also @ TechSpot: IBM's Watson conquers Jeopardy, cancer and now customer service

[A] Help! Infected with RootKit.ZeroAccess Virus

Discussion in 'Virus and Malware Removal' started by sjy, Mar 1, 2012.

Page 3 of 5

  1. sjy Newcomer, in training Posts: 58

    I'm getting dumber by the hour lol. Ok I copied the code into the text box and ran a "scan" this time. Here's what it spit out:

    OTL logfile created on: 3/6/2012 5:11:55 PM - Run
    OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
    Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
    Internet Explorer (Version = 8.0.6001.18702)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

    3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
    3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
    Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
    Drive C: | 292.97 Gb Total Space | 131.11 Gb Free Space | 44.75% Space Free | Partition Type: NTFS
    Drive D: | 303.19 Gb Total Space | 188.71 Gb Free Space | 62.24% Space Free | Partition Type: NTFS
    Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: REATOGO | User Name: SYSTEM
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
    Using ControlSet: ControlSet002

    ========== Win32 Services (SafeList) ==========

    SRV - File not found [Auto] -- -- (wscsvc)
    SRV - [2012/01/16 16:28:30 | 000,546,768 | ---- | M] (Threat Expert Ltd.) [Auto] -- C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
    SRV - [2012/01/13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
    SRV - [2012/01/11 16:18:14 | 001,117,624 | ---- | M] (PC Tools) [On_Demand] -- C:\Program Files\PC Tools Security\pctsSvc.exe -- (sdCoreService)
    SRV - [2012/01/11 14:56:12 | 000,402,336 | ---- | M] (PC Tools) [On_Demand] -- C:\Program Files\PC Tools Security\pctsAuxs.exe -- (sdAuxService)
    SRV - [2012/01/11 14:56:08 | 000,071,008 | ---- | M] (PC Tools) [On_Demand] -- C:\Program Files\PC Tools Security\TFEngine\TFService.exe -- (ThreatFire)
    SRV - [2011/04/05 07:26:34 | 000,045,056 | ---- | M] (Intuit) [Auto] -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService)
    SRV - [2011/01/27 16:13:50 | 000,226,624 | ---- | M] () [Auto] -- C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper)
    SRV - [2009/12/13 12:36:30 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
    SRV - [2009/11/06 14:24:52 | 000,195,176 | ---- | M] (NVIDIA) [Auto] -- C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe -- (UpdateCenterService)
    SRV - [2009/11/06 14:13:20 | 000,191,080 | ---- | M] (NVIDIA) [Auto] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
    SRV - [2009/08/18 01:25:12 | 000,678,912 | ---- | M] (Intuit, Inc.) [Disabled] -- C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe -- (QuickBooksDB20)
    SRV - [2009/08/18 01:25:12 | 000,678,912 | ---- | M] (Intuit, Inc.) [Auto] -- C:\Program Files\Intuit\QuickBooks 2007\QBDBMgrN.exe -- (QuickBooksDB17)
    SRV - [2009/07/23 20:10:38 | 000,061,440 | ---- | M] (Intuit Inc.) [On_Demand] -- C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService)
    SRV - [2009/03/27 23:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [Auto] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
    SRV - [2008/12/18 13:05:40 | 000,191,008 | ---- | M] () [Auto] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
    SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
    SRV - [2008/08/15 05:46:20 | 000,284,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4)
    SRV - [2007/03/15 14:48:26 | 000,535,807 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)
    SRV - [2005/04/27 15:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)


    ========== Driver Services (SafeList) ==========

    DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
    DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
    DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
    DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
    DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
    DRV - File not found [Kernel | System] -- -- (PCIDump)
    DRV - File not found [Kernel | System] -- -- (lbrtfdc)
    DRV - File not found [Kernel | System] -- -- (i2omgmt)
    DRV - File not found [Kernel | System] -- -- (Changer)
    DRV - File not found [Kernel | On_Demand] -- -- (catchme)
    DRV - File not found [Kernel | Boot] -- -- (ACPI)
    DRV - [2012/01/11 16:19:24 | 000,070,536 | ---- | M] (PC Tools) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pctplsg.sys -- (pctplsg)
    DRV - [2012/01/11 16:19:02 | 000,185,560 | ---- | M] (PC Tools) [Kernel | System] -- C:\WINDOWS\system32\drivers\PCTSD.sys -- (PCTSD)
    DRV - [2012/01/11 16:14:30 | 000,253,352 | ---- | M] (PC Tools) [Kernel | System] -- C:\WINDOWS\system32\drivers\pctgntdi.sys -- (pctgntdi)
    DRV - [2012/01/11 14:56:12 | 000,574,424 | --S- | M] (PC Tools) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\TfSysMon.sys -- (TFSysMon)
    DRV - [2012/01/11 14:56:12 | 000,054,328 | --S- | M] (PC Tools) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\TfFsMon.sys -- (TfFsMon)
    DRV - [2012/01/11 14:56:12 | 000,035,264 | --S- | M] (PC Tools) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\TfNetMon.sys -- (TfNetMon)
    DRV - [2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
    DRV - [2011/12/01 16:07:06 | 000,909,728 | ---- | M] (PC Tools) [File_System | Boot] -- C:\WINDOWS\system32\drivers\pctEFA.sys -- (pctEFA)
    DRV - [2011/12/01 16:07:06 | 000,342,168 | ---- | M] (PC Tools) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\pctDS.sys -- (pctDS)
    DRV - [2011/11/14 15:12:26 | 000,331,880 | ---- | M] (PC Tools) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
    DRV - [2011/09/28 13:14:02 | 000,056,840 | ---- | M] (PC Tools) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PCTBD.sys -- (PCTBD)
    DRV - [2010/12/03 13:03:08 | 000,020,352 | ---- | M] (Motorola) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motccgp.sys -- (motccgp)
    DRV - [2010/09/29 16:13:46 | 000,024,064 | ---- | M] (Motorola) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motmodem.sys -- (motmodem)
    DRV - [2010/04/01 12:31:50 | 000,023,424 | ---- | M] (Motorola) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Motousbnet.sys -- (Motousbnet)
    DRV - [2010/01/25 17:56:44 | 000,009,472 | ---- | M] (Motorola Inc) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motusbdevice.sys -- (motusbdevice)
    DRV - [2009/10/19 02:29:36 | 000,009,472 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\dumpdrv.sys -- (DumpDrv)
    DRV - [2009/09/15 14:59:28 | 000,038,248 | ---- | M] (NVIDIA Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvoclock.sys -- (nvoclock)
    DRV - [2009/08/13 16:07:12 | 001,163,328 | ---- | M] (LSI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
    DRV - [2009/02/11 13:40:40 | 005,028,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
    DRV - [2009/01/29 15:18:00 | 000,008,320 | ---- | M] (Motorola) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motccgpfl.sys -- (motccgpfl)
    DRV - [2009/01/29 15:11:20 | 000,006,016 | ---- | M] (Motorola Inc) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motfilt.sys -- (BTCFilterService)
    DRV - [2008/10/09 16:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
    DRV - [2008/08/25 03:22:40 | 000,014,208 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
    DRV - [2008/08/01 11:36:26 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
    DRV - [2008/08/01 11:36:20 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
    DRV - [2007/11/02 13:51:30 | 000,006,400 | ---- | M] (Motorola) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\motswch.sys -- (MotoSwitchService)
    DRV - [2007/04/16 22:46:00 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
    DRV - [2007/03/12 20:48:56 | 000,351,744 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
    DRV - [2007/03/06 21:39:20 | 000,694,272 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
    DRV - [2003/10/15 17:07:38 | 000,012,288 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mtdv2ku2.sys -- (MTDVC2)
    DRV - [2003/10/11 08:39:52 | 000,011,648 | ---- | M] (Matsushita Electric Industrial Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mtdv2ks2.sys -- (MTDVC2_ENUM)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=8&fr=mkg029


    IE - HKU\.DEFAULT\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



    IE - HKU\Owner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
    IE - HKU\Owner_ON_C\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
    IE - HKU\Owner_ON_C\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
    IE - HKU\Owner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\Owner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;192.168.*.*




    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files\PC Tools Security\BDT\Firefox\ [2012/02/27 16:00:39 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/04 17:29:50 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/05/18 17:04:50 | 000,000,000 | ---D | M]

    [2011/12/04 17:26:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
    [2010/05/06 16:37:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    [2010/12/01 20:12:43 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    [2011/01/25 09:32:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
    [2010/01/30 12:17:14 | 000,000,000 | ---D | M] (PHPNukeEN Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{dd02a4eb-4afd-4d60-99d8-e67f964ca813}
    [2010/11/12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

    O1 HOSTS File: ([2012/03/04 18:06:33 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1 localhost
    O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
    O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
    O2 - BHO: (PC Tools Browser Defender BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
    O2 - BHO: (Fast Search) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated)
    O2 - BHO: (RebateRobot BHO) - {66616350-A70C-4FF5-912E-A92B8076F6F7} - File not found
    O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
    O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O3 - HKLM\..\Toolbar: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
    O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
    O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
    O3 - HKU\Owner_ON_C\..\Toolbar\WebBrowser: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
    O3 - HKU\Owner_ON_C\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
    O3 - HKU\Owner_ON_C\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
    O4 - HKLM..\Run: [Acrobat Assistant 7.0] C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe (Adobe Systems Inc.)
    O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
    O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
    O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe ()
    O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [Intuit SyncManager] C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe (Intuit Inc. All rights reserved.)
    O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
    O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
    O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
    O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
    O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime Alternative\qttask.exe (Apple Inc.)
    O4 - HKU\Owner_ON_C..\Run: [DownloadManager] C:\Program Files\Download Manager\DownloadManager.exe (DownloadManager)
    O4 - HKU\Owner_ON_C..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
    O4 - HKU\Owner_ON_C..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe (Adobe Systems Incorporated)
    O4 - HKU\QBDataServiceUser17_ON_C..\Run: [Search Protection] File not found
    O4 - HKU\QBDataServiceUser17_ON_C..\RunOnce: [avg_spchecker] File not found
    O4 - HKU\QBDataServiceUser17_ON_C..\RunOnce: [User Settings] File not found
    O4 - HKU\QBDataServiceUser20_ON_C..\RunOnce: [avg_spchecker] File not found
    O4 - HKU\QBDataServiceUser20_ON_C..\RunOnce: [User Settings] File not found
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MaxRecentDocs = 18
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
    O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\Owner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
    O7 - HKU\Owner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
    O7 - HKU\Owner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O7 - HKU\QBDataServiceUser17_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\QBDataServiceUser20_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\nvLsp.dll (NVIDIA)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\nvLsp.dll (NVIDIA)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\nvLsp.dll (NVIDIA)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\nvLsp.dll (NVIDIA)
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} http://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control)
    O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
    O18 - Protocol\Handler\intu-help-qb3 {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - C:\Program Files\Intuit\QuickBooks 2007\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)
    O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2009/12/14 15:34:49 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
    O32 - AutoRun File - [2011/02/22 08:58:33 | 000,000,047 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
    O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
    O34 - HKLM BootExecute: (autocheck autochk *) - File not found
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37 - HKLM\...com [@ = ComFile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*

    ========== Files/Folders - Created Within 30 Days ==========

    [2012/03/05 19:27:30 | 000,000,000 | ---D | C] -- C:\_OTL
    [2012/03/05 09:34:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\LocalService\Recent
    [2012/03/04 17:43:18 | 000,000,000 | --SD | C] -- C:\ComboFix
    [2012/03/04 17:04:46 | 000,000,000 | -HSD | C] -- C:\RECYCLER
    [2012/03/04 16:32:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
    [2012/03/03 14:55:12 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
    [2012/03/03 14:27:21 | 002,062,896 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Owner\Desktop\TDSSKiller.exe
    [2012/03/02 11:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Malwarebytes
    [2012/03/02 11:25:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
    [2012/03/02 11:25:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    [2012/03/02 11:25:16 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
    [2012/03/02 11:25:16 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
    [2012/03/02 04:13:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Desktop
    [2012/02/29 16:06:15 | 000,083,968 | ---- | C] (Esage Lab) -- C:\Documents and Settings\Owner\Desktop\boot_cleaner.exe
    [2012/02/29 14:18:28 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
    [2012/02/29 14:18:28 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
    [2012/02/29 14:18:28 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
    [2012/02/29 14:16:09 | 004,422,703 | R--- | C] (Swearware) -- C:\Documents and Settings\Owner\Desktop\ComboFix.exe
    [2012/02/29 12:42:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Downloads
    [2012/02/29 12:42:33 | 000,000,000 | ---D | C] -- C:\Program Files\Download Manager
    [2012/02/29 12:42:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\DownloadManager
    [2012/02/29 12:42:24 | 000,000,000 | ---D | C] -- C:\Program Files\Surf Canyon
    [2012/02/29 12:42:20 | 000,000,000 | ---D | C] -- C:\skin
    [2012/02/29 12:42:20 | 000,000,000 | ---D | C] -- C:\Program Files\RebateRobot
    [2012/02/29 12:42:20 | 000,000,000 | ---D | C] -- C:\defaults
    [2012/02/29 12:42:20 | 000,000,000 | ---D | C] -- C:\content
    [2012/02/29 12:42:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\I Want This
    [2012/02/29 12:41:37 | 000,000,000 | ---D | C] -- C:\Program Files\I Want This
    [2012/02/27 16:04:45 | 000,574,424 | --S- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfSysMon.sys
    [2012/02/27 16:04:45 | 000,054,328 | --S- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfFsMon.sys
    [2012/02/27 16:04:45 | 000,035,264 | --S- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfNetMon.sys
    [2012/02/27 16:00:39 | 000,056,840 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTBD.sys
    [2012/02/27 16:00:19 | 000,185,560 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTSD.sys
    [2012/02/27 16:00:19 | 000,017,848 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctBTFix.sys
    [2012/02/27 16:00:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\PC Tools Security
    [2012/02/27 15:58:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\TestApp
    [2012/02/27 15:31:26 | 001,182,680 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfKbMon.sys.old
    [2012/02/12 12:36:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\0-print
    [2012/02/10 14:58:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sophocles
    [2012/02/09 08:51:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\YCH
    [2010/02/09 17:59:22 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Owner\Application Data\pcouffin.sys
    [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

