02:33:26 347,136 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll + 2008-04-14 02:33:26 336,384 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll + 2008-04-14 02:33:26 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll + 2008-04-14 02:33:26 146,944 ------w c:\windows\ServicePackFiles\i386\hotplug.dll + 2008-04-14 02:33:26 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll + 2008-04-14 02:33:26 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll + 2008-04-14 02:33:26 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll + 2008-04-14 02:34:06 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe + 2004-08-03 21:41:48 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys + 2008-04-14 02:33:26 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll + 2004-08-03 21:41:50 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys + 2004-08-03 21:41:56 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys + 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys + 2008-04-14 02:33:26 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll + 2008-04-14 02:33:26 43,008 ------w c:\windows\ServicePackFiles\i386\htui.dll + 2008-04-14 02:33:26 354,304 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll + 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys + 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys + 2008-04-14 02:00:52 54,144 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys + 2008-04-14 02:33:26 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll + 2004-08-03 21:29:38 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys + 2008-04-14 02:33:26 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll + 2008-04-14 02:33:26 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll + 2008-04-14 02:33:26 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll + 2008-04-14 02:33:26 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll + 2008-04-14 02:31:30 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll + 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll + 2008-04-14 02:33:26 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll + 2008-04-14 02:34:06 218,624 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe + 2008-04-14 02:34:06 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe + 2008-04-14 02:33:26 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll + 2008-04-14 02:33:26 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll + 2008-04-14 02:33:26 176,128 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll + 2008-04-14 02:33:26 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll + 2008-04-14 02:34:06 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe + 2008-04-14 02:33:26 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll + 2008-04-14 02:33:26 121,856 ------w c:\windows\ServicePackFiles\i386\idq.dll + 2008-04-14 02:34:06 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe + 2008-04-14 02:33:26 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll + 2008-04-14 02:33:26 221,184 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll + 2008-04-14 02:33:26 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll + 2008-04-14 02:34:06 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe + 2008-04-14 02:33:26 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll + 2008-04-14 02:33:26 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll + 2008-04-14 02:33:26 49,152 ------w c:\windows\ServicePackFiles\i386\iernonce.dll + 2008-04-14 02:33:26 63,488 ------w c:\windows\ServicePackFiles\i386\iesetup.dll + 2008-04-14 02:34:06 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe + 2008-04-14 02:34:06 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe + 2008-04-14 02:33:26 142,848 ------w c:\windows\ServicePackFiles\i386\ifmon.dll + 2008-04-14 02:33:26 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll + 2008-04-14 02:31:32 508,416 ------w c:\windows\ServicePackFiles\i386\iis.dll + 2008-04-14 02:33:26 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll + 2008-04-14 02:33:26 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll + 2008-04-14 02:34:07 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe + 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys + 2008-04-14 02:33:26 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll + 2008-04-14 02:33:26 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll + 2008-04-14 02:33:26 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll + 2008-04-14 02:33:26 126,464 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll + 2008-04-14 02:33:26 282,624 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll + 2008-04-14 02:33:26 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll + 2008-04-14 02:33:27 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll + 2008-04-14 02:33:27 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll + 2008-04-14 02:33:27 16,384 ------w c:\windows\ServicePackFiles\i386\inetppui.dll + 2008-04-14 02:02:54 50,688 ------w c:\windows\ServicePackFiles\i386\inetres.dll + 2008-04-14 02:34:07 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe + 2008-04-14 02:33:27 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll + 2008-04-14 02:33:27 126,464 ------w c:\windows\ServicePackFiles\i386\input.dll + 2008-04-14 02:33:27 96,768 ------w c:\windows\ServicePackFiles\i386\inseng.dll + 2008-04-14 02:03:25 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys + 2008-04-14 02:03:26 40,576 ------w c:\windows\ServicePackFiles\i386\intelppm.sys + 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys + 2008-04-14 02:34:08 58,368 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe + 2008-04-14 02:31:21 103,936 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll + 2008-04-14 02:31:17 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll + 2008-04-14 02:33:27 95,744 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll + 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys + 2008-04-14 02:33:27 174,592 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll + 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys + 2008-04-14 02:33:27 332,800 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll + 2008-04-14 02:33:27 355,840 ------w c:\windows\ServicePackFiles\i386\ippromon.dll + 2008-04-14 02:33:27 36,864 ------w c:\windows\ServicePackFiles\i386\iprip.dll + 2008-04-14 02:33:27 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll + 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys + 2008-04-14 02:33:27 361,472 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll + 2008-04-14 02:33:27 185,344 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll + 2008-04-14 02:32:25 103,424 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll + 2008-04-14 02:31:17 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll + 2008-04-14 02:33:27 388,096 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll + 2008-04-14 02:34:08 53,760 ------w c:\windows\ServicePackFiles\i386\ipv6.exe + 2008-04-14 02:33:27 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll + 2008-04-14 02:34:08 24,576 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe + 2008-04-14 02:33:27 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll + 2008-04-14 02:33:27 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll + 2008-04-14 02:33:27 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll + 2008-04-14 02:33:27 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll + 2008-04-14 02:33:27 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll + 2008-04-14 02:33:27 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll + 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys + 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys + 2008-04-14 02:34:08 153,088 ------w c:\windows\ServicePackFiles\i386\irftp.exe + 2008-04-14 02:33:27 29,184 ------w c:\windows\ServicePackFiles\i386\irmon.dll + 2008-04-14 02:04:35 37,632 ------w c:\windows\ServicePackFiles\i386\isapnp.sys + 2008-04-14 02:32:15 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll + 2008-04-14 02:32:39 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll + 2008-04-14 02:32:39 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll + 2008-04-14 02:33:27 86,016 ------w c:\windows\ServicePackFiles\i386\isign32.dll + 2008-04-14 02:32:15 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll + 2008-04-14 02:33:27 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll + 2008-04-14 02:33:27 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll + 2008-04-14 02:33:27 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll + 2008-04-14 02:33:27 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll + 2008-04-14 02:33:27 54,784 ------w c:\windows\ServicePackFiles\i386\ixsso.dll + 2008-04-14 02:33:27 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll + 2008-04-14 02:33:27 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll + 2008-04-14 02:33:27 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll + 2008-04-14 02:33:27 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll + 2008-04-14 02:33:27 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll + 2008-04-14 02:05:14 25,216 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys + 2008-04-14 02:31:42 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll + 2008-04-14 02:05:15 14,720 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys + 2008-04-14 02:31:42 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll + 2008-04-14 02:31:42 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll + 2008-04-14 02:31:42 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll + 2008-04-14 02:31:42 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll + 2008-04-14 02:31:42 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll + 2008-04-14 02:31:42 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll + 2008-04-14 02:31:42 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll + 2008-04-14 02:31:42 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll + 2008-04-14 02:31:42 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll + 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll + 2008-04-14 02:33:28 186,880 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll + 2008-04-14 02:33:28 49,152 ------w c:\windows\ServicePackFiles\i386\kdsui.dll + 2008-04-14 02:33:28 254,464 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll + 2008-04-14 02:33:28 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll + 2008-04-14 02:33:28 1,054,720 ------w c:\windows\ServicePackFiles\i386\kernel32.dll + 2004-08-05 12:00:00 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys + 2008-04-14 02:33:28 157,184 ------w c:\windows\ServicePackFiles\i386\keymgr.dll + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys + 2008-04-14 02:33:28 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll + 2008-04-14 02:31:43 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll + 2008-04-14 02:31:43 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll + 2008-04-14 02:31:43 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll + 2008-04-14 02:31:43 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll + 2008-04-14 02:33:28 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll + 2008-04-14 02:31:43 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll + 2008-04-14 02:31:43 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll + 2008-04-14 02:31:43 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll + 2008-04-14 02:31:43 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll + 2004-08-05 12:00:00 92,608 ------w c:\windows\ServicePackFiles\i386\krnl386.exe + 2008-04-14 02:33:28 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys + 2008-04-14 02:33:28 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll + 2008-04-14 02:33:28 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll + 2008-04-14 02:31:03 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll + 2008-04-14 02:31:03 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll + 2008-04-14 02:31:03 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll + 2008-04-14 02:31:04 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll + 2004-08-05 12:00:00 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe + 2004-08-05 12:00:00 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe + 2008-04-14 02:31:30 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll + 2008-04-14 02:31:33 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll + 2008-04-14 02:31:33 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll + 2008-04-14 02:31:33 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll + 2008-04-14 02:31:33 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll + 2008-04-14 02:31:33 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll + 2008-04-14 02:31:33 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll + 2004-08-05 12:00:00 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe + 2004-08-05 12:00:00 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe + 2004-08-05 12:00:00 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe + 2004-08-05 12:00:00 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe + 2004-08-05 12:00:00 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe + 2004-08-05 12:00:00 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe + 2008-04-14 02:31:34 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll + 2008-04-14 02:31:34 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll + 2004-08-05 12:00:00 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe + 2008-04-14 02:31:34 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll + 2008-04-14 02:32:16 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll + 2008-04-14 02:32:16 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll + 2008-04-14 02:32:16 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll + 2008-04-14 02:32:16 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe + 2008-04-14 02:32:17 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll + 2004-08-05 12:00:00 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe + 2004-08-05 12:00:00 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe + 2008-04-14 02:32:42 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll + 2008-04-14 02:32:44 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll + 2008-04-14 02:32:46 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll + 2008-04-14 02:32:46 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys + 2008-04-14 02:34:09 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe + 2008-04-14 02:33:28 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll + 2008-04-13 18:33:30 424,960 ------w c:\windows\ServicePackFiles\i386\licdll.dll + 2008-04-14 02:33:28 22,528 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll + 2008-04-14 02:33:28 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll + 2008-04-14 02:33:28 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll + 2008-04-14 02:33:28 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll + 2008-04-14 02:33:28 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll + 2008-04-14 02:33:28 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll + 2008-04-14 02:33:28 100,352 ------w c:\windows\ServicePackFiles\i386\loadperf.dll + 2008-04-14 02:33:28 228,352 ------w c:\windows\ServicePackFiles\i386\localsec.dll + 2008-04-14 02:33:28 346,112 ------w c:\windows\ServicePackFiles\i386\localspl.dll + 2008-04-14 02:33:28 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll + 2008-04-14 02:34:09 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe + 2008-04-14 02:33:28 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll + 2008-04-14 02:34:09 61,952 ------w c:\windows\ServicePackFiles\i386\logman.exe + 2008-04-14 02:34:32 221,696 ------w c:\windows\ServicePackFiles\i386\logon.scr + 2008-04-14 02:34:09 515,584 ------w c:\windows\ServicePackFiles\i386\logonui.exe + 2008-04-14 02:33:28 23,040 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll + 2008-04-14 02:33:28 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll + 2008-04-14 02:33:28 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll + 2008-04-14 02:33:28 19,456 ------w c:\windows\ServicePackFiles\i386\lprmon.dll + 2008-04-14 02:33:28 734,720 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll + 2008-04-14 02:34:09 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe + 2004-08-03 23:46:46 607,452 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys + 2004-08-03 23:46:50 422,528 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys + 2004-08-03 21:39:32 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys + 2008-04-14 02:34:10 73,216 ------w c:\windows\ServicePackFiles\i386\magnify.exe + 2008-04-14 02:34:10 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe + 2008-04-14 02:33:28 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll + 2008-04-14 02:33:28 85,504 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll + 2008-04-14 02:33:28 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll + 2008-04-14 02:33:28 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll + 2008-04-14 02:33:28 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll + 2008-04-14 02:33:28 120,320 ------w c:\windows\ServicePackFiles\i386\mdminst.dll + 2008-04-14 02:33:28 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll + 2004-08-03 21:41:56 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys + 2008-04-14 02:33:28 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll + 2008-04-14 02:33:28 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll + 2008-04-14 02:33:29 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll + 2006-10-14 08:13:25 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll + 2008-04-14 02:33:29 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll + 2008-04-14 02:33:29 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll + 2008-04-14 02:33:29 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll + 2008-04-14 02:33:29 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll + 2008-04-14 02:33:29 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll + 2008-04-14 02:33:29 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll + 2008-04-14 02:34:10 104,448 ------w c:\windows\ServicePackFiles\i386\migload.exe + 2008-04-14 02:34:10 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe + 2008-04-14 02:34:11 251,904 ------w c:\windows\ServicePackFiles\i386\migwiz.exe + 2008-04-14 02:34:11 247,808 ------w c:\windows\ServicePackFiles\i386\migwiza.exe + 2008-04-14 02:33:29 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll + 2008-04-14 02:33:29 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll + 2008-04-14 02:34:11 1,415,680 ------w c:\windows\ServicePackFiles\i386\mmc.exe + 2008-04-14 02:33:29 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll + 2008-04-14 02:33:29 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll + 2008-04-14 02:33:29 174,080 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll + 2008-04-14 02:33:30 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll + 2008-04-14 02:33:30 36,864 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll + 2008-04-14 02:33:30 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll + 2008-04-14 02:33:30 5,120 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll + 2008-04-14 02:33:30 1,879,040 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll + 2008-04-14 02:34:11 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe + 2008-04-14 02:33:30 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll + 2008-04-14 02:33:30 17,920 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll + 2004-08-05 12:00:00 70,688 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll + 2008-04-14 02:33:30 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll + 2008-04-14 02:34:11 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe + 2008-04-14 02:33:30 210,432 ------w c:\windows\ServicePackFiles\i386\mobsync.dll + 2008-04-14 02:34:11 143,872 ------w c:\windows\ServicePackFiles\i386\mobsync.exe + 2008-04-14 01:53:05 30,336 ------w c:\windows\ServicePackFiles\i386\modem.sys + 2008-04-14 02:33:30 156,160 ------w c:\windows\ServicePackFiles\i386\modemui.dll + 2008-04-14 02:34:11 16,896 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe + 2008-04-14 02:33:30 124,928 ------w c:\windows\ServicePackFiles\i386\mofd.dll + 2008-04-14 02:34:31 16,896 ------w c:\windows\ServicePackFiles\i386\more.com + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll + 2008-04-14 01:53:18 23,680 ------w c:\windows\ServicePackFiles\i386\mouclass.sys + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys + 2008-04-14 02:34:12 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys + 2008-04-14 02:34:12 124,928 ------w c:\windows\ServicePackFiles\i386\mplay32.exe + 2008-04-14 02:33:30 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll + 2008-04-14 02:33:30 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll + 2008-04-14 02:33:30 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys + 2008-04-14 02:33:30 72,192 ------w c:\windows\ServicePackFiles\i386\msacm32.dll + 2008-04-14 02:33:30 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll + 2007-03-28 12:56:27 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll + 2008-04-14 02:33:30 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll + 2007-03-28 12:56:27 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll + 2008-04-14 02:33:30 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll + 2007-03-28 12:56:27 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll + 2008-04-14 02:33:30 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll + 2008-04-14 02:33:30 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll + 2007-03-28 12:56:28 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll + 2007-03-28 12:56:28 28,672 ------w c:\windows\ServicePackFiles\i386\msader15.dll + 2008-04-14 02:33:30 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll + 2008-04-14 02:33:30 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll + 2008-04-14 02:33:30 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll + 2008-04-14 02:33:30 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll + 2008-04-14 02:33:30 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll + 2008-04-14 02:31:51 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll + 2008-04-14 02:33:30 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll + 2008-04-14 02:33:30 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll + 2008-04-14 02:33:30 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll + 2008-04-14 02:33:30 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll + 2008-04-14 02:33:30 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll + 2008-04-14 02:34:12 172,544 ------w c:\windows\ServicePackFiles\i386\msconfig.exe + 2007-04-02 20:01:06 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll + 2008-04-14 02:33:30 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll + 2008-04-14 02:33:30 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll + 2008-04-14 02:33:30 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll + 2008-04-14 02:33:30 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll + 2008-04-14 02:33:30 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll + 2008-04-14 02:33:30 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll + 2008-04-14 02:33:30 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll + 2008-04-14 02:33:30 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll + 2008-04-14 02:33:30 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll + 2007-03-28 12:56:31 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll + 2008-04-14 02:33:30 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll + 2007-03-28 12:56:32 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll + 2008-04-14 02:33:30 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll + 2008-04-14 02:33:30 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll + 2008-04-14 02:33:30 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll + 2007-03-28 12:56:32 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll + 2008-04-14 02:33:31 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll + 2008-04-14 02:33:31 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll + 2008-04-14 02:33:31 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll + 2007-03-28 12:56:32 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll + 2008-04-14 02:33:31 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll + 2008-04-14 02:33:31 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll + 2008-04-14 02:33:31 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll + 2008-04-14 02:33:31 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll + 2008-04-14 02:33:31 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll + 2008-04-14 02:34:12 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe + 2008-04-14 02:33:31 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll + 2008-04-14 02:33:31 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll + 2008-04-14 02:33:31 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll + 2008-04-14 02:33:31 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll + 2008-04-14 02:33:31 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys + 2008-03-25 04:50:28 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll + 2008-03-25 04:50:30 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys + 2008-04-14 02:33:31 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll + 2008-04-14 02:33:31 1,007,104 ------w c:\windows\ServicePackFiles\i386\msgina.dll + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys + 2008-04-14 02:33:31 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll + 2008-04-14 02:33:31 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll + 2008-04-14 02:33:31 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll + 2008-04-14 02:33:31 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll + 2008-04-14 02:34:34 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv + 2008-04-14 02:34:34 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv + 2008-04-14 02:34:12 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe + 2008-04-14 02:33:31 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll + 2008-04-14 02:33:31 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll + 2008-04-14 01:56:24 57,344 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll + 2008-04-14 02:33:32 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll + 2008-04-14 02:33:32 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll + 2008-04-14 02:33:32 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll + 2008-04-14 02:33:32 252,416 ------w c:\windows\ServicePackFiles\i386\msieftp.dll + 2008-04-14 02:34:13 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe + 2008-04-14 02:33:32 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll + 2008-04-14 02:33:32 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll + 2008-04-14 02:34:13 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll + 2008-04-14 02:33:32 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll + 2008-04-14 02:33:32 382,464 ------w c:\windows\ServicePackFiles\i386\msinfo.dll + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys + 2008-04-14 02:34:13 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe + 2008-04-14 02:33:32 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll + 2008-03-25 04:50:34 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll + 2008-03-25 04:50:40 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll + 2008-03-25 04:51:08 194,144 ------w c:\windows\ServicePackFiles\i386\msjint40.dll + 2008-04-14 02:33:32 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll + 2008-03-25 04:50:42 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll + 2008-03-25 04:50:42 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys + 2008-04-14 02:33:32 25,600 ------w c:\windows\ServicePackFiles\i386\mslbui.dll + 2008-03-25 04:50:44 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll + 2008-04-14 02:33:32 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll + 2008-04-14 02:34:13 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe + 2004-08-05 12:00:00 11,101,160 ------w c:\windows\ServicePackFiles\i386\msncli.exe + 2008-04-14 02:33:32 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll + 2004-08-05 12:00:00 908,504 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe + 2008-04-14 02:33:32 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll + 2008-04-14 02:33:32 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll + 2008-04-14 02:33:32 566,272 ------w c:\windows\ServicePackFiles\i386\msobmain.dll + 2008-04-14 02:33:32 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll + 2008-04-14 02:33:32 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll + 2008-04-14 02:33:32 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll + 2008-04-14 02:33:32 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll + 2008-04-14 02:02:34 2,534,400 ------w c:\windows\ServicePackFiles\i386\msoeres.dll + 2008-04-14 02:33:32 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll + 2008-04-14 02:34:13 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe + 2007-03-28 12:56:34 24,576 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll + 2008-04-14 02:33:32 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll + 2008-04-14 02:34:14 347,648 ------w c:\windows\ServicePackFiles\i386\mspaint.exe + 2008-04-14 02:33:32 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll + 2008-03-25 04:50:45 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll + 2008-04-14 02:33:32 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll + 2008-03-25 04:50:47 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll + 2008-03-25 04:50:49 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll + 2008-03-25 04:50:52 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll + 2008-04-14 02:33:32 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll + 2008-04-14 02:33:32 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll + 2008-04-14 02:33:32 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll + 2008-04-14 02:03:08 81,920 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys + 2008-04-14 02:33:32 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll + 2008-04-14 02:33:33 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys + 2008-04-14 02:33:33 281,600 ------w c:\windows\ServicePackFiles\i386\mstask.dll + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys + 2008-03-25 04:50:55 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll + 2008-04-14 02:33:33 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll + 2008-04-14 02:34:14 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe + 2008-04-14 02:33:33 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll + 2008-04-14 02:33:33 195,584 ------w c:\windows\ServicePackFiles\i386\msutb.dll + 2008-04-14 02:33:33 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll + 2008-04-14 02:33:33 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll + 2008-04-14 02:33:33 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll + 2008-04-14 02:33:33 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll + 2008-04-14 02:33:33 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll + 2008-04-14 02:33:33 122,368 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll + 2008-04-14 02:33:33 1,434,112 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll + 2008-04-14 02:33:33 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll + 2008-03-25 04:50:57 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll + 2008-04-14 02:33:33 204,800 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll + 2008-04-14 02:33:33 247,808 ------w c:\windows\ServicePackFiles\i386\mswsock.dll + 2008-03-25 04:51:09 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll + 2008-04-14 02:33:34 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll + 2008-03-25 04:50:58 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll + 2008-04-14 02:33:34 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll + 2008-04-14 02:33:34 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll + 2008-04-14 02:33:34 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll + 2008-04-14 02:33:34 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll + 2004-08-03 21:41:40 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys + 2004-08-03 21:41:38 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys + 2008-04-14 02:34:14 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe + 2008-04-14 02:33:34 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll + 2008-04-14 02:33:34 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll + 2008-04-14 02:33:34 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll + 2008-04-14 02:33:34 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll + 2008-04-14 02:33:34 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll + 2008-04-14 02:33:34 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll + 2004-08-03 21:29:38 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys + 2008-04-14 02:33:34 91,648 ------w c:\windows\ServicePackFiles\i386\mydocs.dll + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys + 2008-04-14 02:33:34 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll + 2008-04-14 02:33:34 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll + 2008-04-14 02:33:34 200,704 ------w c:\windows\ServicePackFiles\i386\napmontr.dll + 2008-04-14 02:34:14 177,664 ------w c:\windows\ServicePackFiles\i386\napstat.exe + 2008-04-14 02:34:14 55,296 ------w c:\windows\ServicePackFiles\i386\narrator.exe + 2008-04-14 02:33:34 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll + 2008-04-14 02:33:34 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll + 2008-04-14 02:33:34 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll + 2008-04-14 02:33:34 18,432 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll + 2008-04-14 02:34:15 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe + 2008-04-14 02:33:34 19,456 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys + 2008-04-14 02:33:34 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys + 2008-04-14 02:34:15 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe + 2008-04-14 02:34:15 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe + 2008-04-14 02:33:34 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys + 2008-04-14 02:33:34 634,368 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll + 2008-04-14 02:34:15 114,176 ------w c:\windows\ServicePackFiles\i386\netdde.exe + 2008-04-14 02:33:34 144,896 ------w c:\windows\ServicePackFiles\i386\netid.dll + 2008-04-14 02:33:34 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll + 2008-04-14 02:33:34 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll + 2008-04-14 02:33:34 78,336 ------w c:\windows\ServicePackFiles\i386\netoc.dll + 2008-04-14 02:33:34 885,248 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll + 2008-04-14 02:33:34 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll + 2008-04-14 02:37:10 332,800 ------w c:\windows\ServicePackFiles\i386\netsetup.exe + 2008-04-14 02:34:15 88,576 ------w c:\windows\ServicePackFiles\i386\netsh.exe + 2008-04-14 02:33:35 1,719,808 ------w c:\windows\ServicePackFiles\i386\netshell.dll + 2008-04-14 02:34:15 37,888 ------w c:\windows\ServicePackFiles\i386\netstat.exe + 2008-04-14 02:33:35 83,456 ------w c:\windows\ServicePackFiles\i386\netui0.dll + 2008-04-14 02:33:35 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll + 2004-08-03 23:47:58 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys + 2008-04-14 02:33:35 250,880 ------w c:\windows\ServicePackFiles\i386\newdev.dll + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys + 2008-04-14 02:33:35 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll + 2008-04-14 02:33:36 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll + 2008-04-14 02:33:36 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll + 2008-04-14 02:33:36 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll + 2008-04-14 02:33:36 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll + 2008-04-14 02:33:36 155,648 ------w c:\windows\ServicePackFiles\i386\nmft.dll + 2008-04-14 02:33:36 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys + 2008-04-14 02:33:36 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll + 2008-04-14 02:33:36 192,512 ------w c:\windows\ServicePackFiles\i386\nmwb.dll + 2008-04-14 02:34:15 70,656 ------w c:\windows\ServicePackFiles\i386\notepad.exe + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys + 2008-04-14 02:34:15 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe + 2008-04-14 02:33:36 55,296 ------w c:\windows\ServicePackFiles\i386\npptools.dll + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys + 2008-04-14 02:34:15 79,360 ------w c:\windows\ServicePackFiles\i386\nslookup.exe + 2004-08-05 12:00:00 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com + 2008-04-14 02:33:02 731,136 ------w c:\windows\ServicePackFiles\i386\ntdll.dll + 2008-04-14 02:33:36 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll + 2008-04-14 02:33:36 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys + 2004-08-05 12:00:00 34,000 ------w c:\windows\ServicePackFiles\i386\ntio.sys + 2004-08-05 12:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys + 2004-08-05 12:00:00 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys + 2004-08-05 12:00:00 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys + 2004-08-05 12:00:00 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys + 2008-04-14 02:07:16 2,147,328 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe + 2008-04-14 02:07:26 2,067,968 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe + 2008-04-14 02:07:35 2,025,984 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe + 2008-04-14 02:33:36 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll + 2008-04-14 02:33:36 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll + 2008-04-14 02:33:36 119,808 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll + 2008-04-14 02:33:36 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll + 2008-04-14 02:33:36 181,248 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll + 2008-04-14 02:33:36 496,640 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll + 2008-04-14 02:33:36 438,272 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll + 2004-08-03 21:41:40 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys + 2008-04-14 02:33:36 63,488 ------w c:\windows\ServicePackFiles\i386\ntoc.dll + 2008-04-14 02:08:03 2,191,104 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe + 2008-04-14 02:33:36 91,648 ------w c:\windows\ServicePackFiles\i386\ntprint.dll + 2008-04-14 02:33:36 145,920 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll + 2008-04-14 02:34:16 421,888 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe + 2008-04-14 02:33:36 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll + 2008-04-14 02:33:36 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll + 2004-08-03 21:29:56 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys + 2008-04-14 02:33:36 145,920 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll + 2008-04-14 02:33:36 271,360 ------w c:\windows\ServicePackFiles\i386\oakley.dll + 2008-04-14 02:33:37 289,280 ------w c:\windows\ServicePackFiles\i386\objsel.dll + 2008-04-13 18:40:32 445,440 ------w c:\windows\ServicePackFiles\i386\obrs040c.dll + 2008-04-14 02:33:38 97,280 ------w c:\windows\ServicePackFiles\i386\occache.dll + 2008-04-14 02:33:38 15,872 ------w c:\windows\ServicePackFiles\i386\ocgen.dll + 2008-04-14 02:33:38 69,632 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll + 2008-04-14 02:33:38 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll + 2004-08-05 12:00:00 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll + 2008-04-14 02:33:38 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll + 2008-04-14 02:33:38 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll + 2008-04-14 02:34:17 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe + 2008-04-14 02:33:38 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll + 2008-04-14 02:33:38 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll + 2008-04-14 02:34:17 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe + 2008-04-14 02:33:38 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll + 2008-04-14 02:33:38 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll + 2008-04-14 02:33:38 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll + 2007-03-28 12:56:42 98,304 ------w c:\windows\ServicePackFiles\i386\odbcint.dll + 2008-04-14 02:32:14 61,471 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll + 2008-04-14 02:33:38 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll + 2008-04-14 02:33:38 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll + 2008-04-14 02:33:38 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll + 2008-04-14 02:33:38 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll + 2008-04-14 02:33:38 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll + 2008-04-14 02:33:38 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll + 2008-04-14 02:33:38 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll + 2008-04-14 02:33:38 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll + 2008-04-14 02:34:17 60,928 ------w c:\windows\ServicePackFiles\i386\oemig50.exe + 2008-04-14 02:33:38 35,840 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll + 2008-04-14 02:33:38 