    ========== Files - Modified Within 30 Days ==========

    [2012/03/04 18:07:22 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
    [2012/03/04 18:06:33 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
    [2012/03/04 17:51:08 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
    [2012/03/04 17:50:22 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\TEMP
    [2012/03/04 17:36:45 | 000,000,370 | ---- | M] () -- C:\WINDOWS\tasks\MotoHelper Initial Update.job
    [2012/03/04 17:34:10 | 000,033,819 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\cdrom.zip
    [2012/03/04 17:17:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
    [2012/03/04 16:58:15 | 000,173,568 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2012/03/04 16:33:58 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{D34A4223-3F9E-489B-8675-157936D04B47}.job
    [2012/03/04 16:03:28 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
    [2012/03/04 10:23:02 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\MotoHelper Routing.job
    [2012/03/04 10:06:24 | 000,000,552 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
    [2012/03/03 19:59:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    [2012/03/03 16:14:48 | 000,444,358 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
    [2012/03/03 16:14:48 | 000,072,108 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
    [2012/03/03 09:17:04 | 003,577,984 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Dan Fogelberg - Language Of Love.mp3
    [2012/03/02 21:37:56 | 000,272,291 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
    [2012/03/02 11:57:05 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\otbgo6g6.exe
    [2012/03/02 11:56:47 | 000,294,216 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\gmer.zip
    [2012/03/02 11:25:18 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
    [2012/03/02 11:25:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
    [2012/03/02 09:40:38 | 002,062,896 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Owner\Desktop\TDSSKiller.exe
    [2012/02/29 16:05:59 | 000,044,607 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\bootkit_remover.zip
    [2012/02/29 14:16:12 | 004,422,703 | R--- | M] (Swearware) -- C:\Documents and Settings\Owner\Desktop\ComboFix.exe
    [2012/02/29 12:53:12 | 000,494,309 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
    [2012/02/29 10:23:01 | 000,000,370 | ---- | M] () -- C:\WINDOWS\tasks\MotoHelper Update.job
    [2012/02/29 10:23:01 | 000,000,358 | ---- | M] () -- C:\WINDOWS\tasks\MotoHelper MUM.job
    [2012/02/27 16:46:10 | 000,000,000 | R--D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    [2012/02/27 16:03:53 | 000,002,087 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\SDSETU~1.EXE.lnk
    [2012/02/27 16:00:19 | 000,001,692 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\PC Tools Spyware Doctor.lnk
    [2012/02/27 16:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Start Menu\Programs\PC Tools Security
    [2012/02/27 15:58:15 | 000,002,087 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\sdsetup[1].exe.lnk
    [2012/02/27 15:31:26 | 001,182,680 | ---- | M] (PC Tools) -- C:\WINDOWS\System32\drivers\TfKbMon.sys.old
    [2012/02/27 15:29:36 | 000,512,992 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\sdsetup_revwire207[1].exe
    [2012/02/22 09:00:04 | 000,040,435 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\deibler_02-22-12.pdf
    [2012/02/17 13:08:35 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
    [2012/02/17 09:50:34 | 000,040,431 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\deibler_02-17-12.pdf
    [2012/02/17 07:18:21 | 000,001,823 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
    [2012/02/10 14:59:02 | 000,045,056 | ---- | M] () -- C:\WINDOWS\scluins1.exe
    [2012/02/10 14:59:02 | 000,036,864 | ---- | M] () -- C:\WINDOWS\smon03.exe
    [2012/02/10 14:59:02 | 000,001,670 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Sophocles 2003.lnk
    [2012/02/10 14:58:34 | 001,652,424 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\soph.exe
    [2012/02/10 12:56:46 | 013,261,485 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\NoPoetCigarettes[2].pdf
    [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

    ========== Files Created - No Company Name ==========

    [2012/03/04 17:36:44 | 000,000,370 | ---- | C] () -- C:\WINDOWS\tasks\MotoHelper Initial Update.job
    [2012/03/04 17:34:09 | 000,033,819 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\cdrom.zip
    [2012/03/04 10:06:24 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
    [2012/03/03 09:16:48 | 003,577,984 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Dan Fogelberg - Language Of Love.mp3
    [2012/03/02 11:58:13 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\gmer.exe
    [2012/03/02 11:57:03 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\otbgo6g6.exe
    [2012/03/02 11:56:45 | 000,294,216 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\gmer.zip
    [2012/03/02 11:25:18 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
    [2012/02/29 16:05:59 | 000,044,607 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\bootkit_remover.zip
    [2012/02/29 14:18:29 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
    [2012/02/29 14:18:28 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
    [2012/02/29 14:18:28 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
    [2012/02/29 14:18:28 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
    [2012/02/29 14:18:28 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
    [2012/02/27 16:03:53 | 000,002,087 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\SDSETU~1.EXE.lnk
    [2012/02/27 16:00:19 | 000,001,692 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\PC Tools Spyware Doctor.lnk
    [2012/02/27 15:58:15 | 000,002,087 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\sdsetup[1].exe.lnk
    [2012/02/27 15:29:36 | 000,512,992 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\sdsetup_revwire207[1].exe
    [2012/02/22 09:00:04 | 000,040,435 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\deibler_02-22-12.pdf
    [2012/02/17 09:50:34 | 000,040,431 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\deibler_02-17-12.pdf
    [2012/02/10 14:59:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\scluins1.exe
    [2012/02/10 14:59:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\smon03.exe
    [2012/02/10 12:56:45 | 013,261,485 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\NoPoetCigarettes[2].pdf
    [2011/12/26 12:47:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\TEMP
    [2011/11/27 17:42:16 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\qtmlClient.dll
    [2011/07/06 18:59:52 | 000,000,127 | ---- | C] () -- C:\WINDOWS\smr.INI
    [2011/06/24 14:16:27 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll0238.old
    [2011/06/24 14:16:27 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
    [2010/12/14 12:18:29 | 001,160,744 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
    [2010/05/21 07:34:22 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\default_user_class.dat
    [2010/05/10 17:10:09 | 000,000,090 | ---- | C] () -- C:\WINDOWS\QBChanUtil_Trigger.ini
    [2010/02/16 10:14:29 | 000,073,220 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
    [2010/02/16 10:14:29 | 000,031,053 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat
    [2010/02/16 10:14:29 | 000,029,114 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
    [2010/02/16 10:14:29 | 000,027,417 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat
    [2010/02/16 10:14:29 | 000,021,021 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
    [2010/02/16 10:14:29 | 000,015,670 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
    [2010/02/16 10:14:29 | 000,013,280 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
    [2010/02/16 10:14:29 | 000,010,673 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
    [2010/02/16 10:14:29 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
    [2010/02/16 10:14:29 | 000,001,140 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
    [2010/02/16 10:14:29 | 000,001,140 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
    [2010/02/16 10:14:29 | 000,001,137 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
    [2010/02/16 10:14:29 | 000,001,130 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
    [2010/02/16 10:14:29 | 000,001,130 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
    [2010/02/16 10:14:29 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
    [2010/02/16 10:14:29 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
    [2010/02/09 17:59:22 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\pcouffin.cat
    [2010/02/09 17:59:22 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\pcouffin.inf
    [2010/01/30 12:48:34 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE
    [2010/01/18 17:06:50 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
    [2010/01/18 14:23:23 | 000,112,544 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
    [2009/12/17 06:46:32 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
    [2009/12/15 09:23:31 | 000,173,568 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2009/12/14 15:44:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
    [2009/12/14 15:31:59 | 000,000,056 | ---- | C] () -- C:\WINDOWS\hpdj500.ini
    [2009/12/14 15:23:55 | 000,749,568 | R--- | C] () -- C:\WINDOWS\System32\agi1600.dll
    [2009/12/14 15:23:54 | 001,777,664 | R--- | C] () -- C:\WINDOWS\System32\zhp1600r.dll
    [2009/12/14 15:23:54 | 000,241,664 | R--- | C] () -- C:\WINDOWS\System32\zhhp1600.exe
    [2009/12/14 15:23:53 | 000,327,680 | R--- | C] () -- C:\WINDOWS\System32\zshp1600.exe
    [2009/12/14 15:23:53 | 000,114,688 | R--- | C] () -- C:\WINDOWS\System32\VSHP1600.dll
    [2009/12/13 17:16:46 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
    [2009/12/13 01:46:20 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
    [2009/12/13 01:46:20 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
    [2009/12/13 01:46:19 | 002,378,752 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
    [2009/12/13 01:46:19 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
    [2009/12/13 01:46:19 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
    [2009/12/13 01:46:18 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
    [2009/12/13 01:46:17 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
    [2009/12/13 01:38:57 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
    [2009/12/13 01:36:28 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
    [2009/12/13 01:36:14 | 002,293,286 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
    [2009/12/13 01:07:31 | 000,004,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
    [2009/12/12 19:29:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
    [2009/12/12 19:27:02 | 002,379,456 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
    [2009/10/19 02:34:58 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\msvcrt10.dll
    [2008/04/14 06:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
    [2008/04/14 06:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
    [2008/04/14 06:00:00 | 000,444,358 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
    [2008/04/14 06:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
    [2008/04/14 06:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
    [2008/04/14 06:00:00 | 000,072,108 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
    [2008/04/14 06:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
    [2008/04/14 06:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
    [2008/04/14 06:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
    [2008/04/14 06:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
    [2008/04/14 06:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
    [2008/04/14 06:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
    [2004/06/24 01:20:02 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\EAL32.INI
    [2002/03/19 18:30:00 | 000,045,632 | ---- | C] () -- C:\WINDOWS\System32\TaskSwitch.exe
    [2000/06/12 04:37:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\mtstack.exe

    ========== LOP Check ==========

    [2010/02/16 09:06:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Acoustica
    [2010/06/26 09:32:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Amazon
    [2011/02/22 09:13:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Autodesk
    [2011/08/31 15:24:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Chief Architect X2
    [2010/03/17 06:37:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
    [2011/11/29 18:40:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\DVDVideoSoft
    [2011/03/10 10:49:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\EPSON
    [2011/11/13 10:50:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\F4aQH6dWKfLhXjC
    [2009/12/13 01:46:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Foxit
    [2010/01/09 13:11:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Foxit Software
    [2011/07/06 18:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Free Sound Recorder
    [2011/11/13 10:47:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\mellOOBtxP
    [2012/03/04 16:59:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Spotify
    [2011/07/03 12:03:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Style Jukebox Settings
    [2012/02/27 15:58:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\TestApp
    [2010/02/09 17:59:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Vso
    [2009/12/21 09:08:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Autodesk
    [2011/12/25 11:55:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
    [2011/12/25 09:50:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
    [2009/12/13 14:23:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Chief Architect X2
    [2011/03/15 07:07:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\COMMON FILES
    [2010/10/02 14:08:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LightScribe
    [2010/05/10 17:11:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nuance
    [2010/05/10 17:15:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SQL Anywhere 11
    [2011/05/18 17:14:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    [2010/01/10 15:18:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
    [2012/03/04 17:36:45 | 000,000,370 | ---- | M] () -- C:\WINDOWS\Tasks\MotoHelper Initial Update.job
    [2012/02/29 10:23:01 | 000,000,358 | ---- | M] () -- C:\WINDOWS\Tasks\MotoHelper MUM.job
    [2012/03/04 10:23:02 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\MotoHelper Routing.job
    [2012/02/29 10:23:01 | 000,000,370 | ---- | M] () -- C:\WINDOWS\Tasks\MotoHelper Update.job
    [2012/03/04 16:33:58 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{D34A4223-3F9E-489B-8675-157936D04B47}.job

    ========== Purity Check ==========



    ========== Custom Scans ==========



    < MD5 for: CDROM.SYS >
    [2009/10/19 02:40:19 | 017,776,476 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
    [2008/03/20 22:33:24 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=0CC13B7FE6D2F64EFC82CEBFE9D2B8F0 -- C:\WINDOWS\system32\drivers\cdrom.sys

    < MD5 for: EXPLORER.EXE >
    [2009/10/19 02:25:41 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=2BB75B7F548D82A099125D0C5971DE7D -- C:\WINDOWS\ERDNT\cache\explorer.exe
    [2009/10/19 02:25:41 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=2BB75B7F548D82A099125D0C5971DE7D -- C:\WINDOWS\explorer.exe

    < MD5 for: SVCHOST.EXE >
    [2012/01/13 14:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
    [2009/10/19 02:27:12 | 000,014,848 | ---- | M] (Microsoft Corporation) MD5=67E38B4A549833E02D4D1617B5DBC318 -- C:\WINDOWS\ERDNT\cache\svchost.exe
    [2009/10/19 02:27:12 | 000,014,848 | ---- | M] (Microsoft Corporation) MD5=67E38B4A549833E02D4D1617B5DBC318 -- C:\WINDOWS\system32\svchost.exe

    < MD5 for: USERINIT.EXE >
    [2008/04/14 06:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\ERDNT\cache\userinit.exe
    [2008/04/14 06:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe

    < MD5 for: WINLOGON.EXE >
    [2009/10/19 02:27:29 | 000,509,440 | ---- | M] (Microsoft Corporation) MD5=53A8857723277B1D6D5EE60A9F85B117 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
    [2009/10/19 02:27:29 | 000,509,440 | ---- | M] (Microsoft Corporation) MD5=53A8857723277B1D6D5EE60A9F85B117 -- C:\WINDOWS\system32\winlogon.exe
    [2012/01/13 14:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
    < End of report >
    sjy, Mar 6, 2012
    #41

  2. Broni Malware Annihilator Posts: 39,324   +175

    All looks normal.

    Are you getting same BSOD when trying to boot to safe mode?

    I'm not sure why you can't boot to RC CD.
    Any chance you can borrow Windows CD from someone?
    Broni, Mar 6, 2012
    #42

  3. sjy Newcomer, in training Posts: 58

    Found a copy of Windows and have the recovery console up. I just typed in "FIXMBR" and the following came up:

    "This computer appears to have a non-standard or invalid master boot record FIXMBR may damage your partition tables if you proceed. This could cause all of the partitions on the current hard disk to become inaccessible."

    The drive is partitioned with a d: drive containing all archived files. Should I proceed or go back to the REATOGO disk and make sure I have everything backup up on a storage drive before proceeding?


    <<<We need to use the Recovery Console to try to fix your issue.

    •You'll need to find your Windows XP installation disk.
    •Insert the Windows XP CD into the CD-ROM drive, then restart your computer.
    •If prompted, click any options that are required to start the computer from the CD-ROM drive.
    •When the Welcome to Setup screen appears, press R to start the Recovery Console.
    •The Recovery Console will start and ask you which Windows installation you would like to log on to.
    â—¦If you have multiple Windows installations, it will list each one, and you would enter the number associated with the installation you would like to work on and press enter. If you have just one Windows installation, type 1 and press Enter.
    •It will then prompt you for the Administrator's password. If there is no password, simply press enter.
    •You will now be presented with a C:\Windows> prompt
    •Type with an Enter after each line:
    •fixmbr

    fixboot

    exit
    •Restart computer.
    sjy, Mar 7, 2012
    #43

  4. Broni Malware Annihilator Posts: 39,324   +175

    Resetting MBR won't touch your D drive but it's always a good idea to keep fresh back up so you may as well do it now.
    Broni, Mar 7, 2012
    #44

  5. sjy Newcomer, in training Posts: 58

    Still no luck. Went through all of the steps in the recovery console...typed "Exit" then rebooted and right back to bluescreen again. tried to reboot in safe mode and it still hangs up after the mup.sys file. Also tried last known good configuration as well.
    sjy, Mar 7, 2012
    #45

  6. Broni Malware Annihilator Posts: 39,324   +175

    Broni, Mar 7, 2012
    #46
     

  7. sjy Newcomer, in training Posts: 58

    OK back up and running again! Everything seems to be working, just one peculiar thing, though, I cannot open Internet Explorer. I'm accessing the internet through Google chrome.

    Also, there was a ComboFix file that the XP repair could not find - I think it had an .ex3(?) extension.

    Firewall is up and I'm using the trial version of Malwarebytes instead of the PC Tools Spyware that I bought last year.

    What next?
    sjy, Mar 7, 2012
    #47

  8. Broni Malware Annihilator Posts: 39,324   +175

    Good news :)

    We have to re-run some scans.

    Update MBAM and post new log.
    Post new logs from aswMBR and Bootkit Remover.
    Broni, Mar 7, 2012
    #48

  9. sjy Newcomer, in training Posts: 58

    Updated MBAM - took weel over an hour for scan and found 5 viruses. Running the other two scans next.

    Malwarebytes Anti-Malware (Trial) 1.60.1.1000
    www.malwarebytes.org

    Database version: v2012.03.07.07

    Windows XP Service Pack 3 x86 NTFS
    Internet Explorer 7.0.5730.13
    Owner :: STEVE [administrator]

    Protection: Enabled

    3/7/2012 6:33:10 PM
    mbam-log-2012-03-07 (18-33-10).txt

    Scan type: Full scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 422103
    Time elapsed: 1 hour(s), 11 minute(s), 6 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 5
    C:\Documents and Settings\Custom Settings\Scripts\ToggleQL.exe (Trojan.WinLock) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{E4A08339-023B-4921-BF2F-8AC9E414F373}\RP1\A0000007.exe (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{E4A08339-023B-4921-BF2F-8AC9E414F373}\RP1\A0000008.exe (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{E4A08339-023B-4921-BF2F-8AC9E414F373}\RP1\A0000009.exe (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
    C:\TDSSKiller_Quarantine\03.03.2012_14.27.49\rtkt0000\svc0000\tsk0000.dta (Virus.RLoader) -> Quarantined and deleted successfully.

    (end)
    sjy, Mar 7, 2012
    #49

  10. Broni Malware Annihilator Posts: 39,324   +175

    Good :)............
    Broni, Mar 7, 2012
    #50

  11. sjy Newcomer, in training Posts: 58

    Bootkit Remover
    (c) 2009 Esage Lab
    www.esagelab.com

    Program version: 1.2.0.1
    OS Version: Microsoft Windows XP Professional Service Pack 3 (build 2600)

    System volume is \\.\C:
    \\.\C: -> \\.\PhysicalDrive0 at offset 0x00000000`00007e00
    Boot sector MD5 is: 6def5ffcbcdbdb4082f1015625e597bd

    Size Device Name MBR Status
    --------------------------------------------
    596 GB \\.\PhysicalDrive0 OK (DOS/Win32 Boot code found)


    Done;
    Press any key to quit...
    sjy, Mar 7, 2012
    #51

  12. sjy Newcomer, in training Posts: 58

    aswMBR version 0.9.9.1120 Copyright(c) 2011 AVAST Software
    Run date: 2012-03-07 20:00:14
    -----------------------------
    20:00:14.718 OS Version: Windows 5.1.2600 Service Pack 3
    20:00:14.718 Number of processors: 4 586 0x502
    20:00:14.718 ComputerName: STEVE UserName: Owner
    20:00:15.234 Initialize success
    20:01:20.421 AVAST engine defs: 12030701
    20:01:23.718 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    20:01:23.718 Disk 0 Vendor: WDC_WD6400AACS-00D6B1 01.01A01 Size: 610480MB BusType: 3
    20:01:25.750 Disk 0 MBR read successfully
    20:01:25.750 Disk 0 MBR scan
    20:01:25.781 Disk 0 Windows XP default MBR code
    20:01:25.781 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 300002 MB offset 63
    20:01:25.796 Disk 0 Partition - 00 0F Extended LBA 310467 MB offset 614405925
    20:01:25.812 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 310467 MB offset 614405988
    20:01:25.828 Disk 0 scanning sectors +1250242560
    20:01:25.859 Disk 0 scanning C:\WINDOWS\system32\drivers
    20:01:34.093 Service scanning
    20:01:35.234 Modules scanning
    20:01:39.781 Disk 0 trace - called modules:
    20:01:40.296 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    20:01:40.312 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8ae11ab8]
    20:01:40.328 3 CLASSPNP.SYS[b8118fd7] -> nt!IofCallDriver -> \Device\0000007a[0x8ad5ef18]
    20:01:40.328 5 ACPI.sys[b7f7f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x8adcbd98]
    20:01:41.046 AVAST engine scan C:\WINDOWS
    20:01:51.718 AVAST engine scan C:\WINDOWS\system32
    20:03:47.609 AVAST engine scan C:\WINDOWS\system32\drivers
    20:04:02.625 AVAST engine scan C:\Documents and Settings\Owner
    20:16:33.578 AVAST engine scan C:\Documents and Settings\All Users
    20:18:24.390 Scan finished successfully
    20:18:52.875 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\My Documents\Scan_logs\MBR.dat"
    20:18:52.890 The log file has been saved successfully to "C:\Documents and Settings\Owner\My Documents\Scan_logs\aswMBR-3-7-12.txt"
    sjy, Mar 7, 2012
    #52

  13. Broni Malware Annihilator Posts: 39,324   +175

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode.

    2. Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.
    There are 4 different versions. If one of them won't run then download and try to run the other one.
    Vista and Win7 users need to right click Rkill and choose Run as Administrator
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    * Rkill.com
    * Rkill.scr
    * Rkill.exe
    • Double-click on the Rkill icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.
    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
    Broni, Mar 8, 2012
    #53