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys + 2008-04-14 02:33:38 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll + 2008-04-14 02:33:38 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll + 2008-04-14 02:33:38 75,264 ------w c:\windows\ServicePackFiles\i386\olecli32.dll + 2008-04-14 02:33:38 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll + 2008-04-14 02:33:38 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll + 2008-04-14 02:33:38 77,824 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll + 2008-04-14 02:33:38 124,928 ------w c:\windows\ServicePackFiles\i386\oledlg.dll + 2008-04-14 02:33:38 110,592 ------w c:\windows\ServicePackFiles\i386\oleprn.dll + 2008-04-14 02:33:38 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll + 2008-04-14 02:33:38 144,896 ------w c:\windows\ServicePackFiles\i386\onex.dll + 2008-04-14 02:34:17 51,712 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe + 2008-04-14 02:33:38 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe + 2008-04-14 02:34:17 216,576 ------w c:\windows\ServicePackFiles\i386\osk.exe + 2008-04-13 18:31:52 232,448 ------w c:\windows\ServicePackFiles\i386\osloader.exe + 2008-04-14 02:33:38 68,096 ------w c:\windows\ServicePackFiles\i386\osuninst.dll + 2008-04-14 02:33:38 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll + 2008-04-14 02:33:38 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll + 2008-04-14 02:33:38 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll + 2008-04-14 02:33:38 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll + 2008-04-14 02:33:38 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll + 2008-04-14 02:09:37 46,848 ------w c:\windows\ServicePackFiles\i386\p3.sys + 2008-04-14 02:34:17 59,904 ------w c:\windows\ServicePackFiles\i386\packager.exe + 2008-04-14 02:09:40 80,384 ------w c:\windows\ServicePackFiles\i386\parport.sys + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys + 2008-04-14 02:33:38 69,632 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll + 2004-08-03 21:31:24 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys + 2008-04-14 02:33:38 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll + 2008-04-14 02:33:38 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll + 2008-04-14 02:09:47 68,608 ------w c:\windows\ServicePackFiles\i386\pci.sys + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll + 2008-04-14 02:09:53 120,576 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys + 2004-08-03 21:06:18 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys + 2008-04-14 02:33:38 286,720 ------w c:\windows\ServicePackFiles\i386\pdh.dll + 2008-04-14 02:33:38 42,496 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll + 2008-04-14 02:33:38 27,136 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll + 2008-04-14 02:34:17 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe + 2008-04-14 02:33:38 18,432 ------w c:\windows\ServicePackFiles\i386\perfnet.dll + 2008-04-14 02:33:38 26,624 ------w c:\windows\ServicePackFiles\i386\perfos.dll + 2008-04-14 02:33:38 35,840 ------w c:\windows\ServicePackFiles\i386\perfproc.dll + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys + 2008-04-14 02:32:16 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys + 2008-04-14 02:32:16 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll + 2008-04-14 02:33:38 172,032 ------w c:\windows\ServicePackFiles\i386\photowiz.dll + 2008-04-14 02:33:38 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll + 2008-04-13 18:35:22 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll + 2008-04-14 02:34:18 284,160 ------w c:\windows\ServicePackFiles\i386\pinball.exe + 2008-04-14 02:34:18 19,456 ------w c:\windows\ServicePackFiles\i386\ping.exe + 2008-04-14 02:33:38 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll + 2008-04-14 02:33:38 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll + 2008-04-14 02:33:38 53,760 ------w c:\windows\ServicePackFiles\i386\plotui.dll + 2008-04-14 02:33:38 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll + 2008-04-14 02:33:38 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll + 2008-04-14 02:33:38 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll + 2008-04-14 02:33:38 106,496 ------w c:\windows\ServicePackFiles\i386\polstore.dll + 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys + 2008-04-14 02:34:18 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys + 2008-04-14 02:33:38 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll + 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys + 2008-04-14 02:33:38 578,560 ------w c:\windows\ServicePackFiles\i386\printui.dll + 2008-04-14 01:55:30 40,064 ------w c:\windows\ServicePackFiles\i386\processr.sys + 2008-04-14 02:33:38 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll + 2008-04-14 02:34:18 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe + 2008-04-14 02:34:18 50,688 ------w c:\windows\ServicePackFiles\i386\proquota.exe + 2008-04-14 02:33:38 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll + 2008-04-14 02:34:18 9,728 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe + 2008-04-14 02:33:38 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll + 2008-04-14 02:33:38 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll + 2008-04-14 02:33:38 98,816 ------w c:\windows\ServicePackFiles\i386\psbase.dll + 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys + 2008-04-14 02:33:38 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll + 2008-04-14 02:33:38 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll + 2008-04-14 02:33:38 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll + 2008-04-14 02:33:38 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll + 2008-04-14 02:33:39 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll + 2008-04-14 02:33:39 151,040 ------w c:\windows\ServicePackFiles\i386\qagent.dll + 2008-04-14 02:33:39 293,376 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll + 2008-04-14 02:33:39 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll + 2008-04-14 02:33:39 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll + 2008-04-14 02:33:39 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll + 2008-04-14 02:33:39 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll + 2008-04-14 02:33:39 387,072 ------w c:\windows\ServicePackFiles\i386\qdvd.dll + 2008-04-14 02:33:39 563,200 ------w c:\windows\ServicePackFiles\i386\qedit.dll + 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll + 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys + 2008-04-14 02:33:39 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll + 2008-04-14 02:33:39 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll + 2008-04-14 02:34:18 20,992 ------w c:\windows\ServicePackFiles\i386\qprocess.exe + 2008-04-14 02:33:39 1,294,336 ------w c:\windows\ServicePackFiles\i386\quartz.dll + 2008-04-14 02:33:39 1,440,768 ------w c:\windows\ServicePackFiles\i386\query.dll + 2008-04-14 02:33:39 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll + 2008-04-14 02:33:39 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll + 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys + 2008-04-14 02:33:39 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll + 2008-04-14 02:33:39 237,056 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll + 2008-04-14 02:33:39 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll + 2008-04-14 02:33:39 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll + 2008-04-14 02:33:39 685,568 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll + 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys + 2008-04-14 02:33:39 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll + 2008-04-14 02:33:39 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll + 2008-04-14 02:34:18 57,344 ------w c:\windows\ServicePackFiles\i386\rasphone.exe + 2008-04-14 02:33:39 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll + 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys + 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys + 2008-04-14 02:33:39 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll + 2008-04-14 02:33:39 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll + 2008-04-14 02:33:39 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll + 2008-04-14 02:33:39 151,040 ------w c:\windows\ServicePackFiles\i386\rastls.dll + 2008-04-14 02:33:39 102,912 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll + 2008-04-14 02:34:18 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe + 2008-04-14 02:34:18 23,040 ------w c:\windows\ServicePackFiles\i386\rcp.exe + 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys + 2008-04-14 02:33:39 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll + 2008-04-14 02:34:18 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe + 2008-04-14 02:34:53 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll + 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys + 2008-04-14 02:33:39 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll + 2008-04-14 02:34:54 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys + 2008-04-14 02:34:54 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll + 2008-04-14 02:34:18 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe + 2008-04-14 02:34:18 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe + 2004-08-03 21:41:40 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys + 2008-04-14 01:57:34 58,752 ------w c:\windows\ServicePackFiles\i386\redbook.sys + 2004-08-05 12:00:00 3,352 ------w c:\windows\ServicePackFiles\i386\redir.exe + 2008-04-14 02:34:18 53,248 ------w c:\windows\ServicePackFiles\i386\reg.exe + 2008-04-14 02:33:39 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll + 2008-04-14 02:34:19 153,088 ------w c:\windows\ServicePackFiles\i386\regedit.exe + 2008-04-14 02:33:39 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll + 2008-04-14 02:34:19 12,288 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe + 2008-04-14 02:33:39 405,504 ------w c:\windows\ServicePackFiles\i386\regwizc.dll + 2008-04-14 02:33:39 61,952 ------w c:\windows\ServicePackFiles\i386\remotepg.dll + 2008-04-14 02:33:39 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll + 2008-04-14 02:33:39 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll + 2008-04-14 02:34:19 14,848 ------w c:\windows\ServicePackFiles\i386\rexec.exe + 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys + 2008-04-14 02:33:39 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll + 2008-04-14 02:33:39 124,416 ------w c:\windows\ServicePackFiles\i386\riafres.dll + 2008-04-14 02:33:39 12,288 ------w c:\windows\ServicePackFiles\i386\riafui1.dll + 2008-04-14 02:33:39 12,288 ------w c:\windows\ServicePackFiles\i386\riafui2.dll + 2008-04-14 02:33:39 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys + 2008-04-14 01:58:29 79,360 ------w c:\windows\ServicePackFiles\i386\rocket.sys + 2008-04-14 02:33:39 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll + 2008-04-14 02:33:39 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll + 2008-04-14 02:33:39 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll + 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll + 2008-04-14 02:34:19 15,872 ------w c:\windows\ServicePackFiles\i386\rsh.exe + 2008-04-14 02:33:39 40,960 ------w c:\windows\ServicePackFiles\i386\rshx32.dll + 2008-04-14 02:33:39 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll + 2008-04-14 02:34:19 384,512 ------w c:\windows\ServicePackFiles\i386\rstrui.exe + 2008-04-14 02:33:39 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll + 2008-04-14 02:34:20 78,336 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe + 2008-04-14 02:33:39 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll + 2004-08-03 22:31:34 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys + 2008-04-14 02:33:39 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll + 2008-04-14 02:34:20 33,792 ------w c:\windows\ServicePackFiles\i386\rundll32.exe + 2008-04-14 02:34:20 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe + 2008-04-14 02:33:39 28,160 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll + 2008-04-14 02:33:39 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll + 2008-04-14 02:33:39 28,160 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll + 2008-04-14 02:33:39 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll + 2008-04-14 02:33:39 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll + 2004-08-03 21:29:52 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys + 2008-04-14 02:33:39 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll + 2008-04-14 02:33:39 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll + 2008-04-14 02:33:39 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll + 2008-04-14 02:33:39 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll + 2008-04-14 02:33:39 431,104 ------w c:\windows\ServicePackFiles\i386\samsrv.dll + 2008-04-14 02:33:39 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll + 2008-04-14 02:34:20 13,824 ------w c:\windows\ServicePackFiles\i386\savedump.exe + 2008-04-14 02:33:39 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll + 2008-04-14 02:33:39 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll + 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys + 2008-04-14 02:33:40 71,168 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll + 2008-04-14 02:34:20 100,352 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe + 2004-08-05 12:00:00 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll + 2008-04-14 02:33:40 171,520 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll + 2008-04-14 02:33:40 187,392 ------w c:\windows\ServicePackFiles\i386\scecli.dll + 2008-04-14 02:33:40 329,728 ------w c:\windows\ServicePackFiles\i386\scesrv.dll + 2008-04-14 02:33:40 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll + 2008-04-14 02:33:40 194,560 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll + 2008-04-14 02:33:40 22,016 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll + 2008-04-14 02:34:20 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe + 2008-04-14 02:33:40 217,600 ------w c:\windows\ServicePackFiles\i386\script.dll + 2008-04-14 02:33:40 201,216 ------w c:\windows\ServicePackFiles\i386\scripta.dll + 2008-04-14 02:34:32 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr + 2008-04-14 02:33:40 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll + 2008-04-14 02:33:40 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll + 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys + 2008-04-14 02:34:20 78,848 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe + 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys + 2008-04-14 02:33:40 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll + 2007-11-13 10:25:54 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys + 2008-04-14 02:33:40 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll + 2006-12-30 18:27:08 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat + 2008-04-14 02:33:40 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll + 2008-04-14 02:33:40 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll + 2008-04-14 02:33:40 29,696 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll + 2008-04-14 02:33:40 55,296 ------w c:\windows\ServicePackFiles\i386\sendmail.dll + 2008-04-14 02:33:40 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll + 2008-04-14 02:33:40 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll + 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys + 2008-04-14 02:00:08 66,048 ------w c:\windows\ServicePackFiles\i386\serial.sys + 2008-04-14 02:33:40 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll + 2008-04-14 02:34:20 109,056 ------w c:\windows\ServicePackFiles\i386\services.exe + 2008-04-14 02:34:21 142,848 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe + 2008-04-14 02:34:21 32,768 ------w c:\windows\ServicePackFiles\i386\sethc.exe + 2008-04-14 02:34:21 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe + 2008-04-14 02:34:21 73,728 ------w c:\windows\ServicePackFiles\i386\setup50.exe + 2008-04-13 18:33:42 1,005,056 ------w c:\windows\ServicePackFiles\i386\setupapi.dll + 2008-04-14 02:34:21 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe + 2008-04-14 02:33:41 101,888 ------w c:\windows\ServicePackFiles\i386\setupqry.dll + 2008-04-14 02:33:41 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll + 2008-04-14 02:33:41 142,336 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll + 2008-04-14 02:33:41 1,571,840 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll + 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys + 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys + 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys + 2008-04-14 02:00:59 572,416 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll + 2008-04-14 02:33:41 1,499,136 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll + 2008-04-14 02:33:41 8,517,632 ------w c:\windows\ServicePackFiles\i386\shell32.dll + 2008-04-14 02:33:41 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll + 2008-04-14 02:33:41 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll + 2008-04-14 02:33:41 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll + 2008-04-14 02:33:41 440,320 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll + 2008-04-14 02:33:41 474,624 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll + 2008-04-14 02:34:21 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe + 2008-04-14 02:34:21 78,848 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe + 2008-04-14 02:33:41 28,160 ------w c:\windows\ServicePackFiles\i386\shscrap.dll + 2008-04-14 02:33:41 135,680 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll + 2008-04-14 02:33:41 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll + 2008-04-14 02:34:21 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe + 2008-04-14 02:34:21 20,480 ------w c:\windows\ServicePackFiles\i386\shutdown.exe + 2008-04-14 02:33:41 13,824 ------w c:\windows\ServicePackFiles\i386\sigtab.dll + 2008-04-14 02:34:21 71,168 ------w c:\windows\ServicePackFiles\i386\sigverif.exe + 2008-04-14 02:33:41 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll + 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys + 2004-08-03 21:31:36 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys + 2008-04-14 02:34:21 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe + 2004-08-03 21:31:42 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys + 2008-04-14 02:33:41 25,600 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll + 2004-08-05 12:00:00 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll + 2008-04-14 02:33:41 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll + 2008-04-14 02:33:41 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll + 2008-04-14 02:33:41 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll + 2008-04-14 02:33:41 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll + 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys + 2004-08-03 21:41:42 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys + 2004-08-03 21:41:44 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys + 2004-08-03 21:41:46 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys + 2008-04-14 02:34:22 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe + 2008-04-14 02:34:22 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe + 2004-08-03 21:41:46 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys + 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys + 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys + 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys + 2008-04-14 02:34:22 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe + 2008-04-14 02:34:22 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe + 2008-04-14 02:33:41 370,176 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll + 2008-04-14 02:34:22 93,184 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe + 2008-04-14 02:34:22 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe + 2008-04-14 02:33:41 466,432 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll + 2008-04-14 02:34:22 133,120 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe + 2008-04-14 02:33:41 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll + 2008-04-14 02:34:22 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe + 2008-04-14 02:33:41 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll + 2008-04-14 02:33:41 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll + 2008-04-14 02:33:41 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll + 2008-04-14 02:33:41 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll + 2008-04-14 02:33:41 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll + 2008-04-14 02:33:41 184,320 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll + 2008-04-14 02:33:41 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll + 2008-04-14 02:34:22 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe + 2008-04-14 02:33:41 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll + 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys + 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys + 2008-04-14 02:34:22 26,112 ------w c:\windows\ServicePackFiles\i386\sort.exe + 2008-04-14 02:34:22 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe + 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll + 2008-04-14 02:34:23 539,136 ------w c:\windows\ServicePackFiles\i386\spider.exe + 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys + 2008-04-13 18:34:24 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe + 2008-04-14 02:33:41 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll + 2008-04-14 02:34:23 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe + 2008-04-13 18:35:20 197,632 ------w c:\windows\ServicePackFiles\i386\sprs040c.dll + 2008-04-13 18:36:46 2,986,496 ------w c:\windows\ServicePackFiles\i386\sprt040c.dll + 2008-04-13 18:39:17 778,752 ------w c:\windows\ServicePackFiles\i386\spru040c.dll + 2008-04-14 02:33:46 272,384 ------w c:\windows\ServicePackFiles\i386\sptip.dll + 2008-04-14 02:34:23 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe + 2008-04-14 02:33:46 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll + 2008-04-14 02:33:46 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll + 2008-04-14 02:33:46 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll + 2008-04-14 02:33:46 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll + 2008-04-14 02:33:46 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll + 2008-04-14 02:33:46 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll + 2008-04-14 02:33:46 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll + 2008-04-14 02:10:03 73,600 ------w c:\windows\ServicePackFiles\i386\sr.sys + 2008-04-14 02:33:46 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll + 2008-04-14 02:33:46 727,102 ------w c:\windows\ServicePackFiles\i386\srchui.dll + 2008-04-14 02:33:46 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll + 2008-04-14 02:33:46 241,664 ------w c:\windows\ServicePackFiles\i386\srrstr.dll + 2008-04-14 02:33:46 171,520 ------w c:\windows\ServicePackFiles\i386\srsvc.dll + 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys + 2008-04-14 02:33:46 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll + 2008-04-14 02:34:32 708,608 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr + 2008-04-14 02:34:32 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr + 2008-04-14 02:33:46 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll + 2008-04-14 02:33:46 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll + 2008-04-14 02:34:32 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr + 2008-04-14 02:34:33 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr + 2008-04-14 02:34:33 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr + 2008-04-14 02:34:33 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr + 2008-04-14 02:34:33 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr + 2008-04-14 02:34:33 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr + 2008-04-14 02:34:33 684,032 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr + 2008-04-14 02:33:46 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll + 2008-04-14 02:33:46 26,624 ------w c:\windows\ServicePackFiles\i386\startoc.dll + 2008-04-14 02:33:46 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll + 2008-04-14 02:33:46 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll + 2008-04-14 02:33:46 68,608 ------w c:\windows\ServicePackFiles\i386\sti.dll + 2008-04-14 02:33:46 138,240 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll + 2008-04-14 02:34:23 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe + 2008-04-14 02:33:46 122,368 ------w c:\windows\ServicePackFiles\i386\stobject.dll + 2008-04-14 02:33:46 76,800 ------w c:\windows\ServicePackFiles\i386\storprop.dll + 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys + 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys + 2008-04-14 02:33:46 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll + 2008-04-14 02:34:23 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe + 2008-04-14 02:34:23 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe + 2008-04-14 02:34:23 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe + 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys + 2008-04-14 02:33:46 716,800 ------w c:\windows\ServicePackFiles\i386\sxs.dll + 2008-04-14 02:33:46 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll + 2008-04-14 02:33:46 197,120 ------w c:\windows\ServicePackFiles\i386\syncui.dll + 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys + 2008-04-14 02:33:46 193,536 ------w c:\windows\ServicePackFiles\i386\sysmod.dll + 2008-04-14 02:33:46 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll + 2008-04-14 02:34:24 107,520 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe + 2008-04-14 02:33:46 1,013,248 ------w c:\windows\ServicePackFiles\i386\syssetup.dll + 2008-04-14 02:33:46 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll + 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys + 2008-04-14 02:33:46 860,160 ------w c:\windows\ServicePackFiles\i386\tapi3.dll + 2008-04-14 02:33:46 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll + 2008-04-14 02:33:46 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll + 2008-04-14 02:34:25 143,360 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe + 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys + 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys + 2008-04-14 02:33:46 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll + 2008-04-14 02:33:46 46,592 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll + 2008-04-14 02:33:46 47,104 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll + 2008-04-14 02:34:25 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe + 2003-04-14 18:29:34 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll + 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys + 2008-04-14 02:34:52 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys + 2008-04-14 02:34:53 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys + 2008-04-14 02:34:25 78,336 ------w c:\windows\ServicePackFiles\i386\telnet.exe + 2008-04-14 02:34:52 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys + 2008-04-14 02:33:46 358,912 ------w c:\windows\ServicePackFiles\i386\termmgr.dll + 2008-04-14 02:33:46 297,984 ------w c:\windows\ServicePackFiles\i386\termsrv.dll + 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys + 2008-04-14 02:33:46 391,168 ------w c:\windows\ServicePackFiles\i386\themeui.dll + 2008-04-14 02:34:25 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe + 2008-04-14 02:34:25 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe + 2008-04-14 02:34:25 13,312 ------w c:\windows\ServicePackFiles\i386\tracert.exe + 2008-04-14 02:34:31 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com + 2008-04-14 02:33:46 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll + 2008-04-14 02:33:46 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat + 2008-04-14 02:33:46 94,208 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs + 2008-04-14 02:33:06 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll + 2008-04-14 02:34:53 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll + 2008-04-14 02:33:46 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll + 2008-04-14 02:33:46 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll + 2008-04-14 02:33:46 132,096 ------w c:\windows\ServicePackFiles\i386\tsoc.dll + 2008-04-14 02:33:46 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll + 2008-04-14 02:33:46 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll + 2008-04-14 01:54:11 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll + 2008-04-14 02:33:47 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll + 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys + 2008-04-14 02:33:47 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll + 2008-04-14 02:33:47 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll + 2008-04-14 02:33:47 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll + 2008-04-14 02:34:25 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe + 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys + 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys + 2008-04-14 02:33:47 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll + 2008-04-14 02:33:47 311,808 ------w c:\windows\ServicePackFiles\i386\ulib.dll + 2008-04-14 02:33:47 36,864 ------w c:\windows\ServicePackFiles\i386\umandlg.dll + 2008-04-14 02:33:47 124,928 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll + 2008-04-14 02:33:47 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll + 2008-04-14 02:33:47 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll + 2008-04-14 02:33:47 78,848 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll + 2008-04-14 02:33:47 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll + 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll + 2008-04-14 02:33:47 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll + 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys + 2008-04-14 02:34:26 151,040 ------w c:\windows\ServicePackFiles\i386\uploadm.exe + 2008-04-14 02:33:47 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll + 2008-04-14 02:34:26 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe + 2008-04-14 02:33:48 186,368 ------w c:\windows\ServicePackFiles\i386\upnphost.dll + 2008-04-14 02:33:48 240,128 ------w c:\windows\ServicePackFiles\i386\upnpui.dll + 2008-04-14 02:34:26 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe + 2008-04-14 02:33:48 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll + 2008-04-14 02:33:48 621,568 ------w c:\windows\ServicePackFiles\i386\urlmon.dll + 2004-08-03 23:43:18 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys + 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys + 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys + 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys + 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys + 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys + 2008-04-14 02:33:48 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll + 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys + 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys + 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys + 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys + 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys + 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys + 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys + 2008-04-14 02:33:48 77,312 ------w c:\windows\ServicePackFiles\i386\usbui.dll + 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys + 2008-04-14 02:33:48 579,584 ------w c:\windows\ServicePackFiles\i386\user32.dll + 2008-04-14 02:33:48 734,720 ------w c:\windows\ServicePackFiles\i386\userenv.dll + 2008-04-14 02:34:26 26,624 ------w c:\windows\ServicePackFiles\i386\userinit.exe + 2008-04-14 02:33:48 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll + 2008-04-14 02:34:26 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe + 2008-04-14 02:33:48 219,648 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll + 2008-04-14 02:33:48 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll + 2008-04-14 02:33:48 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll + 2008-04-14 02:33:48 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll + 2008-04-14 02:33:48 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll + 2008-04-14 02:33:48 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll + 2008-04-14 02:34:26 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe + 2008-04-14 02:33:48 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll + 2008-04-14 02:33:48 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll + 2008-04-14 02:33:48 54,784 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll + 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys + 2008-04-14 02:33:48 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll + 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys + 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys + 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys + 2008-04-14 02:33:48 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll + 2008-04-14 01:56:04 53,376 ------w c:\windows\ServicePackFiles\i386\volsnap.sys + 2008-04-14 02:33:48 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll + 2008-04-14 02:34:26 295,424 ------w c:\windows\ServicePackFiles\i386\vssvc.exe + 2008-04-14 02:33:48 178,176 ------w c:\windows\ServicePackFiles\i386\w32time.dll + 2008-04-14 02:33:48 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll + 2008-04-14 02:33:48 498,176 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll + 2008-04-14 02:34:26 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe + 2008-04-14 02:33:48 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll + 2008-04-14 01:56:23 263,168 ------w c:\windows\ServicePackFiles\i386\wab32res.dll + 2008-04-14 02:33:48 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll + 2008-04-14 02:33:48 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll + 2008-04-14 02:34:26 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe + 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys + 2004-08-03 21:29:38 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys + 2004-08-03 21:29:38 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys + 2004-08-03 21:29:38 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys + 2004-08-03 21:29:40 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys + 2004-08-03 21:29:40 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys + 2004-08-03 21:29:42 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys + 2004-08-03 21:29:42 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys + 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys + 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys + 2004-08-03 21:29:42 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys + 2004-08-03 21:29:44 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys + 2004-08-03 21:29:44 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys + 2004-08-03 21:29:46 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys + 2004-08-03 21:29:46 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys + 2008-04-14 02:33:48 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll + 2008-04-14 02:33:48 201,216 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll + 2008-04-14 02:33:48 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll + 2008-04-14 02:33:48 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll + 2008-04-14 02:33:48 531,456 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll + 2008-04-14 02:33:48 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll + 2008-04-14 02:33:48 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll + 2008-04-14 02:33:48 44,544 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll + 2008-04-14 02:33:48 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll + 2008-04-14 02:33:48 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll + 2008-04-14 02:34:26 119,808 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe + 2008-04-14 02:33:48 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll + 2008-04-14 01:57:13 32,128 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys + 2004-08-03 21:29:46 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys + 2008-04-14 02:33:48 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll + 2008-04-14 02:34:34 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv + 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys + 2008-04-14 02:33:48 281,600 ------w c:\windows\ServicePackFiles\i386\webcheck.dll + 2008-04-14 02:33:48 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll + 2008-04-14 02:33:48 136,192 ------w c:\windows\ServicePackFiles\i386\webvw.dll + 2008-04-14 02:34:26 66,560 ------w c:\windows\ServicePackFiles\i386\wextract.exe + 2008-04-14 02:34:27 438,784 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe + 2008-04-14 02:33:48 465,920 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll + 2008-04-14 02:33:48 124,928 ------w c:\windows\ServicePackFiles\i386\wiadss.dll + 2008-04-14 02:33:48 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll + 2008-04-14 02:33:48 334,336 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll + 2008-04-14 02:33:48 594,432 ------w c:\windows\ServicePackFiles\i386\wiashext.dll + 2008-04-14 02:33:48 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll + 2008-04-14 02:33:48 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll + 2008-04-14 02:33:48 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll + 2008-04-14 01:58:06 1,845,760 ------w c:\windows\ServicePackFiles\i386\win32k.sys + 2008-04-14 02:33:48 102,912 ------w c:\windows\ServicePackFiles\i386\win32spl.dll + 2008-04-14 01:58:13 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll + 2008-04-14 02:34:27 288,256 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe + 2008-04-14 02:33:48 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll + 2008-04-14 02:33:48 670,208 ------w c:\windows\ServicePackFiles\i386\wininet.dll + 2008-04-14 02:33:48 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll + 2008-04-14 02:34:28 512,000 ------w c:\windows\ServicePackFiles\i386\winlogon.exe + 2008-04-14 02:33:48 180,736 ------w c:\windows\ServicePackFiles\i386\winmm.dll + 2004-08-05 12:00:00 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll + 2008-04-14 02:32:53 764,416 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll + 2008-04-14 02:33:48 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll + 2008-04-14 02:33:48 100,352 ------w c:\windows\ServicePackFiles\i386\winscard.dll + 2008-04-14 02:33:48 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll + 2008-04-14 02:34:34 146,944 ------w c:\windows\ServicePackFiles\i386\winspool.drv + 2008-04-14 02:33:48 293,888 ------w c:\windows\ServicePackFiles\i386\winsrv.dll + 2008-04-14 02:33:48 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll + 2008-04-14 02:33:48 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll + 2008-04-14 02:34:28 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe + 2008-04-14 02:33:48 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll + 2008-04-14 02:33:48 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll + 2008-04-14 02:33:48 172,544 ------w c:\windows\ServicePackFiles\i386\wldap32.dll + 2004-08-03 21:31:28 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys + 2008-04-14 02:33:48 94,208 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll + 2008-04-14 02:32:55 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll + 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys + 2008-04-14 02:34:28 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe + 2008-04-14 01:59:39 7,680 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll + 2008-04-14 02:33:48 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll + 2008-04-14 02:34:28 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe + 2008-04-14 02:33:48 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll + 2008-04-14 02:33:48 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll + 2008-04-14 02:33:48 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll + 2008-04-14 02:33:48 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll + 2008-04-14 02:33:48 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll + 2008-04-14 02:33:48 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll + 2008-04-14 02:33:48 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll + 2008-04-14 02:33:48 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll + 2008-04-14 02:34:28 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe + 2008-04-14 02:33:48 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll + 2008-04-14 02:33:48 145,408 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll + 2008-04-14 02:33:48 99,328 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll + 2008-04-14 02:33:48 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll + 2008-04-14 02:33:48 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll + 2008-04-14 02:33:48 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll + 2008-04-14 02:33:48 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll + 2008-04-14 02:33:48 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll + 2008-04-14 02:33:48 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll + 2008-04-14 02:33:48 4,290,048 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll + 2008-04-14 02:33:48 6,144 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll + 2008-04-14 02:33:48 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll + 2008-04-14 02:34:29 218,112 ------w c:\windows\ServicePackFiles\i386\wordpad.exe + 2008-04-14 02:33:49 265,216 ------w c:\windows\ServicePackFiles\i386\wow32.dll + 2008-04-14 02:34:29 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe + 2008-04-14 02:34:29 11,776 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe + 2008-04-14 02:33:49 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll + 2008-04-14 02:33:49 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll + 2008-04-14 02:34:29 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe + 2008-04-14 02:34:29 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe + 2008-04-14 02:33:50 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll + 2008-04-14 02:33:50 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll + 2008-04-14 02:33:50 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll + 2008-04-14 02:33:50 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll + 2008-04-14 02:33:50 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll + 2008-04-14 02:33:50 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll + 2008-04-14 02:33:50 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll + 2008-04-14 02:33:50 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll + 2004-08-03 21:29:48 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys + 2008-04-14 02:33:50 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll + 2008-04-14 02:33:50 25,088 ------w c:\windows\ServicePackFiles\i386\wsock32.dll + 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys + 2008-04-14 02:33:50 51,200 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll + 2008-04-14 02:33:50 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll + 2008-04-14 02:33:50 432,640 ------w c:\windows\ServicePackFiles\i386\wuapi.dll + 2008-04-14 02:34:29 112,640 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe + 2008-04-14 02:34:29 168,960 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe + 2008-04-14 02:33:50 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll + 2008-04-14 02:33:50 184,320 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll + 2008-04-14 02:33:50 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll + 2008-04-14 02:33:51 114,176 ------w c:\windows\ServicePackFiles\i386\wucltui.dll + 2008-04-14 02:33:51 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll + 2008-04-14 02:33:51 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll + 2004-08-03 21:29:50 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys + 2008-04-14 02:33:51 384,000 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll + 2008-04-14 02:33:51 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll + 2008-04-14 02:33:52 483,840 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll + 2008-04-14 02:33:52 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll + 2008-04-14 02:34:29 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe + 2004-08-05 12:00:00 177,784 ------w c:\windows\ServicePackFiles\i386\xenroll.dll + 2008-04-14 02:33:52 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll + 2008-04-14 02:33:52 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll + 2008-04-14 02:33:52 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll + 2008-04-14 02:33:52 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe + 2008-04-14 02:04:46 197,632 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll + 2008-04-13 17:39:24 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll + 2008-04-14 02:33:52 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll + 2008-04-14 02:33:52 116,736 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll + 2008-04-14 02:33:52 340,992 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll + 2008-04-14 02:33:22 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll + 2008-04-14 02:33:31 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll + 2008-04-14 02:34:13 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe + 2008-04-14 02:34:22 32,866 ------w c:\windows\slrundll.exe - 2005-10-24 12:45:00 90,112 ----a-w c:\windows\soundman.exe + 2007-04-16 14:28:22 577,536 ----a-w c:\windows\soundman.exe - 2004-08-05 12:00:00 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll + 2008-04-14 02:33:31 3,166,208 ----a-w c:\windows\srchasst\msgr3en.dll - 2004-08-05 12:00:00 58,434 ----a-w c:\windows\srchasst\srchctls.dll + 2008-04-14 02:33:46 58,434 ----a-w c:\windows\srchasst\srchctls.dll - 2004-08-05 12:00:00 726,590 ----a-w c:\windows\srchasst\srchui.dll + 2008-04-14 02:33:46 727,102 ----a-w c:\windows\srchasst\srchui.dll - 1997-02-27 00:00:00 73,216 ----a-w c:\windows\ST5UNST.EXE + 1997-02-26 22:00:00 73,216 ----a-w c:\windows\ST5UNST.EXE + 2008-04-12 18:51:00 74,752 ----a-w c:\windows\ST6UNST.EXE + 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe + 2000-08-31 07:00:00 136,704 ----a-w c:\windows\SWSC.exe + 2000-08-31 07:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe + 2004-08-05 12:00:00 2,000 ----a-w c:\windows\system\KEYBOARD.DRV + 2004-08-05 12:00:00 73,680 ----a-w c:\windows\system\MCIAVI.DRV + 2004-08-05 12:00:00 25,280 ----a-w c:\windows\system\MCISEQ.DRV + 2004-08-05 12:00:00 28,160 ----a-w c:\windows\system\MCIWAVE.DRV + 2004-08-05 12:00:00 2,032 ----a-w c:\windows\system\MOUSE.DRV + 2004-08-05 12:00:00 1,744 ----a-w c:\windows\system\SOUND.DRV + 2004-08-05 12:00:00 3,360 ----a-w c:\windows\system\SYSTEM.DRV + 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system\TIMER.DRV + 2004-08-05 12:00:00 2,176 ----a-w c:\windows\system\VGA.DRV + 2004-08-05 12:00:00 13,600 ----a-w c:\windows\system\WFWNET.DRV + 1999-09-10 10:06:00 5,600 ----a-w c:\windows\system\WINASPI.DLL + 2008-04-14 02:34:34 146,944 ----a-w c:\windows\system\winspool.drv + 1999-09-10 10:06:00 4,672 ----a-w c:\windows\system\WOWPOST.EXE - 2006-08-16 11:59:27 100,352 ----a-w c:\windows\system32\6to4svc.dll + 2008-04-14 02:33:18 100,352 ----a-w c:\windows\system32\6to4svc.dll + 2008-04-14 02:33:18 136,192 ------w c:\windows\system32\aaclient.dll - 2004-08-05 12:00:00 189,952 ----a-w c:\windows\system32\accwiz.exe + 2008-04-14 02:33:53 190,464 ----a-w c:\windows\system32\accwiz.exe - 2004-08-05 12:00:00 119,296 ----a-w c:\windows\system32\aclui.dll + 2008-04-14 02:33:18 120,320 ----a-w c:\windows\system32\aclui.dll - 2004-08-05 12:00:00 194,048 ----a-w c:\windows\system32\activeds.dll + 2008-04-14 02:33:18 193,536 ----a-w c:\windows\system32\activeds.dll - 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\actmovie.exe + 2008-04-14 02:33:53 4,096 ----a-w c:\windows\system32\actmovie.exe - 2004-08-05 12:00:00 101,888 ----a-w c:\windows\system32\actxprxy.dll + 2008-04-14 02:33:18 98,304 ----a-w c:\windows\system32\actxprxy.dll - 2006-11-07 02:26:44 71,680 ----a-w c:\windows\system32\admparse.dll + 2007-08-13 17:39:20 71,680 ----a-w c:\windows\system32\admparse.dll + 2008-03-19 17:23:20 114,688 ----a-w c:\windows\system32\Adobe\Director\np32dsw.dll + 2008-03-19 17:36:22 202,168 ----a-w c:\windows\system32\Adobe\Director\SwDir.dll + 2008-03-19 17:24:02 487,424 ----a-w c:\windows\system32\Adobe\Shockwave 11\Control.dll + 2008-03-19 16:46:26 1,798,144 ----a-w c:\windows\system32\Adobe\Shockwave 11\dirapi.dll + 2008-03-19 17:24:04 9,216 ----a-w c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll + 2008-03-19 16:36:14 754,688 ----a-w c:\windows\system32\Adobe\Shockwave 11\gi.dll + 2008-03-19 16:36:16 1,145,896 ----a-w c:\windows\system32\Adobe\Shockwave 11\gt.exe + 2008-03-19 16:36:14 52,288 ----a-w c:\windows\system32\Adobe\Shockwave 11\gtapi.dll + 2008-03-19 16:42:42 892,928 ----a-w c:\windows\system32\Adobe\Shockwave 11\iml32.dll + 2008-03-19 17:22:34 249,856 ----a-w c:\windows\system32\Adobe\Shockwave 11\Plugin.dll + 2008-03-19 17:25:36 442,368 ----a-w c:\windows\system32\Adobe\Shockwave 11\Proj.dll + 2008-03-19 17:36:06 439,736 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwHelper_1100429.exe + 2008-03-19 17:26:20 110,592 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwInit.exe + 2008-03-19 17:22:22 94,208 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll + 2008-03-19 16:36:14 50,808 ----a-w c:\windows\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL + 1999-06-25 08:55:30 149,504 ----a-w c:\windows\system32\Adobe\Shockwave 11\UNWISE.EXE - 2004-08-05 12:00:00 175,616 ----a-w c:\windows\system32\adsldp.dll + 2008-04-14 02:33:18 175,616 ----a-w c:\windows\system32\adsldp.dll - 2004-08-05 12:00:00 143,360 ----a-w c:\windows\system32\adsldpc.dll + 2008-04-14 02:33:18 143,360 ----a-w c:\windows\system32\adsldpc.dll - 2004-08-05 12:00:00 68,096 ----a-w c:\windows\system32\adsmsext.dll + 2008-04-14 02:33:18 68,096 ----a-w c:\windows\system32\adsmsext.dll - 2004-08-05 12:00:00 263,680 ----a-w c:\windows\system32\adsnt.dll + 2008-04-14 02:33:18 263,680 ----a-w c:\windows\system32\adsnt.dll - 2004-08-05 12:00:00 685,056 ----a-w c:\windows\system32\advapi32.dll + 2008-04-14 02:33:18 685,568 ----a-w c:\windows\system32\advapi32.dll - 2007-08-20 09:59:29 124,928 ----a-w c:\windows\system32\advpack.dll + 2008-08-26 08:11:45 124,928 ----a-w c:\windows\system32\advpack.dll - 2004-08-05 12:00:00 98,304 ----a-w c:\windows\system32\ahui.exe + 2008-04-14 02:33:53 98,304 ----a-w c:\windows\system32\ahui.exe - 2004-08-05 12:00:00 44,544 ----a-w c:\windows\system32\alg.exe + 2008-04-14 02:33:53 44,544 ----a-w c:\windows\system32\alg.exe - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\alrsvc.dll + 2008-04-14 02:33:19 17,408 ----a-w c:\windows\system32\alrsvc.dll - 2004-08-05 12:00:00 70,656 ----a-w c:\windows\system32\amstream.dll + 2008-04-14 02:33:19 70,656 ----a-w c:\windows\system32\amstream.dll - 2004-08-05 12:00:00 126,976 ----a-w c:\windows\system32\apphelp.dll + 2008-04-14 02:33:19 125,952 ----a-w c:\windows\system32\apphelp.dll - 2004-08-05 12:00:00 65,024 ----a-w c:\windows\system32\asycfilt.dll + 2008-04-14 02:33:19 65,024 ----a-w c:\windows\system32\asycfilt.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\at.exe + 2008-04-14 02:33:53 25,088 ----a-w c:\windows\system32\at.exe - 2004-08-04 00:54:22 229,376 ----a-w c:\windows\system32\ati2cqag.dll + 2008-04-14 02:33:19 229,376 ----a-w c:\windows\system32\ati2cqag.dll + 2008-04-14 02:33:19 377,984 ------w c:\windows\system32\ati2dvaa.dll - 2004-08-04 00:54:22 201,728 ----a-w c:\windows\system32\ati2dvag.dll + 2008-04-14 02:33:19 201,728 ----a-w c:\windows\system32\ati2dvag.dll - 2004-08-04 00:54:22 870,784 ----a-w c:\windows\system32\ati3d1ag.dll + 2008-04-14 02:33:19 870,784 ----a-w c:\windows\system32\ati3d1ag.dll - 2004-08-04 00:54:22 1,888,992 ----a-w c:\windows\system32\ati3duag.dll + 2008-04-14 02:33:19 1,888,992 ----a-w c:\windows\system32\ati3duag.dll + 2008-04-14 02:33:19 32,768 ------w c:\windows\system32\ativtmxx.dll - 2004-08-04 00:54:22 516,768 ----a-w c:\windows\system32\ativvaxx.dll + 2008-04-14 02:33:19 516,768 ----a-w c:\windows\system32\ativvaxx.dll - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\atl.dll + 2008-04-14 02:33:19 58,880 ----a-w c:\windows\system32\atl.dll - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\atmadm.exe + 2008-04-14 02:33:53 11,264 ----a-w c:\windows\system32\atmadm.exe - 2004-08-05 12:00:00 285,696 ----a-w c:\windows\system32\atmfd.dll + 2008-04-14 02:31:00 285,696 ----a-w c:\windows\system32\atmfd.dll - 2004-08-05 12:00:00 30,208 ----a-w c:\windows\system32\atmlib.dll + 2008-04-14 02:33:19 30,208 ----a-w c:\windows\system32\atmlib.dll - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\attrib.exe + 2008-04-14 02:33:53 12,288 ----a-w c:\windows\system32\attrib.exe - 2004-08-05 12:00:00 42,496 ----a-w c:\windows\system32\audiosrv.dll + 2008-04-14 02:33:19 42,496 ----a-w c:\windows\system32\audiosrv.dll - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\auditusr.exe + 2008-04-14 02:33:53 14,336 ----a-w c:\windows\system32\auditusr.exe + 2002-03-26 08:19:42 23,040 ----a-w c:\windows\system32\auth.dll - 2005-03-02 18:10:36 56,832 ----a-w c:\windows\system32\authz.dll + 2008-04-14 02:33:19 62,464 ----a-w c:\windows\system32\authz.dll - 2004-08-05 12:00:00 625,152 ----a-w c:\windows\system32\autochk.exe + 2008-04-14 02:33:53 625,152 ----a-w c:\windows\system32\autochk.exe - 2004-08-05 12:00:00 638,976 ----a-w c:\windows\system32\autoconv.exe + 2008-04-14 02:33:53 638,976 ----a-w c:\windows\system32\autoconv.exe - 2004-08-05 12:00:00 616,960 ----a-w c:\windows\system32\autofmt.exe + 2008-04-14 02:33:54 616,960 ----a-w c:\windows\system32\autofmt.exe - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\autolfn.exe + 2008-04-14 02:33:54 11,264 ----a-w c:\windows\system32\autolfn.exe - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\avifil32.dll + 2008-04-14 02:33:19 85,504 ----a-w c:\windows\system32\avifil32.dll + 2005-10-07 17:14:52 308,224 ----a-w c:\windows\system32\avisynth.dll + 2008-04-14 02:33:19 233,472 ------w c:\windows\system32\azroles.dll - 2004-08-05 12:00:00 52,736 ----a-w c:\windows\system32\basesrv.dll + 2008-04-14 02:33:19 52,736 ----a-w c:\windows\system32\basesrv.dll - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\batmeter.dll + 2008-04-14 02:33:19 29,184 ----a-w c:\windows\system32\batmeter.dll - 2004-08-05 12:00:00 8,704 ----a-w c:\windows\system32\batt.dll + 2008-04-14 02:33:19 8,704 ----a-w c:\windows\system32\batt.dll - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\bidispl.dll + 2008-04-14 02:33:19 17,408 ----a-w c:\windows\system32\bidispl.dll + 2008-04-14 02:33:39 409,088 ------w c:\windows\system32\bits\qmgr.dll - 2004-08-05 12:00:00 8,192 ----a-w c:\windows\system32\bitsprx2.dll + 2008-04-14 02:33:19 8,192 ----a-w c:\windows\system32\bitsprx2.dll - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\bitsprx3.dll + 2008-04-14 02:33:19 7,168 ----a-w c:\windows\system32\bitsprx3.dll + 2008-04-14 02:33:19 7,168 ------w c:\windows\system32\bitsprx4.dll - 2004-08-05 12:00:00 71,680 ----a-w c:\windows\system32\blastcln.exe + 2008-04-14 02:33:55 71,680 ----a-w c:\windows\system32\blastcln.exe - 2004-08-05 12:00:00 70,144 ----a-w c:\windows\system32\browselc.dll + 2008-04-14 01:57:48 70,144 ----a-w c:\windows\system32\browselc.dll - 2004-08-05 12:00:00 77,312 ----a-w c:\windows\system32\browser.dll + 2008-04-14 02:33:20 77,824 ----a-w c:\windows\system32\browser.dll - 2006-10-23 15:34:35 1,022,976 ----a-w c:\windows\system32\browseui.dll + 2008-04-14 02:33:20 1,025,024 ----a-w c:\windows\system32\browseui.dll - 2004-08-05 12:00:00 78,336 ----a-w c:\windows\system32\browsewm.dll + 2008-04-14 02:33:20 78,336 ----a-w c:\windows\system32\browsewm.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\bthci.dll + 2008-04-14 02:33:20 20,992 ----a-w c:\windows\system32\bthci.dll - 2004-08-05 12:00:00 30,208 ----a-w c:\windows\system32\bthserv.dll + 2008-04-14 02:33:20 30,208 ----a-w c:\windows\system32\bthserv.dll - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\btpanui.dll + 2008-04-14 02:33:20 50,688 ----a-w c:\windows\system32\btpanui.dll - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\cabinet.dll + 2008-04-14 02:33:20 60,416 ----a-w c:\windows\system32\cabinet.dll - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\cabview.dll + 2008-04-14 02:33:20 85,504 ----a-w c:\windows\system32\cabview.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\system32\cacls.exe + 2008-04-14 02:33:55 20,992 ----a-w c:\windows\system32\cacls.exe - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\camocx.dll + 2008-04-14 02:33:20 50,688 ----a-w c:\windows\system32\camocx.dll - 2004-08-05 12:00:00 146,432 ----a-w c:\windows\system32\capesnpn.dll + 2008-04-14 02:33:20 153,600 ----a-w c:\windows\system32\capesnpn.dll - 2006-08-03 15:29:28 466,944 ----a-w c:\windows\system32\capicom.dll + 2004-11-02 12:41:52 516,832 ----a-w c:\windows\system32\capicom.dll - 2005-07-26 04:39:54 225,792 ----a-w c:\windows\system32\catsrv.dll + 2008-04-14 02:33:20 226,304 ----a-w c:\windows\system32\catsrv.dll - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\catsrvps.dll + 2008-04-14 02:33:20 85,504 ----a-w c:\windows\system32\catsrvps.dll - 2005-07-26 04:39:54 625,152 ----a-w c:\windows\system32\catsrvut.dll + 2008-04-14 02:33:20 625,664 ----a-w c:\windows\system32\catsrvut.dll - 2006-10-23 15:34:35 152,064 ----a-w c:\windows\system32\cdfview.dll + 2008-04-14 02:33:20 152,064 ----a-w c:\windows\system32\cdfview.dll - 2005-09-10 01:55:14 2,067,968 ----a-w c:\windows\system32\cdosys.dll + 2008-04-14 02:33:20 2,091,520 ----a-w c:\windows\system32\cdosys.dll - 2004-08-05 12:00:00 200,192 ----a-w c:\windows\system32\certcli.dll + 2008-04-14 02:33:20 200,192 ----a-w c:\windows\system32\certcli.dll - 2004-08-05 12:00:00 467,968 ----a-w c:\windows\system32\certmgr.dll + 2008-04-14 02:33:20 467,968 ----a-w c:\windows\system32\certmgr.dll + 2006-11-13 13:06:04 23,336 ----a-w c:\windows\system32\ceutil.dll - 2004-08-05 12:00:00 39,424 ----a-w c:\windows\system32\cfgbkend.dll + 2008-04-14 02:33:20 39,424 ----a-w c:\windows\system32\cfgbkend.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\cfgmgr32.dll + 2008-04-14 02:31:03 16,896 ----a-w c:\windows\system32\cfgmgr32.dll - 2005-07-15 14:48:00 40,960 ----a-w c:\windows\system32\ChCfg.exe + 2006-08-01 14:02:00 49,152 ----a-w c:\windows\system32\ChCfg.exe - 2004-08-05 12:00:00 109,568 ----a-w c:\windows\system32\cic.dll + 2008-04-14 02:33:20 148,480 ----a-w c:\windows\system32\cic.dll - 2006-06-22 05:13:45 69,120 ----a-w c:\windows\system32\ciodm.dll + 2008-04-14 02:33:20 69,120 ----a-w c:\windows\system32\ciodm.dll - 2004-08-05 12:00:00 5,632 ----a-w c:\windows\system32\cisvc.exe + 2008-04-14 02:33:57 5,632 ----a-w c:\windows\system32\cisvc.exe - 2005-07-26 04:39:55 110,080 ----a-w c:\windows\system32\clbcatex.dll + 2008-04-14 02:33:21 110,592 ----a-w c:\windows\system32\clbcatex.dll - 2005-07-26 04:39:55 498,688 ----a-w c:\windows\system32\clbcatq.dll + 2008-04-14 02:33:21 498,688 ----a-w c:\windows\system32\clbcatq.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\cleanmgr.exe + 2008-04-14 02:33:57 65,536 ----a-w c:\windows\system32\cleanmgr.exe - 2004-08-05 12:00:00 77,824 ----a-w c:\windows\system32\cliconfg.dll + 2008-04-14 02:33:21 77,824 ----a-w c:\windows\system32\cliconfg.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\system32\cliconfg.exe + 2008-04-14 02:33:57 20,480 ----a-w c:\windows\system32\cliconfg.exe - 2004-08-05 12:00:00 104,448 ----a-w c:\windows\system32\clipbrd.exe + 2008-04-14 02:33:57 104,448 ----a-w c:\windows\system32\clipbrd.exe - 2004-08-05 12:00:00 33,280 ----a-w c:\windows\system32\clipsrv.exe + 2008-04-14 02:33:57 33,280 ----a-w c:\windows\system32\clipsrv.exe - 2004-08-05 12:00:00 57,856 ----a-w c:\windows\system32\clusapi.dll + 2008-04-14 02:33:21 58,368 ----a-w c:\windows\system32\clusapi.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\cmcfg32.dll + 2008-04-14 02:33:21 15,872 ----a-w c:\windows\system32\cmcfg32.dll + 1997-02-26 22:00:00 100,864 ----a-w c:\windows\system32\CmCtlFR.dll - 2004-08-05 12:00:00 400,896 ----a-w c:\windows\system32\cmd.exe + 2008-04-14 02:33:57 401,408 ----a-w c:\windows\system32\cmd.exe - 2004-08-05 12:00:00 352,256 ----a-w c:\windows\system32\cmdial32.dll + 2008-04-14 02:33:21 353,280 ----a-w c:\windows\system32\cmdial32.dll - 2004-08-05 12:00:00 47,104 ----a-w c:\windows\system32\cmdl32.exe + 2008-04-14 02:33:57 25,600 ----a-w c:\windows\system32\cmdl32.exe + 1997-02-26 22:00:00 32,256 ----a-w c:\windows\system32\CmDlgFR.dll - 2007-10-11 19:25:58 98,304 ----a-w c:\windows\system32\CmdLineExt.dll + 2007-11-20 11:17:24 98,304 ----a-w c:\windows\system32\CmdLineExt.dll - 2007-02-19 17:41:54 43,520 ----a-w c:\windows\system32\CmdLineExt03.dll + 2008-04-10 15:16:03 43,520 ----a-w c:\windows\system32\CmdLineExt03.dll - 2004-08-05 12:00:00 40,448 ----a-w c:\windows\system32\cmmon32.exe + 2008-04-14 02:33:57 39,936 ----a-w c:\windows\system32\cmmon32.exe - 2004-08-05 12:00:00 191,488 ----a-w c:\windows\system32\cmprops.dll + 2008-04-14 02:33:21 191,488 ----a-w c:\windows\system32\cmprops.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\cmsetACL.dll + 2008-04-14 02:33:21 13,312 ----a-w c:\windows\system32\cmsetacl.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\cmstp.exe + 2008-04-14 02:33:57 65,536 ----a-w c:\windows\system32\cmstp.exe - 2004-08-05 12:00:00 40,960 ----a-w c:\windows\system32\cmutil.dll + 2008-04-14 02:33:21 40,960 ----a-w c:\windows\system32\cmutil.dll - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\cnbjmon.dll + 2008-04-14 02:33:21 50,688 ----a-w c:\windows\system32\cnbjmon.dll - 2005-07-26 04:39:55 60,416 ----a-w c:\windows\system32\colbact.dll + 2008-04-14 02:33:21 60,416 ----a-w c:\windows\system32\colbact.dll - 2005-07-26 04:39:56 195,072 ----a-w c:\windows\system32\Com\comadmin.dll + 2008-04-14 02:33:21 195,072 ----a-w c:\windows\system32\Com\comadmin.dll - 2004-08-05 12:00:00 9,728 ----a-w c:\windows\system32\Com\comrepl.exe + 2008-04-14 02:33:57 9,728 ----a-w c:\windows\system32\Com\comrepl.exe - 2004-08-05 12:00:00 5,120 ----a-w c:\windows\system32\Com\comrereg.exe + 2008-04-14 02:33:57 6,144 ----a-w c:\windows\system32\Com\comrereg.exe - 2004-08-05 12:00:00 25,600 ----a-w c:\windows\system32\comaddin.dll + 2008-04-14 02:33:21 28,160 ----a-w c:\windows\system32\comaddin.dll - 2006-08-25 15:51:14 617,472 ----a-w c:\windows\system32\comctl32.dll + 2008-04-14 02:33:21 617,472 ----a-w c:\windows\system32\comctl32.dll - 2004-08-05 12:00:00 281,088 ----a-w c:\windows\system32\comdlg32.dll + 2008-04-14 02:33:21 281,600 ----a-w c:\windows\system32\comdlg32.dll + 2004-08-05 12:00:00 10,544 ----a-w c:\windows\system32\comm.drv - 2004-08-05 12:00:00 253,440 ----a-w c:\windows\system32\compatUI.dll + 2008-04-14 02:33:21 253,440 ----a-w c:\windows\system32\compatui.dll - 2004-08-05 12:00:00 230,912 ----a-w c:\windows\system32\compstui.dll + 2008-04-14 02:33:21 230,912 ----a-w c:\windows\system32\compstui.dll - 2005-07-26 04:39:56 97,792 ----a-w c:\windows\system32\comrepl.dll + 2008-04-14 02:33:21 97,792 ----a-w c:\windows\system32\comrepl.dll - 2004-08-05 12:00:00 851,968 ----a-w c:\windows\system32\comres.dll + 2008-04-14 02:33:21 851,968 ----a-w c:\windows\system32\comres.dll - 2004-08-05 12:00:00 147,456 ----a-w c:\windows\system32\comsnap.dll + 2008-04-14 02:33:21 167,424 ----a-w c:\windows\system32\comsnap.dll - 2005-07-26 04:39:57 1,267,200 ----a-w c:\windows\system32\comsvcs.dll + 2008-04-14 02:33:21 1,267,200 ----a-w c:\windows\system32\comsvcs.dll - 2005-07-26 04:39:57 540,160 ----a-w c:\windows\system32\comuid.dll + 2008-04-14 02:33:21 539,648 ----a-w c:\windows\system32\comuid.dll - 2006-07-26 08:27:07 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2008-11-01 08:20:34 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2006-07-26 08:27:07 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2008-11-01 08:20:34 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat + 2008-11-01 08:20:17 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008110120081102\index.dat - 2006-07-26 08:27:07 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2008-11-01 08:20:34 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2004-08-05 12:00:00 346,112 ----a-w c:\windows\system32\confmsp.dll + 2008-04-14 02:33:21 358,400 ----a-w c:\windows\system32\confmsp.dll - 2004-08-05 12:00:00 27,648 ----a-w c:\windows\system32\conime.exe + 2008-04-14 02:33:59 27,648 ----a-w c:\windows\system32\conime.exe + 2007-03-18 18:37:12 65,602 ----a-w c:\windows\system32\cook3260.dll - 2007-01-08 18:01:14 17,408 ----a-w c:\windows\system32\corpol.dll + 2008-04-14 02:33:21 35,328 ----a-w c:\windows\system32\corpol.dll + 2008-04-14 02:33:21 12,800 ------w c:\windows\system32\credssp.dll - 2004-08-05 12:00:00 165,888 ----a-w c:\windows\system32\credui.dll + 2008-04-14 02:33:21 165,888 ----a-w c:\windows\system32\credui.dll - 2004-08-05 12:00:00 604,672 ----a-w c:\windows\system32\crypt32.dll + 2008-04-14 02:33:21 606,208 ----a-w c:\windows\system32\crypt32.dll - 2004-08-05 12:00:00 75,776 ----a-w c:\windows\system32\cryptdlg.dll + 2008-04-14 02:33:21 75,776 ----a-w c:\windows\system32\cryptdlg.dll - 2004-08-05 12:00:00 33,280 ----a-w c:\windows\system32\cryptdll.dll + 2008-04-14 02:33:21 33,280 ----a-w c:\windows\system32\cryptdll.dll - 2004-08-05 12:00:00 54,784 ----a-w c:\windows\system32\cryptext.dll + 2008-04-14 02:33:21 54,784 ----a-w c:\windows\system32\cryptext.dll - 2004-08-05 12:00:00 63,488 ----a-w c:\windows\system32\cryptnet.dll + 2008-04-14 02:33:21 64,512 ----a-w c:\windows\system32\cryptnet.dll - 2004-08-05 12:00:00 60,416 ----a-w c:\windows\system32\cryptsvc.dll + 2008-04-14 02:33:21 62,464 ----a-w c:\windows\system32\cryptsvc.dll - 2004-08-05 12:00:00 530,432 ----a-w c:\windows\system32\cryptui.dll + 2008-04-14 02:33:21 530,432 ----a-w c:\windows\system32\cryptui.dll - 2004-08-05 12:00:00 102,912 ----a-w c:\windows\system32\cscdll.dll + 2008-04-14 02:33:21 102,912 ----a-w c:\windows\system32\cscdll.dll - 2004-08-05 12:00:00 98,304 ----a-w c:\windows\system32\cscript.exe + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\system32\cscript.exe - 2004-08-05 12:00:00 337,920 ----a-w c:\windows\system32\cscui.dll + 2008-04-14 02:33:21 337,920 ----a-w c:\windows\system32\cscui.dll - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\csrsrv.dll + 2008-04-14 02:33:22 32,256 ----a-w c:\windows\system32\csrsrv.dll - 2004-08-05 12:00:00 6,144 ----a-w c:\windows\system32\csrss.exe + 2008-04-14 02:33:59 6,144 ----a-w c:\windows\system32\csrss.exe + 2008-08-23 13:38:12 249,592 ----a-w c:\windows\system32\cssdll32.dll - 2004-08-05 12:00:00 15,360 ----a-w c:\windows\system32\ctfmon.exe + 2008-04-14 02:33:59 15,360 ----a-w c:\windows\system32\ctfmon.exe - 2004-08-05 12:00:00 1,179,648 ----a-w c:\windows\system32\d3d8.dll + 2008-04-14 02:33:22 1,179,648 ----a-w c:\windows\system32\d3d8.dll - 2004-08-05 12:00:00 8,192 ----a-w c:\windows\system32\d3d8thk.dll + 2008-04-14 02:33:22 8,192 ----a-w c:\windows\system32\d3d8thk.dll - 2004-08-05 12:00:00 1,689,088 ----a-w c:\windows\system32\d3d9.dll + 2008-04-14 02:33:22 1,689,088 ----a-w c:\windows\system32\d3d9.dll - 2004-08-05 12:00:00 825,344 ----a-w c:\windows\system32\d3dim700.dll + 2008-04-14 02:33:22 824,320 ----a-w c:\windows\system32\d3dim700.dll - 2005-03-18 15:19:58 2,337,488 ----a-w c:\windows\system32\d3dx9_25.dll + 2005-03-18 16:19:58 2,337,488 ----a-w c:\windows\system32\d3dx9_25.dll - 2006-10-23 15:34:36 1,056,768 ----a-w c:\windows\system32\danim.dll + 2008-04-14 02:33:22 1,056,768 ----a-w c:\windows\system32\danim.dll - 2004-08-05 12:00:00 55,296 ----a-w c:\windows\system32\dataclen.dll + 2008-04-14 02:33:22 55,296 ----a-w c:\windows\system32\dataclen.dll - 2004-08-05 12:00:00 152,064 ----a-w c:\windows\system32\datime.dll + 2008-04-14 02:33:22 165,376 ----a-w c:\windows\system32\datime.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\davclnt.dll + 2008-04-14 02:33:22 25,600 ----a-w c:\windows\system32\davclnt.dll - 2004-08-05 12:00:00 640,000 ----a-w c:\windows\system32\dbghelp.dll + 2008-04-14 02:33:22 640,000 ----a-w c:\windows\system32\dbghelp.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll + 2008-04-14 02:33:22 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll - 2004-08-05 12:00:00 110,592 ----a-w c:\windows\system32\dbnetlib.dll + 2008-04-14 02:33:22 110,592 ----a-w c:\windows\system32\dbnetlib.dll - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\dbnmpntw.dll + 2008-04-14 02:33:22 28,672 ----a-w c:\windows\system32\dbnmpntw.dll + 2008-04-14 02:50:20 1,804 ----a-w c:\windows\system32\dcache.bin - 2004-08-05 12:00:00 8,704 ----a-w c:\windows\system32\dciman32.dll + 2008-04-14 02:33:22 8,704 ----a-w c:\windows\system32\dciman32.dll - 2004-08-05 12:00:00 5,120 ----a-w c:\windows\system32\dcomcnfg.exe + 2008-04-14 02:33:59 6,144 ----a-w c:\windows\system32\dcomcnfg.exe - 2004-08-05 12:00:00 31,744 ----a-w c:\windows\system32\ddeshare.exe + 2008-04-14 02:33:59 31,744 ----a-w c:\windows\system32\ddeshare.exe - 2004-08-05 12:00:00 266,240 ----a-w c:\windows\system32\ddraw.dll + 2008-04-14 02:33:22 279,552 ----a-w c:\windows\system32\ddraw.dll - 2004-08-05 12:00:00 27,136 ----a-w c:\windows\system32\ddrawex.dll + 2008-04-14 02:33:22 27,136 ----a-w c:\windows\system32\ddrawex.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\defrag.exe + 2008-04-14 02:33:59 25,088 ----a-w c:\windows\system32\defrag.exe - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\devenum.dll + 2008-04-14 02:33:22 59,904 ----a-w c:\windows\system32\devenum.dll + 2004-02-22 08:11:09 719,872 ----a-w c:\windows\system32\devil.dll - 2004-08-05 12:00:00 290,816 ----a-w c:\windows\system32\devmgr.dll + 2008-04-14 02:33:22 290,816 ----a-w c:\windows\system32\devmgr.dll - 2004-08-05 12:00:00 82,432 ----a-w c:\windows\system32\dfrgfat.exe + 2008-04-14 02:33:59 82,944 ----a-w c:\windows\system32\dfrgfat.exe - 2004-08-05 12:00:00 104,960 ----a-w c:\windows\system32\dfrgntfs.exe + 2008-04-14 02:33:59 105,472 ----a-w c:\windows\system32\dfrgntfs.exe - 2004-08-05 12:00:00 39,424 ----a-w c:\windows\system32\dfrgsnap.dll + 2008-04-14 02:33:22 39,936 ----a-w c:\windows\system32\dfrgsnap.dll - 2004-08-05 12:00:00 123,904 ----a-w c:\windows\system32\dfrgui.dll + 2008-04-14 02:33:22 124,416 ----a-w c:\windows\system32\dfrgui.dll - 2005-09-23 05:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll + 2007-10-23 23:47:28 96,760 ----a-w c:\windows\system32\dfshim.dll - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\dfsshlex.dll + 2008-04-14 02:33:22 28,672 ----a-w c:\windows\system32\dfsshlex.dll - 2004-08-05 12:00:00 115,200 ----a-w c:\windows\system32\dgnet.dll + 2008-04-14 02:33:22 115,200 ----a-w c:\windows\system32\dgnet.dll - 2006-05-19 13:23:35 112,128 ----a-w c:\windows\system32\dhcpcsvc.dll + 2008-04-14 02:33:22 127,488 ----a-w c:\windows\system32\dhcpcsvc.dll - 2004-08-05 12:00:00 401,408 ----a-w c:\windows\system32\dhcpmon.dll + 2008-04-14 02:33:22 411,136 ----a-w c:\windows\system32\dhcpmon.dll + 2008-04-14 02:33:22 49,152 ------w c:\windows\system32\dhcpqec.dll - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\diantz.exe + 2008-04-14 02:34:00 87,040 ----a-w c:\windows\system32\diantz.exe - 2004-08-05 12:00:00 68,608 ----a-w c:\windows\system32\digest.dll + 2008-04-14 02:33:22 68,608 ----a-w c:\windows\system32\digest.dll + 2008-04-14 02:33:22 19,456 ------w c:\windows\system32\dimsntfy.dll + 2008-04-14 02:33:22 39,936 ------w c:\windows\system32\dimsroam.dll - 2004-08-05 12:00:00 165,376 ----a-w c:\windows\system32\dinput.dll + 2008-04-14 02:33:22 165,376 ----a-w c:\windows\system32\dinput.dll - 2004-08-05 12:00:00 187,904 ----a-w c:\windows\system32\dinput8.dll + 2008-04-14 02:33:22 187,904 ----a-w c:\windows\system32\dinput8.dll - 2004-08-05 12:00:00 1,502,208 ----a-w c:\windows\system32\diskcopy.dll + 2008-04-14 02:33:22 1,504,768 ----a-w c:\windows\system32\diskcopy.dll - 2004-08-05 12:00:00 167,936 ----a-w c:\windows\system32\diskpart.exe + 2008-04-14 02:34:00 167,936 ----a-w c:\windows\system32\diskpart.exe - 2004-08-05 12:00:00 45,083 ----a-w c:\windows\system32\dispex.dll + 2008-04-14 02:33:22 32,768 ----a-w c:\windows\system32\dispex.dll - 2007-09-17 18:22:58 739,840 ----a-w c:\windows\system32\DivX.dll + 2008-07-25 08:34:36 683,520 ----a-w c:\windows\system32\DivX.dll - 2007-09-17 18:23:00 823,296 ----a-w c:\windows\system32\divx_xx07.dll + 2008-07-25 08:34:42 823,296 ----a-w c:\windows\system32\divx_xx07.dll + 2008-07-25 08:34:40 815,104 ----a-w c:\windows\system32\divx_xx0a.dll - 2007-09-17 18:23:00 823,296 ----a-w c:\windows\system32\divx_xx0c.dll + 2008-07-25 08:34:40 823,296 ----a-w c:\windows\system32\divx_xx0c.dll - 2007-09-17 18:22:58 802,816 ----a-w c:\windows\system32\divx_xx11.dll + 2008-07-25 08:34:40 802,816 ----a-w c:\windows\system32\divx_xx11.dll + 2000-04-01 08:35:06 414,272 ----a-w c:\windows\system32\DivXc32.dll + 2000-04-01 08:35:44 414,272 ----a-w c:\windows\system32\DivXc32f.dll - 2007-09-11 23:14:30 156,992 ----a-w c:\windows\system32\DivXCodecVersionChecker.exe + 2008-07-25 08:34:30 161,096 ----a-w c:\windows\system32\DivXCodecVersionChecker.exe - 2007-08-15 22:33:18 524,288 ----a-w c:\windows\system32\DivXsm.exe + 2008-07-25 08:36:00 524,288 ----a-w c:\windows\system32\DivXsm.exe - 2007-08-15 22:30:26 12,288 ----a-w c:\windows\system32\DivXWMPExtType.dll + 2008-07-23 16:46:38 12,288 ----a-w c:\windows\system32\DivXWMPExtType.dll - 2006-11-07 02:26:44 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll + 2007-08-13 17:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll - 2007-08-20 09:59:29 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll + 2008-08-26 08:11:45 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll + 2008-06-14 17:33:37 272,768 -c----w c:\windows\system32\dllcache\bthport.sys - 2004-08-05 12:00:00 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll + 2008-04-14 02:31:03 97,792 -c--a-w c:\windows\system32\dllcache\chtmbx.dll - 2004-08-05 12:00:00 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll + 2008-04-14 02:31:03 56,320 -c--a-w c:\windows\system32\dllcache\chtskdic.dll - 2004-08-05 12:00:00 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll + 2008-04-14 02:31:03 173,568 -c--a-w c:\windows\system32\dllcache\chtskf.dll - 2004-08-05 12:00:00 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll + 2008-04-14 02:31:04 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll - 2004-08-05 12:00:00 98,304 -c--a-w c:\windows\system32\dllcache\cscript.exe + 2008-05-07 09:07:23 135,168 -c----w c:\windows\system32\dllcache\cscript.exe - 2006-11-07 20:03:36 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll + 2007-08-13 17:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll - 2004-08-05 12:00:00 561,179 -c--a-w c:\windows\system32\dllcache\dao360.dll + 2008-03-25 04:50:25 554,008 -c--a-w c:\windows\system32\dllcache\dao360.dll - 2006-08-24 12:17:20 500,278 -c--a-w c:\windows\system32\dllcache\dxmasf.dll + 2008-04-14 02:33:23 500,278 -c--a-w c:\windows\system32\dllcache\dxmasf.dll - 2006-10-17 10:58:06 346,624 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll + 2008-08-26 08:11:45 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll - 2007-08-20 09:59:29 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll + 2008-08-26 08:11:45 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll - 2005-07-26 04:39:57 243,200 -c--a-w c:\windows\system32\dllcache\es.dll + 2008-07-07 20:28:20 253,952 -c----w c:\windows\system32\dllcache\es.dll - 2007-08-20 09:59:29 132,608 -c--a-w c:\windows\system32\dllcache\extmgr.dll + 2008-08-26 08:11:45 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll - 2006-10-17 10:44:36 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll + 2007-08-13 17:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll - 2004-08-05 12:00:00 13,463,552 -c--a-w c:\windows\system32\dllcache\hwxjpn.dll + 2008-04-14 02:31:30 13,463,552 -c--a-w c:\windows\system32\dllcache\hwxjpn.dll - 2007-08-20 09:59:29 63,488 -c----w c:\windows\system32\dllcache\icardie.dll + 2008-08-26 08:11:45 63,488 -c----w c:\windows\system32\dllcache\icardie.dll - 2007-08-17 10:22:11 63,488 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe + 2008-08-25 08:39:40 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe - 2007-08-20 09:59:29 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll + 2008-08-26 08:11:45 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll - 2007-08-20 09:59:29 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll + 2008-08-26 08:11:45 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll - 2007-08-17 07:34:25 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll + 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll - 2007-08-20 09:59:29 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll + 2008-08-26 08:11:46 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll - 2007-08-20 09:59:29 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll + 2008-08-26 08:11:46 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll - 2006-10-17 11:04:50 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe + 2007-08-13 17:44:02 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe - 2007-08-20 09:59:29 6,058,496 -c----w c:\windows\system32\dllcache\ieframe.dll + 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll - 2006-11-07 20:03:36 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll + 2007-08-13 17:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll - 2007-08-20 09:59:29 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll + 2008-08-26 08:11:48 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll - 2007-08-20 09:59:30 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll + 2008-08-26 08:11:48 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll - 2006-11-07 02:26:42 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll + 2007-08-13 17:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll - 2007-08-17 10:22:11 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe + 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe - 2007-08-17 10:22:32 625,152 -c--a-w c:\windows\system32\dllcache\iexplore.exe + 2008-08-23 05:56:15 635,848 -c--a-w c:\windows\system32\dllcache\iexplore.exe - 2004-08-05 12:00:00 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll + 2008-04-14 02:31:33 106,496 -c--a-w c:\windows\system32\dllcache\imekrcic.dll - 2004-08-05 12:00:00 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll + 2008-04-14 02:31:33 86,016 -c--a-w c:\windows\system32\dllcache\imekrmbx.dll - 2006-10-17 10:57:58 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll + 2007-08-13 17:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll - 2004-08-05 12:00:00 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll + 2008-04-14 02:31:33 811,064 -c--a-w c:\windows\system32\dllcache\imjp81k.dll - 2004-08-05 12:00:00 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll + 2008-04-14 02:31:33 368,696 -c--a-w c:\windows\system32\dllcache\imjpcic.dll - 2004-08-05 12:00:00 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll + 2008-04-14 02:31:33 716,856 -c--a-w c:\windows\system32\dllcache\imjpcus.dll - 2004-08-05 12:00:00 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll + 2008-04-14 02:31:33 81,976 -c--a-w c:\windows\system32\dllcache\imjpdct.dll - 2004-08-05 12:00:00 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll + 2008-04-14 02:31:34 274,489 -c--a-w c:\windows\system32\dllcache\imjputyc.dll - 2004-08-05 12:00:00 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll + 2008-04-14 02:31:34 102,456 -c--a-w c:\windows\system32\dllcache\imlang.dll - 2004-08-05 12:00:00 315,452 -c--a-w c:\windows\system32\dllcache\imskf.dll + 2008-04-14 02:31:34 315,455 -c--a-w c:\windows\system32\dllcache\imskf.dll - 2006-11-07 02:26:24 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll + 2007-08-13 17:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll - 2006-10-17 11:00:00 491,520 -c--a-w c:\windows\system32\dllcache\jscript.dll + 2008-05-09 10:55:00 512,000 -c----w c:\windows\system32\dllcache\jscript.dll - 2007-08-20 09:59:30 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll + 2008-08-26 08:11:49 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll + 2004-08-05 12:00:00 2,000 -c--a-w c:\windows\system32\dllcache\keyboard.drv - 2006-10-17 11:05:10 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll + 2007-08-13 17:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll + 2004-08-05 12:00:00 2,560 -c--a-w c:\windows\system32\dllcache\lz32.dll + 2004-08-05 12:00:00 73,680 -c--a-w c:\windows\system32\dllcache\mciavi.drv + 2004-08-05 12:00:00 25,280 -c--a-w c:\windows\system32\dllcache\mciseq.drv + 2004-08-05 12:00:00 28,160 -c--a-w c:\windows\system32\dllcache\mciwave.drv + 2004-08-05 12:00:00 2,032 -c--a-w c:\windows\system32\dllcache\mouse.drv - 2004-08-05 12:00:00 124,928 -c--a-w c:\windows\system32\dllcache\mplay32.exe + 2008-04-14 02:34:12 124,928 -c--a-w c:\windows\system32\dllcache\mplay32.exe - 2004-08-05 12:00:00 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe + 2008-04-14 02:34:12 4,639 -c--a-w c:\windows\system32\dllcache\mplayer2.exe - 2005-06-29 01:49:41 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll + 2008-06-24 16:44:02 74,240 -c----w c:\windows\system32\dllcache\mscms.dll - 2004-08-05 12:00:00 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll + 2008-04-14 02:31:53 4,126 -c--a-w c:\windows\system32\dllcache\msdxmlc.dll - 2004-08-05 12:00:00 512,029 -c--a-w c:\windows\system32\dllcache\msexch40.dll + 2008-03-25 04:50:28 518,944 -c--a-w c:\windows\system32\dllcache\msexch40.dll - 2004-08-05 12:00:00 319,517 -c--a-w c:\windows\system32\dllcache\msexcl40.dll + 2008-03-25 04:50:30 326,432 -c--a-w c:\windows\system32\dllcache\msexcl40.dll - 2007-08-20 09:59:30 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll + 2008-08-26 08:11:49 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll - 2007-08-20 09:59:30 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll + 2008-08-26 08:11:49 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll - 2006-10-17 10:56:10 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe + 2007-08-13 17:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe - 2007-08-20 09:59:30 3,584,512 -c--a-w c:\windows\system32\dllcache\mshtml.dll + 2008-08-27 09:11:52 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll - 2007-08-20 09:59:30 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll + 2008-08-26 08:11:52 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll - 2006-10-17 10:28:56 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll + 2007-08-13 17:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll - 2004-08-05 12:00:00 1,507,356 -c--a-w c:\windows\system32\dllcache\msjet40.dll + 2008-03-25 04:50:34 1,516,568 -c--a-w c:\windows\system32\dllcache\msjet40.dll - 2004-08-05 12:00:00 358,976 -c--a-w c:\windows\system32\dllcache\msjetol1.dll + 2008-03-25 04:50:40 355,112 -c--a-w c:\windows\system32\dllcache\msjetol1.dll - 2004-08-05 12:00:00 184,351 -c--a-w c:\windows\system32\dllcache\msjint40.dll + 2008-03-25 04:51:08 194,144 -c--a-w c:\windows\system32\dllcache\msjint40.dll - 2004-08-05 12:00:00 53,279 -c--a-w c:\windows\system32\dllcache\msjter40.dll + 2008-03-25 04:50:42 60,192 -c--a-w c:\windows\system32\dllcache\msjter40.dll - 2004-08-05 12:00:00 241,693 -c--a-w c:\windows\system32\dllcache\msjtes40.dll + 2008-03-25 04:50:42 248,608 -c--a-w c:\windows\system32\dllcache\msjtes40.dll - 2006-11-07 20:03:36 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll + 2007-08-13 17:54:10 156,160 -c--a-w c:\windows\system32\dllcache\msls31.dll - 2004-08-05 12:00:00 213,023 -c--a-w c:\windows\system32\dllcache\msltus40.dll + 2008-03-25 04:50:44 219,936 -c--a-w c:\windows\system32\dllcache\msltus40.dll - 2004-08-05 12:00:00 348,189 -c--a-w c:\windows\system32\dllcache\mspbde40.dll + 2008-03-25 04:50:45 355,104 -c--a-w c:\windows\system32\dllcache\mspbde40.dll - 2007-08-20 09:59:30 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll + 2008-08-26 08:11:52 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll - 2004-08-05 12:00:00 421,919 -c--a-w c:\windows\system32\dllcache\msrd2x40.dll + 2008-03-25 04:50:47 432,928 -c--a-w c:\windows\system32\dllcache\msrd2x40.dll - 2004-08-05 12:00:00 315,423 -c--a-w c:\windows\system32\dllcache\msrd3x40.dll + 2008-03-25 04:50:49 322,336 -c--a-w c:\windows\system32\dllcache\msrd3x40.dll - 2004-08-05 12:00:00 552,989 -c--a-w c:\windows\system32\dllcache\msrepl40.dll + 2008-03-25 04:50:52 559,904 -c--a-w c:\windows\system32\dllcache\msrepl40.dll - 2004-08-05 12:00:00 258,077 -c--a-w c:\windows\system32\dllcache\mstext40.dll + 2008-03-25 04:50:55 264,992 -c--a-w c:\windows\system32\dllcache\mstext40.dll - 2007-08-20 09:59:30 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll + 2008-08-26 08:11:52 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll - 2004-08-05 12:00:00 831,519 -c--a-w c:\windows\system32\dllcache\mswdat10.dll + 2008-03-25 04:50:57 838,432 -c--a-w c:\windows\system32\dllcache\mswdat10.dll - 2004-08-05 12:00:00 614,429 -c--a-w c:\windows\system32\dllcache\mswstr10.dll + 2008-03-25 04:51:09 621,344 -c--a-w c:\windows\system32\dllcache\mswstr10.dll - 2004-08-05 12:00:00 348,189 -c--a-w c:\windows\system32\dllcache\msxbde40.dll + 2008-03-25 04:50:58 355,104 -c--a-w c:\windows\system32\dllcache\msxbde40.dll + 2008-04-14 02:33:34 1,306,624 -c----w c:\windows\system32\dllcache\msxml6.dll + 2008-04-14 02:04:20 93,184 -c----w c:\windows\system32\dllcache\msxml6r.dll - 2004-08-05 12:00:00 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll + 2008-04-14 02:34:38 226,816 -c--a-w c:\windows\system32\dllcache\npdrmv2.dll - 2005-11-29 14:27:06 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll + 2008-04-14 02:33:36 364,544 -c--a-w c:\windows\system32\dllcache\npdsplay.dll - 2004-08-05 12:00:00 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll + 2008-04-14 02:33:36 10,240 -c--a-w c:\windows\system32\dllcache\npwmsdrm.dll + 2004-08-05 12:00:00 2,944 -c--a-w c:\windows\system32\dllcache\null.sys - 2004-08-03 20:29:56 1,897,408 -c--a-w c:\windows\system32\dllcache\nv4_mini.sys + 2007-10-04 16:14:00 6,854,464 -c--a-w c:\windows\system32\dllcache\nv4_mini.sys - 2007-08-20 09:59:31 102,400 -c--a-w c:\windows\system32\dllcache\occache.dll + 2008-08-26 08:11:52 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll - 2004-08-05 12:00:00 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll + 2008-04-14 02:32:16 15,872 -c--a-w c:\windows\system32\dllcache\padrs404.dll - 2004-08-05 12:00:00 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll + 2008-04-14 02:32:16 15,360 -c--a-w c:\windows\system32\dllcache\padrs804.dll - 2004-08-05 12:00:00 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll + 2008-04-14 02:32:16 175,104 -c--a-w c:\windows\system32\dllcache\pintlcsa.dll - 2004-08-05 12:00:00 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll + 2008-04-14 02:32:16 53,760 -c--a-w c:\windows\system32\dllcache\pintlcsd.dll - 2004-08-05 12:00:00 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe + 2008-04-13 16:43:36 70,144 -c--a-w c:\windows\system32\dllcache\pintlphr.exe - 2004-08-05 12:00:00 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll + 2008-04-14 02:32:17 67,584 -c--a-w c:\windows\system32\dllcache\pmigrate.dll - 2006-10-17 10:58:08 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll + 2008-08-26 08:11:52 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll - 2005-08-30 03:55:43 1,293,312 -c--a-w c:\windows\system32\dllcache\quartz.dll + 2008-05-07 05:11:24 1,294,336 -c----w c:\windows\system32\dllcache\quartz.dll - 2006-07-13 08:48:58 202,240 -c--a-w c:\windows\system32\dllcache\rmcast.sys + 2008-05-08 14:02:52 203,136 -c----w c:\windows\system32\dllcache\rmcast.sys - 2004-08-05 12:00:00 159,744 -c--a-w c:\windows\system32\dllcache\scrobj.dll + 2008-05-09 10:55:00 180,224 -c----w c:\windows\system32\dllcache\scrobj.dll - 2004-08-05 12:00:00 151,552 -c--a-w c:\windows\system32\dllcache\scrrun.dll + 2008-05-09 10:55:00 172,032 -c----w c:\windows\system32\dllcache\scrrun.dll - 2004-08-05 12:00:00 153,088 -c--a-w c:\windows\system32\dllcache\shmedia.dll + 2008-04-14 02:33:41 153,600 -c--a-w c:\windows\system32\dllcache\shmedia.dll + 2004-08-05 12:00:00 1,744 -c--a-w c:\windows\system32\dllcache\sound.drv - 2006-08-24 12:19:40 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll + 2008-04-14 02:33:46 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll + 2004-08-05 12:00:00 3,360 -c--a-w c:\windows\system32\dllcache\system.drv + 2004-08-05 12:00:00 4,096 -c--a-w c:\windows\system32\dllcache\timer.drv - 2004-08-05 12:00:00 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll + 2008-04-14 02:32:42 10,240 -c--a-w c:\windows\system32\dllcache\tmigrate.dll - 2004-08-05 12:00:00 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll + 2008-04-14 02:32:44 76,288 -c--a-w c:\windows\system32\dllcache\uniime.dll - 2007-08-20 09:59:31 105,984 -c--a-w c:\windows\system32\dllcache\url.dll + 2008-08-26 08:11:52 105,984 -c--a-w c:\windows\system32\dllcache\url.dll - 2007-08-20 09:59:31 1,152,000 -c--a-w c:\windows\system32\dllcache\urlmon.dll + 2008-08-26 08:11:53 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll - 2006-11-07 20:03:36 413,696 -c--a-w c:\windows\system32\dllcache\vbscript.dll + 2008-05-09 10:55:00 430,080 -c----w c:\windows\system32\dllcache\vbscript.dll + 2004-08-05 12:00:00 2,176 -c--a-w c:\windows\system32\dllcache\vga.drv - 2004-08-05 12:00:00 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll + 2008-04-14 02:32:46 426,041 -c--a-w c:\windows\system32\dllcache\voicepad.dll - 2004-08-05 12:00:00 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll + 2008-04-14 02:32:46 86,073 -c--a-w c:\windows\system32\dllcache\voicesub.dll + 2006-11-06 17:04:56 28,672 -c--a-w c:\windows\system32\dllcache\wceusbsh.sys - 2007-08-20 09:59:31 232,960 -c--a-w c:\windows\system32\dllcache\webcheck.dll + 2008-08-26 08:11:53 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll + 2004-08-05 12:00:00 13,600 -c--a-w c:\windows\system32\dllcache\wfwnet.drv - 2007-08-20 09:59:31 824,832 -c--a-w c:\windows\system32\dllcache\wininet.dll + 2008-08-26 08:11:54 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll + 2004-08-05 12:00:00 2,864 -c--a-w c:\windows\system32\dllcache\winsock.dll + 2004-08-05 12:00:00 2,112 -c--a-w c:\windows\system32\dllcache\winspool.exe - 2006-10-18 19:47:18 222,208 -c--a-w c:\windows\system32\dllcache\WMASF.dll + 2007-10-25 08:28:30 222,720 -c--a-w c:\windows\system32\dllcache\wmasf.dll - 2004-08-05 12:00:00 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll + 2008-04-14 02:33:48 115,200 -c--a-w c:\windows\system32\dllcache\wmsdmoe.dll - 2004-08-05 12:00:00 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll + 2008-04-14 02:33:49 303,616 -c--a-w c:\windows\system32\dllcache\wmstream.dll + 2004-08-05 12:00:00 2,736 -c--a-w c:\windows\system32\dllcache\wowdeb.exe - 2004-08-05 12:00:00 114,688 -c--a-w c:\windows\system32\dllcache\wscript.exe + 2008-05-08 11:24:44 155,648 -c----w c:\windows\system32\dllcache\wscript.exe - 2004-08-05 12:00:00 65,536 -c--a-w c:\windows\system32\dllcache\wshext.dll + 2008-05-09 10:55:00 90,112 -c----w c:\windows\system32\dllcache\wshext.dll - 2004-08-05 12:00:00 5,120 ----a-w c:\windows\system32\dllhost.exe + 2008-04-14 02:34:00 5,120 ----a-w c:\windows\system32\dllhost.exe - 2004-08-05 12:00:00 225,280 ----a-w c:\windows\system32\dmadmin.exe + 2008-04-14 02:34:00 225,280 ----a-w c:\windows\system32\dmadmin.exe - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\dmband.dll + 2008-04-14 02:33:22 28,672 ----a-w c:\windows\system32\dmband.dll - 2004-08-05 12:00:00 61,440 ----a-w c:\windows\system32\dmcompos.dll + 2008-04-14 02:33:22 61,440 ----a-w c:\windows\system32\dmcompos.dll - 2004-08-05 12:00:00 273,920 ----a-w c:\windows\system32\dmdlgs.dll + 2008-04-14 02:33:22 285,184 ----a-w c:\windows\system32\dmdlgs.dll - 2004-08-05 12:00:00 200,704 ----a-w c:\windows\system32\dmdskmgr.dll + 2008-04-14 02:33:22 200,704 ----a-w c:\windows\system32\dmdskmgr.dll - 2004-08-05 12:00:00 181,248 ----a-w c:\windows\system32\dmime.dll + 2008-04-14 02:33:22 181,248 ----a-w c:\windows\system32\dmime.dll - 2004-08-05 12:00:00 35,840 ----a-w c:\windows\system32\dmloader.dll + 2008-04-14 02:33:22 35,840 ----a-w c:\windows\system32\dmloader.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\dmremote.exe + 2008-04-14 02:34:00 15,872 ----a-w c:\windows\system32\dmremote.exe - 2004-08-05 12:00:00 82,432 ----a-w c:\windows\system32\dmscript.dll + 2008-04-14 02:33:22 82,432 ----a-w c:\windows\system32\dmscript.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\dmserver.dll + 2008-04-14 02:33:22 24,576 ----a-w c:\windows\system32\dmserver.dll - 2004-08-05 12:00:00 105,984 ----a-w c:\windows\system32\dmstyle.dll + 2008-04-14 02:33:22 105,984 ----a-w c:\windows\system32\dmstyle.dll - 2004-08-05 12:00:00 103,424 ----a-w c:\windows\system32\dmsynth.dll + 2008-04-14 02:33:22 103,424 ----a-w c:\windows\system32\dmsynth.dll - 2004-08-05 12:00:00 104,448 ----a-w c:\windows\system32\dmusic.dll + 2008-04-14 02:33:22 104,448 ----a-w c:\windows\system32\dmusic.dll - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\dmutil.dll + 2008-04-14 02:33:22 58,880 ----a-w c:\windows\system32\dmutil.dll - 2006-06-26 17:41:32 148,480 ----a-w c:\windows\system32\dnsapi.dll + 2008-04-14 02:33:22 147,968 ----a-w c:\windows\system32\dnsapi.dll - 2004-08-05 12:00:00 45,568 ----a-w c:\windows\system32\dnsrslvr.dll + 2008-04-14 02:33:22 45,568 ----a-w c:\windows\system32\dnsrslvr.dll - 2004-08-05 12:00:00 48,640 ----a-w c:\windows\system32\docprop2.dll + 2008-04-14 02:33:22 48,640 ----a-w c:\windows\system32\docprop2.dll + 2008-04-14 02:33:22 26,112 ------w c:\windows\system32\dot3api.dll + 2008-04-14 02:33:22 60,928 ------w c:\windows\system32\dot3cfg.dll + 2008-04-14 02:33:22 9,216 ------w c:\windows\system32\dot3dlg.dll + 2008-04-14 02:33:22 39,936 ------w c:\windows\system32\dot3gpclnt.dll + 2008-04-14 02:33:22 56,832 ------w c:\windows\system32\dot3msm.dll + 2008-04-14 02:33:22 133,120 ------w c:\windows\system32\dot3svc.dll + 2008-04-14 02:33:22 651,264 ------w c:\windows\system32\dot3ui.dll - 2004-08-05 12:00:00 97,792 ----a-w c:\windows\system32\dpcdll.dll + 2008-04-14 01:54:17 103,936 ----a-w c:\windows\system32\dpcdll.dll - 2007-08-21 00:26:52 81,920 ----a-w c:\windows\system32\dpl100.dll + 2008-07-25 08:34:54 81,920 ----a-w c:\windows\system32\dpl100.dll - 2004-08-05 12:00:00 30,208 ----a-w c:\windows\system32\dplaysvr.exe + 2008-04-14 02:34:01 29,696 ----a-w c:\windows\system32\dplaysvr.exe - 2004-08-05 12:00:00 229,888 ----a-w c:\windows\system32\dplayx.dll + 2008-04-14 02:33:22 229,888 ----a-w c:\windows\system32\dplayx.dll - 2004-08-05 12:00:00 24,064 ----a-w c:\windows\system32\dpmodemx.dll + 2008-04-14 02:33:23 24,064 ----a-w c:\windows\system32\dpmodemx.dll - 2004-08-05 12:00:00 3,584 ----a-w c:\windows\system32\dpnaddr.dll + 2008-04-14 02:31:14 3,072 ----a-w c:\windows\system32\dpnaddr.dll - 2004-08-05 12:00:00 375,296 ----a-w c:\windows\system32\dpnet.dll + 2008-04-14 02:33:23 375,296 ----a-w c:\windows\system32\dpnet.dll - 2004-08-05 12:00:00 35,328 ----a-w c:\windows\system32\dpnhpast.dll + 2008-04-14 02:33:23 35,328 ----a-w c:\windows\system32\dpnhpast.dll - 2004-08-05 12:00:00 60,928 ----a-w c:\windows\system32\dpnhupnp.dll + 2008-04-14 02:33:23 60,928 ----a-w c:\windows\system32\dpnhupnp.dll - 2004-08-05 12:00:00 3,584 ----a-w c:\windows\system32\dpnlobby.dll + 2008-04-14 02:31:14 3,072 ----a-w c:\windows\system32\dpnlobby.dll - 2004-08-05 12:00:00 18,432 ----a-w c:\windows\system32\dpnsvr.exe + 2008-04-14 02:34:01 18,432 ----a-w c:\windows\system32\dpnsvr.exe - 2007-08-15 22:31:00 294,912 ----a-w c:\windows\system32\dpu10.dll + 2008-07-25 08:34:46 294,912 ----a-w c:\windows\system32\dpu10.dll - 2007-08-15 22:31:00 294,912 ----a-w c:\windows\system32\dpu11.dll + 2008-07-25 08:34:46 294,912 ----a-w c:\windows\system32\dpu11.dll - 2007-08-15 22:31:00 53,248 ----a-w c:\windows\system32\dpuGUI10.dll + 2008-07-25 08:34:50 53,248 ----a-w c:\windows\system32\dpuGUI10.dll - 2007-08-15 22:31:00 593,920 ----a-w c:\windows\system32\dpuGUI11.dll + 2008-07-25 08:34:46 593,920 ----a-w c:\windows\system32\dpuGUI11.dll - 2007-08-15 22:31:00 344,064 ----a-w c:\windows\system32\dpus11.dll + 2008-07-25 08:34:46 344,064 ----a-w c:\windows\system32\dpus11.dll - 2007-08-15 22:31:00 57,344 ----a-w c:\windows\system32\dpv11.dll + 2008-07-25 08:34:46 57,344 ----a-w c:\windows\system32\dpv11.dll - 2004-08-05 12:00:00 21,504 ----a-w c:\windows\system32\dpvacm.dll + 2008-04-14 02:33:23 21,504 ----a-w c:\windows\system32\dpvacm.dll - 2004-08-05 12:00:00 213,504 ----a-w c:\windows\system32\dpvoice.dll + 2008-04-14 02:33:23 213,504 ----a-w c:\windows\system32\dpvoice.dll - 2004-08-05 12:00:00 83,456 ----a-w c:\windows\system32\dpvsetup.exe + 2008-04-14 02:34:01 83,456 ----a-w c:\windows\system32\dpvsetup.exe - 2004-08-05 12:00:00 116,736 ----a-w c:\windows\system32\dpvvox.dll + 2008-04-14 02:33:23 116,736 ----a-w c:\windows\system32\dpvvox.dll - 2004-08-05 12:00:00 57,856 ----a-w c:\windows\system32\dpwsockx.dll + 2008-04-14 02:33:23 57,344 ----a-w c:\windows\system32\dpwsockx.dll - 2004-08-05 12:00:00 53,248 ----a-w c:\windows\system32\drivers\1394bus.sys + 2008-04-13 18:46:18 53,376 ----a-w c:\windows\system32\drivers\1394bus.sys - 2004-08-05 12:00:00 188,672 ----a-w c:\windows\system32\drivers\acpi.sys + 2008-04-14 01:52:42 188,672 ----a-w c:\windows\system32\drivers\acpi.sys + 2008-04-14 02:33:18 4,255 ------w c:\windows\system32\drivers\adv01nt5.dll + 2008-04-14 02:33:18 3,967 ------w c:\windows\system32\drivers\adv02nt5.dll + 2008-04-14 02:33:18 3,615 ------w c:\windows\system32\drivers\adv05nt5.dll + 2008-04-14 02:33:18 3,647 ------w c:\windows\system32\drivers\adv07nt5.dll + 2008-04-14 02:33:18 3,135 ------w c:\windows\system32\drivers\adv08nt5.dll + 2008-04-14 02:33:18 3,711 ------w c:\windows\system32\drivers\adv09nt5.dll + 2008-04-14 02:33:18 3,775 ------w c:\windows\system32\drivers\adv11nt5.dll - 2006-02-15 00:22:26 142,464 ----a-w c:\windows\system32\drivers\aec.sys + 2008-04-13 16:39:23 142,592 ----a-w c:\windows\system32\drivers\aec.sys - 2004-08-05 12:00:00 138,496 ----a-w c:\windows\system32\drivers\afd.sys + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\system32\drivers\afd.sys + 2008-04-13 18:36:38 42,368 ------w c:\windows\system32\drivers\agp440.sys + 2008-04-13 18:36:39 44,928 ------w c:\windows\system32\drivers\agpcpq.sys - 2005-10-26 14:08:00 3,786,944 ----a-w c:\windows\system32\drivers\alcxwdm.sys + 2007-10-26 10:20:40 4,124,352 ----a-r c:\windows\system32\drivers\alcxwdm.sys + 2008-04-13 18:36:38 42,752 ------w c:\windows\system32\drivers\alim1541.sys + 2008-04-13 18:36:39 43,008 ------w c:\windows\system32\drivers\amdagp.sys - 2004-08-05 12:00:00 41,216 ----a-w c:\windows\system32\drivers\amdk6.sys + 2008-04-14 01:54:28 41,472 ----a-w c:\windows\system32\drivers\amdk6.sys - 2004-08-05 12:00:00 41,600 ----a-w c:\windows\system32\drivers\amdk7.sys + 2008-04-14 01:54:29 41,856 ----a-w c:\windows\system32\drivers\amdk7.sys - 2004-08-05 12:00:00 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys + 2008-04-13 18:51:25 60,800 ----a-w c:\windows\system32\drivers\arp1394.sys + 1999-09-10 10:06:00 25,244 ----a-w c:\windows\system32\drivers\Aspi32.sys - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys + 2008-04-13 18:57:27 14,336 ----a-w c:\windows\system32\drivers\asyncmac.sys - 2004-08-05 12:00:00 95,360 ----a-w c:\windows\system32\drivers\atapi.sys + 2008-04-13 18:40:30 96,512 ----a-w c:\windows\system32\drivers\atapi.sys + 2004-08-03 21:29:30 56,623 ------w c:\windows\system32\drivers\ati1btxx.sys + 2004-08-03 21:29:30 11,615 ------w c:\windows\system32\drivers\ati1mdxx.sys + 2004-08-03 21:29:30 12,047 ------w c:\windows\system32\drivers\ati1pdxx.sys + 2004-08-03 21:29:32 30,671 ------w c:\windows\system32\drivers\ati1raxx.sys + 2004-08-03 21:29:32 63,663 ------w c:\windows\system32\drivers\ati1rvxx.sys + 2004-08-03 21:29:32 26,367 ------w c:\windows\system32\drivers\ati1snxx.sys + 2004-08-03 21:29:32 21,343 ------w c:\windows\system32\drivers\ati1ttxx.sys + 2004-08-03 21:29:32 36,463 ------w c:\windows\system32\drivers\ati1tuxx.sys + 2004-08-03 21:29:32 29,455 ------w c:\windows\system32\drivers\ati1xbxx.sys + 2004-08-03 21:29:32 34,735 ------w c:\windows\system32\drivers\ati1xsxx.sys + 2004-08-03 23:38:42 327,168 ------w c:\windows\system32\drivers\ati2mtaa.sys + 2004-08-03 21:29:28 57,856 ------w c:\windows\system32\drivers\atinbtxx.sys + 2004-08-03 21:29:30 13,824 ------w c:\windows\system32\drivers\atinmdxx.sys + 2004-08-03 21:29:30 14,336 ------w c:\windows\system32\drivers\atinpdxx.sys + 2004-08-03 21:29:30 52,224 ------w c:\windows\system32\drivers\atinraxx.sys + 2004-08-03 21:29:32 104,960 ------w c:\windows\system32\drivers\atinrvxx.sys + 2004-08-03 21:29:32 28,672 ------w c:\windows\system32\drivers\atinsnxx.sys + 2004-08-03 21:29:32 13,824 ------w c:\windows\system32\drivers\atinttxx.sys + 2004-08-03 21:29:32 73,216 ------w c:\windows\system32\drivers\atintuxx.sys + 2004-08-03 21:29:32 31,744 ------w c:\windows\system32\drivers\atinxbxx.sys + 2004-08-03 21:29:32 63,488 ------w c:\windows\system32\drivers\atinxsxx.sys - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys + 2008-04-13 18:51:25 59,904 ----a-w c:\windows\system32\drivers\atmarpc.sys - 2004-08-05 12:00:00 55,936 ----a-w c:\windows\system32\drivers\atmlane.sys + 2008-04-13 18:51:30 55,808 ----a-w c:\windows\system32\drivers\atmlane.sys + 2008-04-14 02:33:19 21,183 ------w c:\windows\system32\drivers\atv01nt5.dll + 2008-04-14 02:33:19 11,359 ------w c:\windows\system32\drivers\atv02nt5.dll + 2008-04-14 02:33:19 25,471 ------w c:\windows\system32\drivers\atv04nt5.dll + 2008-04-14 02:33:19 14,143 ------w c:\windows\system32\drivers\atv06nt5.dll + 2008-04-14 02:33:19 17,279 ------w c:\windows\system32\drivers\atv10nt5.dll + 2007-08-09 11:04:11 40,768 ----a-w c:\windows\system32\drivers\avgntdd.sys + 2007-07-18 12:22:19 21,312 ----a-w c:\windows\system32\drivers\avgntmgr.sys + 2008-07-19 16:35:14 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys - 2004-08-05 12:00:00 71,552 ----a-w c:\windows\system32\drivers\bridge.sys + 2008-04-13 18:53:23 71,552 ----a-w c:\windows\system32\drivers\bridge.sys + 2008-04-13 18:46:33 17,024 ------w c:\windows\system32\drivers\bthenum.sys + 2008-04-13 18:46:33 37,888 ------w c:\windows\system32\drivers\bthmodem.sys + 2008-04-13 18:51:34 101,120 ------w c:\windows\system32\drivers\bthpan.sys + 2008-06-14 17:33:37 272,768 ------w c:\windows\system32\drivers\bthport.sys + 2008-04-13 18:46:31 36,480 ------w c:\windows\system32\drivers\bthprint.sys + 2008-04-13 18:46:29 18,944 ------w c:\windows\system32\drivers\bthusb.sys - 2004-08-03 21:10:18 17,024 ----a-w c:\windows\system32\drivers\CCDECODE.sys + 2008-04-13 18:46:23 17,024 ----a-w c:\windows\system32\drivers\ccdecode.sys - 2004-08-05 12:00:00 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys + 2008-04-13 19:14:21 63,744 ----a-w c:\windows\system32\drivers\cdfs.sys + 2007-05-30 20:30:21 2,432 ------w c:\windows\system32\drivers\cdr4_xp.sys + 2007-05-30 20:30:21 2,560 ------w c:\windows\system32\drivers\cdralw2k.sys - 2004-08-05 12:00:00 49,536 ----a-w c:\windows\system32\drivers\cdrom.sys + 2008-04-13 18:40:46 62,976 ----a-w c:\windows\system32\drivers\cdrom.sys + 2008-04-14 02:33:20 15,423 ------w c:\windows\system32\drivers\ch7xxnt5.dll - 2004-08-05 12:00:00 49,664 ----a-w c:\windows\system32\drivers\classpnp.sys + 2008-04-13 19:16:22 49,536 ----a-w c:\windows\system32\drivers\classpnp.sys - 2004-08-05 12:00:00 40,704 ----a-w c:\windows\system32\drivers\crusoe.sys + 2008-04-14 02:02:47 40,960 ----a-w c:\windows\system32\drivers\crusoe.sys - 2004-08-05 12:00:00 36,352 ----a-w c:\windows\system32\drivers\disk.sys + 2008-04-13 18:40:47 36,352 ----a-w c:\windows\system32\drivers\disk.sys - 2004-08-05 12:00:00 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys + 2008-04-13 18:40:44 14,208 ----a-w c:\windows\system32\drivers\diskdump.sys - 2004-08-05 12:00:00 800,256 ----a-w c:\windows\system32\drivers\dmboot.sys + 2008-04-14 02:05:07 800,256 ----a-w c:\windows\system32\drivers\dmboot.sys - 2004-08-05 12:00:00 154,496 ----a-w c:\windows\system32\drivers\dmio.sys + 2008-04-14 02:05:12 154,496 ----a-w c:\windows\system32\drivers\dmio.sys - 2004-08-03 21:07:40 52,864 ----a-w c:\windows\system32\drivers\DMusic.sys + 2008-04-13 18:45:01 52,864 ----a-w c:\windows\system32\drivers\dmusic.sys - 2004-08-03 21:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys + 2008-04-13 18:45:14 60,160 ----a-w c:\windows\system32\drivers\drmk.sys + 2008-04-13 18:45:13 2,944 ----a-w c:\windows\system32\drivers\drmkaud.sys - 2004-08-05 12:00:00 71,040 ----a-w c:\windows\system32\drivers\dxg.sys + 2008-04-13 18:38:29 71,168 ----a-w c:\windows\system32\drivers\dxg.sys - 2004-08-05 12:00:00 143,360 ----a-w c:\windows\system32\drivers\fastfat.sys + 2008-04-13 19:14:29 143,744 ----a-w c:\windows\system32\drivers\fastfat.sys - 2004-08-05 12:00:00 27,392 ----a-w c:\windows\system32\drivers\fdc.sys + 2008-04-13 18:40:25 27,392 ----a-w c:\windows\system32\drivers\fdc.sys - 2004-08-05 12:00:00 35,072 ----a-w c:\windows\system32\drivers\fips.sys + 2008-04-14 01:57:38 44,672 ----a-w c:\windows\system32\drivers\fips.sys - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys + 2008-04-13 18:40:25 20,480 ----a-w c:\windows\system32\drivers\flpydisk.sys - 2006-08-21 09:14:58 128,896 ----a-w c:\windows\system32\drivers\fltmgr.sys + 2008-04-13 18:32:59 129,792 ----a-w c:\windows\system32\drivers\fltmgr.sys + 2008-04-13 18:36:40 46,464 ------w c:\windows\system32\drivers\gagp30kx.sys + 2008-04-13 16:36:05 144,384 ------w c:\windows\system32\drivers\hdaudbus.sys + 2008-04-14 01:59:54 25,856 ------w c:\windows\system32\drivers\hidbth.sys - 2004-08-05 12:00:00 36,224 ----a-w c:\windows\system32\drivers\hidclass.sys + 2008-04-13 18:45:26 36,864 ----a-w c:\windows\system32\drivers\hidclass.sys + 2008-04-13 18:45:26 19,200 ------w c:\windows\system32\drivers\hidir.sys - 2004-08-05 12:00:00 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys + 2008-04-13 18:45:22 24,960 ----a-w c:\windows\system32\drivers\hidparse.sys - 2004-08-05 12:00:00 9,600 ----a-w c:\windows\system32\drivers\hidusb.sys + 2008-04-13 18:45:27 10,368 ----a-w c:\windows\system32\drivers\hidusb.sys - 2006-03-17 00:33:10 262,784 ----a-w c:\windows\system32\drivers\http.sys + 2008-04-13 18:53:53 264,832 ----a-w c:\windows\system32\drivers\http.sys - 2004-08-05 12:00:00 54,400 ----a-w c:\windows\system32\drivers\i8042prt.sys + 2008-04-14 02:00:52 54,144 ----a-w c:\windows\system32\drivers\i8042prt.sys - 2004-08-05 12:00:00 41,856 ----a-w c:\windows\system32\drivers\imapi.sys + 2008-04-13 18:40:58 42,112 ----a-w c:\windows\system32\drivers\imapi.sys - 2004-08-05 12:00:00 40,320 ----a-w c:\windows\system32\drivers\intelppm.sys + 2008-04-14 02:03:26 40,576 ----a-w c:\windows\system32\drivers\intelppm.sys - 2004-08-05 12:00:00 29,056 ----a-w c:\windows\system32\drivers\ip6fw.sys + 2008-04-13 18:53:34 36,608 ----a-w c:\windows\system32\drivers\ip6fw.sys - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\drivers\ipinip.sys + 2008-04-13 18:57:07 20,864 ----a-w c:\windows\system32\drivers\ipinip.sys - 2004-09-29 22:28:37 134,912 ----a-w c:\windows\system32\drivers\ipnat.sys + 2008-04-13 18:57:15 152,832 ----a-w c:\windows\system32\drivers\ipnat.sys - 2004-08-05 12:00:00 74,752 ----a-w c:\windows\system32\drivers\ipsec.sys + 2008-04-13 19:19:42 75,264 ----a-w c:\windows\system32\drivers\ipsec.sys - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\drivers\irenum.sys + 2008-04-13 18:54:28 11,264 ----a-w c:\windows\system32\drivers\irenum.sys - 2004-08-05 12:00:00 36,224 ----a-w c:\windows\system32\drivers\isapnp.sys + 2008-04-14 02:04:35 37,632 ----a-w c:\windows\system32\drivers\isapnp.sys - 2004-08-05 12:00:00 25,216 ----a-w c:\windows\system32\drivers\kbdclass.sys + 2008-04-14 02:05:14 25,216 ----a-w c:\windows\system32\drivers\kbdclass.sys - 2006-06-14 08:47:45 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys + 2008-04-13 18:45:09 172,416 ----a-w c:\windows\system32\drivers\kmixer.sys - 2004-08-03 21:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys + 2008-04-13 19:16:36 141,056 ----a-w c:\windows\system32\drivers\ks.sys - 2004-08-05 12:00:00 92,032 ----a-w c:\windows\system32\drivers\ksecdd.sys + 2008-04-13 18:31:43 92,288 ----a-w c:\windows\system32\drivers\ksecdd.sys - 2004-08-05 12:00:00 63,744 ----a-w c:\windows\system32\drivers\mf.sys + 2008-04-13 18:36:41 63,744 ----a-w c:\windows\system32\drivers\mf.sys - 2004-08-05 12:00:00 30,336 ----a-w c:\windows\system32\drivers\modem.sys + 2008-04-14 01:53:05 30,336 ----a-w c:\windows\system32\drivers\modem.sys - 2004-08-05 12:00:00 23,680 ----a-w c:\windows\system32\drivers\mouclass.sys + 2008-04-14 01:53:18 23,680 ----a-w c:\windows\system32\drivers\mouclass.sys - 2004-08-05 12:00:00 42,240 ----a-w c:\windows\system32\drivers\mountmgr.sys + 2008-04-13 18:39:46 42,368 ----a-w c:\windows\system32\drivers\mountmgr.sys - 2004-08-05 12:00:00 181,248 ----a-w c:\windows\system32\drivers\mrxdav.sys + 2008-04-13 18:32:44 180,608 ----a-w c:\windows\system32\drivers\mrxdav.sys - 2006-05-05 09:41:45 453,120 ----a-w c:\windows\system32\drivers\mrxsmb.sys + 2008-04-13 19:17:01 456,576 ----a-w c:\windows\system32\drivers\mrxsmb.sys - 2004-08-05 12:00:00 19,072 ----a-w c:\windows\system32\drivers\msfs.sys + 2008-04-13 18:32:39 19,072 ----a-w c:\windows\system32\drivers\msfs.sys - 2004-08-05 12:00:00 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys + 2008-04-13 18:56:32 35,072 ----a-w c:\windows\system32\drivers\msgpc.sys - 2004-08-03 20:58:42 7,552 ----a-w c:\windows\system32\drivers\MSKSSRV.sys + 2008-04-13 18:39:52 7,552 ----a-w c:\windows\system32\drivers\mskssrv.sys - 2004-08-03 20:58:40 5,376 ----a-w c:\windows\system32\drivers\MSPCLOCK.sys + 2008-04-13 18:39:50 5,376 ----a-w c:\windows\system32\drivers\mspclock.sys - 2004-08-03 20:58:42 4,992 ----a-w c:\windows\system32\drivers\MSPQM.sys + 2008-04-13 18:39:51 4,992 ----a-w c:\windows\system32\drivers\mspqm.sys - 2004-08-05 12:00:00 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys + 2008-04-13 18:36:46 15,488 ----a-w c:\windows\system32\drivers\mssmbios.sys - 2004-08-03 20:58:40 5,504 ----a-w c:\windows\system32\drivers\MSTEE.sys + 2008-04-13 18:39:50 5,504 ----a-w c:\windows\system32\drivers\mstee.sys + 2004-08-03 21:41:40 126,686 ------w c:\windows\system32\drivers\mtlmnt5.sys + 2004-08-03 21:41:38 1,309,184 ------w c:\windows\system32\drivers\mtlstrm.sys + 2004-08-03 21:29:38 452,736 ------w c:\windows\system32\drivers\mtxparhm.sys - 2004-08-05 12:00:00 107,904 ----a-w c:\windows\system32\drivers\mup.sys + 2008-04-13 19:17:05 105,344 ----a-w c:\windows\system32\drivers\mup.sys + 2008-04-13 18:43:55 12,672 ------w c:\windows\system32\drivers\mutohpen.sys - 2004-08-03 21:10:30 85,376 ----a-w c:\windows\system32\drivers\NABTSFEC.sys + 2008-04-13 18:46:25 85,248 ----a-w c:\windows\system32\drivers\nabtsfec.sys - 2004-08-05 12:00:00 182,912 ----a-w c:\windows\system32\drivers\ndis.sys + 2008-04-13 19:20:37 182,656 ----a-w c:\windows\system32\drivers\ndis.sys - 2004-08-03 21:10:14 10,880 ----a-w c:\windows\system32\drivers\NdisIP.sys + 2008-04-13 18:46:22 10,880 ----a-w c:\windows\system32\drivers\ndisip.sys - 2004-08-05 12:00:00 9,600 ----a-w c:\windows\system32\drivers\ndistapi.sys + 2008-04-13 18:57:27 10,112 ----a-w c:\windows\system32\drivers\ndistapi.sys - 2004-08-05 12:00:00 12,928 ----a-w c:\windows\system32\drivers\ndisuio.sys + 2008-04-13 18:55:58 14,592 ----a-w c:\windows\system32\drivers\ndisuio.sys - 2004-08-05 12:00:00 91,776 ----a-w c:\windows\system32\drivers\ndiswan.sys + 2008-04-13 19:20:42 91,520 ----a-w c:\windows\system32\drivers\ndiswan.sys - 2004-08-05 12:00:00 38,016 ----a-w c:\windows\system32\drivers\ndproxy.sys + 2008-04-13 18:57:29 40,576 ----a-w c:\windows\system32\drivers\ndproxy.sys - 2004-08-05 12:00:00 34,560 ----a-w c:\windows\system32\drivers\netbios.sys + 2008-04-13 18:56:02 34,688 ----a-w c:\windows\system32\drivers\netbios.sys - 2004-08-05 12:00:00 162,816 ----a-w c:\windows\system32\drivers\netbt.sys + 2008-04-13 19:21:00 162,816 ----a-w c:\windows\system32\drivers\netbt.sys - 2004-08-05 12:00:00 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys + 2008-04-13 18:51:25 61,824 ----a-w c:\windows\system32\drivers\nic1394.sys - 2004-08-05 12:00:00 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys + 2008-04-13 18:53:09 40,320 ----a-w c:\windows\system32\drivers\nmnt.sys - 2004-08-05 12:00:00 30,848 ----a-w c:\windows\system32\drivers\npfs.sys + 2008-04-13 18:32:39 30,848 ----a-w c:\windows\system32\drivers\npfs.sys - 2007-02-09 11:10:35 574,464 ----a-w c:\windows\system32\drivers\ntfs.sys + 2008-04-13 19:15:53 574,976 ----a-w c:\windows\system32\drivers\ntfs.sys + 2004-08-03 21:41:40 180,360 ------w c:\windows\system32\drivers\ntmtlfax.sys + 2004-08-05 12:00:00 2,944 ----a-w c:\windows\system32\drivers\null.sys + 2001-12-03 11:55:12 26,560 ----a-w c:\windows\system32\drivers\nuvaud2.sys + 2001-12-03 11:55:14 155,264 ----a-w c:\windows\system32\drivers\nuvvid2.sys - 2004-08-03 20:29:56 1,897,408 ----a-w c:\windows\system32\drivers\nv4_mini.sys + 2007-10-04 16:14:00 6,854,464 ----a-w c:\windows\system32\drivers\nv4_mini.sys - 2004-08-05 12:00:00 88,448 ----a-w c:\windows\system32\drivers\nwlnkipx.sys + 2008-04-13 18:56:06 88,320 ----a-w c:\windows\system32\drivers\nwlnkipx.sys - 2004-08-05 12:00:00 61,056 ----a-w c:\windows\system32\drivers\ohci1394.sys + 2008-04-13 18:46:18 61,696 ----a-w c:\windows\system32\drivers\ohci1394.sys - 2004-08-05 12:00:00 46,720 ----a-w c:\windows\system32\drivers\p3.sys + 2008-04-14 02:09:37 46,848 ----a-w c:\windows\system32\drivers\p3.sys - 2004-08-05 12:00:00 80,384 ----a-w c:\windows\system32\drivers\parport.sys + 2008-04-14 02:09:40 80,384 ----a-w c:\windows\system32\drivers\parport.sys - 2004-08-05 12:00:00 18,688 ----a-w c:\windows\system32\drivers\partmgr.sys + 2008-04-13 18:40:49 19,712 ----a-w c:\windows\system32\drivers\partmgr.sys - 2004-08-05 12:00:00 68,608 ----a-w c:\windows\system32\drivers\pci.sys + 2008-04-14 02:09:47 68,608 ----a-w c:\windows\system32\drivers\pci.sys - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\drivers\pciidex.sys + 2008-04-13 18:40:29 24,960 ----a-w c:\windows\system32\drivers\pciidex.sys - 2004-08-05 12:00:00 120,320 ----a-w c:\windows\system32\drivers\pcmcia.sys + 2008-04-14 02:09:53 120,576 ----a-w c:\windows\system32\drivers\pcmcia.sys - 2004-08-03 21:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys + 2008-04-13 19:19:41 146,048 ----a-w c:\windows\system32\drivers\portcls.sys - 2004-08-05 12:00:00 39,552 ----a-w c:\windows\system32\drivers\processr.sys + 2008-04-14 01:55:30 40,064 ----a-w c:\windows\system32\drivers\processr.sys - 2004-08-05 12:00:00 69,120 ----a-w c:\windows\system32\drivers\psched.sys + 2008-04-13 18:56:38 69,120 ----a-w c:\windows\system32\drivers\psched.sys - 2004-08-05 12:00:00 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys + 2008-04-13 19:19:43 51,328 ----a-w c:\windows\system32\drivers\rasl2tp.sys - 2004-08-05 12:00:00 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys + 2008-04-13 18:57:32 41,472 ----a-w c:\windows\system32\drivers\raspppoe.sys - 2004-08-05 12:00:00 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys + 2008-04-13 19:19:48 48,384 ----a-w c:\windows\system32\drivers\raspptp.sys - 2006-05-05 09:47:57 174,592 ----a-w c:\windows\system32\drivers\rdbss.sys + 2008-04-13 19:28:39 175,744 ----a-w c:\windows\system32\drivers\rdbss.sys - 2004-08-03 21:01:16 196,864 ----a-w c:\windows\system32\drivers\rdpdr.sys + 2008-04-13 18:32:51 196,224 ----a-w c:\windows\system32\drivers\rdpdr.sys - 2005-06-10 04:11:22 139,528 ----a-w c:\windows\system32\drivers\rdpwd.sys + 2008-04-14 02:34:54 139,656 ----a-w c:\windows\system32\drivers\rdpwd.sys + 2004-08-03 21:41:40 13,776 ------w c:\windows\system32\drivers\recagent.sys - 2004-08-04 00:39:44 58,496 ----a-w c:\windows\system32\drivers\redbook.sys + 2008-04-14 01:57:34 58,752 ----a-w c:\windows\system32\drivers\redbook.sys + 2008-04-13 18:46:32 59,136 ------w c:\windows\system32\drivers\rfcomm.sys - 2006-07-13 08:48:58 202,240 ----a-w c:\windows\system32\drivers\rmcast.sys + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\system32\drivers\rmcast.sys - 2004-08-05 12:00:00 30,080 ----a-w c:\windows\system32\drivers\rndismp.sys + 2008-04-13 18:56:49 30,592 ----a-w c:\windows\system32\drivers\rndismp.sys + 2008-04-13 18:56:49 30,592 ------w c:\windows\system32\drivers\rndismpx.sys + 2007-07-12 10:49:16 96,384 ----a-w c:\windows\system32\drivers\Rtnicxp.sys + 2004-08-03 21:29:52 166,912 ------w c:\windows\system32\drivers\s3gnbm.sys - 2004-08-05 12:00:00 96,256 ----a-w c:\windows\system32\drivers\scsiport.sys + 2008-04-13 18:40:30 96,384 ----a-w c:\windows\system32\drivers\scsiport.sys - 2004-08-05 12:00:00 67,584 ----a-w c:\windows\system32\drivers\sdbus.sys + 2008-04-13 18:36:44 79,232 ----a-w c:\windows\system32\drivers\sdbus.sys - 2007-10-16 18:26:12 163,644 ----a-w c:\windows\system32\drivers\secdrv.sys + 2007-11-13 10:25:54 20,480 ----a-w c:\windows\system32\drivers\secdrv.sys - 2004-08-05 12:00:00 15,488 ----a-w c:\windows\system32\drivers\serenum.sys + 2008-04-13 18:40:12 15,744 ----a-w c:\windows\system32\drivers\serenum.sys - 2004-08-05 12:00:00 66,560 ----a-w c:\windows\system32\drivers\serial.sys + 2008-04-14 02:00:08 66,048 ----a-w c:\windows\system32\drivers\serial.sys - 2004-08-05 12:00:00 11,136 ----a-w c:\windows\system32\drivers\sffdisk.sys + 2008-04-13 18:40:47 11,904 ----a-w c:\windows\system32\drivers\sffdisk.sys + 2008-04-13 18:40:48 10,240 ------w c:\windows\system32\drivers\sffp_mmc.sys - 2004-08-05 12:00:00 10,240 ----a-w c:\windows\system32\drivers\sffp_sd.sys + 2008-04-13 18:40:47 11,008 ----a-w c:\windows\system32\drivers\sffp_sd.sys - 2004-08-05 12:00:00 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys + 2008-04-13 18:40:48 11,392 ----a-w c:\windows\system32\drivers\sfloppy.sys + 2008-04-14 02:33:41 3,901 ------w c:\windows\system32\drivers\siint5.dll + 2008-04-13 18:36:39 40,960 ------w c:\windows\system32\drivers\sisagp.sys - 2003-03-25 14:50:46 4,096 ----a-w c:\windows\system32\drivers\siside.sys + 2003-03-25 16:50:46 4,096 ----a-w c:\windows\system32\drivers\siside.sys + 2002-10-17 14:14:46 49,024 ----a-w c:\windows\system32\drivers\sisidex.sys + 2002-08-20 16:19:08 9,472 ----a-w c:\windows\system32\drivers\sisperf.sys - 2004-08-03 21:10:18 11,136 ----a-w c:\windows\system32\drivers\SLIP.sys + 2008-04-13 18:46:23 11,136 ----a-w c:\windows\system32\drivers\slip.sys + 2004-08-03 21:41:42 129,535 ------w c:\windows\system32\drivers\slnt7554.sys + 2004-08-03 21:41:44 404,990 ------w c:\windows\system32\drivers\slntamr.sys + 2004-08-03 21:41:46 95,424 ------w c:\windows\system32\drivers\slnthal.sys + 2004-08-03 21:41:46 13,240 ------w c:\windows\system32\drivers\slwdmsup.sys + 2008-04-13 18:36:34 5,888 ------w c:\windows\system32\drivers\smbali.sys - 2004-08-05 12:00:00 25,472 ----a-w c:\windows\system32\drivers\sonydcam.sys + 2008-04-13 18:46:07 25,344 ----a-w c:\windows\system32\drivers\sonydcam.sys - 2006-06-14 08:47:46 6,400 ----a-w c:\windows\system32\drivers\splitter.sys + 2008-04-13 18:45:07 6,272 ----a-w c:\windows\system32\drivers\splitter.sys - 2007-09-26 18:44:44 685,816 ----a-w c:\windows\system32\drivers\sptd.sys + 2007-12-29 06:11:30 715,248 ----a-w c:\windows\system32\drivers\sptd.sys - 2004-08-05 12:00:00 73,600 ----a-w c:\windows\system32\drivers\sr.sys + 2008-04-14 02:10:03 73,600 ----a-w c:\windows\system32\drivers\sr.sys + 2007-03-01 08:34:36 28,352 ----a-w c:\windows\system32\drivers\ssmdrv.sys - 2004-08-03 21:08:04 48,640 ----a-w c:\windows\system32\drivers\STREAM.SYS + 2008-04-13 18:45:15 49,408 ----a-w c:\windows\system32\drivers\stream.sys - 2004-08-03 21:10:14 15,360 ----a-w c:\windows\system32\drivers\StreamIP.sys + 2008-04-13 18:46:21 15,232 ----a-w c:\windows\system32\drivers\streamip.sys - 2004-08-05 12:00:00 4,352 ----a-w c:\windows\system32\drivers\swenum.sys + 2008-04-13 18:39:53 4,352 ----a-w c:\windows\system32\drivers\swenum.sys - 2001-08-17 20:00:52 54,272 ----a-w c:\windows\system32\drivers\swmidi.sys + 2008-04-13 18:45:09 56,576 ----a-w c:\windows\system32\drivers\swmidi.sys - 2004-08-03 21:15:56 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys + 2008-04-13 19:15:55 60,800 ----a-w c:\windows\system32\drivers\sysaudio.sys - 2004-08-05 12:00:00 14,976 ----a-w c:\windows\system32\drivers\tape.sys + 2008-04-13 18:40:50 14,976 ----a-w c:\windows\system32\drivers\tape.sys - 2006-04-20 11:51:50 359,808 ----a-w c:\windows\system32\drivers\tcpip.sys + 2008-04-13 19:20:16 361,344 ----a-w c:\windows\system32\drivers\tcpip.sys - 2006-08-16 09:37:30 225,664 ----a-w c:\windows\system32\drivers\tcpip6.sys + 2008-04-13 19:00:02 225,664 ----a-w c:\windows\system32\drivers\tcpip6.sys - 2004-08-05 12:00:00 18,560 ----a-w c:\windows\system32\drivers\tdi.sys + 2008-04-13 19:00:05 19,072 ----a-w c:\windows\system32\drivers\tdi.sys - 2004-08-05 12:00:00 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys + 2008-04-14 02:34:52 12,040 ----a-w c:\windows\system32\drivers\tdpipe.sys - 2004-08-05 12:00:00 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys + 2008-04-14 02:34:53 21,896 ----a-w c:\windows\system32\drivers\tdtcp.sys - 2004-08-03 22:55:12 40,840 ----a-w c:\windows\system32\drivers\termdd.sys + 2008-04-14 02:34:52 40,840 ----a-w c:\windows\system32\drivers\termdd.sys - 2004-08-05 12:00:00 12,416 ----a-w c:\windows\system32\drivers\tunmp.sys + 2008-04-13 18:56:01 12,288 ----a-w c:\windows\system32\drivers\tunmp.sys - 2004-08-03 23:07:44 44,672 ----a-w c:\windows\system32\drivers\UAGP35.SYS + 2008-04-13 18:36:40 44,672 ----a-w c:\windows\system32\drivers\uagp35.sys - 2004-08-05 12:00:00 66,176 ----a-w c:\windows\system32\drivers\udfs.sys + 2008-04-13 18:32:36 66,048 ----a-w c:\windows\system32\drivers\udfs.sys - 2007-04-23 10:32:54 364,160 ----a-w c:\windows\system32\drivers\update.sys + 2008-04-13 18:39:46 384,768 ----a-w c:\windows\system32\drivers\update.sys - 2004-08-05 12:00:00 12,672 ----a-w c:\windows\system32\drivers\usb8023.sys + 2008-04-13 18:56:49 12,800 ----a-w c:\windows\system32\drivers\usb8023.sys + 2008-04-13 18:56:49 12,800 ------w c:\windows\system32\drivers\usb8023x.sys - 2004-08-03 21:07:56 59,264 ----a-w c:\windows\system32\drivers\USBAUDIO.sys + 2008-04-13 18:45:12 60,032 ----a-w c:\windows\system32\drivers\usbaudio.sys - 2004-08-05 12:00:00 23,808 ----a-w c:\windows\system32\drivers\usbcamd.sys + 2008-04-13 18:45:40 25,600 ----a-w c:\windows\system32\drivers\usbcamd.sys - 2004-08-05 12:00:00 23,936 ----a-w c:\windows\system32\drivers\usbcamd2.sys + 2008-04-13 18:45:41 25,728 ----a-w c:\windows\system32\drivers\usbcamd2.sys - 2004-08-03 21:08:48 31,616 ----a-w c:\windows\system32\drivers\usbccgp.sys + 2008-04-13 18:45:39 32,128 ----a-w c:\windows\system32\drivers\usbccgp.sys - 2004-08-05 12:00:00 26,624 ----a-w c:\windows\system32\drivers\usbehci.sys + 2008-04-13 18:45:35 30,208 ----a-w c:\windows\system32\drivers\usbehci.sys - 2004-08-05 12:00:00 57,600 ----a-w c:\windows\system32\drivers\usbhub.sys + 2008-04-13 18:45:37 59,520 ----a-w c:\windows\system32\drivers\usbhub.sys - 2004-08-05 12:00:00 16,000 ----a-w c:\windows\system32\drivers\usbintel.sys + 2008-04-13 18:45:43 15,872 ----a-w c:\windows\system32\drivers\usbintel.sys - 2004-08-05 12:00:00 17,024 ----a-w c:\windows\system32\drivers\usbohci.sys + 2008-04-13 18:45:35 17,152 ----a-w c:\windows\system32\drivers\usbohci.sys - 2004-08-05 12:00:00 142,976 ----a-w c:\windows\system32\drivers\usbport.sys + 2008-04-13 18:45:36 143,872 ----a-w c:\windows\system32\drivers\usbport.sys - 2004-08-03 21:01:26 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys + 2008-04-13 18:47:37 25,856 ----a-w c:\windows\system32\drivers\usbprint.sys - 2004-08-03 20:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys + 2008-04-13 18:45:34 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys - 2004-08-03 21:08:48 26,496 ----a-w c:\windows\system32\drivers\USBSTOR.SYS + 2008-04-13 18:45:38 26,368 ----a-w c:\windows\system32\drivers\usbstor.sys + 2008-04-13 18:46:20 121,984 ------w c:\windows\system32\drivers\usbvideo.sys + 2008-04-14 02:33:48 11,325 ------w c:\windows\system32\drivers\vchnt5.