  14. sjy Newcomer, in training Posts: 58

    ComboFix 12-03-08.01 - Owner 03/08/2012 7:50.5.4 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2892 [GMT -5:00]
    Running from: c:\documents and settings\Owner\My Documents\Downloads\ComboFix.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\system32\default_user_class.dat.LOG
    .
    ---- Previous Run -------
    .
    c:\windows\system32\drivers\14098817.sys
    c:\windows\system32\drivers\tsk1D.tmp
    .
    -- Previous Run --
    .
    c:\windows\system32\drivers\cdrom.sys . . . is missing!!
    .
    -- Previous Run --
    .
    c:\windows\system32\drivers\cdrom.sys . . . is missing!!
    .
    --------
    .
    Infected copy of c:\windows\system32\userinit.exe was found and disinfected
    Restored copy from - c:\windows\ERDNT\cache\userinit.exe
    .
    --------
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-02-08 to 2012-03-08 )))))))))))))))))))))))))))))))
    .
    .
    2012-03-08 08:28 . 2011-08-16 10:45 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll
    2012-03-08 08:27 . 2011-12-17 19:46 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
    2012-03-08 08:27 . 2011-12-17 19:46 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
    2012-03-08 08:27 . 2011-12-17 19:46 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
    2012-03-08 08:25 . 2012-03-08 08:27 -------- dc-h--w- c:\windows\ie8
    2012-03-07 22:33 . 2009-11-27 16:07 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll
    2012-03-07 22:33 . 2009-11-27 16:07 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll
    2012-03-07 22:32 . 2011-07-15 13:29 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
    2012-03-07 22:27 . 2011-10-25 13:37 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
    2012-03-07 22:27 . 2011-10-25 13:33 2192768 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
    2012-03-07 22:27 . 2011-10-25 12:52 2069376 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
    2012-03-07 22:27 . 2011-10-25 12:52 2027008 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
    2012-03-07 22:24 . 2012-01-11 19:06 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
    2012-03-07 22:24 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
    2012-03-07 22:10 . 2008-04-14 08:00 42496 -c--a-w- c:\windows\system32\dllcache\davcdata.exe
    2012-03-07 22:03 . 2008-04-14 08:00 281088 -c--a-w- c:\windows\system32\dllcache\pinball.exe
    2012-03-07 22:03 . 2008-04-14 08:00 281088 ----a-w- c:\program files\Windows NT\pinball\PINBALL.EXE
    2012-03-07 22:03 . 2008-04-14 08:00 131584 -c--a-w- c:\windows\system32\dllcache\sndrec32.exe
    2012-03-07 22:03 . 2008-04-14 08:00 131584 ----a-w- c:\windows\system32\sndrec32.exe
    2012-03-07 22:03 . 2009-12-16 18:43 343040 -c--a-w- c:\windows\system32\dllcache\mspaint.exe
    2012-03-07 22:03 . 2009-12-16 18:43 343040 ----a-w- c:\windows\system32\mspaint.exe
    2012-03-07 22:03 . 2008-04-14 08:00 539136 -c--a-w- c:\windows\system32\dllcache\dialer.exe
    2012-03-07 22:03 . 2008-04-14 08:00 539136 ----a-w- c:\program files\Windows NT\dialer.exe
    2012-03-07 22:03 . 2008-04-14 08:00 538624 -c--a-w- c:\windows\system32\dllcache\spider.exe
    2012-03-07 22:03 . 2008-04-14 08:00 538624 ----a-w- c:\windows\system32\spider.exe
    2012-03-07 22:03 . 2008-04-14 08:00 347136 ----a-w- c:\windows\system32\hypertrm.dll
    2012-03-07 21:35 . 2008-04-14 08:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
    2012-03-07 21:35 . 2008-04-14 08:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
    2012-03-07 21:35 . 2008-04-14 08:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
    2012-03-07 21:35 . 2008-04-14 08:00 13312 ----a-w- c:\windows\system32\irclass.dll
    2012-03-07 21:35 . 2008-04-14 08:00 16535 ----a-r- c:\windows\SET169.tmp
    2012-03-07 21:35 . 2008-04-14 08:00 1088840 ----a-r- c:\windows\SET163.tmp
    2012-03-07 21:35 . 2008-04-14 08:00 1296669 ----a-r- c:\windows\SET160.tmp
    2012-03-07 13:04 . 2009-11-27 17:23 17920 -c----w- c:\windows\system32\dllcache\msyuv.dll
    2012-03-06 00:27 . 2012-03-06 00:27 -------- d-----w- C:\_OTL
    2012-03-04 21:32 . 2012-03-04 21:32 -------- d-----w- c:\windows\system32\LogFiles
    2012-03-03 19:55 . 2012-03-03 19:55 -------- d-----w- C:\TDSSKiller_Quarantine
    2012-03-02 16:25 . 2012-03-02 16:25 -------- d-----w- c:\documents and settings\Owner\Application Data\Malwarebytes
    2012-03-02 16:25 . 2012-03-02 16:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2012-03-02 16:25 . 2012-03-02 16:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2012-03-02 16:25 . 2011-12-10 20:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- c:\program files\Download Manager
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- c:\documents and settings\Owner\Local Settings\Application Data\DownloadManager
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- c:\program files\Surf Canyon
    2012-02-29 17:42 . 2012-02-29 17:52 -------- d-----w- c:\program files\RebateRobot
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- C:\skin
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- C:\defaults
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- C:\content
    2012-02-29 17:42 . 2012-02-29 17:42 -------- d-----w- c:\documents and settings\Owner\Local Settings\Application Data\I Want This
    2012-02-29 17:41 . 2012-03-07 22:37 -------- d-----w- c:\program files\I Want This
    2012-02-27 21:04 . 2012-01-11 19:56 574424 --s---w- c:\windows\system32\drivers\TfSysMon.sys
    2012-02-27 21:04 . 2012-01-11 19:56 54328 --s---w- c:\windows\system32\drivers\TfFsMon.sys
    2012-02-27 21:04 . 2012-01-11 19:56 35264 --s---w- c:\windows\system32\drivers\TfNetMon.sys
    2012-02-27 21:00 . 2011-09-28 18:14 56840 ----a-w- c:\windows\system32\drivers\PCTBD.sys
    2012-02-27 21:00 . 2012-01-11 21:19 185560 ----a-w- c:\windows\system32\drivers\PCTSD.sys
    2012-02-27 21:00 . 2012-01-11 21:17 17848 ----a-w- c:\windows\system32\drivers\pctBTFix.sys
    2012-02-27 20:58 . 2012-02-27 20:58 -------- d-----w- c:\documents and settings\Owner\Application Data\TestApp
    2012-02-10 19:59 . 2012-02-10 19:59 45056 ----a-w- c:\windows\scluins1.exe
    2012-02-10 19:59 . 2012-02-10 19:59 36864 ----a-w- c:\windows\smon03.exe
    2012-02-10 19:58 . 2012-02-10 21:22 -------- d-----w- c:\program files\Sophocles
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-02-27 20:31 . 2012-02-27 20:31 1182680 ----a-w- c:\windows\system32\drivers\TfKbMon.sys.old
    2012-01-16 21:28 . 2011-06-24 19:16 149456 ----a-w- c:\windows\SGDetectionTool.dll
    2012-01-16 21:28 . 2011-06-24 19:16 2246608 ----a-w- c:\windows\PCTBDCore.dll
    2012-01-16 21:28 . 2011-06-24 19:16 1681360 ----a-w- c:\windows\PCTBDRes.dll
    2012-01-16 21:28 . 2011-06-24 19:16 767952 ----a-w- c:\windows\BDTSupport.dll
    2012-01-12 16:53 . 2008-04-14 08:00 1859968 ----a-w- c:\windows\system32\win32k.sys
    2012-01-11 21:19 . 2011-06-24 18:33 70536 ----a-w- c:\windows\system32\drivers\pctplsg.sys
    2012-01-11 21:14 . 2011-06-24 18:33 253352 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
    2011-12-17 19:46 . 2008-07-12 19:10 43520 ------w- c:\windows\system32\licmgr10.dll
    2011-12-17 19:46 . 2008-04-23 00:16 916992 ----a-w- c:\windows\system32\wininet.dll
    2011-12-17 19:46 . 2008-04-23 00:16 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2011-12-16 12:22 . 2008-07-12 19:09 385024 ------w- c:\windows\system32\html.iec
    1997-07-22 00:30 1045776 --sha-w- c:\windows\system32\Msjet35.dll
    1997-06-23 08:00 123664 --sha-w- c:\windows\system32\Msjint35.dll
    1997-06-23 17:06 24848 --sha-w- c:\windows\system32\Msjter35.dll
    1997-06-23 17:06 252176 --sha-w- c:\windows\system32\Msrd2x35.dll
    1997-06-23 17:06 287504 --sha-w- c:\windows\system32\Msxbse35.dll
    .
    .
    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    .
    [-] 2008-07-12 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
    [7] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ERDNT\cache\sfcfiles.dll
    .
    ((((((((((((((((((((((((((((( SnapShot_2012-03-04_21.25.04 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2012-03-07 21:35 . 2008-04-14 08:00 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    - 2009-12-13 00:27 . 2009-10-19 07:43 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    + 2009-12-13 00:27 . 2008-04-14 08:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    + 2009-12-13 00:27 . 2008-04-14 08:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    - 2009-12-13 00:27 . 2009-10-19 07:43 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\vmmreg32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\vmmreg32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25600 c:\windows\twunk_32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\twunk_32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49680 c:\windows\twunk_16.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 49680 c:\windows\twunk_16.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\twain_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\twain_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94784 c:\windows\twain.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 94784 c:\windows\twain.dll
    + 2012-03-08 12:49 . 2012-03-08 12:49 16384 c:\windows\Temp\Perflib_Perfdata_770.dat
    + 2012-03-08 12:49 . 2012-03-08 12:49 16384 c:\windows\Temp\Perflib_Perfdata_11c.dat
    - 2009-12-13 00:28 . 2008-04-14 11:00 15360 c:\windows\TASKMAN.EXE
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\TASKMAN.EXE
    + 2009-12-13 06:34 . 2008-04-14 08:00 11776 c:\windows\system32\xolehlp.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 11776 c:\windows\system32\xolehlp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50176 c:\windows\system32\xmlprovi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\xmlprovi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\xcopy.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 30720 c:\windows\system32\xcopy.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 91648 c:\windows\system32\xactsrv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 91648 c:\windows\system32\xactsrv.dll
    - 2008-04-14 03:42 . 2009-10-19 07:40 52736 c:\windows\system32\wzcsapi.dll
    + 2008-04-14 09:42 . 2008-07-12 19:19 52736 c:\windows\system32\wzcsapi.dll
    + 2009-08-07 00:24 . 2009-08-07 00:24 44768 c:\windows\system32\wups2.dll
    - 2009-10-19 07:32 . 2009-10-19 07:32 44768 c:\windows\system32\wups2.dll
    - 2009-12-13 06:36 . 2009-10-19 07:28 35552 c:\windows\system32\wups.dll
    + 2009-12-13 06:36 . 2009-08-07 00:24 35552 c:\windows\system32\wups.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\wupdmgr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 32256 c:\windows\system32\wupdmgr.exe
    - 2009-10-19 07:32 . 2009-10-19 07:32 55808 c:\windows\system32\wudfsvc.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 55808 c:\windows\system32\wudfsvc.dll
    - 2009-10-19 07:32 . 2009-10-19 07:32 95344 c:\windows\system32\wudfcoinstaller.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 95344 c:\windows\system32\wudfcoinstaller.dll
    - 2009-12-13 06:36 . 2009-10-19 07:27 53472 c:\windows\system32\wuauclt.exe
    + 2009-12-13 06:36 . 2009-08-07 00:24 53472 c:\windows\system32\wuauclt.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 18432 c:\windows\system32\wtsapi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\wtsapi32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\wstdecod.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\wstdecod.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22528 c:\windows\system32\wsock32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\wsock32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 41984 c:\windows\system32\wsnmp32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\wsnmp32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\wshtcpip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\wshtcpip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\WshRm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\WshRm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\wshisn.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\wshisn.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\wship6.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\wship6.dll
    + 2008-07-12 19:09 . 2008-07-12 19:09 90112 c:\windows\system32\wshext.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 90112 c:\windows\system32\wshext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\wshcon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\wshcon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 80896 c:\windows\system32\wscsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\wscntfy.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\ws2help.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\ws2help.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 82432 c:\windows\system32\ws2_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\ws2_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\wpnpinst.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\wpnpinst.exe
    + 2008-07-12 19:24 . 2008-07-12 19:24 38400 c:\windows\system32\wpdshextres.dll
    - 2009-10-19 07:31 . 2009-10-19 07:31 38400 c:\windows\system32\wpdshextres.dll
    - 2009-10-19 07:31 . 2009-10-19 07:31 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2008-07-12 19:24 . 2008-07-12 19:24 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2008-07-12 19:24 . 2008-07-12 19:24 63488 c:\windows\system32\wpdmtpus.dll
    - 2009-10-19 07:31 . 2009-10-19 07:31 63488 c:\windows\system32\wpdmtpus.dll
    - 2009-10-19 07:31 . 2009-10-19 07:31 35840 c:\windows\system32\wpdconns.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 35840 c:\windows\system32\wpdconns.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\wpabaln.exe
    + 2001-08-18 02:36 . 2008-07-12 19:18 13824 c:\windows\system32\wowfaxui.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 13824 c:\windows\system32\wowfaxui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10368 c:\windows\system32\wowexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10368 c:\windows\system32\wowexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\wmpui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\wmpui.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 99840 c:\windows\system32\wmpshell.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 99840 c:\windows\system32\wmpshell.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\wmpcore.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\wmpcore.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\wmpcd.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\wmpcd.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 55808 c:\windows\system32\wmiscmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\wmiscmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\wmiprop.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\wmiprop.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\wmerrenu.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51200 c:\windows\system32\wmerrenu.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 37376 c:\windows\system32\wmdmps.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 37376 c:\windows\system32\wmdmps.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 33792 c:\windows\system32\wmdmlog.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 33792 c:\windows\system32\wmdmlog.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 92672 c:\windows\system32\wlnotify.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\wlnotify.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\wlanapi.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 69120 c:\windows\system32\wlanapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\winstrm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\winstrm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53760 c:\windows\system32\winsta.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\winsta.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\winshfhc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\winshfhc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 99328 c:\windows\system32\winscard.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 99328 c:\windows\system32\winscard.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\winrnr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\winrnr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\winmsd.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\winmsd.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 32256 c:\windows\system32\winipsec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\winipsec.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 35328 c:\windows\system32\winchat.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\win87em.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\win87em.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\win.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 18432 c:\windows\system32\win.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\wiascr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 75776 c:\windows\system32\wiascr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13600 c:\windows\system32\wfwnet.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 13600 c:\windows\system32\wfwnet.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 65024 c:\windows\system32\wextract.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\wextract.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 40448 c:\windows\system32\webhits.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 40448 c:\windows\system32\webhits.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\webclnt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 68096 c:\windows\system32\webclnt.dll
    - 2008-04-14 03:42 . 2008-04-14 09:42 23552 c:\windows\system32\wdmaud.drv
    + 2008-04-14 09:42 . 2008-07-12 19:19 23552 c:\windows\system32\wdmaud.drv
    - 2009-10-19 07:27 . 2009-10-19 07:27 54272 c:\windows\system32\wdigest.dll
    + 2008-04-14 08:00 . 2009-06-25 08:25 54272 c:\windows\system32\wdigest.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 45568 c:\windows\system32\wbem\xml\wmi2xml.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 45568 c:\windows\system32\wbem\xml\wmi2xml.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 95232 c:\windows\system32\wbem\wmiutils.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 95232 c:\windows\system32\wbem\wmiutils.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 52224 c:\windows\system32\wbem\wmitimep.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 52224 c:\windows\system32\wbem\wmitimep.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 41472 c:\windows\system32\wbem\wmipsess.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 41472 c:\windows\system32\wbem\wmipsess.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 62464 c:\windows\system32\wbem\wmipjobj.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 62464 c:\windows\system32\wbem\wmipjobj.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 61952 c:\windows\system32\wbem\wmipiprt.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 61952 c:\windows\system32\wbem\wmipiprt.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 75264 c:\windows\system32\wbem\wmipicmp.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 75264 c:\windows\system32\wbem\wmipicmp.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 61440 c:\windows\system32\wbem\wmimsg.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 61440 c:\windows\system32\wbem\wmimsg.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 60928 c:\windows\system32\wbem\wmicookr.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 60928 c:\windows\system32\wbem\wmicookr.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 88576 c:\windows\system32\wbem\wmiaprpl.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 88576 c:\windows\system32\wbem\wmiaprpl.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 16384 c:\windows\system32\wbem\winmgmtr.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 16384 c:\windows\system32\wbem\winmgmtr.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 13312 c:\windows\system32\wbem\winmgmt.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 13312 c:\windows\system32\wbem\winmgmt.exe
    - 2009-12-13 06:33 . 2008-04-14 11:00 43520 c:\windows\system32\wbem\wbemsvc.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 43520 c:\windows\system32\wbem\wbemsvc.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 18944 c:\windows\system32\wbem\wbemprox.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 18944 c:\windows\system32\wbem\wbemprox.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 43008 c:\windows\system32\wbem\wbemperf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 43008 c:\windows\system32\wbem\wbemperf.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 71680 c:\windows\system32\wbem\wbemcons.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 12288 c:\windows\system32\wbem\wbemads.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 12288 c:\windows\system32\wbem\wbemads.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 16896 c:\windows\system32\wbem\unsecapp.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\wbem\unsecapp.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 59904 c:\windows\system32\wbem\trnsprov.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 59904 c:\windows\system32\wbem\trnsprov.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 61952 c:\windows\system32\wbem\tmplprov.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 61952 c:\windows\system32\wbem\tmplprov.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 86528 c:\windows\system32\wbem\stdprov.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 86528 c:\windows\system32\wbem\stdprov.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 40960 c:\windows\system32\wbem\smtpcons.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 40960 c:\windows\system32\wbem\smtpcons.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 36352 c:\windows\system32\wbem\scrcons.exe
    - 2009-12-13 06:33 . 2008-04-14 11:00 36352 c:\windows\system32\wbem\scrcons.exe
    - 2009-12-13 06:33 . 2009-10-19 07:26 92672 c:\windows\system32\wbem\policman.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 92672 c:\windows\system32\wbem\policman.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 47104 c:\windows\system32\wbem\ncprov.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 47104 c:\windows\system32\wbem\ncprov.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 16384 c:\windows\system32\wbem\mofcomp.exe
    - 2009-12-13 06:33 . 2008-04-14 11:00 16384 c:\windows\system32\wbem\mofcomp.exe
    + 2009-12-13 06:33 . 2008-04-14 08:00 24576 c:\windows\system32\wbem\krnlprov.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 53248 c:\windows\system32\wbem\fwdprov.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 53248 c:\windows\system32\wbem\fwdprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\wbem\evntrprv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\wbem\evntrprv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45056 c:\windows\system32\wbem\CmdEvTgProv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 45056 c:\windows\system32\wbem\CmdEvTgProv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17664 c:\windows\system32\watchdog.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 17664 c:\windows\system32\watchdog.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\w3ssl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\w3ssl.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\w32topl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\w32topl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49664 c:\windows\system32\w32tm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\vwipxspx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\vwipxspx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\vssadmin.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33792 c:\windows\system32\vssadmin.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\vss_ps.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\vss_ps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18176 c:\windows\system32\vga64k.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18176 c:\windows\system32\vga64k.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51456 c:\windows\system32\vga256.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51456 c:\windows\system32\vga256.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\version.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\version.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\verifier.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 98304 c:\windows\system32\verifier.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\verifier.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\verifier.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\verclsid.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\verclsid.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 51712 c:\windows\system32\vdmredir.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51712 c:\windows\system32\vdmredir.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\vdmdbg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\vdmdbg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 30749 c:\windows\system32\vbajet32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30749 c:\windows\system32\vbajet32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50176 c:\windows\system32\utilman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\utilman.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 25600 c:\windows\system32\utildll.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\utildll.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 49211 c:\windows\system32\usrvpa.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 49211 c:\windows\system32\usrvpa.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 45116 c:\windows\system32\usrvoica.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 45116 c:\windows\system32\usrvoica.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 49209 c:\windows\system32\usrv80a.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 49209 c:\windows\system32\usrv80a.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 41019 c:\windows\system32\usrsvpia.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 41019 c:\windows\system32\usrsvpia.dll
    - 2001-08-17 20:37 . 2009-10-19 07:39 69700 c:\windows\system32\usrshuta.exe
    + 2001-08-18 02:37 . 2008-07-12 19:18 69700 c:\windows\system32\usrshuta.exe
    + 2001-08-18 02:36 . 2008-07-12 19:18 49211 c:\windows\system32\usrsdpia.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 49211 c:\windows\system32\usrsdpia.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 77883 c:\windows\system32\usrrtosa.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 77883 c:\windows\system32\usrrtosa.dll
    + 2001-08-18 02:37 . 2008-07-12 19:18 61508 c:\windows\system32\usrprbda.exe
    - 2001-08-17 20:37 . 2009-10-19 07:39 61508 c:\windows\system32\usrprbda.exe
    + 2001-08-18 02:37 . 2008-07-12 19:18 77891 c:\windows\system32\usrmlnka.exe
    - 2001-08-17 20:37 . 2009-10-19 07:39 77891 c:\windows\system32\usrmlnka.exe
    + 2001-08-18 02:36 . 2008-07-12 19:18 53305 c:\windows\system32\usrlbva.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 53305 c:\windows\system32\usrlbva.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 86073 c:\windows\system32\usrfaxa.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 86073 c:\windows\system32\usrfaxa.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 77890 c:\windows\system32\usrdpa.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 77890 c:\windows\system32\usrdpa.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 69699 c:\windows\system32\usrcoina.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 69699 c:\windows\system32\usrcoina.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 61500 c:\windows\system32\usrcntra.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 61500 c:\windows\system32\usrcntra.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\usmt\log.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\usmt\log.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\userinit.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\userinit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 47872 c:\windows\system32\user.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 47872 c:\windows\system32\user.exe
    - 2009-12-13 00:31 . 2008-04-14 03:42 74240 c:\windows\system32\usbui.dll
    + 2008-04-14 09:42 . 2008-07-12 19:19 74240 c:\windows\system32\usbui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\usbmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\usbmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\ureg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\ureg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18432 c:\windows\system32\ups.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\ups.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\upnpcont.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\upnpcont.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\uniplat.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\uniplat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74240 c:\windows\system32\unimdmat.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 74240 c:\windows\system32\unimdmat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\umdmxfrm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\umdmxfrm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\umandlg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\umandlg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 82432 c:\windows\system32\ufat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\ufat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\udhisapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\udhisapi.dll
    - 2009-10-19 07:27 . 2010-06-21 14:46 46080 c:\windows\system32\tzchange.exe
    + 2008-07-12 19:08 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 36352 c:\windows\system32\typeperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\typeperf.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 57856 c:\windows\system32\twext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\twext.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 16896 c:\windows\system32\tsshutdn.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\tsshutdn.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\tspkg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\tspkg.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 16384 c:\windows\system32\tskill.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 16384 c:\windows\system32\tskill.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 53248 c:\windows\system32\tsgqec.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 53248 c:\windows\system32\tsgqec.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 14848 c:\windows\system32\tsdiscon.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\tsdiscon.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12168 c:\windows\system32\tsddd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12168 c:\windows\system32\tsddd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\tsd32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\tsd32.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 14848 c:\windows\system32\tscon.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\tscon.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 93696 c:\windows\system32\tscfgwmi.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 93696 c:\windows\system32\tscfgwmi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 52224 c:\windows\system32\tsappcmp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 52224 c:\windows\system32\tsappcmp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 90112 c:\windows\system32\trkwks.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\trkwks.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\tree.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\tree.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 31232 c:\windows\system32\traffic.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 31232 c:\windows\system32\traffic.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 31744 c:\windows\system32\tracert6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\tracert6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\tracert.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\tracert.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13888 c:\windows\system32\toolhelp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13888 c:\windows\system32\toolhelp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 73216 c:\windows\system32\tlntsvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 73216 c:\windows\system32\tlntsvr.exe
    - 2009-10-19 07:27 . 2009-10-19 07:27 80896 c:\windows\system32\tlntsess.exe
    + 2008-04-14 08:00 . 2009-06-12 12:31 80896 c:\windows\system32\tlntsess.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\tlntadmn.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 61440 c:\windows\system32\tlntadmn.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\tftp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\tftp.exe
    - 2009-06-12 11:03 . 2009-06-12 11:03 76288 c:\windows\system32\telnet.exe
    + 2008-04-14 08:00 . 2009-06-12 12:31 76288 c:\windows\system32\telnet.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\tcpsvcs.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\tcpsvcs.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 45568 c:\windows\system32\tcpmonui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\tcpmonui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\tcpmon.dll
    - 2009-10-19 07:27 . 2009-10-19 07:27 45568 c:\windows\system32\tcpmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\tcpmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\tcpmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\tcmsetup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\tcmsetup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\taskman.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\taskman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\tasklist.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 77824 c:\windows\system32\tasklist.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 76288 c:\windows\system32\taskkill.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76288 c:\windows\system32\taskkill.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 78848 c:\windows\system32\tapiui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 78848 c:\windows\system32\tapiui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19200 c:\windows\system32\tapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19200 c:\windows\system32\tapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 71680 c:\windows\system32\systeminfo.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\systeminfo.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\syskey.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\syskey.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\sysinv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\sysinv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18896 c:\windows\system32\sysedit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18896 c:\windows\system32\sysedit.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 57856 c:\windows\system32\synceng.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\synceng.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\syncapp.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 51200 c:\windows\system32\syncapp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\svchost.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\strmfilt.dll
    - 2008-04-14 11:00 . 2009-10-21 05:38 75776 c:\windows\system32\strmfilt.dll
    - 2009-12-13 00:28 . 2008-04-14 03:42 74752 c:\windows\system32\storprop.dll
    + 2009-12-13 00:28 . 2008-04-14 14:42 74752 c:\windows\system32\storprop.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\stimon.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\stimon.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 68096 c:\windows\system32\sti.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\sti.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 59392 c:\windows\system32\stclient.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 59392 c:\windows\system32\stclient.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\ssstars.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\ssstars.scr
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\ssmyst.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\ssmyst.scr
    - 2008-04-14 11:00 . 2008-04-14 11:00 47104 c:\windows\system32\ssmypics.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 47104 c:\windows\system32\ssmypics.scr
    - 2008-04-14 11:00 . 2008-04-14 11:00 20992 c:\windows\system32\ssmarque.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\ssmarque.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\ssdpsrv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 71680 c:\windows\system32\ssdpsrv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34816 c:\windows\system32\ssdpapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\ssdpapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\ssbezier.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\ssbezier.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 96768 c:\windows\system32\srvsvc.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 67584 c:\windows\system32\srclient.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 67584 c:\windows\system32\srclient.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 49179 c:\windows\system32\sqlwoa.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49179 c:\windows\system32\sqlwoa.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24603 c:\windows\system32\sqlwid.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 24603 c:\windows\system32\sqlwid.dll
    + 2009-12-13 06:34 . 2009-01-07 23:21 26144 c:\windows\system32\spupdsvc.exe
    - 2009-12-13 06:34 . 2009-10-19 07:31 26144 c:\windows\system32\spupdsvc.exe
    - 2001-08-17 20:36 . 2009-10-19 07:39 72192 c:\windows\system32\sprio800.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 72192 c:\windows\system32\sprio800.dll
    - 2001-08-17 20:36 . 2009-10-19 07:39 70656 c:\windows\system32\sprio600.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 70656 c:\windows\system32\sprio600.dll
    + 2008-04-14 08:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    - 2008-04-14 11:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 75264 c:\windows\system32\spoolss.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\spoolss.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\spnpinst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\spnpinst.exe
    - 2001-08-17 20:36 . 2009-10-19 07:39 69632 c:\windows\system32\spnike.dll
    + 2001-08-18 02:36 . 2008-07-12 19:18 69632 c:\windows\system32\spnike.dll
    + 2009-12-13 06:43 . 2009-01-07 23:20 16928 c:\windows\system32\spmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\spiisupd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\sort.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 24576 c:\windows\system32\sort.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 56832 c:\windows\system32\sol.exe
    + 2012-03-07 22:20 . 2009-08-07 00:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\snmpapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\snmpapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\smss.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\smss.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 89600 c:\windows\system32\smlogsvc.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 89600 c:\windows\system32\smlogsvc.exe
    sjy, Mar 8, 2012
    #54