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\drivers\vga.sys + 2008-04-13 18:44:40 20,992 ----a-w c:\windows\system32\drivers\vga.sys + 2008-04-13 18:36:40 42,240 ------w c:\windows\system32\drivers\viaagp.sys - 2004-08-05 12:00:00 79,744 ----a-w c:\windows\system32\drivers\videoprt.sys + 2008-04-13 18:44:40 81,664 ----a-w c:\windows\system32\drivers\videoprt.sys - 2004-08-05 12:00:00 53,376 ----a-w c:\windows\system32\drivers\volsnap.sys + 2008-04-14 01:56:04 53,376 ----a-w c:\windows\system32\drivers\volsnap.sys + 2008-04-13 18:43:55 14,208 ------w c:\windows\system32\drivers\wacompen.sys + 2004-08-03 21:29:40 11,807 ------w c:\windows\system32\drivers\wadv07nt.sys + 2004-08-03 21:29:40 11,295 ------w c:\windows\system32\drivers\wadv08nt.sys + 2004-08-03 21:29:42 11,871 ------w c:\windows\system32\drivers\wadv09nt.sys + 2004-08-03 21:29:42 11,935 ------w c:\windows\system32\drivers\wadv11nt.sys - 2004-08-05 12:00:00 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys + 2008-04-13 18:57:21 34,560 ----a-w c:\windows\system32\drivers\wanarp.sys + 2004-08-03 21:29:46 22,271 ------w c:\windows\system32\drivers\watv06nt.sys + 2004-08-03 21:29:46 25,471 ------w c:\windows\system32\drivers\watv10nt.sys + 2006-11-06 17:04:56 28,672 ----a-w c:\windows\system32\drivers\wceusbsh.sys - 2006-06-14 09:00:45 82,944 ----a-w c:\windows\system32\drivers\wdmaud.sys + 2008-04-13 19:17:18 83,072 ----a-w c:\windows\system32\drivers\wdmaud.sys - 2004-08-03 21:10:22 19,328 ----a-w c:\windows\system32\drivers\WSTCODEC.SYS + 2008-04-13 18:46:24 19,200 ----a-w c:\windows\system32\drivers\wstcodec.sys - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\drprov.dll + 2008-04-14 02:33:23 14,336 ----a-w c:\windows\system32\drprov.dll + 2006-09-29 10:26:22 176,165 ----a-w c:\windows\system32\drv23260.dll + 2006-09-29 10:25:38 208,935 ----a-w c:\windows\system32\drv33260.dll + 2006-09-29 10:24:48 217,127 ----a-w c:\windows\system32\drv43260.dll + 2008-02-18 10:16:24 30,464 -c--a-w c:\windows\system32\DRVSTORE\usbaapl_4351B7DAFF62FD33510D77DFAE3CF8CC82517571\usbaapl.sys - 2004-08-05 12:00:00 16,384 ----a-w c:\windows\system32\ds32gt.dll + 2008-04-14 02:33:23 16,384 ----a-w c:\windows\system32\ds32gt.dll - 2004-08-05 12:00:00 181,760 ----a-w c:\windows\system32\dsdmo.dll + 2008-04-14 02:33:23 181,248 ----a-w c:\windows\system32\dsdmo.dll - 2004-08-05 12:00:00 72,192 ----a-w c:\windows\system32\dsdmoprp.dll + 2008-04-14 02:33:23 72,192 ----a-w c:\windows\system32\dsdmoprp.dll - 2004-08-05 12:00:00 93,696 ----a-w c:\windows\system32\dskquota.dll + 2008-04-14 02:33:23 93,696 ----a-w c:\windows\system32\dskquota.dll - 2004-08-05 12:00:00 150,016 ----a-w c:\windows\system32\dskquoui.dll + 2008-04-14 02:33:23 161,280 ----a-w c:\windows\system32\dskquoui.dll - 2004-08-05 12:00:00 367,616 ----a-w c:\windows\system32\dsound.dll + 2008-04-14 02:33:23 367,616 ----a-w c:\windows\system32\dsound.dll - 2004-08-05 12:00:00 1,294,336 ----a-w c:\windows\system32\dsound3d.dll + 2008-04-14 02:33:23 1,293,824 ----a-w c:\windows\system32\dsound3d.dll - 2004-08-05 12:00:00 145,408 ----a-w c:\windows\system32\dsprop.dll + 2008-04-14 02:33:23 145,920 ----a-w c:\windows\system32\dsprop.dll - 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\dsprpres.dll + 2008-04-14 02:06:29 4,096 ----a-w c:\windows\system32\dsprpres.dll - 2004-08-05 12:00:00 240,640 ----a-w c:\windows\system32\dsquery.dll + 2008-04-14 02:33:23 240,640 ----a-w c:\windows\system32\dsquery.dll - 2004-08-05 12:00:00 52,736 ----a-w c:\windows\system32\dssec.dll + 2008-04-14 02:33:23 52,736 ----a-w c:\windows\system32\dssec.dll - 2004-08-05 12:00:00 137,216 ----a-w c:\windows\system32\dssenh.dll + 2008-04-13 17:37:57 138,752 ----a-w c:\windows\system32\dssenh.dll - 2004-08-05 12:00:00 113,664 ----a-w c:\windows\system32\dsuiext.dll + 2008-04-14 02:33:23 113,664 ----a-w c:\windows\system32\dsuiext.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\system32\dswave.dll + 2008-04-14 02:33:23 19,456 ----a-w c:\windows\system32\dswave.dll - 2007-08-21 00:26:52 196,608 ----a-w c:\windows\system32\dtu100.dll + 2008-07-25 08:34:52 196,608 ----a-w c:\windows\system32\dtu100.dll - 2004-08-05 12:00:00 10,752 ----a-w c:\windows\system32\dumprep.exe + 2008-04-14 02:34:01 10,752 ----a-w c:\windows\system32\dumprep.exe - 2004-08-05 12:00:00 304,128 ----a-w c:\windows\system32\duser.dll + 2008-04-14 02:33:23 304,128 ----a-w c:\windows\system32\duser.dll - 2004-08-05 12:00:00 17,920 ----a-w c:\windows\system32\dvdupgrd.exe + 2008-04-14 02:34:01 17,920 ----a-w c:\windows\system32\dvdupgrd.exe - 2004-08-05 12:00:00 180,224 ----a-w c:\windows\system32\dwwin.exe + 2008-04-14 02:34:01 180,224 ----a-w c:\windows\system32\dwwin.exe - 2004-08-05 12:00:00 619,008 ----a-w c:\windows\system32\dx7vb.dll + 2008-04-14 02:33:23 619,008 ----a-w c:\windows\system32\dx7vb.dll - 2004-08-05 12:00:00 1,227,264 ----a-w c:\windows\system32\dx8vb.dll + 2008-04-14 02:33:23 1,227,264 ----a-w c:\windows\system32\dx8vb.dll - 2004-08-05 12:00:00 1,298,432 ----a-w c:\windows\system32\dxdiag.exe + 2008-04-14 02:34:01 1,298,432 ----a-w c:\windows\system32\dxdiag.exe - 2004-08-05 12:00:00 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll + 2008-04-14 02:33:23 2,113,536 ----a-w c:\windows\system32\dxdiagn.dll - 2006-08-24 12:17:20 500,278 ----a-w c:\windows\system32\dxmasf.dll + 2008-04-14 02:33:23 500,278 ----a-w c:\windows\system32\dxmasf.dll - 2006-10-17 10:58:06 346,624 ----a-w c:\windows\system32\dxtmsft.dll + 2008-08-26 08:11:45 347,136 ----a-w c:\windows\system32\dxtmsft.dll - 2007-08-20 09:59:29 214,528 ----a-w c:\windows\system32\dxtrans.dll + 2008-08-26 08:11:45 214,528 ----a-w c:\windows\system32\dxtrans.dll + 2008-04-14 02:33:23 30,720 ------w c:\windows\system32\eapolqec.dll + 2008-04-14 02:33:23 184,832 ------w c:\windows\system32\eapp3hst.dll + 2008-04-14 02:33:23 126,976 ------w c:\windows\system32\eappcfg.dll + 2008-04-14 02:33:23 94,720 ------w c:\windows\system32\eappgnui.dll + 2008-04-14 02:33:23 180,736 ------w c:\windows\system32\eapphost.dll + 2008-04-14 02:33:23 40,960 ------w c:\windows\system32\eappprxy.dll + 2008-04-14 02:33:23 59,392 ------w c:\windows\system32\eapqec.dll + 2008-04-14 02:33:23 33,792 ------w c:\windows\system32\eapsvc.dll - 2004-08-05 12:00:00 187,392 ----a-w c:\windows\system32\els.dll + 2008-04-14 02:33:23 187,392 ----a-w c:\windows\system32\els.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\system32\encapi.dll + 2008-04-14 02:33:23 20,480 ----a-w c:\windows\system32\encapi.dll - 2004-08-05 12:00:00 186,368 ----a-w c:\windows\system32\encdec.dll + 2008-04-14 02:33:23 186,880 ----a-w c:\windows\system32\encdec.dll + 2007-07-28 21:05:06 640,336 ----a-w c:\windows\system32\Eraser.dll + 2007-07-28 21:05:04 112,976 ----a-w c:\windows\system32\Eraserl.exe + 2007-07-28 21:05:08 292,176 ----a-w c:\windows\system32\Erasext.dll - 2004-08-05 12:00:00 23,040 ----a-w c:\windows\system32\ersvc.dll + 2008-04-14 02:33:24 23,040 ----a-w c:\windows\system32\ersvc.dll - 2005-07-26 04:39:57 243,200 ----a-w c:\windows\system32\es.dll + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\system32\es.dll - 2005-10-20 22:25:53 1,097,728 ----a-w c:\windows\system32\esent.dll + 2008-04-14 02:33:24 1,097,728 ----a-w c:\windows\system32\esent.dll - 2004-08-05 12:00:00 195,072 ----a-w c:\windows\system32\eudcedit.exe + 2008-04-14 02:34:01 195,072 ----a-w c:\windows\system32\eudcedit.exe - 2004-08-05 12:00:00 55,808 ----a-w c:\windows\system32\eventlog.dll + 2008-04-14 02:33:24 56,320 ----a-w c:\windows\system32\eventlog.dll - 2004-08-05 12:00:00 380,957 ----a-w c:\windows\system32\expsrv.dll + 2008-04-14 02:33:24 380,445 ----a-w c:\windows\system32\expsrv.dll - 2007-08-20 09:59:29 132,608 ----a-w c:\windows\system32\extmgr.dll + 2008-08-26 08:11:45 133,120 ----a-w c:\windows\system32\extmgr.dll - 2004-08-05 12:00:00 45,568 ----a-w c:\windows\system32\extrac32.exe + 2008-04-14 02:34:04 24,064 ----a-w c:\windows\system32\extrac32.exe - 2004-08-05 12:00:00 121,856 ----a-w c:\windows\system32\exts.dll + 2008-04-14 02:33:24 125,952 ----a-w c:\windows\system32\exts.dll - 2004-08-05 12:00:00 80,896 ----a-w c:\windows\system32\faultrep.dll + 2008-04-14 02:33:24 80,896 ----a-w c:\windows\system32\faultrep.dll + 2008-04-14 02:34:04 20,992 ------w c:\windows\system32\faxpatch.exe - 2004-08-05 12:00:00 21,504 ----a-w c:\windows\system32\feclient.dll + 2008-04-14 02:33:24 21,504 ----a-w c:\windows\system32\feclient.dll - 2004-08-05 12:00:00 348,160 ----a-w c:\windows\system32\filemgmt.dll + 2008-04-14 02:33:24 348,160 ----a-w c:\windows\system32\filemgmt.dll - 2004-08-05 12:00:00 29,184 ----a-w c:\windows\system32\findstr.exe + 2008-04-14 02:34:04 29,184 ----a-w c:\windows\system32\findstr.exe - 2004-08-05 12:00:00 88,064 ----a-w c:\windows\system32\fldrclnr.dll + 2008-04-14 02:33:24 88,064 ----a-w c:\windows\system32\fldrclnr.dll - 2006-08-21 12:26:15 16,896 ----a-w c:\windows\system32\fltlib.dll + 2008-04-14 02:33:24 16,896 ----a-w c:\windows\system32\fltlib.dll - 2006-08-21 09:14:58 23,040 ----a-w c:\windows\system32\fltmc.exe + 2008-04-14 02:34:04 23,040 ----a-w c:\windows\system32\fltmc.exe - 2007-10-14 18:51:29 1,820,848 ----a-w c:\windows\system32\FNTCACHE.DAT + 2008-11-01 08:21:44 1,963,152 ----a-w c:\windows\system32\FNTCACHE.DAT - 2004-08-05 12:00:00 386,560 ----a-w c:\windows\system32\fontext.dll + 2008-04-14 02:33:24 386,560 ----a-w c:\windows\system32\fontext.dll - 2005-10-17 21:21:08 80,896 ----a-w c:\windows\system32\fontsub.dll + 2008-04-14 02:33:24 80,896 ----a-w c:\windows\system32\fontsub.dll - 2004-08-05 12:00:00 21,504 ----a-w c:\windows\system32\fontview.exe + 2008-04-14 02:34:04 21,504 ----a-w c:\windows\system32\fontview.exe - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\forcedos.exe + 2008-04-14 02:34:04 7,680 ----a-w c:\windows\system32\forcedos.exe - 2004-08-05 12:00:00 25,600 ----a-w c:\windows\system32\format.com + 2008-04-14 02:34:31 29,696 ----a-w c:\windows\system32\format.com + 2008-04-14 02:33:29 28,672 ------w c:\windows\system32\fr\microsoft.managementconsole.resources.dll + 2008-04-14 02:33:30 36,864 ------w c:\windows\system32\fr\mmcex.resources.dll + 2008-04-14 02:33:30 5,120 ------w c:\windows\system32\fr\mmcfxcommon.resources.dll - 2004-08-05 12:00:00 9,344 ----a-w c:\windows\system32\framebuf.dll + 2008-04-14 02:31:23 9,344 ----a-w c:\windows\system32\framebuf.dll - 2004-08-05 12:00:00 193,024 ----a-w c:\windows\system32\fsquirt.exe + 2008-04-14 02:34:04 193,024 ----a-w c:\windows\system32\fsquirt.exe - 2004-08-05 12:00:00 46,080 ----a-w c:\windows\system32\ftp.exe + 2008-04-14 02:34:04 46,080 ----a-w c:\windows\system32\ftp.exe - 2004-08-05 12:00:00 60,416 ----a-w c:\windows\system32\fwcfg.dll + 2008-04-14 02:33:25 60,416 ----a-w c:\windows\system32\fwcfg.dll - 2007-06-19 13:32:25 282,112 ----a-w c:\windows\system32\gdi32.dll + 2008-04-14 02:33:25 285,184 ----a-w c:\windows\system32\gdi32.dll + 1996-04-03 19:33:26 5,248 ----a-w c:\windows\system32\giveio.sys - 2004-08-05 12:00:00 123,904 ----a-w c:\windows\system32\glu32.dll + 2008-04-14 02:33:25 123,904 ----a-w c:\windows\system32\glu32.dll - 2004-08-05 12:00:00 10,240 ----a-w c:\windows\system32\gpkrsrc.dll + 2008-04-14 01:59:15 10,240 ----a-w c:\windows\system32\gpkrsrc.dll - 2004-08-05 12:00:00 39,424 ----a-w c:\windows\system32\grpconv.exe + 2008-04-14 02:34:05 39,424 ----a-w c:\windows\system32\grpconv.exe - 2004-08-05 12:00:00 614,912 ----a-w c:\windows\system32\h323msp.dll + 2008-04-14 02:33:26 614,912 ----a-w c:\windows\system32\h323msp.dll - 2004-08-05 12:00:00 131,968 ----a-w c:\windows\system32\hal.dll + 2008-04-13 18:31:28 131,840 ----a-w c:\windows\system32\HAL.DLL - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\hccoin.dll + 2008-04-14 02:33:26 7,168 ----a-w c:\windows\system32\hccoin.dll - 2004-08-05 12:00:00 16,384 ----a-w c:\windows\system32\help.exe + 2008-04-14 02:34:05 17,408 ----a-w c:\windows\system32\help.exe - 2005-05-27 02:08:06 41,472 ----a-w c:\windows\system32\hhsetup.dll + 2008-04-14 02:33:26 41,472 ----a-w c:\windows\system32\hhsetup.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\hid.dll + 2008-04-14 02:33:26 20,992 ----a-w c:\windows\system32\hid.dll - 2006-07-21 08:27:28 72,704 ----a-w c:\windows\system32\hlink.dll + 2008-04-14 02:33:26 72,704 ----a-w c:\windows\system32\hlink.dll - 2004-08-05 12:00:00 347,648 ----a-w c:\windows\system32\hnetcfg.dll + 2008-04-14 02:33:26 347,136 ----a-w c:\windows\system32\hnetcfg.dll - 2004-08-05 12:00:00 336,384 ----a-w c:\windows\system32\hnetwiz.dll + 2008-04-14 02:33:26 336,384 ----a-w c:\windows\system32\hnetwiz.dll - 2004-08-05 12:00:00 146,944 ----a-w c:\windows\system32\hotplug.dll + 2008-04-14 02:33:26 146,944 ----a-w c:\windows\system32\hotplug.dll + 2008-04-14 02:33:26 32,285 ------w c:\windows\system32\hsfcisp2.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\httpapi.dll + 2008-04-14 02:33:26 24,576 ----a-w c:\windows\system32\httpapi.dll - 2004-08-05 12:00:00 43,008 ----a-w c:\windows\system32\htui.dll + 2008-04-14 02:33:26 43,008 ----a-w c:\windows\system32\htui.dll - 2004-11-17 17:42:33 354,304 ----a-w c:\windows\system32\hypertrm.dll + 2008-04-14 02:33:26 354,304 ----a-w c:\windows\system32\hypertrm.dll - 2004-08-05 12:00:00 119,808 ----a-w c:\windows\system32\iasrad.dll + 2008-04-14 02:33:26 119,808 ----a-w c:\windows\system32\iasrad.dll - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\icaapi.dll + 2008-04-14 02:33:26 11,264 ----a-w c:\windows\system32\icaapi.dll - 2007-08-20 09:59:29 63,488 ----a-w c:\windows\system32\icardie.dll + 2008-08-26 08:11:45 63,488 ----a-w c:\windows\system32\icardie.dll - 2004-08-05 12:00:00 80,384 ----a-w c:\windows\system32\iccvid.dll + 2008-04-14 02:33:26 80,384 ----a-w c:\windows\system32\iccvid.dll - 2005-06-29 01:49:41 254,976 ----a-w c:\windows\system32\icm32.dll + 2008-04-14 02:33:26 254,976 ----a-w c:\windows\system32\icm32.dll - 2004-08-05 12:00:00 3,584 ----a-w c:\windows\system32\icmp.dll + 2008-04-14 02:31:30 3,584 ----a-w c:\windows\system32\icmp.dll - 2004-08-05 12:00:00 73,728 ----a-w c:\windows\system32\icwdial.dll + 2008-04-14 02:33:26 73,728 ----a-w c:\windows\system32\icwdial.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\icwphbk.dll + 2008-04-14 02:33:26 65,536 ----a-w c:\windows\system32\icwphbk.dll + 2002-08-20 13:58:32 139,264 ----a-w c:\windows\system32\IDEproperty.dll - 2004-08-05 12:00:00 121,856 ----a-w c:\windows\system32\idq.dll + 2008-04-14 02:33:26 121,856 ----a-w c:\windows\system32\idq.dll - 2007-08-17 10:22:11 63,488 ----a-w c:\windows\system32\ie4uinit.exe + 2008-08-25 08:39:40 70,656 ----a-w c:\windows\system32\ie4uinit.exe - 2007-08-20 09:59:29 153,088 ----a-w c:\windows\system32\ieakeng.dll + 2008-08-26 08:11:45 153,088 ----a-w c:\windows\system32\ieakeng.dll - 2007-08-20 09:59:29 230,400 ----a-w c:\windows\system32\ieaksie.dll + 2008-08-26 08:11:45 230,400 ----a-w c:\windows\system32\ieaksie.dll - 2007-08-17 07:34:25 161,792 ----a-w c:\windows\system32\ieakui.dll + 2008-08-23 05:54:51 161,792 ----a-w c:\windows\system32\ieakui.dll - 2007-08-20 09:59:29 383,488 ----a-w c:\windows\system32\ieapfltr.dll + 2008-08-26 08:11:46 383,488 ----a-w c:\windows\system32\ieapfltr.dll - 2007-08-20 09:59:29 384,512 ----a-w c:\windows\system32\iedkcs32.dll + 2008-08-26 08:11:46 384,512 ----a-w c:\windows\system32\iedkcs32.dll - 2006-10-17 11:06:00 78,336 ----a-w c:\windows\system32\ieencode.dll + 2008-04-14 02:33:26 81,920 ----a-w c:\windows\system32\ieencode.dll - 2007-08-20 09:59:29 6,058,496 ----a-w c:\windows\system32\ieframe.dll + 2008-10-03 17:12:27 6,066,176 ----a-w c:\windows\system32\ieframe.dll - 2006-11-07 20:03:36 191,488 ----a-w c:\windows\system32\iepeers.dll + 2007-08-13 17:54:10 191,488 ----a-w c:\windows\system32\iepeers.dll - 2007-08-20 09:59:29 44,544 ----a-w c:\windows\system32\iernonce.dll + 2008-08-26 08:11:48 44,544 ----a-w c:\windows\system32\iernonce.dll - 2007-08-20 09:59:30 267,776 ----a-w c:\windows\system32\iertutil.dll + 2008-08-26 08:11:48 267,776 ----a-w c:\windows\system32\iertutil.dll - 2006-11-07 02:26:42 55,296 ----a-w c:\windows\system32\iesetup.dll + 2007-08-13 17:39:12 55,296 ----a-w c:\windows\system32\iesetup.dll - 2007-08-17 10:22:11 13,824 ----a-w c:\windows\system32\ieudinit.exe + 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe - 2006-11-07 20:03:36 180,736 ------w c:\windows\system32\ieui.dll + 2007-08-13 17:54:10 180,736 ----a-w c:\windows\system32\ieui.dll - 2004-08-05 12:00:00 114,688 ----a-w c:\windows\system32\iexpress.exe + 2008-04-14 02:34:06 114,688 ----a-w c:\windows\system32\iexpress.exe - 2004-08-05 12:00:00 142,848 ----a-w c:\windows\system32\ifmon.dll + 2008-04-14 02:33:26 142,848 ----a-w c:\windows\system32\ifmon.dll - 2004-08-05 12:00:00 8,192 ----a-w c:\windows\system32\igmpagnt.dll + 2008-04-14 02:33:26 8,192 ----a-w c:\windows\system32\igmpagnt.dll - 2004-08-05 12:00:00 81,920 ----a-w c:\windows\system32\ils.dll + 2008-04-14 02:33:26 81,920 ----a-w c:\windows\system32\ils.dll - 2004-08-05 12:00:00 144,384 ----a-w c:\windows\system32\imagehlp.dll + 2008-04-14 02:33:26 144,384 ----a-w c:\windows\system32\imagehlp.dll - 2004-08-05 12:00:00 150,016 ----a-w c:\windows\system32\imapi.exe + 2008-04-14 02:34:07 150,528 ----a-w c:\windows\system32\imapi.exe - 2004-08-05 12:00:00 36,921 ----a-w c:\windows\system32\imeshare.dll + 2008-04-14 02:33:26 36,921 ----a-w c:\windows\system32\imeshare.dll - 2006-10-17 10:57:58 36,352 ----a-w c:\windows\system32\imgutil.dll + 2007-08-13 17:36:06 36,352 ----a-w c:\windows\system32\imgutil.dll - 2004-08-05 12:00:00 110,080 ----a-w c:\windows\system32\imm32.dll + 2008-04-14 02:33:26 110,080 ----a-w c:\windows\system32\imm32.dll + 2008-07-09 07:05:42 21,904 ----a-w c:\windows\system32\imsinstall_loc040c.dll + 2008-07-09 07:05:42 17,808 ----a-w c:\windows\system32\imslsp_install_loc040c.dll - 2004-08-05 12:00:00 282,624 ----a-w c:\windows\system32\inetcfg.dll + 2008-04-14 02:33:26 282,624 ----a-w c:\windows\system32\inetcfg.dll - 2007-08-21 06:17:23 683,520 ----a-w c:\windows\system32\inetcomm.dll + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\system32\inetcomm.dll - 2004-08-05 12:00:00 33,280 ----a-w c:\windows\system32\inetmib1.dll + 2008-04-14 02:33:27 32,768 ----a-w c:\windows\system32\inetmib1.dll - 2004-08-05 12:00:00 75,264 ----a-w c:\windows\system32\inetpp.dll + 2008-04-14 02:33:27 75,264 ----a-w c:\windows\system32\inetpp.dll - 2004-08-05 12:00:00 16,384 ----a-w c:\windows\system32\inetppui.dll + 2008-04-14 02:33:27 16,384 ----a-w c:\windows\system32\inetppui.dll - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\inetres.dll + 2008-04-14 02:02:54 50,688 ----a-w c:\windows\system32\inetres.dll + 2005-03-30 13:15:30 49,152 ----a-w c:\windows\system32\INETWH32.dll - 2004-08-05 12:00:00 147,456 ----a-w c:\windows\system32\initpki.dll + 2008-04-14 02:33:27 147,456 ----a-w c:\windows\system32\initpki.dll - 2004-08-05 12:00:00 126,464 ----a-w c:\windows\system32\input.dll + 2008-04-14 02:33:27 126,464 ----a-w c:\windows\system32\input.dll - 2006-11-07 02:26:24 92,672 ----a-w c:\windows\system32\inseng.dll + 2007-08-13 17:39:02 92,672 ----a-w c:\windows\system32\inseng.dll - 2004-08-05 12:00:00 58,368 ----a-w c:\windows\system32\ipconfig.exe + 2008-04-14 02:34:08 58,368 ----a-w c:\windows\system32\ipconfig.exe - 2006-05-19 13:23:35 95,744 ----a-w c:\windows\system32\iphlpapi.dll + 2008-04-14 02:33:27 95,744 ----a-w c:\windows\system32\iphlpapi.dll - 2004-08-05 12:00:00 167,424 ----a-w c:\windows\system32\ipmontr.dll + 2008-04-14 02:33:27 174,592 ----a-w c:\windows\system32\ipmontr.dll - 2004-08-05 12:00:00 332,800 ----a-w c:\windows\system32\ipnathlp.dll + 2008-04-14 02:33:27 332,800 ----a-w c:\windows\system32\ipnathlp.dll - 2004-08-05 12:00:00 355,840 ----a-w c:\windows\system32\ippromon.dll + 2008-04-14 02:33:27 355,840 ----a-w c:\windows\system32\ippromon.dll - 2004-08-05 12:00:00 169,984 ----a-w c:\windows\system32\iprtrmgr.dll + 2008-04-14 02:33:27 177,152 ----a-w c:\windows\system32\iprtrmgr.dll - 2004-08-05 12:00:00 361,472 ----a-w c:\windows\system32\ipsecsnp.dll + 2008-04-14 02:33:27 361,472 ----a-w c:\windows\system32\ipsecsnp.dll - 2004-08-05 12:00:00 184,320 ----a-w c:\windows\system32\ipsecsvc.dll + 2008-04-14 02:33:27 185,344 ----a-w c:\windows\system32\ipsecsvc.dll - 2004-08-05 12:00:00 388,096 ----a-w c:\windows\system32\ipsmsnap.dll + 2008-04-14 02:33:27 388,096 ----a-w c:\windows\system32\ipsmsnap.dll - 2004-08-05 12:00:00 53,760 ----a-w c:\windows\system32\ipv6.exe + 2008-04-14 02:34:08 53,760 ----a-w c:\windows\system32\ipv6.exe - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\ipv6mon.dll + 2008-04-14 02:33:27 59,904 ----a-w c:\windows\system32\ipv6mon.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\ipxroute.exe + 2008-04-14 02:34:08 24,576 ----a-w c:\windows\system32\ipxroute.exe - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\ipxwan.dll + 2008-04-14 02:33:27 22,016 ----a-w c:\windows\system32\ipxwan.dll - 2004-08-05 12:00:00 120,320 ----a-w c:\windows\system32\ir41_qc.dll + 2008-04-14 02:33:27 120,320 ----a-w c:\windows\system32\ir41_qc.dll - 2004-08-05 12:00:00 338,432 ----a-w c:\windows\system32\ir41_qcx.dll + 2008-04-14 02:33:27 338,432 ----a-w c:\windows\system32\ir41_qcx.dll - 2004-08-05 12:00:00 755,200 ----a-w c:\windows\system32\ir50_32.dll + 2008-04-14 02:33:27 755,200 ----a-w c:\windows\system32\ir50_32.dll - 2004-08-05 12:00:00 200,192 ----a-w c:\windows\system32\ir50_qc.dll + 2008-04-14 02:33:27 200,192 ----a-w c:\windows\system32\ir50_qc.dll - 2004-08-05 12:00:00 183,808 ----a-w c:\windows\system32\ir50_qcx.dll + 2008-04-14 02:33:27 183,808 ----a-w c:\windows\system32\ir50_qcx.dll - 2004-08-05 12:00:00 86,016 ----a-w c:\windows\system32\isign32.dll + 2008-04-14 02:33:27 86,016 ----a-w c:\windows\system32\isign32.dll - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\isrdbg32.dll + 2008-04-14 02:33:27 32,768 ----a-w c:\windows\system32\isrdbg32.dll - 2005-05-27 02:08:06 155,136 ----a-w c:\windows\system32\itircl.dll + 2008-04-14 02:33:27 155,136 ----a-w c:\windows\system32\itircl.dll - 2005-05-27 02:08:06 137,216 ----a-w c:\windows\system32\itss.dll + 2008-04-14 02:33:27 138,240 ----a-w c:\windows\system32\itss.dll - 2004-08-05 12:00:00 54,784 ----a-w c:\windows\system32\ixsso.dll + 2008-04-14 02:33:27 54,784 ----a-w c:\windows\system32\ixsso.dll - 2004-08-03 22:54:30 47,616 ----a-w c:\windows\system32\iyuv_32.dll + 2008-04-14 02:33:27 47,616 ----a-w c:\windows\system32\iyuv_32.dll - 2007-07-11 23:22:00 135,168 ----a-w c:\windows\system32\java.exe + 2008-06-09 23:21:01 135,168 ----a-w c:\windows\system32\java.exe - 2007-07-11 23:22:04 135,168 ----a-w c:\windows\system32\javaw.exe + 2008-06-09 23:21:04 135,168 ----a-w c:\windows\system32\javaw.exe - 2007-07-12 00:22:38 139,264 ----a-w c:\windows\system32\javaws.exe + 2008-06-10 00:32:34 139,264 ----a-w c:\windows\system32\javaws.exe - 2006-06-01 18:48:44 163,840 ----a-w c:\windows\system32\jgdw400.dll + 2008-04-14 02:33:27 163,840 ----a-w c:\windows\system32\jgdw400.dll - 2006-06-01 18:48:44 27,648 ----a-w c:\windows\system32\jgpl400.dll + 2008-04-14 02:33:27 27,648 ----a-w c:\windows\system32\jgpl400.dll - 2006-10-17 11:00:00 491,520 ----a-w c:\windows\system32\jscript.dll + 2008-05-09 10:55:00 512,000 ----a-w c:\windows\system32\jscript.dll - 2007-08-20 09:59:30 27,648 ----a-w c:\windows\system32\jsproxy.dll + 2008-08-26 08:11:49 27,648 ----a-w c:\windows\system32\jsproxy.dll - 2001-08-17 20:55:56 6,144 ----a-w c:\windows\system32\kbd106.dll + 2008-04-14 02:31:42 6,144 ----a-w c:\windows\system32\kbd106.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\system32\kbdbhc.dll - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\kbdfi1.dll + 2008-04-14 02:31:42 7,168 ----a-w c:\windows\system32\kbdfi1.dll - 2004-08-05 12:00:00 6,144 ----a-w c:\windows\system32\kbdinbe1.dll + 2008-04-14 02:31:42 6,144 ----a-w c:\windows\system32\kbdinbe1.dll - 2004-08-05 12:00:00 6,656 ----a-w c:\windows\system32\kbdinben.dll + 2008-04-14 02:31:42 6,144 ----a-w c:\windows\system32\kbdinben.dll - 2004-08-05 12:00:00 6,656 ----a-w c:\windows\system32\kbdinmal.dll + 2008-04-14 02:31:42 6,656 ----a-w c:\windows\system32\kbdinmal.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\system32\kbdiultn.dll - 2004-08-05 12:00:00 5,632 ----a-w c:\windows\system32\kbdmaori.dll + 2008-04-14 02:31:42 5,632 ----a-w c:\windows\system32\kbdmaori.dll - 2004-08-05 12:00:00 6,144 ----a-w c:\windows\system32\kbdmlt47.dll + 2008-04-14 02:31:42 6,144 ----a-w c:\windows\system32\kbdmlt47.dll - 2004-08-05 12:00:00 6,144 ----a-w c:\windows\system32\kbdmlt48.dll + 2008-04-14 02:31:42 6,144 ----a-w c:\windows\system32\kbdmlt48.dll - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\kbdnec.dll + 2008-04-14 02:31:42 7,168 ----a-w c:\windows\system32\kbdnec.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\system32\kbdnepr.dll - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\kbdno1.dll + 2008-04-14 02:31:42 7,168 ----a-w c:\windows\system32\kbdno1.dll + 2008-04-14 02:31:42 6,144 ------w c:\windows\system32\kbdpash.dll - 2004-08-05 12:00:00 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll + 2008-04-14 02:31:42 7,680 ----a-w c:\windows\system32\kbdsmsfi.dll - 2004-08-05 12:00:00 7,680 ----a-w c:\windows\system32\kbdsmsno.dll + 2008-04-14 02:31:42 7,680 ----a-w c:\windows\system32\kbdsmsno.dll - 2004-08-05 12:00:00 7,168 ----a-w c:\windows\system32\kbdukx.dll + 2008-04-14 02:31:42 7,168 ----a-w c:\windows\system32\kbdukx.dll - 2004-08-05 12:00:00 7,424 ----a-w c:\windows\system32\kd1394.dll + 2008-04-13 18:31:35 7,424 ----a-w c:\windows\system32\kd1394.dll - 2005-06-15 17:50:31 295,936 ----a-w c:\windows\system32\kerberos.dll + 2008-04-14 02:33:28 299,520 ----a-w c:\windows\system32\kerberos.dll - 2007-04-16 15:53:11 1,049,600 ----a-w c:\windows\system32\kernel32.dll + 2008-04-14 02:33:28 1,054,720 ----a-w c:\windows\system32\kernel32.dll + 2004-08-05 12:00:00 2,000 ----a-w c:\windows\system32\keyboard.drv - 2004-08-05 12:00:00 157,184 ----a-w c:\windows\system32\keymgr.dll + 2008-04-14 02:33:28 157,184 ----a-w c:\windows\system32\keymgr.dll + 2007-10-04 16:14:00 425,984 ----a-w c:\windows\system32\keystone.exe + 2008-04-14 02:33:28 61,440 ------w c:\windows\system32\kmsvc.dll - 2004-08-03 22:54:30 4,096 ----a-w c:\windows\system32\ksuser.dll + 2008-04-14 02:33:28 4,096 ----a-w c:\windows\system32\ksuser.dll + 2008-04-14 02:33:28 37,376 ------w c:\windows\system32\l2gpstore.dll + 2004-08-05 12:00:00 224,448 ----a-w c:\windows\system32\lanman.drv - 2007-08-20 15:37:34 1,469,312 ----a-w c:\windows\system32\LegitCheckControl.DLL + 2008-03-20 17:06:36 1,480,232 ----a-w c:\windows\system32\LegitCheckControl.dll + 2004-05-19 08:55:44 57,344 ----a-w c:\windows\system32\lfbmp13n.dll + 2004-05-19 08:55:58 401,408 ----a-w c:\windows\system32\LFCMP13n.DLL + 2004-05-19 08:56:04 65,536 ----a-w c:\windows\system32\lfeps13n.dll + 2004-05-19 08:56:08 98,304 ----a-w c:\windows\system32\lffax13n.dll + 2004-05-19 08:56:12 69,632 ----a-w c:\windows\system32\lfgif13n.dll + 2004-05-19 08:56:14 49,152 ----a-w c:\windows\system32\lfpcd13n.dll + 2004-05-19 08:56:16 53,248 ----a-w c:\windows\system32\lfpcx13n.dll + 2004-05-19 08:56:22 159,744 ----a-w c:\windows\system32\Lfpng13n.dll + 2004-05-19 08:56:26 55,808 ----a-w c:\windows\system32\lfpsd13n.dll + 2004-05-19 08:56:26 53,248 ----a-w c:\windows\system32\lftga13n.dll + 2004-05-19 08:56:32 155,648 ----a-w c:\windows\system32\lftif13n.dll + 2004-05-19 08:56:36 61,440 ----a-w c:\windows\system32\lfwmf13n.dll - 2007-08-15 22:33:06 1,044,480 ----a-w c:\windows\system32\libdivx.dll + 2008-07-23 16:48:40 1,044,480 ----a-w c:\windows\system32\libdivx.dll + 2008-07-09 07:05:08 796,048 ----a-w c:\windows\system32\libeay32_0.9.6l.dll - 2004-08-05 12:00:00 424,960 ----a-w c:\windows\system32\licdll.dll + 2008-04-13 18:33:30 424,960 ----a-w c:\windows\system32\licdll.dll - 2006-10-17 11:05:10 40,960 ----a-w c:\windows\system32\licmgr10.dll + 2007-08-13 17:44:18 40,960 ----a-w c:\windows\system32\licmgr10.dll - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\licwmi.dll + 2008-04-14 02:33:28 58,880 ----a-w c:\windows\system32\licwmi.dll - 2005-09-01 01:43:37 19,968 ----a-w c:\windows\system32\linkinfo.dll + 2008-04-14 02:33:28 19,968 ----a-w c:\windows\system32\linkinfo.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\lmhsvc.dll + 2008-04-14 02:33:28 13,824 ----a-w c:\windows\system32\lmhsvc.dll - 2004-08-05 12:00:00 399,872 ----a-w c:\windows\system32\lmrt.dll + 2008-04-14 02:33:28 399,872 ----a-w c:\windows\system32\lmrt.dll - 2004-08-05 12:00:00 100,352 ----a-w c:\windows\system32\loadperf.dll + 2008-04-14 02:33:28 100,352 ----a-w c:\windows\system32\loadperf.dll - 2004-08-05 12:00:00 228,352 ----a-w c:\windows\system32\localsec.dll + 2008-04-14 02:33:28 228,352 ----a-w c:\windows\system32\localsec.dll - 2004-08-05 12:00:00 344,576 ----a-w c:\windows\system32\localspl.dll + 2008-04-14 02:33:28 346,112 ----a-w c:\windows\system32\localspl.dll - 2004-08-05 12:00:00 11,776 ----a-w c:\windows\system32\localui.dll + 2008-04-14 02:33:28 11,776 ----a-w c:\windows\system32\localui.dll - 2004-08-05 12:00:00 75,264 ----a-w c:\windows\system32\locator.exe + 2008-04-14 02:34:09 75,264 ----a-w c:\windows\system32\locator.exe - 2004-08-05 12:00:00 61,952 ----a-w c:\windows\system32\logman.exe + 2008-04-14 02:34:09 61,952 ----a-w c:\windows\system32\logman.exe - 2004-08-05 12:00:00 221,696 ----a-w c:\windows\system32\logon.scr + 2008-04-14 02:34:32 221,696 ----a-w c:\windows\system32\logon.scr - 2004-08-05 12:00:00 515,584 ----a-w c:\windows\system32\logonui.exe + 2008-04-14 02:34:09 515,584 ----a-w c:\windows\system32\logonui.exe - 2004-08-05 12:00:00 22,016 ----a-w c:\windows\system32\lpk.dll + 2008-04-14 02:33:28 22,016 ----a-w c:\windows\system32\lpk.dll - 2004-08-05 12:00:00 10,240 ----a-w c:\windows\system32\lprhelp.dll + 2008-04-14 02:33:28 10,240 ----a-w c:\windows\system32\lprhelp.dll - 2006-08-17 12:29:49 728,576 ----a-w c:\windows\system32\lsasrv.dll + 2008-04-14 02:33:28 734,720 ----a-w c:\windows\system32\lsasrv.dll - 2004-08-05 12:00:00 13,312 ----a-w c:\windows\system32\lsass.exe + 2008-04-14 02:34:09 13,312 ----a-w c:\windows\system32\lsass.exe + 2004-05-19 08:57:00 1,693,696 ----a-w c:\windows\system32\Ltclr13n.dll + 2004-05-19 08:57:36 299,008 ----a-w c:\windows\system32\LTDIS13n.dll + 2004-05-19 08:57:42 206,336 ----a-w c:\windows\system32\ltefx13n.DLL + 2004-05-19 08:57:52 163,840 ----a-w c:\windows\system32\ltfil13n.DLL + 2004-05-19 08:58:04 450,560 ----a-w c:\windows\system32\ltimg13n.dll + 2004-05-19 08:58:26 462,848 ----a-w c:\windows\system32\ltkrn13n.dll + 2004-05-19 08:58:58 1,009,664 ----a-w c:\windows\system32\Ltwvc13n.dll + 2004-08-05 12:00:00 2,560 ----a-w c:\windows\system32\lz32.dll + 2008-03-25 02:32:44 218,496 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil9f.exe - 2006-08-28 17:06:20 2,078,344 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2008-10-05 03:24:02 3,695,008 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32.dll + 2008-10-05 03:24:04 235,936 ----a-w c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2008-04-14 12:11:09 74,137 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2008-10-24 04:12:14 84,661 ----a-w c:\windows\system32\Macromed\Flash\uninstall_plugin.exe - 2006-11-10 13:03:44 1,088,512 ----a-w c:\windows\system32\Macromed\Shockwave 10\gi.dll + 2007-08-07 14:52:32 1,113,600 ----a-w c:\windows\system32\Macromed\Shockwave 10\gi.dll - 2006-09-18 19:33:22 45,056 ----a-w c:\windows\system32\Macromed\Shockwave 10\gtapi.dll + 2007-08-07 11:08:48 52,288 ----a-w c:\windows\system32\Macromed\Shockwave 10\gtapi.dll - 2004-08-05 12:00:00 73,216 ----a-w c:\windows\system32\magnify.exe + 2008-04-14 02:34:10 73,216 ----a-w c:\windows\system32\magnify.exe - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\makecab.exe + 2008-04-14 02:34:10 57,344 ----a-w c:\windows\system32\makecab.exe - 2004-08-05 12:00:00 14,848 ----a-w c:\windows\system32\mcastmib.dll + 2008-04-14 02:33:28 14,336 ----a-w c:\windows\system32\mcastmib.dll + 2004-08-05 12:00:00 73,680 ----a-w c:\windows\system32\mciavi.drv - 2004-08-05 12:00:00 85,504 ----a-w c:\windows\system32\mciavi32.dll + 2008-04-14 02:33:28 85,504 ----a-w c:\windows\system32\mciavi32.dll - 2004-08-05 12:00:00 35,328 ----a-w c:\windows\system32\mciqtz32.dll + 2008-04-14 02:33:28 35,328 ----a-w c:\windows\system32\mciqtz32.dll - 2004-08-05 12:00:00 23,040 ----a-w c:\windows\system32\mciseq.dll + 2008-04-14 02:33:28 23,040 ----a-w c:\windows\system32\mciseq.dll + 2004-08-05 12:00:00 25,280 ----a-w c:\windows\system32\mciseq.drv - 2004-08-05 12:00:00 23,552 ----a-w c:\windows\system32\mciwave.dll + 2008-04-14 02:33:28 23,552 ----a-w c:\windows\system32\mciwave.dll + 2004-08-05 12:00:00 28,160 ----a-w c:\windows\system32\mciwave.drv - 2004-08-05 12:00:00 120,320 ----a-w c:\windows\system32\mdminst.dll + 2008-04-14 02:33:28 120,320 ----a-w c:\windows\system32\mdminst.dll + 2008-04-14 02:33:28 86,016 ------w c:\windows\system32\mdmxsdk.dll - 2007-03-08 15:37:50 40,960 ----a-w c:\windows\system32\mf3216.dll + 2008-04-14 02:33:28 40,960 ----a-w c:\windows\system32\mf3216.dll - 2006-11-01 19:18:42 927,504 ----a-w c:\windows\system32\mfc40u.dll + 2008-04-14 02:33:28 927,504 ----a-w c:\windows\system32\mfc40u.dll - 2004-08-05 12:00:00 1,028,096 ----a-w c:\windows\system32\mfc42.dll + 2008-04-14 02:33:29 1,028,096 ----a-w c:\windows\system32\mfc42.dll - 2004-08-05 12:00:00 22,528 ----a-w c:\windows\system32\mfcsubs.dll + 2008-04-14 02:33:29 22,528 ----a-w c:\windows\system32\mfcsubs.dll - 2004-08-05 12:00:00 14,848 ----a-w c:\windows\system32\mgmtapi.dll + 2008-04-14 02:33:29 14,848 ----a-w c:\windows\system32\mgmtapi.dll + 2008-04-14 02:33:29 184,320 ------w c:\windows\system32\microsoft.managementconsole.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\midimap.dll + 2008-04-14 02:33:29 18,944 ----a-w c:\windows\system32\midimap.dll - 2004-08-05 12:00:00 60,928 ----a-w c:\windows\system32\miglibnt.dll + 2008-04-14 02:33:29 60,928 ----a-w c:\windows\system32\miglibnt.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\mimefilt.dll + 2008-04-14 02:33:29 29,696 ----a-w c:\windows\system32\mimefilt.dll - 2004-08-05 12:00:00 586,240 ----a-w c:\windows\system32\mlang.dll + 2008-04-14 02:33:29 586,240 ----a-w c:\windows\system32\mlang.dll - 2004-08-05 12:00:00 816,128 ----a-w c:\windows\system32\mmc.exe + 2008-04-14 02:34:11 1,415,680 ----a-w c:\windows\system32\mmc.exe - 2004-08-05 12:00:00 79,872 ----a-w c:\windows\system32\mmcbase.dll + 2008-04-14 02:33:29 174,080 ----a-w c:\windows\system32\mmcbase.dll + 2008-04-14 02:33:30 397,312 ------w c:\windows\system32\mmcex.dll + 2008-04-14 02:33:30 106,496 ------w c:\windows\system32\mmcfxcommon.dll - 2004-08-05 12:00:00 1,198,080 ----a-w c:\windows\system32\mmcndmgr.dll + 2008-04-14 02:33:30 1,879,040 ----a-w c:\windows\system32\mmcndmgr.dll + 2008-04-14 02:34:11 33,792 ------w c:\windows\system32\mmcperf.exe - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\mmcshext.dll + 2008-04-14 02:33:30 61,440 ----a-w c:\windows\system32\mmcshext.dll - 2004-08-05 12:00:00 17,920 ----a-w c:\windows\system32\mmfutil.dll + 2008-04-14 02:33:30 17,920 ----a-w c:\windows\system32\mmfutil.dll - 2004-08-05 12:00:00 34,560 ----a-w c:\windows\system32\mnmdd.dll + 2008-04-14 02:33:30 34,560 ----a-w c:\windows\system32\mnmdd.dll - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\mnmsrvc.exe + 2008-04-14 02:34:11 32,768 ----a-w c:\windows\system32\mnmsrvc.exe - 2004-08-05 12:00:00 210,432 ----a-w c:\windows\system32\mobsync.dll + 2008-04-14 02:33:30 210,432 ----a-w c:\windows\system32\mobsync.dll - 2004-08-05 12:00:00 144,384 ----a-w c:\windows\system32\mobsync.exe + 2008-04-14 02:34:11 143,872 ----a-w c:\windows\system32\mobsync.exe - 2004-08-05 12:00:00 156,160 ----a-w c:\windows\system32\modemui.dll + 2008-04-14 02:33:30 156,160 ----a-w c:\windows\system32\modemui.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\more.com + 2008-04-14 02:34:31 16,896 ----a-w c:\windows\system32\more.com - 2004-08-05 12:00:00 216,064 ----a-w c:\windows\system32\moricons.dll + 2008-04-13 16:45:30 216,064 ----a-w c:\windows\system32\moricons.dll + 2004-08-05 12:00:00 2,032 ----a-w c:\windows\system32\mouse.drv - 2004-08-05 12:00:00 124,928 ----a-w c:\windows\system32\mplay32.exe + 2008-04-14 02:34:12 124,928 ----a-w c:\windows\system32\mplay32.exe - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\mpr.dll + 2008-04-14 02:33:30 59,904 ----a-w c:\windows\system32\mpr.dll - 2004-08-05 12:00:00 87,040 ----a-w c:\windows\system32\mprapi.dll + 2008-04-14 02:33:30 87,040 ----a-w c:\windows\system32\mprapi.dll - 2004-08-05 12:00:00 49,152 ----a-w c:\windows\system32\mprdim.dll + 2008-04-14 02:33:30 53,248 ----a-w c:\windows\system32\mprdim.dll - 2007-09-28 05:19:40 18,089,592 ----a-w c:\windows\system32\MRT.exe + 2008-10-07 11:19:42 16,721,856 ----a-w c:\windows\system32\MRT.exe - 2004-08-05 12:00:00 72,192 ----a-w c:\windows\system32\msacm32.dll + 2008-04-14 02:33:30 72,192 ----a-w c:\windows\system32\msacm32.dll + 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\msacm32.drv - 2004-08-05 12:00:00 3,584 ----a-w c:\windows\system32\msafd.dll + 2008-04-14 02:31:51 3,584 ----a-w c:\windows\system32\msafd.dll - 2004-08-05 12:00:00 86,016 ----a-w c:\windows\system32\msapsspc.dll + 2008-04-14 02:33:30 86,016 ----a-w c:\windows\system32\msapsspc.dll - 2004-08-05 12:00:00 57,344 ----a-w c:\windows\system32\msasn1.dll + 2008-04-14 02:33:30 57,344 ----a-w c:\windows\system32\msasn1.dll - 2005-06-29 01:49:41 74,240 ----a-w c:\windows\system32\mscms.dll + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\system32\mscms.dll - 2004-08-05 12:00:00 69,632 ----a-w c:\windows\system32\msconf.dll + 2008-04-14 02:33:30 69,632 ----a-w c:\windows\system32\msconf.dll - 2007-04-13 01:21:14 271,360 ----a-w c:\windows\system32\mscoree.dll + 2007-10-23 23:47:38 282,112 ----a-w c:\windows\system32\mscoree.dll - 2005-09-23 05:28:52 150,016 ----a-w c:\windows\system32\mscorier.dll + 2007-10-23 23:47:38 158,720 ----a-w c:\windows\system32\mscorier.dll - 2005-09-23 05:28:52 74,240 ----a-w c:\windows\system32\mscories.dll + 2007-10-23 23:47:38 84,480 ----a-w c:\windows\system32\mscories.dll - 2004-08-05 12:00:00 12,288 ----a-w c:\windows\system32\mscpx32r.dLL + 2008-04-13 17:26:07 12,288 ----a-w c:\windows\system32\mscpx32r.dll - 2004-08-05 12:00:00 36,864 ----a-w c:\windows\system32\mscpxl32.dLL + 2008-04-14 02:33:30 36,864 ----a-w c:\windows\system32\mscpxl32.dll - 2004-08-05 12:00:00 294,400 ----a-w c:\windows\system32\MSCTF.dll + 2008-04-14 02:33:30 297,984 ----a-w c:\windows\system32\msctf.dll - 2004-08-05 12:00:00 69,120 ----a-w c:\windows\system32\MSCTFP.dll + 2008-04-14 02:33:30 68,608 ----a-w c:\windows\system32\msctfp.dll - 2004-08-05 12:00:00 118,784 ----a-w c:\windows\system32\msdadiag.dll + 2008-04-14 02:33:30 118,784 ----a-w c:\windows\system32\msdadiag.dll - 2004-08-05 12:00:00 151,552 ----a-w c:\windows\system32\msdart.dll + 2008-04-14 02:33:31 151,552 ----a-w c:\windows\system32\msdart.dll - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\msdmo.dll + 2008-04-14 02:33:31 14,336 ----a-w c:\windows\system32\msdmo.dll - 2004-08-05 12:00:00 6,144 ----a-w c:\windows\system32\msdtc.exe + 2008-04-14 02:34:12 6,144 ----a-w c:\windows\system32\msdtc.exe - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\msdtclog.dll + 2008-04-14 02:33:31 58,880 ----a-w c:\windows\system32\msdtclog.dll - 2006-03-01 19:43:50 426,496 ----a-w c:\windows\system32\msdtcprx.dll + 2008-04-14 02:33:31 427,008 ----a-w c:\windows\system32\msdtcprx.dll - 2006-03-01 19:43:50 956,416 ----a-w c:\windows\system32\msdtctm.dll + 2008-04-14 02:33:31 956,928 ----a-w c:\windows\system32\msdtctm.dll - 2006-03-01 19:43:51 161,280 ----a-w c:\windows\system32\msdtcuiu.dll + 2008-04-14 02:33:31 161,792 ----a-w c:\windows\system32\msdtcuiu.dll - 2004-08-05 12:00:00 4,126 ----a-w c:\windows\system32\msdxmlc.dll + 2008-04-14 02:31:53 4,126 ----a-w c:\windows\system32\msdxmlc.dll - 2004-08-05 12:00:00 512,029 ----a-w c:\windows\system32\msexch40.dll + 2008-03-25 04:50:28 518,944 ----a-w c:\windows\system32\msexch40.dll - 2004-08-05 12:00:00 319,517 ----a-w c:\windows\system32\msexcl40.dll + 2008-03-25 04:50:30 326,432 ----a-w c:\windows\system32\msexcl40.dll - 2007-08-20 09:59:30 459,264 ----a-w c:\windows\system32\msfeeds.dll + 2008-08-26 08:11:49 459,264 ----a-w c:\windows\system32\msfeeds.dll - 2007-08-20 09:59:30 52,224 ----a-w c:\windows\system32\msfeedsbs.dll + 2008-08-26 08:11:49 52,224 ----a-w c:\windows\system32\msfeedsbs.dll - 2006-10-17 10:58:32 12,288 ------w c:\windows\system32\msfeedssync.exe + 2007-08-13 17:36:40 12,288 ----a-w c:\windows\system32\msfeedssync.exe - 2006-11-27 14:55:30 539,136 ----a-w c:\windows\system32\msftedit.dll + 2008-04-14 02:33:31 539,136 ----a-w c:\windows\system32\msftedit.dll - 2004-08-05 12:00:00 1,004,032 ----a-w c:\windows\system32\msgina.dll + 2008-04-14 02:33:31 1,007,104 ----a-w c:\windows\system32\msgina.dll - 2004-08-05 12:00:00 33,792 ----a-w c:\windows\system32\msgsvc.dll + 2008-04-14 02:33:31 33,792 ----a-w c:\windows\system32\msgsvc.dll + 2008-04-14 02:34:34 188,416 ----a-w c:\windows\system32\msh261.drv + 2008-04-14 02:34:34 294,912 ----a-w c:\windows\system32\msh263.drv - 2006-10-17 10:56:10 45,568 ----a-w c:\windows\system32\mshta.exe + 2007-08-13 17:32:30 45,568 ----a-w c:\windows\system32\mshta.exe - 2007-08-20 09:59:30 3,584,512 ----a-w c:\windows\system32\mshtml.dll + 2008-08-27 09:11:52 3,593,216 ----a-w c:\windows\system32\mshtml.dll - 2007-08-20 09:59:30 477,696 ----a-w c:\windows\system32\mshtmled.dll + 2008-08-26 08:11:52 477,696 ----a-w c:\windows\system32\mshtmled.dll - 2006-10-17 10:28:56 48,128 ----a-w c:\windows\system32\mshtmler.dll + 2007-08-13 17:01:12 48,128 ----a-w c:\windows\system32\mshtmler.dll - 2007-04-18 16:14:18 2,854,400 ----a-w c:\windows\system32\msi.dll + 2008-04-14 02:33:32 2,843,136 ----a-w c:\windows\system32\msi.dll - 2004-08-05 12:00:00 51,712 ----a-w c:\windows\system32\msident.dll + 2008-04-14 02:33:32 51,712 ----a-w c:\windows\system32\msident.dll - 2004-08-05 12:00:00 6,656 ----a-w c:\windows\system32\msidle.dll + 2008-04-14 02:33:32 6,656 ----a-w c:\windows\system32\msidle.dll - 2004-08-05 12:00:00 252,416 ----a-w c:\windows\system32\msieftp.dll + 2008-04-14 02:33:32 252,416 ----a-w c:\windows\system32\msieftp.dll - 2005-05-04 12:45:36 78,848 ----a-w c:\windows\system32\msiexec.exe + 2008-04-14 02:34:13 78,848 ----a-w c:\windows\system32\msiexec.exe - 2005-05-04 12:45:36 271,360 ----a-w c:\windows\system32\msihnd.dll + 2008-04-14 02:33:32 271,360 ----a-w c:\windows\system32\msihnd.dll - 2004-08-05 12:00:00 4,608 ----a-w c:\windows\system32\msimg32.dll + 2008-04-14 02:33:32 4,608 ----a-w c:\windows\system32\msimg32.dll - 2005-05-04 12:45:36 884,736 ----a-w c:\windows\system32\msimsg.dll + 2008-04-13 15:39:43 884,736 ----a-w c:\windows\system32\msimsg.dll - 2004-08-05 12:00:00 159,232 ----a-w c:\windows\system32\MSIMTF.dll + 2008-04-14 02:33:32 159,232 ----a-w c:\windows\system32\msimtf.dll - 2005-05-04 12:45:36 15,360 ----a-w c:\windows\system32\msisip.dll + 2008-04-14 02:33:32 15,360 ----a-w c:\windows\system32\msisip.dll - 2004-08-05 12:00:00 1,507,356 ----a-w c:\windows\system32\msjet40.dll + 2008-03-25 04:50:34 1,516,568 ----a-w c:\windows\system32\msjet40.dll - 2004-08-05 12:00:00 358,976 ----a-w c:\windows\system32\msjetoledb40.dll + 2008-03-25 04:50:40 355,112 ----a-w c:\windows\system32\msjetoledb40.dll - 2004-08-05 12:00:00 184,351 ----a-w c:\windows\system32\msjint40.dll + 2008-03-25 04:51:08 194,144 ----a-w c:\windows\system32\msjint40.dll - 2004-08-05 12:00:00 53,279 ----a-w c:\windows\system32\msjter40.dll + 2008-03-25 04:50:42 60,192 ----a-w c:\windows\system32\msjter40.dll - 2004-08-05 12:00:00 241,693 ----a-w c:\windows\system32\msjtes40.dll + 2008-03-25 04:50:42 248,608 ----a-w c:\windows\system32\msjtes40.dll - 2004-08-05 12:00:00 25,600 ----a-w c:\windows\system32\mslbui.dll + 2008-04-14 02:33:32 25,600 ----a-w c:\windows\system32\mslbui.dll + 1999-09-04 19:23:24 91,136 ----a-r c:\windows\system32\msls2.dll - 2006-11-07 20:03:36 156,160 ----a-w c:\windows\system32\msls31.dll + 2007-08-13 17:54:10 156,160 ----a-w c:\windows\system32\msls31.dll - 2004-08-05 12:00:00 213,023 ----a-w c:\windows\system32\msltus40.dll + 2008-03-25 04:50:44 219,936 ----a-w c:\windows\system32\msltus40.dll - 2004-08-05 12:00:00 290,816 ----a-w c:\windows\system32\msnsspc.dll + 2008-04-14 02:33:32 290,816 ----a-w c:\windows\system32\msnsspc.dll - 2004-08-05 12:00:00 252,928 ----a-w c:\windows\system32\msoeacct.dll + 2008-04-14 02:33:32 252,928 ----a-w c:\windows\system32\msoeacct.dll - 2004-08-05 12:00:00 105,984 ----a-w c:\windows\system32\msoert2.dll + 2008-04-14 02:33:32 105,984 ----a-w c:\windows\system32\msoert2.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\msorc32r.dll + 2007-03-28 12:56:34 24,576 ----a-w c:\windows\system32\msorc32r.dll - 2004-08-05 12:00:00 143,360 ----a-w c:\windows\system32\msorcl32.dll + 2008-04-14 02:33:32 143,360 ----a-w c:\windows\system32\msorcl32.dll - 2004-08-05 12:00:00 347,648 ----a-w c:\windows\system32\mspaint.exe + 2008-04-14 02:34:14 347,648 ----a-w c:\windows\system32\mspaint.exe - 2004-08-05 12:00:00 30,208 ----a-w c:\windows\system32\mspatcha.dll + 2008-04-14 02:33:32 29,696 ----a-w c:\windows\system32\mspatcha.dll - 2004-08-05 12:00:00 348,189 ----a-w c:\windows\system32\mspbde40.dll + 2008-03-25 04:50:45 355,104 ----a-w c:\windows\system32\mspbde40.dll - 2004-08-05 12:00:00 48,128 ----a-w c:\windows\system32\msprivs.dll + 2008-04-13 16:23:31 48,128 ----a-w c:\windows\system32\msprivs.dll - 2007-08-20 09:59:30 193,024 ----a-w c:\windows\system32\msrating.dll + 2008-08-26 08:11:52 193,024 ----a-w c:\windows\system32\msrating.dll - 2004-08-05 12:00:00 421,919 ----a-w c:\windows\system32\msrd2x40.dll + 2008-03-25 04:50:47 432,928 ----a-w c:\windows\system32\msrd2x40.dll - 2004-08-05 12:00:00 315,423 ----a-w c:\windows\system32\msrd3x40.dll + 2008-03-25 04:50:49 322,336 ----a-w c:\windows\system32\msrd3x40.dll - 2004-08-05 12:00:00 552,989 ----a-w c:\windows\system32\msrepl40.dll + 2008-03-25 04:50:52 559,904 ----a-w c:\windows\system32\msrepl40.dll - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\msrle32.dll + 2008-04-14 02:33:32 11,264 ----a-w c:\windows\system32\msrle32.dll - 2004-08-05 12:00:00 134,656 ----a-w c:\windows\system32\mssap.dll + 2008-04-14 02:33:32 134,656 ----a-w c:\windows\system32\mssap.dll + 2008-04-14 02:33:32 155,136 ------w c:\windows\system32\mssha.dll + 2008-04-14 02:03:08 81,920 ------w c:\windows\system32\msshavmsg.dll - 2004-08-05 12:00:00 281,600 ----a-w c:\windows\system32\mstask.dll + 2008-04-14 02:33:33 281,600 ----a-w c:\windows\system32\mstask.dll - 2004-08-05 12:00:00 258,077 ----a-w c:\windows\system32\mstext40.dll + 2008-03-25 04:50:55 264,992 ----a-w c:\windows\system32\mstext40.dll - 2007-08-20 09:59:30 671,232 ----a-w c:\windows\system32\mstime.dll + 2008-08-26 08:11:52 671,232 ----a-w c:\windows\system32\mstime.dll - 2004-08-05 12:00:00 12,288 ----a-w c:\windows\system32\mstinit.exe + 2008-04-14 02:34:14 12,288 ----a-w c:\windows\system32\mstinit.exe - 2004-08-05 12:00:00 115,712 ----a-w c:\windows\system32\mstlsapi.dll + 2008-04-14 02:33:33 116,224 ----a-w c:\windows\system32\mstlsapi.dll - 2004-08-05 12:00:00 411,648 ----a-w c:\windows\system32\mstsc.exe + 2008-04-14 02:34:09 677,888 ----a-w c:\windows\system32\mstsc.exe - 2004-08-05 12:00:00 655,360 ----a-w c:\windows\system32\mstscax.dll + 2008-04-14 02:33:28 2,061,824 ----a-w c:\windows\system32\mstscax.dll - 2004-08-05 12:00:00 195,584 ----a-w c:\windows\system32\msutb.dll + 2008-04-14 02:33:33 195,584 ----a-w c:\windows\system32\msutb.dll - 2004-08-05 12:00:00 129,536 ----a-w c:\windows\system32\msv1_0.dll + 2008-04-14 02:33:33 132,608 ----a-w c:\windows\system32\msv1_0.dll + 2002-01-05 01:38:38 54,784 ----a-w c:\windows\system32\msvci70.dll - 2004-08-05 12:00:00 54,784 ----a-w c:\windows\system32\msvcirt.dll + 2008-04-14 02:33:33 57,344 ----a-w c:\windows\system32\msvcirt.dll - 2004-08-05 12:00:00 413,696 ----a-w c:\windows\system32\MSVCP60.dll + 2008-04-14 02:33:33 413,696 ----a-w c:\windows\system32\msvcp60.dll - 2003-03-19 02:14:20 499,712 ----a-w c:\windows\system32\msvcp71.dll + 2005-09-08 15:20:04 503,808 ----a-w c:\windows\system32\msvcp71.dll - 2002-01-05 02:37:28 344,064 ------w c:\windows\system32\msvcr70.dll + 2003-11-14 11:50:28 344,064 ----a-w c:\windows\system32\msvcr70.dll - 2003-02-21 10:42:22 348,160 ----a-w c:\windows\system32\msvcr71.dll + 2005-09-08 15:20:04 348,160 ----a-w c:\windows\system32\msvcr71.dll - 2004-08-05 12:00:00 343,040 ----a-w c:\windows\system32\MSVCRT.DLL + 2008-04-14 02:33:33 343,040 ----a-w c:\windows\system32\msvcrt.dll - 2004-08-05 12:00:00 61,440 ----a-w c:\windows\system32\msvcrt40.dll + 2008-04-13 18:30:46 61,440 ----a-w c:\windows\system32\msvcrt40.dll - 2004-08-05 12:00:00 121,856 ----a-w c:\windows\system32\msvfw32.dll + 2008-04-14 02:33:33 122,368 ----a-w c:\windows\system32\msvfw32.dll - 2004-08-05 12:00:00 1,433,600 ----a-w c:\windows\system32\msvidctl.dll + 2008-04-14 02:33:33 1,434,112 ----a-w c:\windows\system32\msvidctl.dll - 2004-08-05 12:00:00 72,704 ----a-w c:\windows\system32\msw3prt.dll + 2008-04-14 02:33:33 72,704 ----a-w c:\windows\system32\msw3prt.dll - 2004-08-05 12:00:00 831,519 ----a-w c:\windows\system32\mswdat10.dll + 2008-03-25 04:50:57 838,432 ----a-w c:\windows\system32\mswdat10.dll - 2004-08-05 12:00:00 204,800 ----a-w c:\windows\system32\mswebdvd.dll + 2008-04-14 02:33:33 204,800 ----a-w c:\windows\system32\mswebdvd.dll - 2004-08-05 12:00:00 247,808 ----a-w c:\windows\system32\mswsock.dll + 2008-04-14 02:33:33 247,808 ----a-w c:\windows\system32\mswsock.dll - 2004-08-05 12:00:00 614,429 ----a-w c:\windows\system32\mswstr10.dll + 2008-03-25 04:51:09 621,344 ----a-w c:\windows\system32\mswstr10.dll - 2004-08-05 12:00:00 348,189 ----a-w c:\windows\system32\msxbde40.dll + 2008-03-25 04:50:58 355,104 ----a-w c:\windows\system32\msxbde40.dll - 2004-08-05 12:00:00 506,368 ----a-w c:\windows\system32\msxml.dll + 2008-04-14 02:33:34 506,368 ----a-w c:\windows\system32\msxml.dll - 2004-08-05 12:00:00 701,440 ----a-w c:\windows\system32\msxml2.dll + 2008-04-14 02:33:34 701,440 ----a-w c:\windows\system32\msxml2.dll - 2007-06-26 06:09:14 1,104,896 ----a-w c:\windows\system32\msxml3.dll + 2008-04-14 02:33:34 1,104,896 ----a-w c:\windows\system32\msxml3.dll + 2007-05-08 13:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll + 2002-02-04 00:43:00 82,432 ----a-w c:\windows\system32\msxml4r.dll - 2007-05-15 13:43:10 1,320,800 ----a-w c:\windows\system32\msxml6.dll + 2008-04-14 02:33:34 1,306,624 ----a-w c:\windows\system32\msxml6.dll - 2005-09-07 23:03:50 86,728 ----a-w c:\windows\system32\msxml6r.dll + 2008-04-14 02:04:20 93,184 ----a-w c:\windows\system32\msxml6r.dll - 2004-08-03 22:54:36 17,408 ----a-w c:\windows\system32\msyuv.dll + 2008-04-14 02:33:34 16,896 ----a-w c:\windows\system32\msyuv.dll - 2006-03-01 19:43:51 66,560 ----a-w c:\windows\system32\mtxclu.dll + 2008-04-14 02:33:34 66,560 ----a-w c:\windows\system32\mtxclu.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\system32\mtxdm.dll + 2008-04-14 02:33:34 30,720 ----a-w c:\windows\system32\mtxdm.dll - 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\mtxex.dll + 2008-04-14 02:33:34 4,096 ----a-w c:\windows\system32\mtxex.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\mtxlegih.dll + 2008-04-14 02:33:34 34,304 ----a-w c:\windows\system32\mtxlegih.dll - 2006-03-01 19:43:51 91,136 ----a-w c:\windows\system32\mtxoci.dll + 2008-04-14 02:33:34 91,648 ----a-w c:\windows\system32\mtxoci.dll + 2008-04-14 02:33:34 1,737,856 ------w c:\windows\system32\mtxparhd.dll - 2005-09-23 05:29:00 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll + 2007-10-23 23:47:44 15,360 ----a-w c:\windows\system32\mui\0409\mscorees.dll - 2004-08-05 12:00:00 91,648 ----a-w c:\windows\system32\mydocs.dll + 2008-04-14 02:33:34 91,648 ----a-w c:\windows\system32\mydocs.dll + 2008-04-14 02:33:34 30,208 ------w c:\windows\system32\napipsec.dll + 2008-04-14 02:33:34 200,704 ------w c:\windows\system32\napmontr.dll + 2008-04-14 02:34:14 177,664 ------w c:\windows\system32\napstat.exe - 2004-08-05 12:00:00 55,296 ----a-w c:\windows\system32\narrator.exe + 2008-04-14 02:34:14 55,296 ----a-w c:\windows\system32\narrator.exe - 2004-08-05 12:00:00 36,352 ----a-w c:\windows\system32\ncobjapi.dll + 2008-04-14 02:33:34 36,352 ----a-w c:\windows\system32\ncobjapi.dll - 2004-08-05 12:00:00 18,432 ----a-w c:\windows\system32\nddeapi.dll + 2008-04-14 02:33:34 18,432 ----a-w c:\windows\system32\nddeapi.dll - 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\nddeapir.exe + 2008-04-14 02:34:15 4,096 ----a-w c:\windows\system32\nddeapir.exe - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\system32\nddenb32.dll + 2008-04-14 02:33:34 19,456 ----a-w c:\windows\system32\nddenb32.dll - 2004-08-05 12:00:00 42,496 ----a-w c:\windows\system32\net.exe + 2008-04-14 02:34:15 42,496 ----a-w c:\windows\system32\net.exe - 2004-08-05 12:00:00 124,928 ----a-w c:\windows\system32\net1.exe + 2008-04-14 02:34:15 124,928 ----a-w c:\windows\system32\net1.exe - 2006-08-17 12:29:49 332,288 ----a-w c:\windows\system32\netapi32.dll + 2008-10-15 16:35:43 337,408 ----a-w c:\windows\system32\netapi32.dll - 2004-08-05 12:00:00 633,856 ----a-w c:\windows\system32\netcfgx.dll + 2008-04-14 02:33:34 634,368 ----a-w c:\windows\system32\netcfgx.dll - 2004-08-05 12:00:00 114,176 ----a-w c:\windows\system32\netdde.exe + 2008-04-14 02:34:15 114,176 ----a-w c:\windows\system32\netdde.exe - 2004-08-05 12:00:00 144,896 ----a-w c:\windows\system32\netid.dll + 2008-04-14 02:33:34 144,896 ----a-w c:\windows\system32\netid.dll - 2004-08-05 12:00:00 407,040 ----a-w c:\windows\system32\netlogon.dll + 2008-04-14 02:33:34 407,040 ----a-w c:\windows\system32\netlogon.dll - 2005-08-22 18:35:10 197,632 ----a-w c:\windows\system32\netman.dll + 2008-04-14 02:33:34 198,144 ----a-w c:\windows\system32\netman.dll - 2004-08-05 12:00:00 885,248 ----a-w c:\windows\system32\netplwiz.dll + 2008-04-14 02:33:34 885,248 ----a-w c:\windows\system32\netplwiz.dll - 2004-08-05 12:00:00 12,288 ----a-w c:\windows\system32\netrap.dll + 2008-04-14 02:33:34 11,776 ----a-w c:\windows\system32\netrap.dll - 2004-08-05 12:00:00 332,800 ----a-w c:\windows\system32\netsetup.exe + 2008-04-14 02:37:10 332,800 ----a-w c:\windows\system32\netsetup.exe - 2004-08-05 12:00:00 88,576 ----a-w c:\windows\system32\netsh.exe + 2008-04-14 02:34:15 88,576 ----a-w c:\windows\system32\netsh.exe - 2004-08-05 12:00:00 1,723,904 ----a-w c:\windows\system32\netshell.dll + 2008-04-14 02:33:35 1,719,808 ----a-w c:\windows\system32\netshell.dll - 2004-08-05 12:00:00 37,888 ----a-w c:\windows\system32\netstat.exe + 2008-04-14 02:34:15 37,888 ----a-w c:\windows\system32\netstat.exe - 2004-08-05 12:00:00 83,456 ----a-w c:\windows\system32\netui0.dll + 2008-04-14 02:33:35 83,456 ----a-w c:\windows\system32\netui0.dll - 2004-08-05 12:00:00 245,760 ----a-w c:\windows\system32\netui1.dll + 2008-04-14 02:33:35 245,760 ----a-w c:\windows\system32\netui1.dll - 2004-08-05 12:00:00 251,392 ----a-w c:\windows\system32\newdev.dll + 2008-04-14 02:33:35 250,880 ----a-w c:\windows\system32\newdev.dll + 2006-03-17 23:43:52 110,080 ----a-w c:\windows\system32\nLame.dll - 2004-08-05 12:00:00 103,936 ----a-w c:\windows\system32\nlhtml.dll + 2008-04-14 02:33:35 98,304 ----a-w c:\windows\system32\nlhtml.dll - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\nmmkcert.dll + 2008-04-14 02:33:36 28,672 ----a-w c:\windows\system32\nmmkcert.dll - 2004-08-05 12:00:00 70,656 ----a-w c:\windows\system32\notepad.exe + 2008-04-14 02:34:15 70,656 ----a-w c:\windows\system32\notepad.exe - 2004-08-05 12:00:00 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll + 2008-04-14 02:33:34 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll - 2004-08-05 12:00:00 15,360 ----a-w c:\windows\system32\npp\nppagent.exe + 2008-04-14 02:34:15 15,360 ----a-w c:\windows\system32\npp\nppagent.exe - 2004-08-05 12:00:00 55,296 ----a-w c:\windows\system32\npptools.dll + 2008-04-14 02:33:36 55,296 ----a-w c:\windows\system32\npptools.dll - 2004-08-05 12:00:00 79,360 ----a-w c:\windows\system32\nslookup.exe + 2008-04-14 02:34:15 79,360 ----a-w c:\windows\system32\nslookup.exe - 2004-08-05 12:00:00 733,184 ----a-w c:\windows\system32\ntdll.dll + 2008-04-14 02:33:02 731,136 ----a-w c:\windows\system32\ntdll.dll - 2004-08-05 12:00:00 67,072 ----a-w c:\windows\system32\ntdsapi.dll + 2008-04-14 02:33:36 67,072 ----a-w c:\windows\system32\ntdsapi.dll - 2007-02-28 16:02:36 2,059,648 ----a-w c:\windows\system32\ntkrnlpa.exe + 2008-08-14 13:23:49 2,068,096 ----a-w c:\windows\system32\ntkrnlpa.exe - 2004-08-05 12:00:00 43,520 ----a-w c:\windows\system32\ntlanman.dll + 2008-04-14 02:33:36 44,032 ----a-w c:\windows\system32\ntlanman.dll - 2004-08-05 12:00:00 8,192 ----a-w c:\windows\system32\ntlsapi.dll + 2008-04-14 02:33:36 8,192 ----a-w c:\windows\system32\ntlsapi.dll - 2004-08-05 12:00:00 119,808 ----a-w c:\windows\system32\ntmarta.dll + 2008-04-14 02:33:36 119,808 ----a-w c:\windows\system32\ntmarta.dll - 2004-08-05 12:00:00 40,960 ----a-w c:\windows\system32\ntmsapi.dll + 2008-04-14 02:33:36 40,960 ----a-w c:\windows\system32\ntmsapi.dll - 2004-08-05 12:00:00 181,248 ----a-w c:\windows\system32\ntmsdba.dll + 2008-04-14 02:33:36 181,248 ----a-w c:\windows\system32\ntmsdba.dll - 2004-08-05 12:00:00 496,640 ----a-w c:\windows\system32\ntmsmgr.dll + 2008-04-14 02:33:36 496,640 ----a-w c:\windows\system32\ntmsmgr.dll - 2004-08-05 12:00:00 438,272 ----a-w c:\windows\system32\ntmssvc.dll + 2008-04-14 02:33:36 438,272 ----a-w c:\windows\system32\ntmssvc.dll - 2004-08-03 22:49:16 2,183,040 ----a-w c:\windows\system32\ntoskrnl.exe + 2008-08-14 13:23:49 2,191,232 ----a-w c:\windows\system32\ntoskrnl.exe - 2004-08-05 12:00:00 91,648 ----a-w c:\windows\system32\ntprint.dll + 2008-04-14 02:33:36 91,648 ----a-w c:\windows\system32\ntprint.dll - 2004-08-05 12:00:00 145,920 ----a-w c:\windows\system32\ntshrui.dll + 2008-04-14 02:33:36 145,920 ----a-w c:\windows\system32\ntshrui.dll - 2004-08-05 12:00:00 420,864 ----a-w c:\windows\system32\ntvdm.exe + 2008-04-14 02:34:16 421,888 ----a-w c:\windows\system32\ntvdm.exe - 2004-08-05 12:00:00 13,312 ----a-w c:\windows\system32\ntvdmd.dll + 2008-04-14 02:33:36 15,360 ----a-w c:\windows\system32\ntvdmd.dll - 2004-08-03 22:54:36 4,274,816 ----a-w c:\windows\system32\nv4_disp.dll + 2007-10-04 16:14:00 5,783,424 ----a-w c:\windows\system32\nv4_disp.dll + 2007-10-04 16:14:00 364,544 ----a-w c:\windows\system32\nvapi.dll + 2007-10-04 16:14:00 442,368 ----a-w c:\windows\system32\nvappbar.exe + 2007-10-04 16:14:00 36,864 ----a-w c:\windows\system32\nvcod.dll + 2007-10-04 16:14:00 36,864 ----a-w c:\windows\system32\nvcodins.dll + 2007-10-04 16:14:00 147,456 ----a-w c:\windows\system32\nvcolor.exe + 2007-10-04 16:14:00 8,491,008 ----a-w c:\windows\system32\nvcpl.dll + 2007-10-04 16:14:00 753,664 ----a-w c:\windows\system32\nvcplui.exe + 2007-10-04 16:14:00 1,073,152 ----a-w c:\windows\system32\nvcpluir.dll + 2007-10-04 16:14:00 6,344,704 ----a-w c:\windows\system32\nvdisps.dll + 2007-10-04 16:14:00 5,509,120 ----a-w c:\windows\system32\nvdispsr.dll + 2007-10-04 16:14:00 1,339,392 ----a-w c:\windows\system32\nvdspsch.exe + 2007-10-04 16:14:00 307,200 ----a-w c:\windows\system32\nvexpbar.dll + 2007-10-04 16:14:00 3,334,144 ----a-w c:\windows\system32\nvgames.dll + 2007-10-04 16:14:00 3,166,208 ----a-w c:\windows\system32\nvgamesr.dll + 2007-10-04 16:14:00 1,478,656 ----a-w c:\windows\system32\nview.dll + 2007-10-04 16:14:00 229,376 ----a-w c:\windows\system32\nvmccs.dll + 2007-10-04 16:14:00 45,056 ----a-w c:\windows\system32\nvmccsrs.dll + 2007-10-04 16:14:00 188,416 ----a-w c:\windows\system32\nvmccss.dll + 2007-10-04 16:14:00 458,752 ----a-w c:\windows\system32\nvmccssr.dll + 2007-10-04 16:14:00 81,920 ----a-w c:\windows\system32\nvmctray.dll + 2007-10-04 16:14:00 1,150,976 ----a-w c:\windows\system32\nvmobls.dll + 2007-10-04 16:14:00 2,854,912 ----a-w c:\windows\system32\nvmoblsr.dll + 2007-10-04 16:14:00 286,720 ----a-w c:\windows\system32\nvnt4cpl.dll + 2007-10-04 16:14:00 6,750,208 ----a-w c:\windows\system32\nvoglnt.dll + 2007-10-04 16:14:00 327,680 ----a-w c:\windows\system32\nvrsar.dll + 2007-10-04 16:14:00 249,856 ----a-w c:\windows\system32\nvrscs.dll + 2007-10-04 16:14:00 253,952 ----a-w c:\windows\system32\nvrsda.dll + 2007-10-04 16:14:00 278,528 ----a-w c:\windows\system32\nvrsde.dll + 2007-10-04 16:14:00 282,624 ----a-w c:\windows\system32\nvrsel.dll + 2007-10-04 16:14:00 245,760 ----a-w c:\windows\system32\nvrseng.dll + 2007-10-04 16:14:00 282,624 ----a-w c:\windows\system32\nvrses.dll + 2007-10-04 16:14:00 274,432 ----a-w c:\windows\system32\nvrsesm.dll + 2007-10-04 16:14:00 249,856 ----a-w c:\windows\system32\nvrsfi.dll + 2007-10-04 16:14:00 282,624 ----a-w c:\windows\system32\nvrsfr.dll + 2007-10-04 16:14:00 327,680 ----a-w c:\windows\system32\nvrshe.dll + 2007-10-04 16:14:00 258,048 ----a-w c:\windows\system32\nvrshu.dll + 2007-10-04 16:14:00 278,528 ----a-w c:\windows\system32\nvrsit.dll + 2007-10-04 16:14:00 266,240 ----a-w c:\windows\system32\nvrsja.dll + 2007-10-04 16:14:00 258,048 ----a-w c:\windows\system32\nvrsko.dll + 2007-10-04 16:14:00 274,432 ----a-w c:\windows\system32\nvrsnl.dll + 2007-10-04 16:14:00 253,952 ----a-w c:\windows\system32\nvrsno.dll + 2007-10-04 16:14:00 253,952 ----a-w c:\windows\system32\nvrspl.dll + 2007-10-04 16:14:00 274,432 ----a-w c:\windows\system32\nvrspt.dll + 2007-10-04 16:14:00 266,240 ----a-w c:\windows\system32\nvrsptb.dll + 2007-10-04 16:14:00 270,336 ----a-w c:\windows\system32\nvrsru.dll + 2007-10-04 16:14:00 258,048 ----a-w c:\windows\system32\nvrssk.dll + 2007-10-04 16:14:00 258,048 ----a-w c:\windows\system32\nvrssl.dll + 2007-10-04 16:14:00 253,952 ----a-w c:\windows\system32\nvrssv.dll + 2007-10-04 16:14:00 253,952 ----a-w c:\windows\system32\nvrsth.dll + 2007-10-04 16:14:00 258,048 ----a-w c:\windows\system32\nvrstr.dll + 2007-10-04 16:14:00 225,280 ----a-w c:\windows\system32\nvrszhc.dll + 2007-10-04 16:14:00 126,976 ----a-w c:\windows\system32\nvrszht.dll + 2007-10-04 16:14:00 466,944 ----a-w c:\windows\system32\nvshell.dll + 2007-10-04 16:14:00 155,716 ----a-w c:\windows\system32\nvsvc32.exe + 2007-10-04 16:14:00 356,352 ----a-w c:\windows\system32\nvudisp.exe + 2007-10-04 17:16:48 356,352 ----a-w c:\windows\system32\NVUNINST.EXE + 2007-10-04 16:14:00 3,551,232 ----a-w c:\windows\system32\nvvitvs.dll + 2007-10-04 16:14:00 3,629,056 ----a-w c:\windows\system32\nvvitvsr.dll + 2007-10-04 16:14:00 81,920 ----a-w c:\windows\system32\nvwddi.dll + 2007-10-04 16:14:00 1,703,936 ----a-w c:\windows\system32\nvwdmcpl.dll + 2007-10-04 16:14:00 1,019,904 ----a-w c:\windows\system32\nvwimg.dll + 2007-10-04 16:14:00 282,624 ----a-w c:\windows\system32\nvwrsar.dll + 2007-10-04 16:14:00 286,720 ----a-w c:\windows\system32\nvwrscs.dll + 2007-10-04 16:14:00 294,912 ----a-w c:\windows\system32\nvwrsda.dll + 2007-10-04 16:14:00 311,296 ----a-w c:\windows\system32\nvwrsde.dll + 2007-10-04 16:14:00 335,872 ----a-w c:\windows\system32\nvwrsel.dll + 2007-10-04 16:14:00 286,720 ----a-w c:\windows\system32\nvwrseng.dll + 2007-10-04 16:14:00 335,872 ----a-w c:\windows\system32\nvwrses.dll + 2007-10-04 16:14:00 327,680 ----a-w c:\windows\system32\nvwrsesm.dll + 2007-10-04 16:14:00 303,104 ----a-w c:\windows\system32\nvwrsfi.dll + 2007-10-04 16:14:00 327,680 ----a-w c:\windows\system32\nvwrsfr.dll + 2007-10-04 16:14:00 278,528 ----a-w c:\windows\system32\nvwrshe.dll + 2007-10-04 16:14:00 315,392 ----a-w c:\windows\system32\nvwrshu.dll + 2007-10-04 16:14:00 323,584 ----a-w c:\windows\system32\nvwrsit.dll + 2007-10-04 16:14:00 212,992 ----a-w c:\windows\system32\nvwrsja.dll + 2007-10-04 16:14:00 196,608 ----a-w c:\windows\system32\nvwrsko.dll + 2007-10-04 16:14:00 319,488 ----a-w c:\windows\system32\nvwrsnl.dll + 2007-10-04 16:14:00 299,008 ----a-w c:\windows\system32\nvwrsno.dll + 2007-10-04 16:14:00 294,912 ----a-w c:\windows\system32\nvwrspl.dll + 2007-10-04 16:14:00 323,584 ----a-w c:\windows\system32\nvwrspt.dll + 2007-10-04 16:14:00 319,488 ----a-w c:\windows\system32\nvwrsptb.dll + 2007-10-04 16:14:00 315,392 ----a-w c:\windows\system32\nvwrsru.dll + 2007-10-04 16:14:00 299,008 ----a-w c:\windows\system32\nvwrssk.dll + 2007-10-04 16:14:00 303,104 ----a-w c:\windows\system32\nvwrssl.dll + 2007-10-04 16:14:00 294,912 ----a-w c:\windows\system32\nvwrssv.dll + 2007-10-04 16:14:00 290,816 ----a-w c:\windows\system32\nvwrsth.dll + 2007-10-04 16:14:00 303,104 ----a-w c:\windows\system32\nvwrstr.dll + 2007-10-04 16:14:00 163,840 ----a-w c:\windows\system32\nvwrszhc.dll + 2007-10-04 16:14:00 167,936 ----a-w c:\windows\system32\nvwrszht.dll + 2007-10-04 16:14:00 2,371,584 ----a-w c:\windows\system32\nvwss.dll + 2007-10-04 16:14:00 2,441,216 ----a-w c:\windows\system32\nvwssr.dll + 2007-10-04 16:14:00 1,626,112 ----a-w c:\windows\system32\nwiz.exe - 2006-10-13 12:36:55 145,920 ----a-w c:\windows\system32\nwprovau.dll + 2008-04-14 02:33:36 145,920 ----a-w c:\windows\system32\nwprovau.dll - 2004-08-05 12:00:00 267,776 ----a-w c:\windows\system32\oakley.dll + 2008-04-14 02:33:36 271,360 ----a-w c:\windows\system32\oakley.dll - 2004-08-05 12:00:00 288,768 ----a-w c:\windows\system32\objsel.dll + 2008-04-14 02:33:37 289,280 ----a-w c:\windows\system32\objsel.dll - 2007-08-20 09:59:31 102,400 ----a-w c:\windows\system32\occache.dll + 2008-08-26 08:11:52 102,912 ----a-w c:\windows\system32\occache.dll - 2004-08-05 12:00:00 62,976 ----a-w c:\windows\system32\ocmanage.dll + 2008-04-14 02:33:38 69,632 ----a-w c:\windows\system32\ocmanage.dll - 2004-08-05 12:00:00 249,856 ----a-w c:\windows\system32\odbc32.dll + 2008-04-14 02:33:38 249,856 ----a-w c:\windows\system32\odbc32.dll - 2004-08-05 12:00:00 16,384 ----a-w c:\windows\system32\odbc32gt.dll + 2008-04-14 02:33:38 16,384 ----a-w c:\windows\system32\odbc32gt.dll - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\odbcad32.exe + 2008-04-14 02:34:17 32,768 ----a-w c:\windows\system32\odbcad32.exe - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\odbcbcp.dll + 2008-04-14 02:33:38 24,576 ----a-w c:\windows\system32\odbcbcp.dll - 2004-08-05 12:00:00 135,168 ----a-w c:\windows\system32\odbcconf.dll + 2008-04-14 02:33:38 135,168 ----a-w c:\windows\system32\odbcconf.dll - 2004-08-05 12:00:00 69,632 ----a-w c:\windows\system32\odbcconf.exe + 2008-04-14 02:34:17 69,632 ----a-w c:\windows\system32\odbcconf.exe - 2004-08-05 12:00:00 106,496 ----a-w c:\windows\system32\Odbccp32.dll + 2008-04-14 02:33:38 106,496 ----a-w c:\windows\system32\odbccp32.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\odbccr32.dll + 2008-04-14 02:33:38 65,536 ----a-w c:\windows\system32\odbccr32.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\odbccu32.dll + 2008-04-14 02:33:38 65,536 ----a-w c:\windows\system32\odbccu32.dll - 2004-08-05 12:00:00 98,304 ----a-w c:\windows\system32\odbcint.dll + 2007-03-28 12:56:42 98,304 ----a-w c:\windows\system32\odbcint.dll - 2004-08-05 12:00:00 61,712 ----a-w c:\windows\system32\odbcji32.dll + 2008-04-14 02:32:14 61,471 ----a-w c:\windows\system32\odbcji32.dll - 2004-08-05 12:00:00 278,559 ----a-w c:\windows\system32\odbcjt32.dll + 2008-04-14 02:33:38 278,559 ----a-w c:\windows\system32\odbcjt32.dll - 2004-08-05 12:00:00 12,288 ----a-w c:\windows\system32\odbcp32r.dll + 2008-04-13 17:26:05 12,288 ----a-w c:\windows\system32\odbcp32r.dll - 2004-08-05 12:00:00 147,456 ----a-w c:\windows\system32\odbctrac.dll + 2008-04-14 02:33:38 147,456 ----a-w c:\windows\system32\odbctrac.dll - 2004-08-05 12:00:00 20,511 ----a-w c:\windows\system32\oddbse32.dll + 2008-04-14 02:33:38 20,511 ----a-w c:\windows\system32\oddbse32.dll - 2004-08-05 12:00:00 20,510 ----a-w c:\windows\system32\odexl32.dll + 2008-04-14 02:33:38 20,510 ----a-w c:\windows\system32\odexl32.dll - 2004-08-05 12:00:00 20,510 ----a-w c:\windows\system32\odfox32.dll + 2008-04-14 02:33:38 20,510 ----a-w c:\windows\system32\odfox32.dll - 2004-08-05 12:00:00 20,510 ----a-w c:\windows\system32\odpdx32.dll + 2008-04-14 02:33:38 20,510 ----a-w c:\windows\system32\odpdx32.dll - 2004-08-05 12:00:00 20,511 ----a-w c:\windows\system32\odtext32.dll + 2008-04-14 02:33:38 20,511 ----a-w c:\windows\system32\odtext32.dll - 2004-08-05 12:00:00 120,832 ----a-w c:\windows\system32\offfilt.dll + 2008-04-14 02:33:38 192,000 ----a-w c:\windows\system32\offfilt.dll - 2005-07-26 04:40:00 1,284,608 ----a-w c:\windows\system32\ole32.dll + 2008-04-14 02:33:38 1,287,168 ----a-w c:\windows\system32\ole32.dll - 2007-05-17 11:29:50 549,376 ----a-w c:\windows\system32\oleaut32.dll + 2008-04-14 02:33:38 551,936 ----a-w c:\windows\system32\oleaut32.dll - 2005-07-26 04:40:00 75,264 ----a-w c:\windows\system32\olecli32.dll + 2008-04-14 02:33:38 75,264 ----a-w c:\windows\system32\olecli32.dll - 2005-07-26 04:40:00 37,888 ----a-w c:\windows\system32\olecnv32.dll + 2008-04-14 02:33:38 37,376 ----a-w c:\windows\system32\olecnv32.dll - 2006-10-16 16:16:00 124,928 ----a-w c:\windows\system32\oledlg.dll + 2008-04-14 02:33:38 124,928 ----a-w c:\windows\system32\oledlg.dll - 2004-08-05 12:00:00 110,592 ----a-w c:\windows\system32\oleprn.dll + 2008-04-14 02:33:38 110,592 ----a-w c:\windows\system32\oleprn.dll - 2004-08-05 12:00:00 83,456 ----a-w c:\windows\system32\olepro32.dll + 2008-04-14 02:33:38 84,992 ----a-w c:\windows\system32\olepro32.dll + 2008-04-14 02:33:38 144,896 ------w c:\windows\system32\onex.dll - 2004-08-05 12:00:00 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll + 2008-04-14 02:33:32 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll - 2004-08-05 12:00:00 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll + 2008-04-14 02:33:32 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll - 2004-08-05 12:00:00 563,200 ----a-w c:\windows\system32\oobe\msobmain.dll + 2008-04-14 02:33:32 566,272 ----a-w c:\windows\system32\oobe\msobmain.dll - 2004-08-05 12:00:00 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll + 2008-04-14 02:33:32 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\oobe\msobweb.dll + 2008-04-14 02:33:32 19,456 ----a-w c:\windows\system32\oobe\msobweb.dll - 2004-08-05 12:00:00 28,160 ----a-w c:\windows\system32\oobe\msoobe.exe + 2008-04-14 02:34:13 29,184 ----a-w c:\windows\system32\oobe\msoobe.exe - 2004-08-05 12:00:00 51,712 ----a-w c:\windows\system32\oobe\oobebaln.exe + 2008-04-14 02:34:17 51,712 ----a-w c:\windows\system32\oobe\oobebaln.exe - 2004-08-05 12:00:00 713,728 ----a-w c:\windows\system32\opengl32.dll + 2008-04-14 02:33:38 713,728 ----a-w c:\windows\system32\opengl32.dll - 2004-08-05 12:00:00 216,576 ----a-w c:\windows\system32\osk.exe + 2008-04-14 02:34:17 216,576 ----a-w c:\windows\system32\osk.exe - 2004-08-05 12:00:00 68,096 ----a-w c:\windows\system32\osuninst.dll + 2008-04-14 02:33:38 68,096 ----a-w c:\windows\system32\osuninst.dll - 2004-08-05 12:00:00 116,224 ----a-w c:\windows\system32\p2p.dll + 2008-04-14 02:33:38 153,600 ----a-w c:\windows\system32\p2p.dll - 2004-08-05 12:00:00 86,016 ----a-w c:\windows\system32\p2pgasvc.dll + 2008-04-14 02:33:38 105,472 ----a-w c:\windows\system32\p2pgasvc.dll - 2004-08-05 12:00:00 312,320 ----a-w c:\windows\system32\p2pgraph.dll + 2008-04-14 02:33:38 313,856 ----a-w c:\windows\system32\p2pgraph.dll - 2004-08-05 12:00:00 88,064 ----a-w c:\windows\system32\p2pnetsh.dll + 2008-04-14 02:33:38 115,712 ----a-w c:\windows\system32\p2pnetsh.dll - 2004-08-05 12:00:00 526,848 ----a-w c:\windows\system32\p2psvc.dll + 2008-04-14 02:33:38 554,496 ----a-w c:\windows\system32\p2psvc.dll - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\packager.exe + 2008-04-14 02:34:17 59,904 ----a-w c:\windows\system32\packager.exe - 2004-08-05 12:00:00 65,024 ----a-w c:\windows\system32\pautoenr.dll + 2008-04-14 02:33:38 69,632 ----a-w c:\windows\system32\pautoenr.dll + 2004-05-19 08:59:02 212,480 ----a-w c:\windows\system32\PCDLIB32.DLL + 2001-02-26 06:35:10 61,440 ----a-w c:\windows\system32\pclepim1.dll + 1999-05-27 10:08:52 62,976 ----a-w c:\windows\system32\pclepixl.dll - 2004-08-05 12:00:00 286,208 ----a-w c:\windows\system32\pdh.dll + 2008-04-14 02:33:38 286,720 ----a-w c:\windows\system32\pdh.dll - 2007-10-17 07:15:47 58,596 ----a-w c:\windows\system32\perfc009.dat + 2008-11-01 08:23:05 59,780 ----a-w c:\windows\system32\perfc009.dat - 2007-10-17 07:15:47 71,248 ----a-w c:\windows\system32\perfc00C.dat + 2008-11-01 08:23:05 73,020 ----a-w c:\windows\system32\perfc00C.dat - 2004-08-05 12:00:00 42,496 ----a-w c:\windows\system32\perfctrs.dll + 2008-04-14 02:33:38 42,496 ----a-w c:\windows\system32\perfctrs.dll - 2004-08-05 12:00:00 27,136 ----a-w c:\windows\system32\perfdisk.dll + 2008-04-14 02:33:38 27,136 ----a-w c:\windows\system32\perfdisk.dll - 2007-10-17 07:15:47 392,296 ----a-w c:\windows\system32\perfh009.dat + 2008-11-01 08:23:05 397,560 ----a-w c:\windows\system32\perfh009.dat - 2007-10-17 07:15:47 458,230 ----a-w c:\windows\system32\perfh00C.dat + 2008-11-01 08:23:05 464,474 ----a-w c:\windows\system32\perfh00C.dat - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\perfmon.exe + 2008-04-14 02:34:17 15,872 ----a-w c:\windows\system32\perfmon.exe - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\perfnet.dll + 2008-04-14 02:33:38 18,432 ----a-w c:\windows\system32\perfnet.dll - 2004-08-05 12:00:00 26,624 ----a-w c:\windows\system32\perfos.dll + 2008-04-14 02:33:38 26,624 ----a-w c:\windows\system32\perfos.dll - 2004-08-05 12:00:00 35,840 ----a-w c:\windows\system32\perfproc.dll + 2008-04-14 02:33:38 35,840 ----a-w c:\windows\system32\perfproc.dll + 2008-04-14 02:33:38 412,160 ------w c:\windows\system32\photometadatahandler.dll - 2004-08-05 12:00:00 172,032 ----a-w c:\windows\system32\photowiz.dll + 2008-04-14 02:33:38 172,032 ----a-w c:\windows\system32\photowiz.dll - 2004-08-05 12:00:00 35,328 ----a-w c:\windows\system32\pid.dll + 2008-04-14 02:33:38 35,328 ----a-w c:\windows\system32\pid.dll - 2004-08-05 12:00:00 24,064 ----a-w c:\windows\system32\pidgen.dll + 2008-04-13 18:35:22 24,064 ----a-w c:\windows\system32\pidgen.dll - 2004-08-05 12:00:00 19,456 ----a-w c:\windows\system32\ping.exe + 2008-04-14 02:34:18 19,456 ----a-w c:\windows\system32\ping.exe - 2004-08-05 12:00:00 15,360 ----a-w c:\windows\system32\pjlmon.dll + 2008-04-14 02:33:38 15,360 ----a-w c:\windows\system32\pjlmon.dll + 1998-03-08 18:28:54 273,408 ----a-w c:\windows\system32\Pncrt.dll - 2006-10-17 10:58:08 44,544 ----a-w c:\windows\system32\pngfilt.dll + 2008-08-26 08:11:52 44,544 ----a-w c:\windows\system32\pngfilt.dll - 2004-08-05 12:00:00 48,640 ----a-w c:\windows\system32\pnrpnsp.dll + 2008-04-14 02:33:38 58,880 ----a-w c:\windows\system32\pnrpnsp.dll - 2004-08-05 12:00:00 106,496 ----a-w c:\windows\system32\polstore.dll + 2008-04-14 02:33:38 106,496 ----a-w c:\windows\system32\polstore.dll - 2004-08-05 12:00:00 49,152 ----a-w c:\windows\system32\powercfg.exe + 2008-04-14 02:34:18 49,152 ----a-w c:\windows\system32\powercfg.exe - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\powrprof.dll + 2008-04-14 02:33:38 17,408 ----a-w c:\windows\system32\powrprof.dll - 2004-08-05 12:00:00 578,560 ----a-w c:\windows\system32\printui.dll + 2008-04-14 02:33:38 578,560 ----a-w c:\windows\system32\printui.dll - 2004-08-05 12:00:00 27,648 ----a-w c:\windows\system32\profmap.dll + 2008-04-14 02:33:38 27,648 ----a-w c:\windows\system32\profmap.dll - 2004-08-05 12:00:00 109,568 ----a-w c:\windows\system32\progman.exe + 2008-04-14 02:34:18 109,568 ----a-w c:\windows\system32\progman.exe - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\proquota.exe + 2008-04-14 02:34:18 50,688 ----a-w c:\windows\system32\proquota.exe - 2004-08-05 12:00:00 9,728 ----a-w c:\windows\system32\proxycfg.exe + 2008-04-14 02:34:18 9,728 ----a-w c:\windows\system32\proxycfg.exe - 2004-08-05 12:00:00 23,040 ----a-w c:\windows\system32\psapi.dll + 2008-04-14 02:33:38 23,040 ----a-w c:\windows\system32\psapi.dll - 2004-08-05 12:00:00 98,816 ----a-w c:\windows\system32\psbase.dll + 2008-04-14 02:33:38 98,816 ----a-w c:\windows\system32\psbase.dll - 2004-08-05 12:00:00 43,520 ----a-w c:\windows\system32\pstorec.dll + 2008-04-14 02:33:38 43,520 ----a-w c:\windows\system32\pstorec.dll - 2004-08-05 12:00:00 34,304 ----a-w c:\windows\system32\pstorsvc.dll + 2008-04-14 02:33:38 34,304 ----a-w c:\windows\system32\pstorsvc.dll + 2008-04-14 02:33:39 151,040 ------w c:\windows\system32\qagent.dll + 2008-04-14 02:33:39 293,376 ------w c:\windows\system32\qagentrt.dll - 2004-08-05 12:00:00 192,512 ----a-w c:\windows\system32\qcap.dll + 2008-04-14 02:33:39 192,512 ----a-w c:\windows\system32\qcap.dll + 2008-04-14 02:33:39 62,464 ------w c:\windows\system32\qcliprov.dll - 2004-08-05 12:00:00 279,040 ----a-w c:\windows\system32\qdv.dll + 2008-04-14 02:33:39 279,040 ----a-w c:\windows\system32\qdv.dll - 2004-08-05 12:00:00 386,048 ----a-w c:\windows\system32\qdvd.dll + 2008-04-14 02:33:39 387,072 ----a-w c:\windows\system32\qdvd.dll - 2004-08-05 12:00:00 563,200 ----a-w c:\windows\system32\qedit.dll + 2008-04-14 02:33:39 563,200 ----a-w c:\windows\system32\qedit.dll - 2004-08-05 12:00:00 733,696 ----a-w c:\windows\system32\qedwipes.dll + 2008-04-13 17:21:32 733,696 ----a-w c:\windows\system32\qedwipes.dll - 2004-08-05 12:00:00 382,464 ----a-w c:\windows\system32\qmgr.dll + 2008-04-14 02:33:39 409,088 ----a-w c:\windows\system32\qmgr.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\qmgrprxy.dll + 2008-04-14 02:33:39 18,944 ----a-w c:\windows\system32\qmgrprxy.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\qprocess.exe + 2008-04-14 02:34:18 20,992 ----a-w c:\windows\system32\qprocess.exe - 2007-08-15 22:33:14 3,596,288 ----a-w c:\windows\system32\qt-dx331.dll + 2008-07-23 16:50:52 3,596,288 ----a-w c:\windows\system32\qt-dx331.dll - 2005-08-30 03:55:43 1,293,312 ----a-w c:\windows\system32\quartz.dll + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\system32\quartz.dll - 2006-06-22 05:13:46 1,440,768 ----a-w c:\windows\system32\query.dll + 2008-04-14 02:33:39 1,440,768 ----a-w c:\windows\system32\query.dll + 2008-04-14 02:33:39 76,800 ------w c:\windows\system32\qutil.dll - 2004-08-05 12:00:00 43,520 ----a-w c:\windows\system32\racpldlg.dll + 2008-04-14 02:33:39 43,520 ----a-w c:\windows\system32\racpldlg.dll + 2006-11-13 13:06:46 138,024 ----a-w c:\windows\system32\rapi.dll - 2006-06-26 17:41:32 8,192 ----a-w c:\windows\system32\rasadhlp.dll + 2008-04-14 02:33:39 7,680 ----a-w c:\windows\system32\rasadhlp.dll - 2004-08-05 12:00:00 237,056 ----a-w c:\windows\system32\rasapi32.dll + 2008-04-14 02:33:39 237,056 ----a-w c:\windows\system32\rasapi32.dll - 2004-08-05 12:00:00 89,088 ----a-w c:\windows\system32\rasauto.dll + 2008-04-14 02:33:39 88,576 ----a-w c:\windows\system32\rasauto.dll - 2004-08-05 12:00:00 69,632 ----a-w c:\windows\system32\raschap.dll + 2008-04-14 02:33:39 79,872 ----a-w c:\windows\system32\raschap.dll - 2004-08-05 12:00:00 685,056 ----a-w c:\windows\system32\rasdlg.dll + 2008-04-14 02:33:39 685,568 ----a-w c:\windows\system32\rasdlg.dll - 2004-08-05 12:00:00 61,440 ----a-w c:\windows\system32\rasman.dll + 2008-04-14 02:33:39 61,440 ----a-w c:\windows\system32\rasman.dll - 2006-06-22 10:48:06 181,248 ----a-w c:\windows\system32\rasmans.dll + 2008-04-14 02:33:39 186,368 ----a-w c:\windows\system32\rasmans.dll - 2004-08-05 12:00:00 57,344 ----a-w c:\windows\system32\rasphone.exe + 2008-04-14 02:34:18 57,344 ----a-w c:\windows\system32\rasphone.exe - 2004-08-05 12:00:00 206,336 ----a-w c:\windows\system32\rasppp.dll + 2008-04-14 02:33:39 210,944 ----a-w c:\windows\system32\rasppp.dll + 2008-04-14 02:33:39 61,952 ------w c:\windows\system32\rasqec.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\rassapi.dll + 2008-04-14 02:33:39 16,384 ----a-w c:\windows\system32\rassapi.dll - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\rastapi.dll + 2008-04-14 02:33:39 58,368 ----a-w c:\windows\system32\rastapi.dll - 2004-08-05 12:00:00 113,152 ----a-w c:\windows\system32\rastls.dll + 2008-04-14 02:33:39 151,040 ----a-w c:\windows\system32\rastls.dll - 2004-08-05 12:00:00 103,424 ----a-w c:\windows\system32\rcbdyctl.dll + 2008-04-14 02:33:39 102,912 ----a-w c:\windows\system32\rcbdyctl.dll - 2004-08-05 12:00:00 35,840 ----a-w c:\windows\system32\rcimlby.exe + 2008-04-14 02:34:18 35,840 ----a-w c:\windows\system32\rcimlby.exe - 2004-08-05 12:00:00 23,040 ----a-w c:\windows\system32\rcp.exe + 2008-04-14 02:34:18 23,040 ----a-w c:\windows\system32\rcp.exe - 2004-08-05 12:00:00 147,968 ----a-w c:\windows\system32\rdchost.dll + 2008-04-14 02:33:39 147,968 ----a-w c:\windows\system32\rdchost.dll - 2004-08-05 12:00:00 62,464 ----a-w c:\windows\system32\rdpclip.exe + 2008-04-14 02:34:18 62,976 ----a-w c:\windows\system32\rdpclip.exe - 2004-08-05 12:00:00 92,168 ----a-w c:\windows\system32\rdpdd.dll + 2008-04-14 02:34:53 92,424 ----a-w c:\windows\system32\rdpdd.dll - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\system32\rdpsnd.dll + 2008-04-14 02:33:39 19,968 ----a-w c:\windows\system32\rdpsnd.dll - 2004-08-05 12:00:00 87,176 ----a-w c:\windows\system32\rdpwsx.dll + 2008-04-14 02:34:54 87,176 ----a-w c:\windows\system32\rdpwsx.