  15. sjy Newcomer, in training Posts: 58

    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\slbrccsp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\slbrccsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\slbiop.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 98304 c:\windows\system32\slbiop.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\slayerxp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\slayerxp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\skeys.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\skeys.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\sisbkup.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\sisbkup.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 70144 c:\windows\system32\sigverif.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 70144 c:\windows\system32\sigverif.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\sigtab.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\sigtab.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\shutdown.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\shutdown.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 27648 c:\windows\system32\shscrap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\shscrap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 77824 c:\windows\system32\shrpubw.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\shrpubw.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 45056 c:\windows\system32\shmgrate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 45056 c:\windows\system32\shmgrate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\shimeng.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 68096 c:\windows\system32\shgina.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\shgina.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\shfolder.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\shfolder.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 14848 c:\windows\system32\shadow.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\shadow.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\sfmapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\sfmapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11753 c:\windows\system32\setver.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11753 c:\windows\system32\setver.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\setupn.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\setupn.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\Setup\tabletoc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 33792 c:\windows\system32\Setup\tabletoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\Setup\ocgen.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\Setup\ocgen.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62976 c:\windows\system32\Setup\ntoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\Setup\ntoc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 77312 c:\windows\system32\Setup\netoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\Setup\netoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\Setup\msdtcstp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 90112 c:\windows\system32\Setup\msdtcstp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\Setup\medctroc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\Setup\medctroc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\setup.exe
    - 2009-10-19 07:50 . 2008-04-14 02:42 23040 c:\windows\system32\setup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 31232 c:\windows\system32\sethc.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 31232 c:\windows\system32\sethc.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\serwvdrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\serwvdrv.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 56320 c:\windows\system32\servdeps.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 56320 c:\windows\system32\servdeps.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\serialui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\serialui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\senscfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\senscfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\sens.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\sens.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 54784 c:\windows\system32\sendmail.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\sendmail.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29184 c:\windows\system32\sendcmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29184 c:\windows\system32\sendcmsg.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 56832 c:\windows\system32\secur32.dll
    + 2008-04-14 08:00 . 2009-06-25 08:25 56832 c:\windows\system32\secur32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\seclogon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\seclogon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\secedit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\secedit.exe
    - 2008-04-14 11:00 . 2008-04-14 03:42 29184 c:\windows\system32\sdhcinst.dll
    + 2008-04-14 08:00 . 2008-04-14 14:42 29184 c:\windows\system32\sdhcinst.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 77312 c:\windows\system32\sdbinst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\sdbinst.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 10240 c:\windows\system32\scriptpw.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\scriptpw.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\scredir.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\scredir.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\sclgntfy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\sclgntfy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 95744 c:\windows\system32\scardsvr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 95744 c:\windows\system32\scardsvr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 69632 c:\windows\system32\scarddlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\scarddlg.dll
    + 2008-04-14 08:00 . 2009-02-06 10:39 35328 c:\windows\system32\sc.exe
    - 2009-10-19 07:26 . 2009-10-19 07:26 35328 c:\windows\system32\sc.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\savedump.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\savedump.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\samlib.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 64000 c:\windows\system32\samlib.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 45568 c:\windows\system32\safrslv.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 45568 c:\windows\system32\safrslv.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 29696 c:\windows\system32\safrdm.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 29696 c:\windows\system32\safrdm.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 43520 c:\windows\system32\safrcdlg.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 43520 c:\windows\system32\safrcdlg.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 15872 c:\windows\system32\rwinsta.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 15872 c:\windows\system32\rwinsta.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\runonce.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\runonce.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\rundll32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\rundll32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\runas.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\runas.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\rtutils.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44032 c:\windows\system32\rtutils.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\rtm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 98304 c:\windows\system32\rtm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\rtipxmib.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 31744 c:\windows\system32\rtipxmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\rtcshare.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 92672 c:\windows\system32\rsvpsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\rsvpsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\rsvpmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\rsvpmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62976 c:\windows\system32\rsopprov.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\rsopprov.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 49152 c:\windows\system32\rsmui.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\rsmui.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 24576 c:\windows\system32\rsmsink.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\rsmsink.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\rsmps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\rsmps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\rsm.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 49152 c:\windows\system32\rsm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\rshx32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39936 c:\windows\system32\rshx32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\rsh.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\rsh.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\rsfsaps.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\rsfsaps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\rpcns4.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\rpcns4.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25600 c:\windows\system32\routemon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\routemon.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\route.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\route.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\rexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\rexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\resutils.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 58880 c:\windows\system32\resutils.dll
    - 2009-12-13 06:37 . 2008-04-14 11:00 47104 c:\windows\system32\Restore\srdiag.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 47104 c:\windows\system32\Restore\srdiag.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\replace.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\replace.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 60416 c:\windows\system32\remotepg.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 60416 c:\windows\system32\remotepg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\relog.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\relog.exe
    + 2012-03-07 21:41 . 2008-08-01 16:36 54784 c:\windows\system32\ReinstallBackups\0003\DriverFiles\nvefdxp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\regsvr32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\regsvr32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\regsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\regsvc.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 33792 c:\windows\system32\regini.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 33792 c:\windows\system32\regini.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 49664 c:\windows\system32\regapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49664 c:\windows\system32\regapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\reg.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 67072 c:\windows\system32\rdshost.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 67072 c:\windows\system32\rdshost.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 13824 c:\windows\system32\rdsaddin.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 13824 c:\windows\system32\rdsaddin.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 87176 c:\windows\system32\rdpwsx.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 87176 c:\windows\system32\rdpwsx.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 19968 c:\windows\system32\rdpsnd.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 19968 c:\windows\system32\rdpsnd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92424 c:\windows\system32\rdpdd.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 92424 c:\windows\system32\rdpdd.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 62976 c:\windows\system32\rdpclip.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 62976 c:\windows\system32\rdpclip.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\rcp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\rcp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\rcimlby.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\rcimlby.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 58368 c:\windows\system32\rastapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 58368 c:\windows\system32\rastapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\rasser.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\rasser.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\rassapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\rassapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\rasrad.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\rasrad.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61952 c:\windows\system32\rasqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61952 c:\windows\system32\rasqec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 56832 c:\windows\system32\rasphone.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 56832 c:\windows\system32\rasphone.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\rasmxs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22528 c:\windows\system32\rasmxs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61440 c:\windows\system32\rasman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\rasman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\rasdial.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\rasdial.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\rasctrs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\rasctrs.dll
    + 2008-04-14 08:00 . 2009-10-12 13:38 79872 c:\windows\system32\raschap.dll
    - 2008-04-14 11:00 . 2009-10-12 13:28 79872 c:\windows\system32\raschap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\rasautou.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\rasautou.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 88576 c:\windows\system32\rasauto.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 88576 c:\windows\system32\rasauto.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 43520 c:\windows\system32\racpldlg.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 43520 c:\windows\system32\racpldlg.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 22016 c:\windows\system32\qwinsta.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 22016 c:\windows\system32\qwinsta.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\qutil.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 76800 c:\windows\system32\qutil.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 19968 c:\windows\system32\qprocess.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 19968 c:\windows\system32\qprocess.exe
    - 2009-12-13 06:36 . 2008-04-14 11:00 18944 c:\windows\system32\qmgrprxy.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 18944 c:\windows\system32\qmgrprxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\qcliprov.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62464 c:\windows\system32\qcliprov.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 16896 c:\windows\system32\qappsrv.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\qappsrv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 34304 c:\windows\system32\pstorsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34304 c:\windows\system32\pstorsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 43520 c:\windows\system32\pstorec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 43520 c:\windows\system32\pstorec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10752 c:\windows\system32\pschdprf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\pschdprf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 96768 c:\windows\system32\psbase.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\psapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23040 c:\windows\system32\psapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\proquota.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\profmap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27648 c:\windows\system32\profmap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15860 c:\windows\system32\prnqctl.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 15860 c:\windows\system32\prnqctl.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 29454 c:\windows\system32\prnport.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 29454 c:\windows\system32\prnport.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 32546 c:\windows\system32\prnmngr.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 32546 c:\windows\system32\prnmngr.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 21527 c:\windows\system32\prnjobs.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 21527 c:\windows\system32\prnjobs.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 25415 c:\windows\system32\prndrvr.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 25415 c:\windows\system32\prndrvr.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 35755 c:\windows\system32\prncnfg.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 35755 c:\windows\system32\prncnfg.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\prflbmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\prflbmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\powrprof.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\powrprof.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 49152 c:\windows\system32\powercfg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\powercfg.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 58880 c:\windows\system32\pnrpnsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\pnrpnsp.dll
    + 2008-04-23 00:16 . 2009-03-08 09:31 46592 c:\windows\system32\pngfilt.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 46592 c:\windows\system32\pngfilt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 46592 c:\windows\system32\pmspl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 46592 c:\windows\system32\pmspl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\plustab.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 30720 c:\windows\system32\plustab.dll
    - 2008-04-14 03:42 . 2009-10-19 07:40 15360 c:\windows\system32\pjlmon.dll
    + 2008-04-14 09:42 . 2008-07-12 19:19 15360 c:\windows\system32\pjlmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\ping6.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\ping6.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\ping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\ping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\pifmgr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35328 c:\windows\system32\pifmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\pidgen.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 24064 c:\windows\system32\pidgen.dll
    + 2008-04-14 09:42 . 2008-07-12 19:19 35328 c:\windows\system32\pid.dll
    - 2008-04-14 03:42 . 2009-10-19 07:40 35328 c:\windows\system32\pid.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\perfts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\perfts.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34816 c:\windows\system32\perfproc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\perfproc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\perfos.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\perfos.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\perfnet.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\perfnet.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\perfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\perfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\perfdisk.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\perfdisk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28626 c:\windows\system32\perfd009.dat
    - 2008-04-14 11:00 . 2008-04-14 11:00 28626 c:\windows\system32\perfd009.dat
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\perfctrs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39936 c:\windows\system32\perfctrs.dll
    + 2008-04-14 11:00 . 2012-03-08 12:53 72452 c:\windows\system32\perfc009.dat
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\pentnt.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\pentnt.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\pautoenr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 67584 c:\windows\system32\pautoenr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\pathping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\pathping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\panmap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10240 c:\windows\system32\panmap.dll
    + 2008-04-14 08:00 . 2011-11-18 12:35 60416 c:\windows\system32\packager.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 40448 c:\windows\system32\osuninst.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 40448 c:\windows\system32\osuninst.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 67584 c:\windows\system32\osuninst.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\osuninst.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 67584 c:\windows\system32\openfiles.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\openfiles.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 51200 c:\windows\system32\oobe\oobebaln.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 29184 c:\windows\system32\oobe\msoobe.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 19456 c:\windows\system32\oobe\msobweb.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 30720 c:\windows\system32\oobe\msobshel.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 16384 c:\windows\system32\oobe\msobdl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\olethk32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69120 c:\windows\system32\olethk32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\olesvr32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\olesvr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\olesvr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 24064 c:\windows\system32\olesvr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 84992 c:\windows\system32\olepro32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 84992 c:\windows\system32\olepro32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37376 c:\windows\system32\olecnv32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 37376 c:\windows\system32\olecnv32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74752 c:\windows\system32\olecli32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 74752 c:\windows\system32\olecli32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\olecli.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 82944 c:\windows\system32\olecli.dll
    + 2008-04-14 08:00 . 2011-09-26 07:11 20480 c:\windows\system32\oleaccrc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39744 c:\windows\system32\ole2.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39744 c:\windows\system32\ole2.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20511 c:\windows\system32\odtext32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20511 c:\windows\system32\odtext32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20510 c:\windows\system32\odpdx32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\odpdx32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\odfox32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20510 c:\windows\system32\odfox32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20510 c:\windows\system32\odexl32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\odexl32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20511 c:\windows\system32\oddbse32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20511 c:\windows\system32\oddbse32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\odbcp32r.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\odbcp32r.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53279 c:\windows\system32\odbcji32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53279 c:\windows\system32\odbcji32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 94208 c:\windows\system32\odbcint.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94208 c:\windows\system32\odbcint.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\odbccu32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 65536 c:\windows\system32\odbccu32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 65536 c:\windows\system32\odbccr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\odbccr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\odbcconf.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 69632 c:\windows\system32\odbcconf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\odbcbcp.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 24576 c:\windows\system32\odbcbcp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\odbcad32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\odbcad32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\odbc32gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\odbc32gt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26224 c:\windows\system32\odbc16gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26224 c:\windows\system32\odbc16gt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 67584 c:\windows\system32\ocmanage.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\ocmanage.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\nwwks.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 65536 c:\windows\system32\nwwks.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\nwcfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\nwcfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\nwapi32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 64000 c:\windows\system32\nwapi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\nwapi16.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\nwapi16.dll
    + 2009-11-21 01:32 . 2009-11-21 01:32 81920 c:\windows\system32\nvwddi.dll
    - 2009-11-21 02:32 . 2009-11-21 02:32 81920 c:\windows\system32\nvwddi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\ntvdmd.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\ntvdmd.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\ntsdexts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\ntsdexts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\ntsd.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 31744 c:\windows\system32\ntsd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 91136 c:\windows\system32\ntprint.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 91136 c:\windows\system32\ntprint.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\ntmsevt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\ntmsevt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\ntmsapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 40960 c:\windows\system32\ntmsapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\ntlanui2.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\ntlanui2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\ntlanui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 57856 c:\windows\system32\ntlanui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44032 c:\windows\system32\ntlanman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\ntlanman.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34560 c:\windows\system32\ntio804.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\ntio804.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 35424 c:\windows\system32\ntio412.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 35424 c:\windows\system32\ntio412.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 35648 c:\windows\system32\ntio411.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 35648 c:\windows\system32\ntio411.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\ntio404.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 34560 c:\windows\system32\ntio404.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 33840 c:\windows\system32\ntio.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 33840 c:\windows\system32\ntio.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\ntdsbcli.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\ntdsbcli.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67072 c:\windows\system32\ntdsapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29146 c:\windows\system32\ntdos804.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29146 c:\windows\system32\ntdos804.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 29274 c:\windows\system32\ntdos412.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29274 c:\windows\system32\ntdos412.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29370 c:\windows\system32\ntdos411.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 29370 c:\windows\system32\ntdos411.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29146 c:\windows\system32\ntdos404.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 29146 c:\windows\system32\ntdos404.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 27866 c:\windows\system32\ntdos.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 27866 c:\windows\system32\ntdos.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 76800 c:\windows\system32\nslookup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\nslookup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 54784 c:\windows\system32\npptools.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\npptools.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\npp\nppagent.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\npp\nppagent.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 57344 c:\windows\system32\npp\ndisnpp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\npp\ndisnpp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\notepad.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 69120 c:\windows\system32\notepad.exe
    - 2009-10-19 07:31 . 2009-10-19 07:31 23552 c:\windows\system32\normaliz.dll
    + 2008-07-12 19:10 . 2009-01-07 23:20 23552 c:\windows\system32\normaliz.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 28672 c:\windows\system32\nmmkcert.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 12288 c:\windows\system32\nmevtmsg.dll
    + 2008-07-12 19:10 . 2009-01-07 23:20 24576 c:\windows\system32\nlsdl.dll
    - 2009-10-19 07:31 . 2009-10-19 07:31 24576 c:\windows\system32\nlsdl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\nlhtml.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 98304 c:\windows\system32\nlhtml.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 80896 c:\windows\system32\netui0.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 80896 c:\windows\system32\netui0.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\netstat.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\netstat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 86016 c:\windows\system32\netsh.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 86016 c:\windows\system32\netsh.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\netrap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\netrap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\net.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 42496 c:\windows\system32\net.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\nddenb32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\nddenb32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\nddeapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\nddeapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36352 c:\windows\system32\ncobjapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\ncobjapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\nbtstat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\nbtstat.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\narrhook.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\narrhook.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53760 c:\windows\system32\narrator.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\narrator.exe
    - 2009-10-19 07:26 . 2009-10-19 07:26 30208 c:\windows\system32\napipsec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\napipsec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 90624 c:\windows\system32\mydocs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90624 c:\windows\system32\mydocs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\mycomput.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 90112 c:\windows\system32\mycomput.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 87552 c:\windows\system32\mui\0009\hhctrlui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87552 c:\windows\system32\mui\0009\hhctrlui.dll
    + 2009-12-13 06:34 . 2008-06-12 14:23 91648 c:\windows\system32\mtxoci.dll
    - 2009-12-13 06:34 . 2009-10-19 07:26 91648 c:\windows\system32\mtxoci.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 34304 c:\windows\system32\mtxlegih.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 34304 c:\windows\system32\mtxlegih.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 30720 c:\windows\system32\mtxdm.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 30720 c:\windows\system32\mtxdm.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 66560 c:\windows\system32\mtxclu.dll
    + 2008-04-14 08:00 . 2008-06-12 14:23 66560 c:\windows\system32\mtxclu.dll
    + 2008-04-14 09:42 . 2009-11-27 17:23 17920 c:\windows\system32\msyuv.dll
    - 2008-04-14 03:42 . 2009-11-27 17:23 17920 c:\windows\system32\msyuv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\msxmlr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\msxmlr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 79872 c:\windows\system32\msxml6r.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 79872 c:\windows\system32\msxml6r.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44032 c:\windows\system32\msxml3r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\msxml3r.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 37916 c:\windows\system32\msxml2r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37916 c:\windows\system32\msxml2r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\msw3prt.dll
    - 2008-04-14 11:00 . 2009-11-27 16:28 28672 c:\windows\system32\msvidc32.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 28672 c:\windows\system32\msvidc32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\msvcrt40.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61440 c:\windows\system32\msvcrt40.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 57344 c:\windows\system32\msvcirt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\msvcirt.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 12288 c:\windows\system32\mstinit.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 12288 c:\windows\system32\mstinit.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\msswch.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\msswch.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\mssign32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\mssign32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\msshavmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 76800 c:\windows\system32\msshavmsg.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 11264 c:\windows\system32\msrle32.dll
    - 2008-04-14 11:00 . 2009-11-27 16:28 11264 c:\windows\system32\msrle32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28746 c:\windows\system32\msrecr40.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28746 c:\windows\system32\msrecr40.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 73802 c:\windows\system32\msrclr40.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 73802 c:\windows\system32\msrclr40.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\msratelc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60416 c:\windows\system32\msratelc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69632 c:\windows\system32\msr2c.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\msr2c.dll
    sjy, Mar 8, 2012
    #55

  16. sjy Newcomer, in training Posts: 58

    - 2008-04-14 11:00 . 2008-04-14 11:00 48128 c:\windows\system32\msprivs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 48128 c:\windows\system32\msprivs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\msports.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 41984 c:\windows\system32\msports.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 27136 c:\windows\system32\mspmsnsv.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 27136 c:\windows\system32\mspmsnsv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\mspatcha.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29696 c:\windows\system32\mspatcha.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\msorc32r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\msorc32r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\msobjs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\msobjs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\mslbui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\mslbui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60192 c:\windows\system32\msjter40.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60192 c:\windows\system32\msjter40.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\msisip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\msiregmv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 78848 c:\windows\system32\msiexec.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\msidntld.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\msidntld.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51712 c:\windows\system32\msident.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51712 c:\windows\system32\msident.dll
    + 2008-07-12 19:10 . 2009-03-08 09:31 48128 c:\windows\system32\mshtmler.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 48128 c:\windows\system32\mshtmler.dll
    - 2009-10-19 07:26 . 2010-09-10 05:57 66560 c:\windows\system32\mshtmled.dll
    + 2008-04-23 00:16 . 2011-12-17 19:46 66560 c:\windows\system32\mshtmled.dll
    + 2008-07-12 19:10 . 2009-03-08 09:31 45568 c:\windows\system32\mshta.exe
    - 2009-10-19 07:26 . 2009-10-19 07:26 45568 c:\windows\system32\mshta.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\msgsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 33792 c:\windows\system32\msgsvc.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 20992 c:\windows\system32\msg.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 20992 c:\windows\system32\msg.exe
    + 2008-07-12 19:10 . 2009-03-08 09:31 13312 c:\windows\system32\msfeedssync.exe
    - 2009-10-19 07:30 . 2009-10-19 07:30 13312 c:\windows\system32\msfeedssync.exe
    - 2009-10-19 07:30 . 2010-09-10 05:57 55296 c:\windows\system32\msfeedsbs.dll
    + 2008-04-23 00:16 . 2011-12-17 19:46 55296 c:\windows\system32\msfeedsbs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94282 c:\windows\system32\msencode.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 94282 c:\windows\system32\msencode.dll
    + 2009-12-13 06:34 . 2008-06-12 14:23 58880 c:\windows\system32\msdtclog.dll
    - 2009-12-13 06:34 . 2009-10-19 07:26 58880 c:\windows\system32\msdtclog.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
    - 2009-12-13 06:34 . 2008-04-14 11:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\msdmo.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\msdmo.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68608 c:\windows\system32\MSCTFP.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 68608 c:\windows\system32\MSCTFP.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36864 c:\windows\system32\mscpxl32.dLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\mscpxl32.dLL
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\mscpx32r.dLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\mscpx32r.dLL
    + 2012-03-07 22:06 . 2008-04-14 08:00 69632 c:\windows\system32\msconf.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 74240 c:\windows\system32\mscms.dll
    + 2008-04-14 08:00 . 2008-06-24 16:43 74240 c:\windows\system32\mscms.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 65024 c:\windows\system32\msaudite.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\msaudite.dll
    + 2008-04-14 08:00 . 2009-09-04 21:03 58880 c:\windows\system32\msasn1.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 58880 c:\windows\system32\msasn1.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 86016 c:\windows\system32\msapsspc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 86016 c:\windows\system32\msapsspc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\msacm32.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\msacm32.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\msacm32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 71680 c:\windows\system32\msacm32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61168 c:\windows\system32\msacm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61168 c:\windows\system32\msacm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\mrinfo.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\mrinfo.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\mqupgrd.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 49152 c:\windows\system32\mqupgrd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 95744 c:\windows\system32\mqsec.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 95744 c:\windows\system32\mqsec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 89088 c:\windows\system32\mqlogmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 89088 c:\windows\system32\mqlogmgr.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 16896 c:\windows\system32\mqise.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\mqise.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60928 c:\windows\system32\mqgentr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\mqgentr.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 47616 c:\windows\system32\mqdscli.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47616 c:\windows\system32\mqdscli.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10752 c:\windows\system32\mqcertui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\mqcertui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\mqbkup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\mqbkup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 47104 c:\windows\system32\mprui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47104 c:\windows\system32\mprui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 99840 c:\windows\system32\mprmsg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 99840 c:\windows\system32\mprmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53248 c:\windows\system32\mprdim.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53248 c:\windows\system32\mprdim.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\mprddm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69120 c:\windows\system32\mprddm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 87040 c:\windows\system32\mprapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\mprapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\mpr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\mpr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\mpnotify.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\mpnotify.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\more.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\more.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 10112 c:\windows\system32\modex.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10112 c:\windows\system32\modex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\mode.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\mode.com
    + 2012-03-07 22:06 . 2008-04-14 08:00 32768 c:\windows\system32\mnmsrvc.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 34560 c:\windows\system32\mnmdd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68768 c:\windows\system32\mmsystem.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 68768 c:\windows\system32\mmsystem.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 17408 c:\windows\system32\mmfutil.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 17408 c:\windows\system32\mmfutil.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\mmdrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\mmdrv.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 61440 c:\windows\system32\mmcshext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\mmcshext.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 33792 c:\windows\system32\mmcperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\mmcperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\mimefilt.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 29696 c:\windows\system32\mimefilt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51712 c:\windows\system32\migpwd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 51712 c:\windows\system32\migpwd.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 60928 c:\windows\system32\miglibnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\miglibnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\midimap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18944 c:\windows\system32\midimap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 46258 c:\windows\system32\mib.bin
    + 2008-04-14 08:00 . 2008-04-14 08:00 46258 c:\windows\system32\mib.bin
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\mgmtapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\mgmtapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22528 c:\windows\system32\mfcsubs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\mfcsubs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\mf3216.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 40960 c:\windows\system32\mf3216.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39274 c:\windows\system32\mem.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 39274 c:\windows\system32\mem.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\mdhcp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50176 c:\windows\system32\mdhcp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28160 c:\windows\system32\mciwave.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 28160 c:\windows\system32\mciwave.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\mciwave.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\mciwave.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25264 c:\windows\system32\mciseq.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 25264 c:\windows\system32\mciseq.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 23040 c:\windows\system32\mciseq.dll
    + 2008-04-14 08:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35328 c:\windows\system32\mciqtz32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\mciqtz32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\mcicda.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\mcicda.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 84480 c:\windows\system32\mciavi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 84480 c:\windows\system32\mciavi32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 73376 c:\windows\system32\mciavi.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 73376 c:\windows\system32\mciavi.drv
    - 2008-04-14 11:00 . 2008-04-14 11:00 10496 c:\windows\system32\mcdsrv32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10496 c:\windows\system32\mcdsrv32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10240 c:\windows\system32\mcd32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\mcd32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\mcastmib.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\mcastmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\makecab.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 57344 c:\windows\system32\makecab.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 72704 c:\windows\system32\magnify.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\magnify.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\lsass.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\lsass.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\lprhelp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10240 c:\windows\system32\lprhelp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\lpk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\lpk.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 15360 c:\windows\system32\logoff.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 15360 c:\windows\system32\logoff.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 59392 c:\windows\system32\logman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\logman.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 50176 c:\windows\system32\loghours.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\loghours.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 75264 c:\windows\system32\locator.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\locator.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\localui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\localui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 97280 c:\windows\system32\loadperf.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 97280 c:\windows\system32\loadperf.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\lnkstub.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\lnkstub.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\lmhsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\lmhsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\linkinfo.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\linkinfo.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29696 c:\windows\system32\lights.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\lights.exe
    + 2009-12-13 06:33 . 2008-04-14 08:00 58880 c:\windows\system32\licwmi.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 58880 c:\windows\system32\licwmi.dll
    - 2009-10-19 07:26 . 2009-10-19 07:26 11264 c:\windows\system32\laprxy.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 11264 c:\windows\system32\laprxy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 89600 c:\windows\system32\langwrbk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 89600 c:\windows\system32\langwrbk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37376 c:\windows\system32\l2gpstore.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 37376 c:\windows\system32\l2gpstore.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 92224 c:\windows\system32\krnl386.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 92224 c:\windows\system32\krnl386.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\kmsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61440 c:\windows\system32\kmsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42537 c:\windows\system32\keyboard.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 42537 c:\windows\system32\keyboard.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 42809 c:\windows\system32\key01.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 42809 c:\windows\system32\key01.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14710 c:\windows\system32\kb16.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 14710 c:\windows\system32\kb16.com
    - 2009-10-19 07:25 . 2010-09-10 05:57 25600 c:\windows\system32\jsproxy.dll
    + 2008-04-23 00:16 . 2011-12-17 19:46 25600 c:\windows\system32\jsproxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47952 c:\windows\system32\jobexec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 47952 c:\windows\system32\jobexec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 65536 c:\windows\system32\jgsh400.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\jgsh400.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\jgsd400.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 45568 c:\windows\system32\jgsd400.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\jgpl400.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27648 c:\windows\system32\jgpl400.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\jgmd400.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\jgmd400.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44544 c:\windows\system32\jgaw400.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44544 c:\windows\system32\jgaw400.dll
    + 2008-04-14 09:41 . 2009-11-27 16:07 48128 c:\windows\system32\iyuv_32.dll
    - 2008-04-14 03:41 . 2009-11-27 16:28 48128 c:\windows\system32\iyuv_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54272 c:\windows\system32\ixsso.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 54272 c:\windows\system32\ixsso.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 32768 c:\windows\system32\isrdbg32.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 81920 c:\windows\system32\isign32.dll
    + 2009-12-13 06:36 . 2010-11-18 18:12 81920 c:\windows\system32\isign32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\ipxwan.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 22016 c:\windows\system32\ipxwan.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 66560 c:\windows\system32\ipxsap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\ipxsap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\ipxrtmgr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39936 c:\windows\system32\ipxrtmgr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\ipxroute.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\ipxroute.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\ipxrip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\ipxrip.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69120 c:\windows\system32\ipxpromn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\ipxpromn.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 83968 c:\windows\system32\ipxmontr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 83968 c:\windows\system32\ipxmontr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\ipv6mon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\ipv6mon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53248 c:\windows\system32\ipv6.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 53248 c:\windows\system32\ipv6.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 44032 c:\windows\system32\ipsec6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\ipsec6.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 94720 c:\windows\system32\iphlpapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94720 c:\windows\system32\iphlpapi.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 55808 c:\windows\system32\ipconfig.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\ipconfig.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 30720 c:\windows\system32\iologmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\iologmsg.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 94720 c:\windows\system32\inseng.dll
    + 2008-07-12 19:10 . 2009-03-08 09:32 94720 c:\windows\system32\inseng.dll
    + 2008-04-14 11:00 . 2008-04-14 08:00 48128 c:\windows\system32\inetres.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 48128 c:\windows\system32\inetres.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\inetppui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\inetppui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\inetpp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\inetmib1.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\inetmib1.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 34816 c:\windows\system32\imgutil.dll
    + 2008-07-12 19:10 . 2009-03-08 09:31 34816 c:\windows\system32\imgutil.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36921 c:\windows\system32\imeshare.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 36921 c:\windows\system32\imeshare.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 81920 c:\windows\system32\ils.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 70656 c:\windows\system32\ifsutil.dll
    - 2009-10-19 07:29 . 2009-10-19 07:29 36864 c:\windows\system32\ieudinit.exe
    + 2008-04-22 03:39 . 2009-03-08 09:32 36864 c:\windows\system32\ieudinit.exe
    + 2008-07-12 19:10 . 2009-03-08 09:32 71680 c:\windows\system32\iesetup.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 71680 c:\windows\system32\iesetup.dll
    + 2008-04-23 00:16 . 2009-03-08 09:32 55808 c:\windows\system32\iernonce.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 55808 c:\windows\system32\iernonce.dll
    - 2009-10-19 07:29 . 2009-10-19 07:29 26112 c:\windows\system32\idndl.dll
    + 2008-07-12 19:10 . 2009-01-07 23:20 26112 c:\windows\system32\idndl.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 65536 c:\windows\system32\icwphbk.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 65536 c:\windows\system32\icwphbk.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 73728 c:\windows\system32\icwdial.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 73728 c:\windows\system32\icwdial.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 54784 c:\windows\system32\icmui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\icmui.dll
    - 2009-12-13 06:37 . 2008-04-14 11:00 16384 c:\windows\system32\icfgnt5.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 16384 c:\windows\system32\icfgnt5.dll
    + 2008-04-14 08:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
    - 2008-04-14 11:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
    + 2008-04-23 00:16 . 2009-03-08 09:31 59904 c:\windows\system32\icardie.dll
    - 2009-10-19 07:29 . 2009-10-19 07:29 59904 c:\windows\system32\icardie.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 11264 c:\windows\system32\icaapi.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 11264 c:\windows\system32\icaapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59392 c:\windows\system32\iassvcs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\iassvcs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 86528 c:\windows\system32\iassam.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 86528 c:\windows\system32\iassam.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\iaspolcy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\iaspolcy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\iasnap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62464 c:\windows\system32\iasnap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32256 c:\windows\system32\iashlpr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\iashlpr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\iasads.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 41472 c:\windows\system32\iasads.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\iasacct.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\iasacct.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 41984 c:\windows\system32\htui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\htui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\httpapi.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 44544 c:\windows\system32\hticons.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\hnetmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14848 c:\windows\system32\hnetmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\hlink.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 72704 c:\windows\system32\hlink.dll
    + 2008-04-14 09:41 . 2008-07-12 19:19 21504 c:\windows\system32\hidserv.dll
    - 2009-12-13 00:32 . 2008-04-14 03:41 21504 c:\windows\system32\hidserv.dll
    - 2008-04-14 03:41 . 2009-10-19 07:40 20992 c:\windows\system32\hid.dll
    + 2008-04-14 09:41 . 2008-07-12 19:19 20992 c:\windows\system32\hid.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\hhsetup.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 41472 c:\windows\system32\hhsetup.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\help.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\help.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\grpconv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\grpconv.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19694 c:\windows\system32\graphics.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 19694 c:\windows\system32\graphics.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\graftabl.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\graftabl.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 57344 c:\windows\system32\gpupdate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\gpupdate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\getmac.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\getmac.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\gdi.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 24576 c:\windows\system32\gdi.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\gcdef.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 76800 c:\windows\system32\gcdef.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\fwcfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60416 c:\windows\system32\fwcfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 42496 c:\windows\system32\ftp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\ftp.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 56320 c:\windows\system32\fsutil.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\fsutil.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 81408 c:\windows\system32\fsusd.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 81408 c:\windows\system32\fsusd.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 55296 c:\windows\system32\freecell.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\format.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 20992 c:\windows\system32\fontview.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\fontview.exe
    - 2009-10-19 07:25 . 2009-10-15 16:39 81920 c:\windows\system32\fontsub.dll
    + 2008-04-14 08:00 . 2009-10-15 16:28 81920 c:\windows\system32\fontsub.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\fmifs.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 23040 c:\windows\system32\fltMc.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 23040 c:\windows\system32\fltMc.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 16896 c:\windows\system32\fltlib.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 16896 c:\windows\system32\fltlib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87552 c:\windows\system32\fldrclnr.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27136 c:\windows\system32\findstr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\findstr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\feclient.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\feclient.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 73728 c:\windows\system32\fdeploy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 73728 c:\windows\system32\fdeploy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\fc.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 80384 c:\windows\system32\faultrep.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 80384 c:\windows\system32\faultrep.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 24064 c:\windows\system32\extrac32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\extrac32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\expand.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\expand.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 82944 c:\windows\system32\eventtriggers.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\eventtriggers.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 97965 c:\windows\system32\eventquery.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 97965 c:\windows\system32\eventquery.vbs
    - 2008-04-14 11:00 . 2008-04-14 11:00 56320 c:\windows\system32\eventlog.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\eventlog.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\eventcreate.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\eventcreate.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\eventcls.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\eventcls.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\esentutl.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\esentutl.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\esentprf.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\esentprf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\ersvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23040 c:\windows\system32\ersvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\encapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\encapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 40960 c:\windows\system32\en\mmcex.resources.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\en\mmcex.resources.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
    + 2009-12-13 06:36 . 2012-03-07 22:05 22720 c:\windows\system32\emptyregdb.dat
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\efsadu.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\efsadu.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12642 c:\windows\system32\edlin.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12642 c:\windows\system32\edlin.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 69886 c:\windows\system32\edit.com
    + 2008-04-14 08:00 . 2008-04-14 08:00 69886 c:\windows\system32\edit.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 33792 c:\windows\system32\eapsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\eapsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59392 c:\windows\system32\eapqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\eapqec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 40960 c:\windows\system32\eappprxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\eappprxy.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 94208 c:\windows\system32\eappgnui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94208 c:\windows\system32\eappgnui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\eapolqec.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 30720 c:\windows\system32\eapolqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dvdupgrd.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\dvdupgrd.exe
    + 2001-08-18 02:36 . 2008-07-12 19:18 55296 c:\windows\system32\dvdplay.exe
    - 2001-08-17 20:36 . 2009-10-19 07:39 55296 c:\windows\system32\dvdplay.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 10752 c:\windows\system32\dumprep.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dumprep.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dswave.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\dswave.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51200 c:\windows\system32\dssec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dssec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\dskquota.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 92672 c:\windows\system32\dskquota.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 71680 c:\windows\system32\dsdmoprp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dsdmoprp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62976 c:\windows\system32\dsauth.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dsauth.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\ds32gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\ds32gt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 45568 c:\windows\system32\drwtsn32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\drwtsn32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 28112 c:\windows\system32\drwatson.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 28112 c:\windows\system32\drwatson.exe
    - 2009-10-19 07:25 . 2009-10-19 07:25 14336 c:\windows\system32\drprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\drprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\drmstor.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 87040 c:\windows\system32\drmstor.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 82944 c:\windows\system32\drivers\wudfrd.sys
    - 2009-10-19 07:32 . 2009-10-19 07:32 82944 c:\windows\system32\drivers\wudfrd.sys
    + 2008-07-12 19:24 . 2008-07-12 19:24 77568 c:\windows\system32\drivers\wudfpf.sys
    - 2009-10-19 07:32 . 2009-10-19 07:32 77568 c:\windows\system32\drivers\wudfpf.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 12032 c:\windows\system32\drivers\ws2ifsl.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 12032 c:\windows\system32\drivers\ws2ifsl.sys
    - 2009-10-19 07:32 . 2009-10-19 07:32 38528 c:\windows\system32\drivers\wpdusb.sys
    + 2008-07-12 19:24 . 2008-07-12 19:24 38528 c:\windows\system32\drivers\wpdusb.sys
    - 2009-12-13 07:47 . 2008-04-14 04:47 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-14 04:47 . 2008-07-12 19:19 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\drivers\wanarp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 34560 c:\windows\system32\drivers\wanarp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 52352 c:\windows\system32\drivers\volsnap.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 52352 c:\windows\system32\drivers\volsnap.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 81664 c:\windows\system32\drivers\videoprt.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 42240 c:\windows\system32\drivers\viaagp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 20992 c:\windows\system32\drivers\vga.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\drivers\vga.sys
    + 2001-08-17 18:02 . 2008-07-12 19:18 58112 c:\windows\system32\drivers\vdmindvd.sys
    - 2001-08-17 12:02 . 2009-10-19 07:39 58112 c:\windows\system32\drivers\vdmindvd.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 26368 c:\windows\system32\drivers\usbstor.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 26368 c:\windows\system32\drivers\usbstor.sys
    - 2009-10-19 07:27 . 2009-10-19 07:27 17152 c:\windows\system32\drivers\usbohci.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 17152 c:\windows\system32\drivers\usbohci.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 15872 c:\windows\system32\drivers\usbintel.sys
    - 2008-04-13 22:15 . 2009-10-19 07:40 15872 c:\windows\system32\drivers\usbintel.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 59520 c:\windows\system32\drivers\usbhub.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 59520 c:\windows\system32\drivers\usbhub.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\drivers\usbehci.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 32128 c:\windows\system32\drivers\usbccgp.sys
    - 2008-04-13 22:15 . 2009-10-19 07:40 25728 c:\windows\system32\drivers\usbcamd2.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 25728 c:\windows\system32\drivers\usbcamd2.sys
    - 2008-04-13 22:15 . 2009-10-19 07:40 25600 c:\windows\system32\drivers\usbcamd.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 25600 c:\windows\system32\drivers\usbcamd.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\drivers\usb8023.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\drivers\usb8023.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 66048 c:\windows\system32\drivers\udfs.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 66048 c:\windows\system32\drivers\udfs.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 44672 c:\windows\system32\drivers\uagp35.sys
    + 2008-04-14 04:26 . 2008-07-12 19:19 12288 c:\windows\system32\drivers\tunmp.sys
    - 2008-04-13 22:26 . 2009-10-19 07:40 12288 c:\windows\system32\drivers\tunmp.sys
    + 2001-08-17 18:06 . 2008-07-12 19:18 21376 c:\windows\system32\drivers\tsbvcap.sys
    - 2001-08-17 12:06 . 2009-10-19 07:39 21376 c:\windows\system32\drivers\tsbvcap.sys
    + 2001-08-17 18:01 . 2008-07-12 19:18 51712 c:\windows\system32\drivers\tosdvd.sys
    - 2001-08-17 12:01 . 2009-10-19 07:39 51712 c:\windows\system32\drivers\tosdvd.sys
    + 2009-12-13 06:33 . 2008-04-14 14:43 40840 c:\windows\system32\drivers\termdd.sys
    - 2009-12-13 06:33 . 2008-04-14 09:43 40840 c:\windows\system32\drivers\termdd.sys
    + 2009-12-13 06:34 . 2008-04-14 08:00 21896 c:\windows\system32\drivers\tdtcp.sys
    - 2009-12-13 06:34 . 2008-04-14 11:00 12040 c:\windows\system32\drivers\tdpipe.sys
    + 2009-12-13 06:34 . 2008-04-14 08:00 12040 c:\windows\system32\drivers\tdpipe.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 19072 c:\windows\system32\drivers\tdi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 19072 c:\windows\system32\drivers\tdi.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14976 c:\windows\system32\drivers\tape.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 14976 c:\windows\system32\drivers\tape.sys
    - 2009-12-13 07:47 . 2008-04-14 04:45 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-14 04:45 . 2008-07-12 19:19 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 56576 c:\windows\system32\drivers\swmidi.sys
    - 2009-12-13 07:47 . 2008-04-14 04:15 56576 c:\windows\system32\drivers\swmidi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 15232 c:\windows\system32\drivers\streamip.sys
    - 2010-01-30 21:46 . 2008-04-14 03:16 15232 c:\windows\system32\drivers\StreamIP.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 49408 c:\windows\system32\drivers\stream.sys
    - 2008-04-13 22:15 . 2008-04-14 04:15 49408 c:\windows\system32\drivers\stream.sys
    + 2009-12-13 06:36 . 2008-04-14 08:00 73472 c:\windows\system32\drivers\sr.sys
    - 2009-12-13 06:36 . 2008-04-14 11:00 73472 c:\windows\system32\drivers\sr.sys
    + 2008-04-14 04:16 . 2008-07-12 19:19 25344 c:\windows\system32\drivers\sonydcam.sys
    - 2008-04-13 22:16 . 2009-10-19 07:40 25344 c:\windows\system32\drivers\sonydcam.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 14592 c:\windows\system32\drivers\smclib.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14592 c:\windows\system32\drivers\smclib.sys
    sjy, Mar 8, 2012
    #56

  17. sjy Newcomer, in training Posts: 58

    - 2010-01-30 21:46 . 2008-04-14 03:16 11136 c:\windows\system32\drivers\SLIP.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11136 c:\windows\system32\drivers\slip.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 40960 c:\windows\system32\drivers\sisagp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 11392 c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11392 c:\windows\system32\drivers\sfloppy.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11008 c:\windows\system32\drivers\sffp_sd.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\drivers\sffp_mmc.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 10240 c:\windows\system32\drivers\sffp_mmc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11904 c:\windows\system32\drivers\sffdisk.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 64512 c:\windows\system32\drivers\serial.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 64512 c:\windows\system32\drivers\serial.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 15744 c:\windows\system32\drivers\serenum.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 15744 c:\windows\system32\drivers\serenum.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\drivers\secdrv.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\drivers\secdrv.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 79232 c:\windows\system32\drivers\sdbus.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 96384 c:\windows\system32\drivers\scsiport.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 96384 c:\windows\system32\drivers\scsiport.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 30592 c:\windows\system32\drivers\rndismp.sys
    - 2009-10-19 07:26 . 2009-10-19 07:26 30592 c:\windows\system32\drivers\rndismp.sys
    - 2001-08-17 11:24 . 2009-10-19 07:39 12032 c:\windows\system32\drivers\riodrv.sys
    + 2001-08-17 17:24 . 2008-07-12 19:18 12032 c:\windows\system32\drivers\riodrv.sys
    + 2001-08-17 17:24 . 2008-07-12 19