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\rdsaddin.exe + 2008-04-14 02:34:18 13,824 ----a-w c:\windows\system32\rdsaddin.exe - 2004-08-05 12:00:00 67,072 ----a-w c:\windows\system32\rdshost.exe + 2008-04-14 02:34:18 67,072 ----a-w c:\windows\system32\rdshost.exe - 2004-08-05 12:00:00 53,248 ----a-w c:\windows\system32\reg.exe + 2008-04-14 02:34:18 53,248 ----a-w c:\windows\system32\reg.exe - 2004-08-05 12:00:00 49,664 ----a-w c:\windows\system32\regapi.dll + 2008-04-14 02:33:39 49,664 ----a-w c:\windows\system32\regapi.dll - 2004-08-05 12:00:00 59,904 ----a-w c:\windows\system32\regsvc.dll + 2008-04-14 02:33:39 59,904 ----a-w c:\windows\system32\regsvc.dll - 2004-08-05 12:00:00 12,288 ----a-w c:\windows\system32\regsvr32.exe + 2008-04-14 02:34:19 12,288 ----a-w c:\windows\system32\regsvr32.exe - 2004-08-05 12:00:00 405,504 ----a-w c:\windows\system32\regwizc.dll + 2008-04-14 02:33:39 405,504 ----a-w c:\windows\system32\regwizc.dll + 2004-08-03 22:31:34 20,992 ----a-w c:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\RTL8139.sys + 2004-08-03 22:54:36 4,274,816 ----a-w c:\windows\system32\ReinstallBackups\0002\DriverFiles\i386\nv4_disp.dll + 2004-08-03 20:29:56 1,897,408 ----a-w c:\windows\system32\ReinstallBackups\0002\DriverFiles\i386\nv4_mini.sys + 2005-10-26 14:08:00 3,786,944 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\ALCXWDM.SYS + 2004-08-03 21:08:00 60,288 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\drmk.sys + 2004-08-03 21:15:22 140,928 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\ks.sys + 2004-08-03 22:54:30 4,096 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\ksuser.dll + 2004-08-03 21:15:50 145,792 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\portcls.sys + 2004-08-03 21:08:04 48,640 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\stream.sys + 2004-08-03 22:55:04 23,552 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\wdmaud.drv + 2005-09-16 12:14:00 157,184 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\RTLCPAPI.dll + 2005-10-24 12:55:00 10,459,648 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\RTLCPL.EXE + 2003-02-20 06:18:36 36,608 ----a-w c:\windows\system32\ReinstallBackups\0004\DriverFiles\SISAGPX.SYS + 2004-08-04 00:54:22 229,376 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ati2cqag.dll + 2004-08-04 00:54:22 201,728 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ati2dvag.dll + 2004-08-04 00:38:44 701,440 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ati2mtag.sys + 2004-08-04 00:54:22 870,784 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ati3d1ag.dll + 2004-08-04 00:54:22 1,888,992 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ati3duag.dll + 2004-08-04 00:54:22 516,768 ----a-w c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\ativvaxx.dll + 2004-08-04 00:54:22 229,376 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ati2cqag.dll + 2004-08-04 00:54:22 201,728 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ati2dvag.dll + 2004-08-04 00:38:44 701,440 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ati2mtag.sys + 2004-08-04 00:54:22 870,784 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ati3d1ag.dll + 2004-08-04 00:54:22 1,888,992 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ati3duag.dll + 2004-08-04 00:54:22 516,768 ----a-w c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\ativvaxx.dll + 2004-08-05 12:00:00 40,320 ----a-w c:\windows\system32\ReinstallBackups\0007\DriverFiles\i386\intelppm.sys - 2004-08-05 12:00:00 61,952 ----a-w c:\windows\system32\remotepg.dll + 2008-04-14 02:33:39 61,952 ----a-w c:\windows\system32\remotepg.dll + 2008-11-07 17:33:14 80,072 ----a-w c:\windows\system32\Restore\rstrlog.dat - 2004-08-05 12:00:00 384,512 ----a-w c:\windows\system32\Restore\rstrui.exe + 2008-04-14 02:34:19 384,512 ----a-w c:\windows\system32\Restore\rstrui.exe - 2004-08-05 12:00:00 58,880 ----a-w c:\windows\system32\resutils.dll + 2008-04-14 02:33:39 58,880 ----a-w c:\windows\system32\resutils.dll - 2004-08-05 12:00:00 14,848 ----a-w c:\windows\system32\rexec.exe + 2008-04-14 02:34:19 14,848 ----a-w c:\windows\system32\rexec.exe + 2008-04-14 02:33:39 290,304 ------w c:\windows\system32\rhttpaa.dll - 2006-11-27 14:55:31 433,152 ----a-w c:\windows\system32\riched20.dll + 2008-04-14 02:33:39 433,664 ----a-w c:\windows\system32\riched20.dll - 2007-07-09 13:19:28 582,656 ----a-w c:\windows\system32\rpcrt4.dll + 2008-04-14 02:33:39 584,704 ----a-w c:\windows\system32\rpcrt4.dll - 2005-07-26 04:40:00 397,824 ----a-w c:\windows\system32\rpcss.dll + 2008-04-14 02:33:39 399,360 ----a-w c:\windows\system32\rpcss.dll - 2004-08-05 12:00:00 152,576 ----a-w c:\windows\system32\rsaenh.dll + 2008-04-13 17:37:57 208,384 ----a-w c:\windows\system32\rsaenh.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\rsh.exe + 2008-04-14 02:34:19 15,872 ----a-w c:\windows\system32\rsh.exe - 2004-08-05 12:00:00 40,960 ----a-w c:\windows\system32\rshx32.dll + 2008-04-14 02:33:39 40,960 ----a-w c:\windows\system32\rshx32.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\rsmps.dll + 2008-04-14 02:33:39 18,944 ----a-w c:\windows\system32\rsmps.dll - 2004-08-05 12:00:00 90,112 ----a-w c:\windows\system32\rsvpsp.dll + 2008-04-14 02:33:39 92,672 ----a-w c:\windows\system32\rsvpsp.dll - 2004-08-05 12:00:00 78,336 ----a-w c:\windows\system32\rtcshare.exe + 2008-04-14 02:34:20 78,336 ----a-w c:\windows\system32\rtcshare.exe - 2004-08-05 12:00:00 31,744 ----a-w c:\windows\system32\rtipxmib.dll + 2008-04-14 02:33:39 31,744 ----a-w c:\windows\system32\rtipxmib.dll - 2005-09-16 12:14:00 157,184 ----a-w c:\windows\system32\RtlCPAPI.dll + 2006-10-18 01:53:26 147,456 ----a-w c:\windows\system32\RtlCPAPI.dll - 2005-10-24 12:55:00 10,459,648 ----a-w c:\windows\system32\RTLCPL.exe + 2006-12-08 14:20:14 10,528,768 ----a-w c:\windows\system32\RTLCPL.exe - 2004-08-05 12:00:00 44,032 ----a-w c:\windows\system32\rtutils.dll + 2008-04-14 02:33:39 44,032 ----a-w c:\windows\system32\rtutils.dll - 2004-08-05 12:00:00 33,792 ----a-w c:\windows\system32\rundll32.exe + 2008-04-14 02:34:20 33,792 ----a-w c:\windows\system32\rundll32.exe - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\runonce.exe + 2008-04-14 02:34:20 14,336 ----a-w c:\windows\system32\runonce.exe + 2008-04-14 02:33:39 397,056 ------w c:\windows\system32\s3gnb.dll - 2004-08-05 12:00:00 43,520 ----a-w c:\windows\system32\safrcdlg.dll + 2008-04-14 02:33:39 43,520 ----a-w c:\windows\system32\safrcdlg.dll - 2004-08-05 12:00:00 29,696 ----a-w c:\windows\system32\safrdm.dll + 2008-04-14 02:33:39 29,696 ----a-w c:\windows\system32\safrdm.dll - 2004-08-05 12:00:00 45,568 ----a-w c:\windows\system32\safrslv.dll + 2008-04-14 02:33:39 45,568 ----a-w c:\windows\system32\safrslv.dll - 2004-08-05 12:00:00 64,000 ----a-w c:\windows\system32\samlib.dll + 2008-04-14 02:33:39 64,000 ----a-w c:\windows\system32\samlib.dll - 2004-08-05 12:00:00 431,104 ----a-w c:\windows\system32\samsrv.dll + 2008-04-14 02:33:39 431,104 ----a-w c:\windows\system32\samsrv.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\savedump.exe + 2008-04-14 02:34:20 13,824 ----a-w c:\windows\system32\savedump.exe - 2004-08-05 12:00:00 270,848 ----a-w c:\windows\system32\sbe.dll + 2008-04-14 02:33:39 270,848 ----a-w c:\windows\system32\sbe.dll - 2004-08-05 12:00:00 159,232 ----a-w c:\windows\system32\sbeio.dll + 2008-04-14 02:33:39 159,232 ----a-w c:\windows\system32\sbeio.dll - 2004-08-05 12:00:00 71,168 ----a-w c:\windows\system32\scarddlg.dll + 2008-04-14 02:33:40 71,168 ----a-w c:\windows\system32\scarddlg.dll - 2004-08-05 12:00:00 100,352 ----a-w c:\windows\system32\scardsvr.exe + 2008-04-14 02:34:20 100,352 ----a-w c:\windows\system32\scardsvr.exe - 2004-08-05 12:00:00 171,520 ----a-w c:\windows\system32\sccsccp.dll + 2008-04-14 02:33:40 171,520 ----a-w c:\windows\system32\sccsccp.dll - 2004-08-05 12:00:00 186,368 ----a-w c:\windows\system32\scecli.dll + 2008-04-14 02:33:40 187,392 ----a-w c:\windows\system32\scecli.dll - 2004-08-05 12:00:00 328,704 ----a-w c:\windows\system32\scesrv.dll + 2008-04-14 02:33:40 329,728 ----a-w c:\windows\system32\scesrv.dll - 2007-04-25 14:22:35 144,896 ----a-w c:\windows\system32\schannel.dll + 2008-04-14 02:33:40 144,384 ----a-w c:\windows\system32\schannel.dll - 2004-08-05 12:00:00 193,024 ----a-w c:\windows\system32\schedsvc.dll + 2008-04-14 02:33:40 194,560 ----a-w c:\windows\system32\schedsvc.dll - 2004-08-05 12:00:00 22,016 ----a-w c:\windows\system32\sclgntfy.dll + 2008-04-14 02:33:40 22,016 ----a-w c:\windows\system32\sclgntfy.dll - 2004-08-05 12:00:00 9,216 ----a-w c:\windows\system32\scrnsave.scr + 2008-04-14 02:34:32 9,216 ----a-w c:\windows\system32\scrnsave.scr - 2004-08-05 12:00:00 159,744 ----a-w c:\windows\system32\scrobj.dll + 2008-05-09 10:55:00 180,224 ----a-w c:\windows\system32\scrobj.dll - 2004-08-05 12:00:00 151,552 ----a-w c:\windows\system32\scrrun.dll + 2008-05-09 10:55:00 172,032 ----a-w c:\windows\system32\scrrun.dll - 2004-08-05 12:00:00 78,848 ----a-w c:\windows\system32\sdbinst.exe + 2008-04-14 02:34:20 78,848 ----a-w c:\windows\system32\sdbinst.exe - 2004-08-05 12:00:00 29,184 ----a-w c:\windows\system32\sdhcinst.dll + 2008-04-14 02:33:40 29,184 ----a-w c:\windows\system32\sdhcinst.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\seclogon.dll + 2008-04-14 02:33:40 18,944 ----a-w c:\windows\system32\seclogon.dll - 2004-08-05 12:00:00 55,808 ----a-w c:\windows\system32\secur32.dll + 2008-04-14 02:33:40 56,320 ----a-w c:\windows\system32\secur32.dll - 2004-08-05 12:00:00 5,632 ----a-w c:\windows\system32\security.dll + 2008-04-14 02:33:40 5,632 ----a-w c:\windows\system32\security.dll - 2004-08-05 12:00:00 29,696 ----a-w c:\windows\system32\sendcmsg.dll + 2008-04-14 02:33:40 29,696 ----a-w c:\windows\system32\sendcmsg.dll - 2004-08-05 12:00:00 55,296 ----a-w c:\windows\system32\sendmail.dll + 2008-04-14 02:33:40 55,296 ----a-w c:\windows\system32\sendmail.dll - 2004-08-05 12:00:00 38,912 ----a-w c:\windows\system32\sens.dll + 2008-04-14 02:33:40 39,424 ----a-w c:\windows\system32\sens.dll - 2004-08-05 12:00:00 6,656 ----a-w c:\windows\system32\sensapi.dll + 2008-04-14 02:33:40 7,168 ----a-w c:\windows\system32\sensapi.dll - 2004-08-05 12:00:00 56,320 ----a-w c:\windows\system32\servdeps.dll + 2008-04-14 02:33:40 56,320 ----a-w c:\windows\system32\servdeps.dll - 2004-08-05 12:00:00 108,544 ----a-w c:\windows\system32\services.exe + 2008-04-14 02:34:20 109,056 ----a-w c:\windows\system32\services.exe - 2004-08-05 12:00:00 142,336 ----a-w c:\windows\system32\sessmgr.exe + 2008-04-14 02:34:21 142,848 ----a-w c:\windows\system32\sessmgr.exe - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\sethc.exe + 2008-04-14 02:34:21 32,768 ----a-w c:\windows\system32\sethc.exe - 2004-08-05 12:00:00 23,040 ----a-w c:\windows\system32\setup.exe + 2008-04-14 02:34:21 23,040 ----a-w c:\windows\system32\setup.exe - 2004-08-05 12:00:00 259,584 ----a-w c:\windows\system32\Setup\comsetup.dll + 2008-04-14 02:33:21 274,944 ----a-w c:\windows\system32\Setup\comsetup.dll - 2004-08-05 12:00:00 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll + 2008-04-14 02:33:24 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll - 2004-08-05 12:00:00 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll + 2008-04-14 02:33:25 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll - 2004-08-05 12:00:00 508,416 ------w c:\windows\system32\Setup\iis.dll + 2008-04-14 02:31:32 508,416 ----a-w c:\windows\system32\Setup\iis.dll - 2004-08-05 12:00:00 118,784 ----a-w c:\windows\system32\Setup\imsinsnt.dll + 2008-04-14 02:33:26 126,464 ----a-w c:\windows\system32\Setup\imsinsnt.dll + 2008-04-14 02:33:28 8,192 ----a-w c:\windows\system32\Setup\koc.dll - 2004-08-05 12:00:00 82,432 ----a-w c:\windows\system32\Setup\msdtcstp.dll + 2008-04-14 02:33:31 90,112 ----a-w c:\windows\system32\Setup\msdtcstp.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\Setup\msgrocm.dll + 2008-04-14 02:33:31 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll - 2004-08-05 12:00:00 78,336 ----a-w c:\windows\system32\Setup\netoc.dll + 2008-04-14 02:33:34 78,336 ----a-w c:\windows\system32\Setup\netoc.dll - 2004-08-05 12:00:00 63,488 ----a-w c:\windows\system32\Setup\ntoc.dll + 2008-04-14 02:33:36 63,488 ----a-w c:\windows\system32\Setup\ntoc.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll + 2008-04-14 02:33:38 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll + 2008-04-14 02:33:38 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll - 2004-08-05 12:00:00 101,888 ----a-w c:\windows\system32\Setup\setupqry.dll + 2008-04-14 02:33:41 101,888 ----a-w c:\windows\system32\Setup\setupqry.dll - 2004-08-05 12:00:00 22,016 ----a-w c:\windows\system32\Setup\startoc.dll + 2008-04-14 02:33:46 26,624 ----a-w c:\windows\system32\Setup\startoc.dll - 2004-08-05 12:00:00 123,904 ----a-w c:\windows\system32\Setup\tsoc.dll + 2008-04-14 02:33:46 132,096 ----a-w c:\windows\system32\Setup\tsoc.dll - 2004-08-05 12:00:00 1,003,520 ----a-w c:\windows\system32\setupapi.dll + 2008-04-13 18:33:42 1,005,056 ----a-w c:\windows\system32\setupapi.dll + 2008-04-14 02:34:21 32,768 ------w c:\windows\system32\setupn.exe - 2004-08-05 12:00:00 5,120 ----a-w c:\windows\system32\sfc.dll + 2008-04-14 02:33:41 5,120 ----a-w c:\windows\system32\sfc.dll - 2004-08-05 12:00:00 142,336 ----a-w c:\windows\system32\sfc_os.dll + 2008-04-14 02:33:41 142,336 ----a-w c:\windows\system32\sfc_os.dll - 2004-08-05 12:00:00 1,548,288 ----a-w c:\windows\system32\sfcfiles.dll + 2008-04-14 02:33:41 1,571,840 ----a-w c:\windows\system32\sfcfiles.dll - 2004-08-05 12:00:00 572,416 ----a-w c:\windows\system32\shdoclc.dll + 2008-04-14 02:00:59 572,416 ----a-w c:\windows\system32\shdoclc.dll - 2006-10-23 15:34:38 1,497,600 ----a-w c:\windows\system32\shdocvw.dll + 2008-04-14 02:33:41 1,499,136 ----a-w c:\windows\system32\shdocvw.dll - 2006-12-19 21:49:47 8,509,952 ----a-w c:\windows\system32\shell32.dll + 2008-04-14 02:33:41 8,517,632 ----a-w c:\windows\system32\shell32.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\shfolder.dll + 2008-04-14 02:33:41 25,088 ----a-w c:\windows\system32\shfolder.dll - 2004-08-05 12:00:00 68,096 ----a-w c:\windows\system32\shgina.dll + 2008-04-14 02:33:41 68,096 ----a-w c:\windows\system32\shgina.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\shimeng.dll + 2008-04-14 02:33:41 65,024 ----a-w c:\windows\system32\shimeng.dll - 2004-08-05 12:00:00 440,320 ----a-w c:\windows\system32\shimgvw.dll + 2008-04-14 02:33:41 440,320 ----a-w c:\windows\system32\shimgvw.dll - 2006-10-23 15:34:38 474,624 ----a-w c:\windows\system32\shlwapi.dll + 2008-04-14 02:33:41 474,624 ----a-w c:\windows\system32\shlwapi.dll - 2004-08-05 12:00:00 153,088 ----a-w c:\windows\system32\shmedia.dll + 2008-04-14 02:33:41 153,600 ----a-w c:\windows\system32\shmedia.dll - 2004-08-05 12:00:00 42,496 ----a-w c:\windows\system32\shmgrate.exe + 2008-04-14 02:34:21 45,056 ----a-w c:\windows\system32\shmgrate.exe - 2004-08-05 12:00:00 78,848 ----a-w c:\windows\system32\shrpubw.exe + 2008-04-14 02:34:21 78,848 ----a-w c:\windows\system32\shrpubw.exe - 2004-08-05 12:00:00 28,160 ----a-w c:\windows\system32\shscrap.dll + 2008-04-14 02:33:41 28,160 ----a-w c:\windows\system32\shscrap.dll - 2006-12-19 21:49:47 135,168 ----a-w c:\windows\system32\shsvcs.dll + 2008-04-14 02:33:41 135,680 ----a-w c:\windows\system32\shsvcs.dll - 2004-08-05 12:00:00 20,480 ----a-w c:\windows\system32\shutdown.exe + 2008-04-14 02:34:21 20,480 ----a-w c:\windows\system32\shutdown.exe - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\sigtab.dll + 2008-04-14 02:33:41 13,824 ----a-w c:\windows\system32\sigtab.dll - 2004-08-05 12:00:00 71,168 ----a-w c:\windows\system32\sigverif.exe + 2008-04-14 02:34:21 71,168 ----a-w c:\windows\system32\sigverif.exe - 2004-08-05 12:00:00 26,112 ----a-w c:\windows\system32\skeys.exe + 2008-04-14 02:34:21 26,112 ----a-w c:\windows\system32\skeys.exe - 2004-08-05 12:00:00 25,600 ----a-w c:\windows\system32\slayerxp.dll + 2008-04-14 02:33:41 25,600 ----a-w c:\windows\system32\slayerxp.dll - 2004-08-05 12:00:00 98,304 ----a-w c:\windows\system32\slbiop.dll + 2008-04-14 02:33:41 98,304 ----a-w c:\windows\system32\slbiop.dll + 2008-04-14 02:33:41 73,832 ------w c:\windows\system32\slcoinst.dll + 2008-04-14 02:33:41 286,792 ------w c:\windows\system32\slextspk.dll + 2008-04-14 02:33:41 188,508 ------w c:\windows\system32\slgen.dll + 2008-04-14 02:34:22 32,866 ------w c:\windows\system32\slrundll.exe + 2008-04-14 02:34:22 73,796 ------w c:\windows\system32\slserv.exe - 2004-08-05 12:00:00 8,192 ----a-w c:\windows\system32\smbinst.exe + 2008-04-14 02:34:22 8,192 ----a-w c:\windows\system32\smbinst.exe - 2004-08-05 12:00:00 370,688 ----a-w c:\windows\system32\smlogcfg.dll + 2008-04-14 02:33:41 370,176 ----a-w c:\windows\system32\smlogcfg.dll - 2004-08-05 12:00:00 93,184 ----a-w c:\windows\system32\smlogsvc.exe + 2008-04-14 02:34:22 93,184 ----a-w c:\windows\system32\smlogsvc.exe - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\system32\smss.exe + 2008-04-14 02:34:22 50,688 ----a-w c:\windows\system32\smss.exe - 2004-08-05 12:00:00 133,120 ----a-w c:\windows\system32\sndrec32.exe + 2008-04-14 02:34:22 133,120 ----a-w c:\windows\system32\sndrec32.exe - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\snmpapi.dll + 2008-04-14 02:33:41 18,944 ----a-w c:\windows\system32\snmpapi.dll - 2004-08-05 12:00:00 184,320 ----a-w c:\windows\system32\snmpsnap.dll + 2008-04-14 02:33:41 184,320 ----a-w c:\windows\system32\snmpsnap.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\sort.exe + 2008-04-14 02:34:22 26,112 ----a-w c:\windows\system32\sort.exe + 2004-08-05 12:00:00 1,744 ----a-w c:\windows\system32\sound.drv + 2008-04-14 02:34:22 7,680 ----a-w c:\windows\system32\spdwnwxp.exe + 2006-09-24 13:28:46 5,248 ----a-w c:\windows\system32\speedfan.sys - 2004-08-05 12:00:00 539,136 ----a-w c:\windows\system32\spider.exe + 2008-04-14 02:34:23 539,136 ----a-w c:\windows\system32\spider.exe - 2006-12-10 12:10:04 15,664 ------w c:\windows\system32\spmsg.dll + 2007-11-30 11:19:06 18,296 ------w c:\windows\system32\spmsg.dll - 2004-08-05 12:00:00 11,776 ----a-w c:\windows\system32\spnpinst.exe + 2008-04-13 18:34:24 11,264 ----a-w c:\windows\system32\spnpinst.exe + 2008-04-14 02:33:38 728,576 ----a-w c:\windows\system32\spool\drivers\w32x86\3\ps5ui.dll + 2008-04-14 02:33:38 543,232 ----a-w c:\windows\system32\spool\drivers\w32x86\3\pscript5.dll + 2006-08-14 08:29:54 249,856 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UiSupport.dll + 2006-08-22 17:11:44 18,944 ----a-w c:\windows\system32\spool\drivers\w32x86\3\UiSupportRes.dll + 2006-08-11 11:36:38 622,592 ----a-w c:\windows\system32\spool\drivers\w32x86\3\ZnPdfUI.dll + 2006-08-22 17:11:34 77,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\ZnPdfUIRes.dll + 2006-08-14 15:19:04 397,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\znsprngraf.dll + 2006-08-14 15:19:06 83,968 ----a-w c:\windows\system32\spool\drivers\w32x86\3\znsprnui.dll + 2006-08-14 15:19:06 83,968 ----a-w c:\windows\system32\spool\drivers\w32x86\3\znsprnui.dll1 + 2006-08-22 17:11:46 61,440 ----a-w c:\windows\system32\spool\drivers\w32x86\3\znsprnuires.dll + 2006-08-14 15:19:04 397,824 ----a-w c:\windows\system32\spool\drivers\w32x86\znsprngraf.dll + 2006-08-14 15:19:06 83,968 ----a-w c:\windows\system32\spool\drivers\w32x86\znsprnui.dll - 2004-08-05 12:00:00 74,752 ----a-w c:\windows\system32\spoolss.dll + 2008-04-14 02:33:41 75,264 ----a-w c:\windows\system32\spoolss.dll - 2005-06-10 23:53:32 57,856 ----a-w c:\windows\system32\spoolsv.exe + 2008-04-14 02:34:23 57,856 ----a-w c:\windows\system32\spoolsv.exe - 2006-09-25 15:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe + 2007-08-10 07:18:14 26,488 ----a-w c:\windows\system32\spupdsvc.exe + 2008-04-14 02:34:23 20,992 ------w c:\windows\system32\spupdwxp.exe - 2004-08-05 12:00:00 442,368 ----a-w c:\windows\system32\sqlsrv32.dll + 2008-04-14 02:33:46 442,368 ----a-w c:\windows\system32\sqlsrv32.dll - 2004-08-05 12:00:00 180,800 ----a-w c:\windows\system32\sqlunirl.dll + 2008-04-14 02:33:46 180,800 ----a-w c:\windows\system32\sqlunirl.dll - 2004-08-05 12:00:00 67,584 ----a-w c:\windows\system32\srclient.dll + 2008-04-14 02:33:46 67,584 ----a-w c:\windows\system32\srclient.dll - 2004-08-05 12:00:00 241,664 ----a-w c:\windows\system32\srrstr.dll + 2008-04-14 02:33:46 241,664 ----a-w c:\windows\system32\srrstr.dll - 2004-08-05 12:00:00 171,008 ----a-w c:\windows\system32\srsvc.dll + 2008-04-14 02:33:46 171,520 ----a-w c:\windows\system32\srsvc.dll - 2004-12-07 19:34:00 96,768 ----a-w c:\windows\system32\srvsvc.dll + 2008-04-14 02:33:46 96,768 ----a-w c:\windows\system32\srvsvc.dll - 2004-08-05 12:00:00 708,608 ----a-w c:\windows\system32\ss3dfo.scr + 2008-04-14 02:34:32 708,608 ----a-w c:\windows\system32\ss3dfo.scr - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\system32\ssbezier.scr + 2008-04-14 02:34:32 19,968 ----a-w c:\windows\system32\ssbezier.scr - 2004-08-05 12:00:00 34,816 ----a-w c:\windows\system32\ssdpapi.dll + 2008-04-14 02:33:46 34,816 ----a-w c:\windows\system32\ssdpapi.dll - 2004-08-05 12:00:00 71,680 ----a-w c:\windows\system32\ssdpsrv.dll + 2008-04-14 02:33:46 71,680 ----a-w c:\windows\system32\ssdpsrv.dll - 2004-08-05 12:00:00 393,216 ----a-w c:\windows\system32\ssflwbox.scr + 2008-04-14 02:34:32 393,216 ----a-w c:\windows\system32\ssflwbox.scr - 2007-08-15 22:33:06 200,704 ----a-w c:\windows\system32\ssldivx.dll + 2008-07-23 16:48:40 200,704 ----a-w c:\windows\system32\ssldivx.dll - 2004-08-05 12:00:00 20,992 ----a-w c:\windows\system32\ssmarque.scr + 2008-04-14 02:34:33 20,992 ----a-w c:\windows\system32\ssmarque.scr - 2004-08-05 12:00:00 47,104 ----a-w c:\windows\system32\ssmypics.scr + 2008-04-14 02:34:33 47,104 ----a-w c:\windows\system32\ssmypics.scr - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\ssmyst.scr + 2008-04-14 02:34:33 18,944 ----a-w c:\windows\system32\ssmyst.scr - 2004-08-05 12:00:00 610,304 ----a-w c:\windows\system32\sspipes.scr + 2008-04-14 02:34:33 610,304 ----a-w c:\windows\system32\sspipes.scr - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\ssstars.scr + 2008-04-14 02:34:33 14,336 ----a-w c:\windows\system32\ssstars.scr - 2004-08-05 12:00:00 684,032 ----a-w c:\windows\system32\sstext3d.scr + 2008-04-14 02:34:33 684,032 ----a-w c:\windows\system32\sstext3d.scr - 2004-08-05 12:00:00 54,272 ----a-w c:\windows\system32\stclient.dll + 2008-04-14 02:33:46 59,392 ----a-w c:\windows\system32\stclient.dll - 2004-08-05 12:00:00 68,096 ----a-w c:\windows\system32\sti.dll + 2008-04-14 02:33:46 68,608 ----a-w c:\windows\system32\sti.dll - 2004-08-05 12:00:00 138,240 ----a-w c:\windows\system32\sti_ci.dll + 2008-04-14 02:33:46 138,240 ----a-w c:\windows\system32\sti_ci.dll - 2004-08-05 12:00:00 14,848 ----a-w c:\windows\system32\stimon.exe + 2008-04-14 02:34:23 14,848 ----a-w c:\windows\system32\stimon.exe - 2004-08-05 12:00:00 122,368 ----a-w c:\windows\system32\stobject.dll + 2008-04-14 02:33:46 122,368 ----a-w c:\windows\system32\stobject.dll - 2004-08-04 00:54:44 76,800 ----a-w c:\windows\system32\storprop.dll + 2008-04-14 02:33:46 76,800 ----a-w c:\windows\system32\storprop.dll - 2006-08-24 12:19:40 246,814 ----a-w c:\windows\system32\strmdll.dll + 2008-04-14 02:33:46 246,814 ----a-w c:\windows\system32\strmdll.dll - 2004-08-05 12:00:00 75,776 ----a-w c:\windows\system32\strmfilt.dll + 2008-04-14 02:33:46 75,776 ----a-w c:\windows\system32\strmfilt.dll - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\svchost.exe + 2008-04-14 02:34:23 14,336 ----a-w c:\windows\system32\svchost.exe - 2006-10-20 01:38:44 716,800 ----a-w c:\windows\system32\sxs.dll + 2008-04-14 02:33:46 716,800 ----a-w c:\windows\system32\sxs.dll - 2004-08-05 12:00:00 57,856 ----a-w c:\windows\system32\synceng.dll + 2008-04-14 02:33:46 57,856 ----a-w c:\windows\system32\synceng.dll - 2004-08-05 12:00:00 197,120 ----a-w c:\windows\system32\syncui.dll + 2008-04-14 02:33:46 197,120 ----a-w c:\windows\system32\syncui.dll - 2004-08-05 12:00:00 107,520 ----a-w c:\windows\system32\sysocmgr.exe + 2008-04-14 02:34:24 107,520 ----a-w c:\windows\system32\sysocmgr.exe - 2004-08-05 12:00:00 1,005,056 ----a-w c:\windows\system32\syssetup.dll + 2008-04-14 02:33:46 1,013,248 ----a-w c:\windows\system32\syssetup.dll + 2004-08-05 12:00:00 3,360 ----a-w c:\windows\system32\system.drv - 2005-10-17 21:21:08 118,272 ----a-w c:\windows\system32\t2embed.dll + 2008-04-14 02:33:46 117,760 ----a-w c:\windows\system32\t2embed.dll - 2004-08-05 12:00:00 860,160 ----a-w c:\windows\system32\tapi3.dll + 2008-04-14 02:33:46 860,160 ----a-w c:\windows\system32\tapi3.dll - 2004-08-05 12:00:00 181,760 ----a-w c:\windows\system32\tapi32.dll + 2008-04-14 02:33:46 181,760 ----a-w c:\windows\system32\tapi32.dll - 2005-07-08 16:28:58 249,344 ----a-w c:\windows\system32\tapisrv.dll + 2008-04-14 02:33:46 249,856 ----a-w c:\windows\system32\tapisrv.dll - 2004-08-05 12:00:00 143,360 ----a-w c:\windows\system32\taskmgr.exe + 2008-04-14 02:34:25 143,360 ----a-w c:\windows\system32\taskmgr.exe - 2004-08-05 12:00:00 14,848 ----a-w c:\windows\system32\tcpmib.dll + 2008-04-14 02:33:46 14,848 ----a-w c:\windows\system32\tcpmib.dll - 2004-08-05 12:00:00 46,592 ----a-w c:\windows\system32\tcpmon.dll + 2008-04-14 02:33:46 46,592 ----a-w c:\windows\system32\tcpmon.dll - 2004-08-05 12:00:00 47,104 ----a-w c:\windows\system32\tcpmonui.dll + 2008-04-14 02:33:46 47,104 ----a-w c:\windows\system32\tcpmonui.dll - 2005-05-11 02:30:03 78,336 ----a-w c:\windows\system32\telnet.exe + 2008-04-14 02:34:25 78,336 ----a-w c:\windows\system32\telnet.exe - 2004-08-05 12:00:00 358,912 ----a-w c:\windows\system32\termmgr.dll + 2008-04-14 02:33:46 358,912 ----a-w c:\windows\system32\termmgr.dll - 2004-08-05 12:00:00 297,984 ----a-w c:\windows\system32\termsrv.dll + 2008-04-14 02:33:46 297,984 ----a-w c:\windows\system32\termsrv.dll - 2004-08-05 12:00:00 391,168 ----a-w c:\windows\system32\themeui.dll + 2008-04-14 02:33:46 391,168 ----a-w c:\windows\system32\themeui.dll + 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\timer.drv - 2004-08-05 12:00:00 347,136 ----a-w c:\windows\system32\tourstart.exe + 2008-04-14 02:34:25 347,136 ----a-w c:\windows\system32\tourstart.exe - 2004-08-05 12:00:00 13,312 ----a-w c:\windows\system32\tracert.exe + 2008-04-14 02:34:25 13,312 ----a-w c:\windows\system32\tracert.exe - 2004-08-05 12:00:00 11,264 ----a-w c:\windows\system32\tree.com + 2008-04-14 02:34:31 12,800 ----a-w c:\windows\system32\tree.com - 2004-08-05 12:00:00 90,624 ----a-w c:\windows\system32\trkwks.dll + 2008-04-14 02:33:46 90,112 ----a-w c:\windows\system32\trkwks.dll - 2004-08-05 12:00:00 94,208 ----a-w c:\windows\system32\tscfgwmi.dll + 2008-04-14 02:33:46 94,208 ----a-w c:\windows\system32\tscfgwmi.dll - 2004-08-05 12:00:00 12,168 ----a-w c:\windows\system32\tsddd.dll + 2008-04-14 02:34:53 12,168 ----a-w c:\windows\system32\tsddd.dll + 2008-04-14 02:33:46 53,248 ------w c:\windows\system32\tsgqec.dll + 2008-04-14 02:33:46 50,688 ------w c:\windows\system32\tspkg.dll - 2004-08-05 12:00:00 44,032 ----a-w c:\windows\system32\twext.dll + 2008-04-14 02:33:47 57,856 ----a-w c:\windows\system32\twext.dll - 2005-07-26 04:40:00 101,376 ----a-w c:\windows\system32\txflog.dll + 2008-04-14 02:33:47 101,376 ----a-w c:\windows\system32\txflog.dll - 2007-07-18 12:42:22 60,416 ------w c:\windows\system32\tzchange.exe + 2008-04-14 02:34:25 60,416 ------w c:\windows\system32\tzchange.exe - 2004-08-05 12:00:00 25,600 ----a-w c:\windows\system32\udhisapi.dll + 2008-04-14 02:33:47 26,624 ----a-w c:\windows\system32\udhisapi.dll - 2004-08-05 12:00:00 311,808 ----a-w c:\windows\system32\ulib.dll + 2008-04-14 02:33:47 311,808 ----a-w c:\windows\system32\ulib.dll - 2004-08-05 12:00:00 36,864 ----a-w c:\windows\system32\umandlg.dll + 2008-04-14 02:33:47 36,864 ----a-w c:\windows\system32\umandlg.dll - 2005-08-23 03:39:36 124,928 ----a-w c:\windows\system32\umpnpmgr.dll + 2008-04-14 02:33:47 124,928 ----a-w c:\windows\system32\umpnpmgr.dll - 2004-08-05 12:00:00 78,848 ----a-w c:\windows\system32\unimdmat.dll + 2008-04-14 02:33:47 78,848 ----a-w c:\windows\system32\unimdmat.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\uniplat.dll + 2008-04-14 02:33:47 13,824 ----a-w c:\windows\system32\uniplat.dll - 2004-08-05 12:00:00 316,416 ----a-w c:\windows\system32\untfs.dll + 2008-04-14 02:33:47 316,416 ----a-w c:\windows\system32\untfs.dll - 2004-08-05 12:00:00 132,608 ----a-w c:\windows\system32\upnp.dll + 2008-04-14 02:33:47 133,632 ----a-w c:\windows\system32\upnp.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\upnpcont.exe + 2008-04-14 02:34:26 16,896 ----a-w c:\windows\system32\upnpcont.exe - 2007-02-05 20:19:06 185,344 ----a-w c:\windows\system32\upnphost.dll + 2008-04-14 02:33:48 186,368 ----a-w c:\windows\system32\upnphost.dll - 2004-08-05 12:00:00 240,128 ----a-w c:\windows\system32\upnpui.dll + 2008-04-14 02:33:48 240,128 ----a-w c:\windows\system32\upnpui.dll - 2004-08-05 12:00:00 18,432 ----a-w c:\windows\system32\ups.exe + 2008-04-14 02:34:26 18,432 ----a-w c:\windows\system32\ups.exe - 2007-08-20 09:59:31 105,984 ----a-w c:\windows\system32\url.dll + 2008-08-26 08:11:52 105,984 ----a-w c:\windows\system32\url.dll - 2007-08-20 09:59:31 1,152,000 ----a-w c:\windows\system32\urlmon.dll + 2008-08-26 08:11:53 1,159,680 ----a-w c:\windows\system32\urlmon.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\usbmon.dll + 2008-04-14 02:33:48 16,896 ----a-w c:\windows\system32\usbmon.dll - 2004-08-04 00:54:44 77,312 ----a-w c:\windows\system32\usbui.dll + 2008-04-14 02:33:48 77,312 ----a-w c:\windows\system32\usbui.dll - 2007-03-08 15:37:50 578,560 ----a-w c:\windows\system32\user32.dll + 2008-04-14 02:33:48 579,584 ----a-w c:\windows\system32\user32.dll - 2004-08-05 12:00:00 731,136 ----a-w c:\windows\system32\userenv.dll + 2008-04-14 02:33:48 734,720 ----a-w c:\windows\system32\userenv.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\userinit.exe + 2008-04-14 02:34:26 26,624 ----a-w c:\windows\system32\userinit.exe + 2008-04-13 16:44:16 17,920 ------w c:\windows\system32\usmt\cobramsg.dll - 2004-08-05 12:00:00 125,440 ----a-w c:\windows\system32\usmt\guitrn.dll + 2008-04-14 02:33:26 134,656 ----a-w c:\windows\system32\usmt\guitrn.dll + 2008-04-14 02:33:26 115,712 ------w c:\windows\system32\usmt\guitrna.dll - 2004-08-05 12:00:00 4,096 ----a-w c:\windows\system32\usmt\iconlib.dll + 2008-04-13 16:44:29 2,560 ----a-w c:\windows\system32\usmt\iconlib.dll - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\system32\usmt\log.dll + 2008-04-14 02:33:28 19,968 ----a-w c:\windows\system32\usmt\log.dll - 2004-08-05 12:00:00 201,216 ----a-w c:\windows\system32\usmt\migism.dll + 2008-04-14 02:33:29 274,432 ----a-w c:\windows\system32\usmt\migism.dll + 2008-04-14 02:33:29 261,120 ------w c:\windows\system32\usmt\migisma.dll - 2004-08-05 12:00:00 103,936 ----a-w c:\windows\system32\usmt\migload.exe + 2008-04-14 02:34:10 104,448 ----a-w c:\windows\system32\usmt\migload.exe - 2004-08-05 12:00:00 246,784 ----a-w c:\windows\system32\usmt\migwiz.exe + 2008-04-14 02:34:11 251,904 ----a-w c:\windows\system32\usmt\migwiz.exe + 2008-04-14 02:34:11 247,808 ------w c:\windows\system32\usmt\migwiza.exe - 2004-08-05 12:00:00 204,800 ----a-w c:\windows\system32\usmt\script.dll + 2008-04-14 02:33:40 217,600 ----a-w c:\windows\system32\usmt\script.dll + 2008-04-14 02:33:40 201,216 ------w c:\windows\system32\usmt\scripta.dll - 2004-08-05 12:00:00 169,472 ----a-w c:\windows\system32\usmt\sysmod.dll + 2008-04-14 02:33:46 193,536 ----a-w c:\windows\system32\usmt\sysmod.dll + 2008-04-14 02:33:46 173,568 ------w c:\windows\system32\usmt\sysmoda.dll - 2004-08-05 12:00:00 406,528 ----a-w c:\windows\system32\usp10.dll + 2008-04-14 02:33:48 406,016 ----a-w c:\windows\system32\usp10.dll - 2004-08-05 12:00:00 50,176 ----a-w c:\windows\system32\utilman.exe + 2008-04-14 02:34:26 50,176 ----a-w c:\windows\system32\utilman.exe - 2004-08-05 12:00:00 219,648 ----a-w c:\windows\system32\uxtheme.dll + 2008-04-14 02:33:48 219,648 ----a-w c:\windows\system32\uxtheme.dll - 2000-10-01 23:00:00 119,568 ----a-w c:\windows\system32\VB6FR.DLL + 2000-07-19 16:06:04 119,568 ------w c:\windows\system32\VB6FR.DLL - 2004-08-05 12:00:00 30,749 ----a-w c:\windows\system32\vbajet32.dll + 2008-04-14 02:33:48 30,749 ----a-w c:\windows\system32\vbajet32.dll - 2006-11-07 20:03:36 413,696 ----a-w c:\windows\system32\vbscript.dll + 2008-05-09 10:55:00 430,080 ----a-w c:\windows\system32\vbscript.dll - 2004-08-05 12:00:00 26,112 ----a-w c:\windows\system32\vdmdbg.dll + 2008-04-14 02:33:48 26,112 ----a-w c:\windows\system32\vdmdbg.dll - 2004-08-05 12:00:00 51,712 ----a-w c:\windows\system32\vdmredir.dll + 2008-04-14 02:33:48 51,712 ----a-w c:\windows\system32\vdmredir.dll + 1999-05-27 11:00:02 46,592 ----a-w c:\windows\system32\vdrcodec.dll - 2006-03-17 00:38:01 28,672 ------w c:\windows\system32\verclsid.exe + 2008-04-14 02:34:26 28,672 ------w c:\windows\system32\verclsid.exe - 2004-08-05 12:00:00 13,312 ----a-w c:\windows\system32\verifier.dll + 2008-04-14 02:33:48 26,624 ----a-w c:\windows\system32\verifier.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\version.dll + 2008-04-14 02:33:48 18,944 ----a-w c:\windows\system32\version.dll - 2004-08-03 22:54:44 54,784 ----a-w c:\windows\system32\vfwwdm32.dll + 2008-04-14 02:33:48 54,784 ----a-w c:\windows\system32\vfwwdm32.dll + 2004-08-05 12:00:00 2,176 ----a-w c:\windows\system32\vga.drv + 2006-05-11 17:21:00 626,688 ----a-w c:\windows\system32\vp7vfw.dll + 2008-07-09 07:05:10 83,432 ----a-w c:\windows\system32\vsdata.dll + 2008-07-09 07:05:22 394,952 ----a-w c:\windows\system32\vsdatant.sys + 2008-07-09 07:05:10 157,160 ----a-w c:\windows\system32\vsinit.dll + 2008-07-09 07:05:10 103,912 ----a-w c:\windows\system32\vsmonapi.dll + 2008-07-09 07:05:10 275,944 ----a-w c:\windows\system32\vspubapi.dll + 2008-07-09 07:05:10 71,144 ----a-w c:\windows\system32\vsregexp.dll - 2004-08-05 12:00:00 430,592 ----a-w c:\windows\system32\vssapi.dll + 2008-04-14 02:33:48 430,592 ----a-w c:\windows\system32\vssapi.dll - 2004-08-05 12:00:00 295,424 ----a-w c:\windows\system32\vssvc.exe + 2008-04-14 02:34:26 295,424 ----a-w c:\windows\system32\vssvc.exe + 2008-07-09 07:05:12 472,552 ----a-w c:\windows\system32\vsutil.dll + 2008-07-09 07:05:44 54,672 ----a-w c:\windows\system32\vsutil_loc040c.dll + 2008-07-09 07:05:12 46,568 ----a-w c:\windows\system32\vswmi.dll + 2008-07-09 07:05:12 99,816 ----a-w c:\windows\system32\vsxml.dll - 2004-08-05 12:00:00 177,664 ----a-w c:\windows\system32\w32time.dll + 2008-04-14 02:33:48 178,176 ----a-w c:\windows\system32\w32time.dll - 2004-08-05 12:00:00 15,872 ----a-w c:\windows\system32\w3ssl.dll + 2008-04-14 02:33:48 15,872 ----a-w c:\windows\system32\w3ssl.dll + 2002-11-27 11:12:22 2,272 ----a-w c:\windows\system32\W95INF16.DLL - 2004-08-05 12:00:00 17,664 ----a-w c:\windows\system32\watchdog.sys + 2008-04-13 18:44:59 17,664 ----a-w c:\windows\system32\watchdog.sys - 2004-08-05 12:00:00 208,896 ----a-w c:\windows\system32\wavemsp.dll + 2008-04-14 02:33:48 215,552 ----a-w c:\windows\system32\wavemsp.dll - 2004-08-05 12:00:00 1,352,704 ----a-w c:\windows\system32\wbem\cimwin32.dll + 2008-04-14 02:33:20 1,359,360 ----a-w c:\windows\system32\wbem\cimwin32.dll - 2004-08-05 12:00:00 247,808 ----a-w c:\windows\system32\wbem\esscli.dll + 2008-04-14 02:33:24 247,808 ----a-w c:\windows\system32\wbem\esscli.dll - 2004-08-05 12:00:00 22,016 ----a-w c:\windows\system32\wbem\evntrprv.dll + 2008-04-14 02:33:24 21,504 ----a-w c:\windows\system32\wbem\evntrprv.dll - 2004-08-05 12:00:00 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll + 2008-04-14 02:33:24 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll - 2004-08-05 12:00:00 185,856 ----a-w c:\windows\system32\wbem\framedyn.dll + 2008-04-14 02:33:25 185,344 ----a-w c:\windows\system32\wbem\framedyn.dll - 2004-08-05 12:00:00 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll + 2008-04-14 02:33:28 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\wbem\mofcomp.exe + 2008-04-14 02:34:11 16,896 ----a-w c:\windows\system32\wbem\mofcomp.exe - 2004-08-05 12:00:00 124,928 ----a-w c:\windows\system32\wbem\mofd.dll + 2008-04-14 02:33:30 124,928 ----a-w c:\windows\system32\wbem\mofd.dll - 2004-08-05 12:00:00 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll + 2008-04-14 02:33:34 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll - 2004-08-05 12:00:00 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll + 2008-04-14 02:33:36 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll - 2004-08-05 12:00:00 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll + 2008-04-14 02:33:38 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll - 2004-08-05 12:00:00 177,152 ----a-w c:\windows\system32\wbem\repdrvfs.dll + 2008-04-14 02:33:39 178,176 ----a-w c:\windows\system32\wbem\repdrvfs.dll - 2004-08-05 12:00:00 36,864 ----a-w c:\windows\system32\wbem\scrcons.exe + 2008-04-14 02:34:20 36,352 ----a-w c:\windows\system32\wbem\scrcons.exe - 2004-08-05 12:00:00 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll + 2008-04-14 02:33:46 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll - 2004-08-05 12:00:00 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll + 2008-04-14 02:33:48 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll - 2004-08-05 12:00:00 201,216 ----a-w c:\windows\system32\wbem\wbemcntl.dll + 2008-04-14 02:33:48 201,216 ----a-w c:\windows\system32\wbem\wbemcntl.dll - 2004-08-05 12:00:00 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll + 2008-04-14 02:33:48 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll - 2004-08-05 12:00:00 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll + 2008-04-14 02:33:48 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll - 2004-08-05 12:00:00 530,944 ----a-w c:\windows\system32\wbem\wbemcore.dll + 2008-04-14 02:33:48 531,456 ----a-w c:\windows\system32\wbem\wbemcore.dll - 2004-08-05 12:00:00 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll + 2008-04-14 02:33:48 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll - 2004-08-05 12:00:00 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll + 2008-04-14 02:33:48 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll - 2004-08-05 12:00:00 44,544 ----a-w c:\windows\system32\wbem\wbemperf.dll + 2008-04-14 02:33:48 44,544 ----a-w c:\windows\system32\wbem\wbemperf.dll - 2004-08-05 12:00:00 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll + 2008-04-14 02:33:48 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll - 2004-08-05 12:00:00 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll + 2008-04-14 02:33:48 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll - 2004-08-05 12:00:00 119,808 ----a-w c:\windows\system32\wbem\wbemtest.exe + 2008-04-14 02:34:26 119,808 ----a-w c:\windows\system32\wbem\wbemtest.exe - 2004-08-05 12:00:00 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll + 2008-04-14 02:33:48 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll - 2004-08-05 12:00:00 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe + 2008-04-14 02:34:28 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe - 2004-08-05 12:00:00 7,680 ----a-w c:\windows\system32\wbem\wmiapres.dll + 2008-04-14 01:59:39 7,680 ----a-w c:\windows\system32\wbem\wmiapres.dll - 2004-08-05 12:00:00 89,088 ----a-w c:\windows\system32\wbem\wmiaprpl.dll + 2008-04-14 02:33:48 88,576 ----a-w c:\windows\system32\wbem\wmiaprpl.dll - 2004-08-05 12:00:00 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe + 2008-04-14 02:34:28 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe - 2004-08-05 12:00:00 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll + 2008-04-14 02:33:48 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll - 2004-08-05 12:00:00 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll + 2008-04-14 02:33:48 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll - 2004-08-05 12:00:00 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll + 2008-04-14 02:33:48 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll - 2004-08-05 12:00:00 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll + 2008-04-14 02:33:48 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll - 2004-08-05 12:00:00 62,464 ----a-w c:\windows\system32\wbem\wmipiprt.dll + 2008-04-14 02:33:48 61,952 ----a-w c:\windows\system32\wbem\wmipiprt.dll - 2004-08-05 12:00:00 62,976 ----a-w c:\windows\system32\wbem\wmipjobj.dll + 2008-04-14 02:33:48 62,464 ----a-w c:\windows\system32\wbem\wmipjobj.dll - 2004-08-05 12:00:00 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll + 2008-04-14 02:33:48 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll - 2004-08-05 12:00:00 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll + 2008-04-14 02:33:48 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll - 2004-08-05 12:00:00 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe + 2008-04-14 02:34:28 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe - 2004-08-05 12:00:00 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll + 2008-04-14 02:33:48 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll - 2004-08-05 12:00:00 145,408 ----a-w c:\windows\system32\wbem\wmisvc.dll + 2008-04-14 02:33:48 145,408 ----a-w c:\windows\system32\wbem\wmisvc.dll - 2004-08-05 12:00:00 99,328 ----a-w c:\windows\system32\wbem\wmiutils.dll + 2008-04-14 02:33:48 99,328 ----a-w c:\windows\system32\wbem\wmiutils.dll - 2006-03-24 04:37:52 49,152 ----a-w c:\windows\system32\wdigest.dll + 2008-04-14 02:33:48 49,152 ----a-w c:\windows\system32\wdigest.dll + 2008-04-14 02:34:34 23,552 ----a-w c:\windows\system32\wdmaud.drv - 2007-08-20 09:59:31 232,960 ----a-w c:\windows\system32\webcheck.dll + 2008-08-26 08:11:53 233,472 ----a-w c:\windows\system32\webcheck.dll - 2006-01-04 03:35:11 68,096 ----a-w c:\windows\system32\webclnt.dll + 2008-04-14 02:33:48 68,096 ----a-w c:\windows\system32\webclnt.dll - 2004-08-05 12:00:00 136,192 ----a-w c:\windows\system32\webvw.dll + 2008-04-14 02:33:48 136,192 ----a-w c:\windows\system32\webvw.dll - 2004-08-05 12:00:00 66,560 ----a-w c:\windows\system32\wextract.exe + 2008-04-14 02:34:26 66,560 ----a-w c:\windows\system32\wextract.exe + 2004-08-05 12:00:00 13,600 ----a-w c:\windows\system32\wfwnet.drv - 2004-08-05 12:00:00 438,784 ----a-w c:\windows\system32\wiaacmgr.exe + 2008-04-14 02:34:27 438,784 ----a-w c:\windows\system32\wiaacmgr.exe - 2004-08-05 12:00:00 465,920 ----a-w c:\windows\system32\wiadefui.dll + 2008-04-14 02:33:48 465,920 ----a-w c:\windows\system32\wiadefui.dll - 2004-08-05 12:00:00 124,928 ----a-w c:\windows\system32\wiadss.dll + 2008-04-14 02:33:48 124,928 ----a-w c:\windows\system32\wiadss.dll - 2004-08-05 12:00:00 75,776 ----a-w c:\windows\system32\wiascr.dll + 2008-04-14 02:33:48 75,776 ----a-w c:\windows\system32\wiascr.dll - 2006-12-19 18:17:50 334,336 ----a-w c:\windows\system32\wiaservc.dll + 2008-04-14 02:33:48 334,336 ----a-w c:\windows\system32\wiaservc.dll - 2004-08-05 12:00:00 594,432 ----a-w c:\windows\system32\wiashext.dll + 2008-04-14 02:33:48 594,432 ----a-w c:\windows\system32\wiashext.dll - 2004-08-05 12:00:00 111,104 ----a-w c:\windows\system32\wiavideo.dll + 2008-04-14 02:33:48 111,104 ----a-w c:\windows\system32\wiavideo.dll - 2007-03-08 15:33:58 1,843,712 ----a-w c:\windows\system32\win32k.sys + 2008-09-15 15:26:07 1,846,528 ----a-w c:\windows\system32\win32k.sys - 2004-08-05 12:00:00 102,400 ----a-w c:\windows\system32\win32spl.dll + 2008-04-14 02:33:48 102,912 ----a-w c:\windows\system32\win32spl.dll - 2004-08-05 12:00:00 938,496 ----a-w c:\windows\system32\winbrand.dll + 2008-04-14 01:58:13 1,647,616 ----a-w c:\windows\system32\winbrand.dll + 2008-04-14 02:33:48 712,704 ------w c:\windows\system32\windowscodecs.dll + 2008-04-14 02:33:48 346,112 ------w c:\windows\system32\windowscodecsext.dll - 2006-10-17 11:05:58 206,336 ------w c:\windows\system32\WinFXDocObj.exe + 2007-08-13 17:45:16 206,336 ----a-w c:\windows\system32\WinFXDocObj.exe + 1994-09-20 22:00:00 6,736 ----a-w c:\windows\system32\WINGDIB.DRV - 2004-08-05 12:00:00 351,232 ----a-w c:\windows\system32\winhttp.dll + 2008-04-14 02:33:48 354,304 ----a-w c:\windows\system32\winhttp.dll - 2007-08-20 09:59:31 824,832 ----a-w c:\windows\system32\wininet.dll + 2008-08-26 08:11:54 826,368 ----a-w c:\windows\system32\wininet.dll - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\winipsec.dll + 2008-04-14 02:33:48 32,256 ----a-w c:\windows\system32\winipsec.dll - 2004-08-05 12:00:00 506,368 ----a-w c:\windows\system32\winlogon.exe + 2008-04-14 02:34:28 512,000 ----a-w c:\windows\system32\winlogon.exe - 2004-08-05 12:00:00 180,736 ----a-w c:\windows\system32\winmm.dll + 2008-04-14 02:33:48 180,736 ----a-w c:\windows\system32\winmm.dll - 2004-08-05 12:00:00 773,632 ----a-w c:\windows\system32\winntbbu.dll + 2008-04-14 02:32:53 764,416 ----a-w c:\windows\system32\winntbbu.dll - 2004-08-05 12:00:00 16,896 ----a-w c:\windows\system32\winrnr.dll + 2008-04-14 02:33:48 16,896 ----a-w c:\windows\system32\winrnr.dll - 2004-08-05 12:00:00 100,352 ----a-w c:\windows\system32\winscard.dll + 2008-04-14 02:33:48 100,352 ----a-w c:\windows\system32\winscard.dll - 2004-08-05 12:00:00 17,408 ----a-w c:\windows\system32\winshfhc.dll + 2008-04-14 02:33:48 17,408 ----a-w c:\windows\system32\winshfhc.dll + 2004-08-05 12:00:00 2,864 ----a-w c:\windows\system32\winsock.dll + 2008-04-14 02:34:34 146,944 ----a-w c:\windows\system32\winspool.drv + 2004-08-05 12:00:00 2,112 ----a-w c:\windows\system32\winspool.exe - 2007-03-17 13:44:47 293,376 ----a-w c:\windows\system32\winsrv.dll + 2008-04-14 02:33:48 293,888 ----a-w c:\windows\system32\winsrv.dll - 2004-08-05 12:00:00 53,760 ----a-w c:\windows\system32\winsta.dll + 2008-04-14 02:33:48 53,760 ----a-w c:\windows\system32\winsta.dll - 2004-08-05 12:00:00 176,640 ----a-w c:\windows\system32\wintrust.dll + 2008-04-14 02:33:48 176,640 ----a-w c:\windows\system32\wintrust.dll - 2004-08-05 12:00:00 5,632 ----a-w c:\windows\system32\winver.exe + 2008-04-14 02:34:28 5,632 ----a-w c:\windows\system32\winver.exe - 2006-08-17 12:29:49 132,096 ----a-w c:\windows\system32\wkssvc.dll + 2008-04-14 02:33:48 132,096 ----a-w c:\windows\system32\wkssvc.dll + 2008-04-14 02:33:48 69,120 ------w c:\windows\system32\wlanapi.dll - 2004-08-05 12:00:00 172,544 ----a-w c:\windows\system32\wldap32.dll + 2008-04-14 02:33:48 172,544 ----a-w c:\windows\system32\wldap32.dll - 2004-08-05 12:00:00 94,208 ----a-w c:\windows\system32\wlnotify.dll + 2008-04-14 02:33:48 94,208 ----a-w c:\windows\system32\wlnotify.dll - 2006-10-18 19:47:18 222,208 ----a-w c:\windows\system32\wmasf.dll + 2007-10-25 08:28:30 222,720 ----a-w c:\windows\system32\wmasf.dll - 2004-08-05 12:00:00 5,632 ----a-w c:\windows\system32\wmi.dll + 2008-04-14 02:32:55 5,632 ----a-w c:\windows\system32\wmi.dll - 2006-10-18 19:47:20 295,936 ------w c:\windows\system32\wmpeffects.dll + 2008-06-24 17:12:58 295,936 ------w c:\windows\system32\wmpeffects.dll + 2008-04-14 02:33:48 276,992 ------w c:\windows\system32\wmphoto.dll - 2004-08-05 12:00:00 115,200 ----a-w c:\windows\system32\wmsdmoe.dll + 2008-04-14 02:33:48 115,200 ----a-w c:\windows\system32\wmsdmoe.dll - 2004-08-05 12:00:00 303,616 ----a-w c:\windows\system32\wmstream.dll + 2008-04-14 02:33:49 303,616 ----a-w c:\windows\system32\wmstream.dll + 1999-09-10 10:06:00 45,056 ----a-w c:\windows\system32\WNASPI32.DLL - 2004-08-05 12:00:00 265,216 ----a-w c:\windows\system32\wow32.dll + 2008-04-14 02:33:49 265,216 ----a-w c:\windows\system32\wow32.dll + 2004-08-05 12:00:00 2,736 ----a-w c:\windows\system32\wowdeb.exe - 2004-08-05 12:00:00 32,256 ----a-w c:\windows\system32\wpabaln.exe + 2008-04-14 02:34:29 32,256 ----a-w c:\windows\system32\wpabaln.exe - 2004-08-05 12:00:00 32,768 ----a-w c:\windows\system32\wpnpinst.exe + 2008-04-14 02:34:29 11,776 ----a-w c:\windows\system32\wpnpinst.exe - 2004-08-05 12:00:00 82,944 ----a-w c:\windows\system32\ws2_32.dll + 2008-04-14 02:33:49 82,432 ----a-w c:\windows\system32\ws2_32.dll - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\system32\ws2help.dll + 2008-04-14 02:33:49 19,968 ----a-w c:\windows\system32\ws2help.dll - 2004-08-05 12:00:00 13,824 ----a-w c:\windows\system32\wscntfy.exe + 2008-04-14 02:34:29 13,824 ----a-w c:\windows\system32\wscntfy.exe - 2004-08-05 12:00:00 114,688 ----a-w c:\windows\system32\wscript.exe + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\system32\wscript.exe - 2004-08-05 12:00:00 81,408 ----a-w c:\windows\system32\wscsvc.dll + 2008-04-14 02:33:50 80,896 ----a-w c:\windows\system32\wscsvc.dll - 2004-08-05 12:00:00 108,032 ----a-w c:\windows\system32\wshbth.dll + 2008-04-14 02:33:50 108,032 ----a-w c:\windows\system32\wshbth.dll - 2004-08-05 12:00:00 28,672 ----a-w c:\windows\system32\wshcon.dll + 2008-04-14 02:33:50 36,864 ----a-w c:\windows\system32\wshcon.dll - 2004-08-05 12:00:00 65,536 ----a-w c:\windows\system32\wshext.dll + 2008-05-09 10:55:00 90,112 ----a-w c:\windows\system32\wshext.dll - 2004-08-05 12:00:00 14,336 ----a-w c:\windows\system32\wship6.dll + 2008-04-14 02:33:50 14,336 ----a-w c:\windows\system32\wship6.dll - 2004-08-05 12:00:00 11,776 ----a-w c:\windows\system32\WshRm.dll + 2008-04-14 02:33:50 11,264 ----a-w c:\windows\system32\wshrm.dll - 2004-08-05 12:00:00 19,968 ----a-w c:\windows\system32\wshtcpip.dll + 2008-04-14 02:33:50 19,456 ----a-w c:\windows\system32\wshtcpip.dll - 2004-08-05 12:00:00 42,496 ----a-w c:\windows\system32\wsnmp32.dll + 2008-04-14 02:33:50 41,984 ----a-w c:\windows\system32\wsnmp32.dll - 2004-08-05 12:00:00 25,088 ----a-w c:\windows\system32\wsock32.dll + 2008-04-14 02:33:50 25,088 ----a-w c:\windows\system32\wsock32.dll - 2004-08-05 12:00:00 51,200 ----a-w c:\windows\system32\wstdecod.dll + 2008-04-14 02:33:50 51,200 ----a-w c:\windows\system32\wstdecod.dll - 2004-08-05 12:00:00 18,432 ----a-w c:\windows\system32\wtsapi32.dll + 2008-04-14 02:33:50 18,432 ----a-w c:\windows\system32\wtsapi32.dll - 2004-08-05 12:00:00 6,656 ----a-w c:\windows\system32\wuauserv.dll + 2008-04-14 02:33:50 6,656 ----a-w c:\windows\system32\wuauserv.dll + 2006-05-20 14:16:00 1,184,984 ----a-w c:\windows\system32\wvc1dmod.dll - 2004-08-05 12:00:00 378,880 ----a-w c:\windows\system32\wzcdlg.dll + 2008-04-14 02:33:51 384,000 ----a-w c:\windows\system32\wzcdlg.dll - 2004-08-05 12:00:00 51,712 ----a-w c:\windows\system32\wzcsapi.dll + 2008-04-14 02:33:51 52,736 ----a-w c:\windows\system32\wzcsapi.dll - 2004-08-05 12:00:00 359,936 ----a-w c:\windows\system32\wzcsvc.dll + 2008-04-14 02:33:52 483,840 ----a-w c:\windows\system32\wzcsvc.dll - 2004-08-05 12:00:00 91,648 ----a-w c:\windows\system32\xactsrv.dll + 2008-04-14 02:33:52 91,648 ----a-w c:\windows\system32\xactsrv.dll - 2004-08-05 12:00:00 30,720 ----a-w c:\windows\system32\xcopy.exe + 2008-04-14 02:34:29 30,720 ----a-w c:\windows\system32\xcopy.exe - 2006-07-14 15:51:51 121,856 ------w c:\windows\system32\xmllite.dll + 2008-04-14 02:33:52 121,856 ----a-w c:\windows\system32\xmllite.dll - 2004-08-05 12:00:00 129,536 ----a-w c:\windows\system32\xmlprov.dll + 2008-04-14 02:33:52 129,024 ----a-w c:\windows\system32\xmlprov.dll - 2004-08-05 12:00:00 50,176 ----a-w c:\windows\system32\xmlprovi.dll + 2008-04-14 02:33:52 50,176 ----a-w c:\windows\system32\xmlprovi.dll - 2006-03-01 19:43:51 11,776 ----a-w c:\windows\system32\xolehlp.dll + 2008-04-14 02:33:52 11,776 ----a-w c:\windows\system32\xolehlp.dll - 2004-08-05 12:00:00 445,440 ----a-w c:\windows\system32\xpob2res.dll + 2008-04-13 18:40:32 445,440 ----a-w c:\windows\system32\xpob2res.dll - 2004-08-05 12:00:00 197,632 ----a-w c:\windows\system32\xpsp1res.dll + 2008-04-13 18:35:20 197,632 ----a-w c:\windows\system32\xpsp1res.dll - 2004-08-05 12:00:00 2,986,496 ----a-w c:\windows\system32\xpsp2res.dll + 2008-04-13 18:36:46 2,986,496 ----a-w c:\windows\system32\xpsp2res.dll - 2007-06-18 22:24:36 369,152 ----a-w c:\windows\system32\xpsp3res.dll + 2008-04-13 18:39:17 778,752 ----a-w c:\windows\system32\xpsp3res.dll + 2006-11-01 13:52:38 765,952 ----a-w c:\windows\system32\xvidcore.dll + 2006-11-01 13:54:30 180,224 ----a-w c:\windows\system32\xvidvfw.dll + 2004-01-25 17:18:44 70,656 ----a-w c:\windows\system32\yv12vfw.dll + 2006-08-10 13:59:36 1,064,960 ----a-w c:\windows\system32\ZDImage2pdf7.dll - 2004-08-05 12:00:00 340,480 ----a-w c:\windows\system32\zipfldr.dll + 2008-04-14 02:33:52 340,992 ----a-w c:\windows\system32\zipfldr.dll + 2008-07-09 07:05:12 83,432 ----a-w c:\windows\system32\zlcomm.dll + 2008-07-09 07:05:12 71,144 ----a-w c:\windows\system32\zlcommdb.dll + 2008-08-23 15:16:19 4,212 ---h--w c:\windows\system32\zllictbl.dat + 2006-08-11 11:56:28 278,528 ----a-w c:\windows\system32\ZnMacroUI.dll + 2006-08-22 17:11:38 32,768 ----a-w c:\windows\system32\ZnMacroUIRes.dll + 2008-07-09 07:05:06 370,208 ----a-w c:\windows\system32\ZoneLabs\av.dll + 2008-07-09 07:05:36 26,000 ----a-w c:\windows\system32\ZoneLabs\av_loc040c.dll + 2007-05-30 22:03:30 65,248 ----a-w c:\windows\system32\ZoneLabs\avsys\bases\aphish.dat + 2006-06-30 12:47:36 21,568 ----a-w c:\windows\system32\ZoneLabs\avsys\bases\avcmhk4.dll + 2007-05-30 22:03:30 1,628 ----a-w c:\windows\system32\ZoneLabs\avsys\bases\pdmkl.dat + 2007-05-30 22:03:16 77,824 ----a-w c:\windows\system32\ZoneLabs\avsys\CKAHComm.dll + 2007-05-30 22:03:16 110,592 ----a-w c:\windows\system32\ZoneLabs\avsys\CKAHrule.dll + 2007-05-30 22:03:16 331,776 ----a-w c:\windows\system32\ZoneLabs\avsys\CKAHUM.dll + 2007-05-30 22:03:16 38,400 ----a-w c:\windows\system32\ZoneLabs\avsys\FSSync.dll + 2006-09-19 21:12:14 208,960 ----a-w c:\windows\system32\ZoneLabs\avsys\inv.dll + 2007-12-03 12:53:58 282,624 ----a-w c:\windows\system32\ZoneLabs\avsys\kave.dll + 2006-12-19 16:13:52 1,093,632 ----a-w c:\windows\system32\ZoneLabs\avsys\libeay32.dll + 2007-05-30 22:03:20 548,864 ----a-w c:\windows\system32\ZoneLabs\avsys\msvcp80.dll + 2007-05-30 22:03:20 626,688 ----a-w c:\windows\system32\ZoneLabs\avsys\msvcr80.dll + 2007-05-30 22:03:18 184,320 ----a-w c:\windows\system32\ZoneLabs\avsys\prloader.dll + 2007-05-30 22:03:22 90,112 ----a-w c:\windows\system32\ZoneLabs\avsys\prremote.dll + 2007-12-03 12:53:58 139,264 ----a-w c:\windows\system32\ZoneLabs\avsys\ScanningProcess.exe + 2006-12-19 16:13:52 200,704 ----a-w c:\windows\system32\ZoneLabs\avsys\ssleay32.dll + 2008-07-09 07:05:06 99,816 ----a-w c:\windows\system32\ZoneLabs\camupd.dll + 2008-07-09 07:05:36 17,808 ----a-w c:\windows\system32\ZoneLabs\camupd_loc040c.dll + 2004-01-30 10:35:08 813,568 ----a-w c:\windows\system32\ZoneLabs\dbghelp.dll + 2008-07-09 07:05:08 128,480 ----a-w c:\windows\system32\ZoneLabs\fbl.dll + 2008-07-09 07:05:08 38,376 ----a-w c:\windows\system32\ZoneLabs\featuremap.dll + 2008-07-09 07:05:08 321,016 ----a-w c:\windows\system32\ZoneLabs\imsecure.dll + 2008-07-09 07:05:42 26,000 ----a-w c:\windows\system32\ZoneLabs\imsecure_loc040c.dll + 2008-07-09 07:05:38 288,144 ----a-w c:\windows\system32\ZoneLabs\lib\ConfigWizard_loc040c.zip.dll + 2008-07-09 07:05:42 152,976 ----a-w c:\windows\system32\ZoneLabs\lib\LicenseUI_loc040c.zip.dll + 2008-07-09 07:05:24 26,000 ----a-w c:\windows\system32\ZoneLabs\lib\zlsvc.zip.dll + 2008-07-09 07:05:24 1,361,296 ----a-w c:\windows\system32\ZoneLabs\lib\zpy.zip.dll + 2008-07-09 07:05:24 71,056 ----a-w c:\windows\system32\ZoneLabs\lib\zui.zip.dll + 2008-07-09 07:06:26 30,184 ----a-w c:\windows\system32\ZoneLabs\plugins\rpc_server\rpc_server.dll + 2008-07-09 07:06:26 30,216 ----a-w c:\windows\system32\ZoneLabs\plugins\vsmon_plugin\vsmon_plugin.dll + 2008-02-27 01:10:26 714,208 ----a-w c:\windows\system32\ZoneLabs\qrbase.dll + 2008-02-27 01:10:28 792,032 ----a-w c:\windows\system32\ZoneLabs\qrsrecl.dll + 2008-07-09 07:05:08 173,544 ----a-w c:\windows\system32\ZoneLabs\scheduler.dll + 2008-07-09 07:05:44 17,808 ----a-w c:\windows\system32\ZoneLabs\scheduler_loc040c.dll + 2008-01-21 06:34:36 7,603,688 ----a-w c:\windows\system32\ZoneLabs\spyware.dat + 2008-02-27 01:10:32 1,504,736 ----a-w c:\windows\system32\ZoneLabs\srescan.dll + 2008-02-27 01:10:44 51,176 ----a-w c:\windows\system32\ZoneLabs\srescan.sys + 2008-07-09 07:05:10 456,168 ----a-w c:\windows\system32\ZoneLabs\ssleay32.dll + 2008-07-09 07:06:26 214,528 ----a-w c:\windows\system32\ZoneLabs\streamapi\httpblocker\httpblocker.dll + 2008-07-09 07:06:30 3,266,040 ----a-w c:\windows\system32\ZoneLabs\streamapi\imslsp\imslsp.dll + 2008-07-09 07:05:42 26,000 ----a-w c:\windows\system32\ZoneLabs\streamapi\imslsp\imslsp_loc040c.dll + 2006-09-04 18:59:14 503,875 ----a-w c:\windows\system32\ZoneLabs\upd_core.dll + 2007-10-11 14:50:32 832,984 ----a-w c:\windows\system32\ZoneLabs\updating.dll + 2008-07-09 07:05:18 144,936 ----a-w c:\windows\system32\ZoneLabs\updclient.exe + 2008-07-09 07:05:44 75,152 ----a-w c:\windows\system32\ZoneLabs\updClient_loc040c.dll + 2007-01-11 15:31:06 286,787 ----a-w c:\windows\system32\ZoneLabs\updtrsdk.dll + 2008-07-09 07:05:10 108,008 ----a-w c:\windows\system32\ZoneLabs\vsavpro.dll + 2008-07-09 07:05:10 83,432 ----a-w c:\windows\system32\ZoneLabs\vsdb.dll + 2008-07-09 07:05:44 17,808 ----a-w c:\windows\system32\ZoneLabs\vsdb_loc040c.dll + 2008-11-08 12:25:14 75,304 ----a-w c:\windows\system32\ZoneLabs\vsmon.exe + 2008-07-09 07:05:44 46,480 ----a-w c:\windows\system32\ZoneLabs\vsmon_loc040c.dll + 2008-07-09 07:05:10 2,029,032 ----a-w c:\windows\system32\ZoneLabs\vsmondll.dll + 2008-07-09 07:05:12 1,361,384 ----a-w c:\windows\system32\ZoneLabs\vsruledb.dll + 2008-07-09 07:05:44 198,032 ----a-w c:\windows\system32\ZoneLabs\vsruledb_loc040c.dll + 2008-07-09 07:05:12 239,080 ----a-w c:\windows\system32\ZoneLabs\vsvault.dll + 2008-07-09 07:05:44 17,808 ----a-w c:\windows\system32\ZoneLabs\vsvault_loc040c.dll + 2008-01-21 06:34:36 7,603,688 ----a-w c:\windows\system32\ZoneLabs\zlasdbup.dat + 2008-07-09 07:05:12 177,640 ----a-w c:\windows\system32\ZoneLabs\zlparser.dll + 2008-07-09 07:05:12 79,344 ----a-w c:\windows\system32\ZoneLabs\zlquarantine.dll + 2008-07-09 07:05:44 17,808 ----a-w c:\windows\system32\ZoneLabs\zlquarantine_loc040c.dll + 2008-07-09 07:05:14 382,440 ----a-w c:\windows\system32\ZoneLabs\zlsre.dll + 2008-07-09 07:05:44 21,904 ----a-w c:\windows\system32\ZoneLabs\zlsre_loc040c.dll + 2008-07-09 07:05:14 120,296 ----a-w c:\windows\system32\ZoneLabs\zlupdate.dll + 2008-07-09 07:05:16 1,086,952 ----a-w c:\windows\system32\zpeng24.dll - 2004-08-05 12:00:00 50,688 ----a-w c:\windows\twain_32.dll + 2008-04-14 02:33:47 50,688 ----a-w c:\windows\twain_32.dll + 1999-12-17 16:13:04 86,016 ----a-w c:\windows\unvise32.exe + 2000-08-31 07:00:00 49,152 ----a-w c:\windows\VFIND.exe - 2004-08-05 12:00:00 288,256 ----a-w c:\windows\winhlp32.exe + 2008-04-14 02:34:27 288,256 ----a-w c:\windows\winhlp32.exe + 2008-04-11 16:02:02 8,192 ----a-w c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll + 2008-05-18 16:44:39 1,230,336 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll + 2007-05-08 13:06:44 1,275,392 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll + 2008-05-18 16:44:39 82,432 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll - 2007-01-19 12:51:03 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll + 2008-04-14 02:30:54 74,802 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll - 2007-01-19 12:51:04 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll + 2008-04-14 02:30:54 995,383 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll - 2007-01-19 12:51:04 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll + 2008-04-14 02:30:54 1,011,774 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll - 2007-01-19 12:51:04 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll + 2008-04-14 02:30:54 401,462 ----a-w c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll + 2005-09-22 21:49:12 95,744 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll + 2007-10-23 23:47:56 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll + 2007-10-23 23:47:56 558,080 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll + 2007-10-23 23:47:56 635,904 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll + 2006-12-01 21:54:32 479,232 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll + 2006-12-01 21:54:34 548,864 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll + 2006-12-01 21:54:32 626,688 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll + 2008-04-14 02:30:54 1,054,208 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll + 2008-04-14 02:30:54 57,344 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll + 2008-04-14 02:30:54 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll + 2008-04-15 17:56:59 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll + 2008-04-14 02:30:53 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll - 2004-08-05 12:00:00 852,992 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll + 2008-04-14 02:30:54 852,992 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll - 2004-08-05 12:00:00 994,816 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll + 2008-04-14 02:30:54 994,816 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll - 2004-08-05 12:00:00 137,728 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3 d\rtcres.dll + 2008-04-14 02:05:53 137,728 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3 d\rtcres.dll - 2007-07-11 18:44:14 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2008-04-11 16:02:18 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll - 2007-07-11 18:44:14 114,176 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2008-04-11 16:02:18 113,664 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2000-08-31 07:00:00 68,096 ----a-w c:\windows\zip.exe + 2008-07-09 07:05:20 75,248 ----a-w c:\windows\zllsputility.exe + 2008-07-09 07:05:44 42,384 ----a-w c:\windows\zllsputility_loc040c.dll . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-11-08 266497] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-10-04 8491008] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-10-04 81920] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-04-17 196608] "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-04-13 69632] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-05-27 413696] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-11-08 919016] "SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 155648] "NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648] "nwiz"="nwiz.exe" [2007-10-04 c:\windows\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-09 110592] Event Planner Reminder.lnk - c:\windows\Installer\{5D0DF1BB-D82E-4FB2-B98E-4FDE42EF7EBB}\Shortcut_EventPlan_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe [2008-05-18 1718] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=sockspy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "vidc.MJPG"= M3JPEG32.dll "vidc.dmb1"= M3JPEG32.dll "vidc.jpeg"= M3JPEG32.dll "VIDC.PIXL"= pclepixl.dll "VIDC.PIM1"= pclepim1.dll "VIDC.NTN1"= NUVision.ax "VIDC.JDCT"= jl_jdct.drv "vidc.DIV3"= DivXc32.dll "vidc.DIV4"= DivXc32f.dll "msacm.divxa32"= DivXa32.acm [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] --a------ 2008-09-27 07:02 29744 c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail] --a------ 2008-07-24 13:22 243072 c:\program files\IncrediMail\bin\IncMail.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF4 Registry Controller] --a------ 2006-08-22 18:09 40960 c:\program files\ScanSoft\PDF Professional 4.0\RegistryController.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ScanSoft PDF Professional 4-reminder] --a------ 2006-04-20 12:45 1404928 c:\program files\ScanSoft\PDF Professional 4.0\Ereg\Ereg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2008-10-14 18:28 39408 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "FirewallOverride"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"= "f:\\Program Files\\eMule\\emule.exe"= "c:\\Program Files\\IncrediMail\\bin\\IMApp.exe"= "c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"= "c:\\Program Files\\NDrive\\NDrive Update Agent\\NDriveAgent.exe"= "c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager "c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager "c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service "57482:TCP"= 57482:TCP:Pando P2P TCP Listening Port "57482:UDP"= 57482:UDP:Pando P2P UDP Listening Port R1 sK9Ou0s;sK9Ou0s;c:\windows\system32\drivers\srosa2.sys [2008-11-08 7168] R3 NUVision;Pinnacle Fusion Video;c:\windows\system32\DRIVERS\nuvvid2.sys [2001-12-03 155264] R3 USBSTOR;Pilote de stockage de masse USB;c:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S2 AdobeManager;AdobeManager;c:\windows\system32\adobemanager.exe [ ] S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-09-27 29744] S3 Hifslhdcrma;Hifslhdcrma;c:\windows\system32\drivers\rmcast.sys [2008-05-08 203136] S3 JL2005C;Dual Mode Camera;c:\windows\system32\Drivers\jl2005c.sys [ ] S3 LVBulk;LVBulk Service;c:\windows\system32\DRIVERS\LVBulk.sys [2002-09-20 10382] S3 PID_0960_V;Logitech ClickSmart 420(PID_0960_V);c:\windows\system32\DRIVERS\LVVIMULB.SYS [2002-09-20 163328] S3 usbscan;Pilote de scanneur USB;c:\windows\system32\DRIVERS\usbscan.sys [2008-04-13 15104] . Contenu du dossier 'Tâches planifiées' 2008-08-29 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2008-11-08 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20] . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe HKCU-Run-jamtray - C:/Program Files/Jaman Player/jamtray.exe . ------- Examen supplémentaire ------- . FireFox -: Profile - c:\documents and settings\Windows XP\Application Data\Mozilla\Firefox\Profiles\58pdnj9t.default\ FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1039648&SearchSource=3&q= FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://forumodr.madstef.com/forums.php?chg=2 FF -: plugin - c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll FF -: plugin - c:\documents and settings\Windows XP\Application Data\Mozilla\Firefox\Profiles\58pdnj9t.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll FF -: plugin - c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll FF -: plugin - c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npunagi2.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npvirtools.dll FF -: plugin - c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-11-08 14:13:24 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe c:\windows\system32\nvsvc32.exe c:\windows\system32\rundll32.exe c:\program files\Hallmark\Hallmark Card Studio 2007 Deluxe\Planner\PLNRnote.exe c:\program files\Microsoft ActiveSync\rapimgr.exe . ************************************************************************** . Heure de fin: 2008-11-08 14:30:03 - La machine a redémarré ComboFix-quarantined-files.txt 2008-11-08 13:29:57 ComboFix2.txt 2007-10-19 05:59:27 Avant-CF: 29,314,752,512 octets libres Après-CF: 29,179,252,736 octets libres 6522 --- E O F --- 2008-11-01 06:24:04

Je n'ai plus accès à internet sur le PC ("délai d'attente dépassé"), je peux uniquement avec le portable. Le souci supplémentaire c'est qu'internet est devenu très très lent sur le portable depuis mes ennuis d'hier avec le PC (est-ce lié???). J'ai rebooté ma freebox, mais cela n'a eu aucun effet. Puis je télécharger combofix sur clé USB depuis le portable pour le transférer sur le PC fixe?? Merci encore de ton aide.

HijackTHis refusant de s'ouvrir, je ne peux même pas poster un rapport.... Que me conseillez-vous de faire? Merci+++

Bonjour, Depuis quelques jours, après le démarrage, mon ordi s'éteint puis se rallume à plusieurs reprises. Ce matin j'ai supprimé quelques programmes afin de faire du méange, et depuis plus rien ne fonctionne. Lorsque j'essaye d'ouvrir certains programmes j'ai le message "n'est pas une application win32 valide". Je n'arrive plus à me connecter sur internet, ni démarrer en mode sans échec, mon antivirus a disparu... Je ne sais plus quoi faire. Un grand merci d'avance pour votre aide.

Bonjour, Depuis quelques jours, après le démarrage, mon ordi s'éteint puis se rallume à plusieurs reprises. Ce matin j'ai supprimé quelques programmes afin de faire du méange, et depuis plus rien ne fonctionne. Lorsque j'essaye d'ouvrir certains programmes j'ai le message "n'est pas une application win32 valide". Je n'arrive plus à me connecter sur internet, ni démarrer en mode sans échec, mon antivirus a disparu... Je ne sais plus quoi faire. Un grand merci d'avance pour votre aide.

Encore et encore un énorme merci pour ton aide précieuse... Comme la dernière fois je suis allée rapporter mon infection sur le lien que tu m'as donné. Je vais me pencher plus efficacement sur "Comment se protéger des virus ".... Je te souhaite une excellente soirée A bientôt... peut-être...... Helgwen

bha j'savais pas !!! re-voici le rapport de F-Secure Blacklight parès la procédure avec Ashampoo : 09/08/06 18:29:09 [info]: BlackLight Engine 1.0.46 initialized 09/08/06 18:29:09 [info]: OS: 5.1 build 2600 (Service Pack 2) 09/08/06 18:29:09 [Note]: 7019 4 09/08/06 18:29:09 [Note]: 7005 0 09/08/06 18:29:16 [Note]: 7006 0 09/08/06 18:29:17 [Note]: 7011 1772 09/08/06 18:29:17 [Note]: 7026 0 09/08/06 18:29:17 [Note]: 7026 0 09/08/06 18:29:21 [Note]: FSRAW library version 1.7.1019 09/08/06 18:32:59 [Note]: 7007 0 Merci encore Helgwen

oui, j'ai effectivement installé des programmes : clean zip emule 7 zip loupe zip google toolbar web media player Voici le rapport de F-Secure Blacklight : 09/08/06 07:22:13 [info]: BlackLight Engine 1.0.46 initialized 09/08/06 07:22:13 [info]: OS: 5.1 build 2600 (Service Pack 2) 09/08/06 07:22:14 [Note]: 7019 4 09/08/06 07:22:14 [Note]: 7005 0 09/08/06 07:22:18 [Note]: 7006 0 09/08/06 07:22:18 [Note]: 7011 1792 09/08/06 07:22:19 [Note]: 7026 0 09/08/06 07:22:19 [Note]: 7026 0 09/08/06 07:22:19 [Note]: 7024 3 09/08/06 07:22:19 [info]: Hidden process: C:\windows\system32\ffqibsaldc.exe 09/08/06 07:22:19 [Note]: FSRAW library version 1.7.1019 09/08/06 07:23:02 [Note]: 4015 10016 09/08/06 07:23:02 [Note]: 4027 10016 11468800 09/08/06 07:23:02 [Note]: 4020 9575 65536 09/08/06 07:23:02 [Note]: 4018 9575 65536 09/08/06 07:23:03 [Note]: 4013 11775 09/08/06 07:23:03 [Note]: 4020 11445 1572864 09/08/06 07:23:03 [Note]: 4018 11445 1572864 09/08/06 07:23:03 [Note]: 4013 11775 09/08/06 07:23:03 [Note]: 4020 11445 1572864 09/08/06 07:23:03 [Note]: 4018 11445 1572864 09/08/06 07:23:03 [Note]: 4013 11752 09/08/06 07:23:03 [Note]: 4020 11434 9502720 09/08/06 07:23:03 [Note]: 4018 11434 9502720 09/08/06 07:23:03 [Note]: 4013 11752 09/08/06 07:23:03 [Note]: 4020 11434 9502720 09/08/06 07:23:03 [Note]: 4018 11434 9502720 09/08/06 07:29:52 [info]: Hidden file: c:\WINDOWS\Prefetch\FFQIBSALDC.EXE-2CCD562C.pf 09/08/06 07:29:52 [Note]: 10002 1 09/08/06 07:29:59 [info]: Hidden file: c:\WINDOWS\system32\ffqibsaldc_nav.dat 09/08/06 07:30:00 [Note]: 10002 1 09/08/06 07:30:00 [info]: Hidden file: c:\WINDOWS\system32\ffqibsaldc.dat 09/08/06 07:30:00 [Note]: 10002 1 09/08/06 07:30:00 [info]: Hidden file: C:\windows\system32\ffqibsaldc.exe 09/08/06 07:30:01 [Note]: 10002 1 09/08/06 07:30:01 [info]: Hidden file: c:\WINDOWS\system32\ffqibsaldc_navps.dat 09/08/06 07:30:01 [Note]: 10002 1 09/08/06 07:31:06 [Note]: 7007 0 Merci +++++ Helgwen PS : je pars bosser, je te lirais donc dés ce soir....

Bonsoir, Je reviens malheureusement vers toi car j'ai à nouveau les mêmes problèmes. Cela avait pourtant cessé pendant quelques jours après ton aide efficace. Mais voilà, c'est revenu.... Que faire??? Merci pour ton aide Helgwen

Un grand merci à toi d'avoir pris le temps de m'aider. Je vais aller sur les liens que tu m'as donné. MERCI A bientôt Helgwen

Je l'avais oublié celui-là !!! 08/27/06 17:11:29 [info]: BlackLight Engine 1.0.46 initialized 08/27/06 17:11:29 [info]: OS: 5.1 build 2600 (Service Pack 2) 08/27/06 17:11:29 [Note]: 7019 4 08/27/06 17:11:29 [Note]: 7005 0 08/27/06 17:11:32 [Note]: 7006 0 08/27/06 17:11:32 [Note]: 7011 1780 08/27/06 17:11:32 [Note]: 7026 0 08/27/06 17:11:33 [Note]: 7026 0 08/27/06 17:11:35 [Note]: FSRAW library version 1.7.1019 08/27/06 17:12:43 [Note]: 7007 0 Merci

Voilà c'est fait : Je n'ai pas trouvé, et donc pas supprimé ces fichiers : boytagr..dat boytagr._nav.dat boytagr._navps.dat et C:\Program Files\MaillSkinner --------------------------------------- Script clean par Malekal_morte - http://www.malekal.com --------------------------------------- Microsoft Windows XP [version 5.1.2600] Script execute en mode sans echec *** Suppression de fichiers sur C: *** Suppression des fichiers dans C:\WINDOWS\ *** Suppression des fichiers dans C:\WINDOWS\system32 C:\WINDOWS\system32\stera.job FOUND "C:\Program Files\BoontyGames\" FOUND "C:\Program Files\WinAntiSpyware 2006 Scanner\" FOUND "C:\Program Files\WinAntiVirus Pro 2006\" FOUND *** Suppression des clefs du registre effectuee.. ---------------------------------------- --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 15:06:31 27/08/2006 + Scan result: HKU\S-1-5-21-1202660629-484061587-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@advertising[1].txt -> TrackingCookie.Advertising : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@estat[1].txt -> TrackingCookie.Estat : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@as1.falkag[2].txt -> TrackingCookie.Falkag : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@hotlog[1].txt -> TrackingCookie.Hotlog : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@valueclick[2].txt -> TrackingCookie.Valueclick : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@weborama[1].txt -> TrackingCookie.Weborama : No action taken. C:\Documents and Settings\Windows XP\Cookies\windows xp@zedo[2].txt -> TrackingCookie.Zedo : No action taken. ::Report end ---------------------------------------------- -------------------- kaspersky -------------------- Sunday, August 27, 2006 4:24:04 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 27/08/2006 Kaspersky Anti-Virus database records: 205822 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ Scan Statistics Total number of scanned objects 72439 Number of viruses found 3 Number of infected objects 17 / 0 Number of suspicious objects 0 Duration of the scan process 01:00:34 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Windows XP\Application Data\Microsoft\Modèles\Normal.dot Object is locked skipped C:\Documents and Settings\Windows XP\Bureau\antivirus.doc Object is locked skipped C:\Documents and Settings\Windows XP\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbc2e.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbdam Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbdao Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbeam Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbeao Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbm Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbu2d.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbvm.cf1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\dbvmh.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\fii.cf1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\fiih.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\hp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\hpt2i.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\rpm.cf1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\rpm1m.cf1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\rpm1mh.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Google\Google Desktop\747546968df7\rpmh.ht1 Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\infected.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\Logs\Dfsr.log Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\Working\database_8CAC_C643_ACC6_2812\dfsr.db Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\Working\database_8CAC_C643_ACC6_2812\fsr.log Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\Working\database_8CAC_C643_ACC6_2812\fsrtmp.log Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Messenger\helgwen@hotmail.fr\SharingMetadata\Working\database_8CAC_C643_ACC6_2812\tmp.edb Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Windows Live Contacts\helgwen@hotmail.fr\real\members.stg Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Application Data\Microsoft\Windows Live Contacts\helgwen@hotmail.fr\shadow\members.stg Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Historique\History.IE5\MSHist012006082720060828\index.dat Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DF85F6.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DF886C.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DFA049.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DFABD.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DFC3D3.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DFC3EA.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~DFC930.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temp\~WRF0000.tmp Object is locked skipped C:\Documents and Settings\Windows XP\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Windows XP\Mes documents\Mes images\temp\FIL22714.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\Mes images\temp\FIL23892.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\Mes images\temp\FIL9119.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\photos et vidéos\a trier\FIL22714.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\photos et vidéos\a trier\FIL23892.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\photos et vidéos\a trier\FIL6745.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\Mes documents\photos et vidéos\a trier\FIL9119.JPG Infected: Exploit.Win32.MS04-028.gen skipped C:\Documents and Settings\Windows XP\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Windows XP\NTUSER.DAT.LOG Object is locked skipped C:\Program Files\Fichiers communs\Symantec Shared\SPPolicy.log Object is locked skipped C:\Program Files\Fichiers communs\Symantec Shared\SPStart.log Object is locked skipped C:\Program Files\Fichiers communs\Symantec Shared\SPStop.log Object is locked skipped C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped C:\Program Files\Norton AntiVirus\Quarantine\2CFD348D Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\59E45362.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\59EB275B.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5A121F30.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5A22711E.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5A7160C8.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5AC27A6E.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5B2B39FB.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\Program Files\Norton AntiVirus\Quarantine\5B4833DB.exe Infected: Backdoor.Win32.PoeBot.c skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{1ADD3B7C-891C-4370-8BC8-0622043CBDFC}\RP40\A0007195.exe Infected: Trojan-Downloader.Win32.Agent.alr skipped C:\System Volume Information\_restore{1ADD3B7C-891C-4370-8BC8-0622043CBDFC}\RP40\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed. --------------------------------- ----------------------------- Le contenu du fichier : C:\egd.txt ----------------------------- Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ccApp"="\"C:\\Program Files\\Fichiers communs\\Symantec Shared\\ccApp.exe\"" "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe" "Google Desktop Search"="\"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup" "eCarteBleue-LPV-P1"="\"C:\\Program Files\\e-Carte Bleue\\LA BANQUE POSTALE\\CVD VISA\\ECB.exe\" /dontopenmycards" "boytagr"="c:\\windows\\system32\\boytagr.exe boytagr" "Picasa Media Detector"="C:\\Program Files\\Picasa2\\PicasaMediaDetector.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS] "Installed"="1" ----------------------------------- --------------------- BFU v1.00.9 --------------------- Windows XP SP2 (WinNT 5.01.2600 SP2) Script started at 16:28:04, on 27/08/2006 Option Delete files to Recycle Bin: Yes Failed: DllUnregister C:\WINDOWS\system32\MSWBM32.DLL|1 (file not found) Failed: DllUnregister C:\Program Files\MailSkinner\OESkinner.dll|1 (file not found) Failed: FolderDelete C:\Program Files\dialpass (folder not found) Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found) Failed: FolderDelete C:\Program Files\egroup (folder not found) Failed: FolderDelete C:\Program Files\Instant Access (folder not found) Failed: FolderDelete C:\Program Files\MailSkinner (folder not found) Failed: FolderDelete C:\Program Files\InternetGameBox (folder not found) Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found) Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found) Failed: FolderDelete C:\WINDOWS\mslagent (folder not found) Failed: FolderDelete C:\WINDOWS\navmpc (folder not found) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DF3517.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DF85F6.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DF886C.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DFA049.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DFABD.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DFC3D3.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DFC3EA.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~DFC930.tmp (operation failed) Failed: FileDelete C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\~WRF0000.tmp (operation failed) Failed: FolderCreate C:\WINDOWS\system32\bfubackups (folder already exists) Script completed. ------------------------------- ------------------------------- Logfile of HijackThis v1.99.1 ------------------------------- Scan saved at 16:30:31, on 27/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\spider.exe C:\WINDOWS\system32\freecell.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\PROGRA~1\INCRED~1\bin\IncMail.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.madstef.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [eCarteBleue-LPV-P1] "C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe" /dontopenmycards O4 - HKLM\..\Run: [boytagr] c:\windows\system32\boytagr.exe boytagr O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [incrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1153904443500 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version= O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/...loadcontrol.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game12.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.gamenext.fr/online2/chuzzle/popcaploader_v6.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe

Voici le rapport : 08/27/06 12:42:36 [info]: BlackLight Engine 1.0.46 initialized 08/27/06 12:42:36 [info]: OS: 5.1 build 2600 (Service Pack 2) 08/27/06 12:42:36 [Note]: 7019 4 08/27/06 12:42:36 [Note]: 7005 0 08/27/06 12:42:44 [Note]: 7006 0 08/27/06 12:42:44 [Note]: 7011 1788 08/27/06 12:42:44 [Note]: 7026 0 08/27/06 12:42:44 [Note]: 7026 0 08/27/06 12:42:44 [Note]: 7024 3 08/27/06 12:42:44 [info]: Hidden process: C:\windows\system32\boytagr.exe 08/27/06 12:42:44 [Note]: FSRAW library version 1.7.1019 08/27/06 12:42:55 [Note]: 4013 2592 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2021 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2566 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2847 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2604 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2426 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2851 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2592 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2021 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2847 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2566 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2604 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2426 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:42:55 [Note]: 4013 2851 08/27/06 12:42:55 [Note]: 4020 12561 196608 08/27/06 12:42:55 [Note]: 4018 12561 196608 08/27/06 12:43:11 [Note]: 4013 41556 08/27/06 12:43:11 [Note]: 4020 17834 1310720 08/27/06 12:43:11 [Note]: 4020 17834 1310720 08/27/06 12:43:11 [Note]: 4018 17834 1310720 08/27/06 12:43:11 [Note]: 4013 41556 08/27/06 12:43:11 [Note]: 4020 17834 1310720 08/27/06 12:43:11 [Note]: 4018 17834 1310720 08/27/06 12:46:52 [info]: Hidden file: c:\WINDOWS\Prefetch\BOYTAGR.EXE-12A56E4D.pf 08/27/06 12:46:52 [Note]: 10002 1 08/27/06 12:47:00 [info]: Hidden file: c:\WINDOWS\system32\boytagr.dat 08/27/06 12:47:00 [Note]: 10002 1 08/27/06 12:47:01 [info]: Hidden file: C:\windows\system32\boytagr.exe 08/27/06 12:47:01 [Note]: 10002 1 08/27/06 12:47:01 [info]: Hidden file: c:\WINDOWS\system32\boytagr_nav.dat 08/27/06 12:47:01 [Note]: 10002 1 08/27/06 12:47:01 [info]: Hidden file: c:\WINDOWS\system32\boytagr_navps.dat 08/27/06 12:47:01 [Note]: 10002 1 08/27/06 12:51:20 [Note]: 7007 0

Bonjour et merci pour ton analyse. Mon souci en fait, c'est que j'ai sans cesse des fenêtres qui s'ouvrent et dont l'adresse commence par : "~http...". La plupart ce sont des fenetres d'antivirus tel system docteur.win... ou des fenetres de casino. Que dois-je faire ??? Merci

Voici un copier coller du rapport. Merci d'avance pour votre aide. Helgwen ************************************* Logfile of HijackThis v1.99.1 Scan saved at 11:22:08, on 27/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.madstef.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [eCarteBleue-LPV-P1] "C:\Program Files\e-Carte Bleue\LA BANQUE POSTALE\CVD VISA\ECB.exe" /dontopenmycards O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [incrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1153904443500 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version= O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/...loadcontrol.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe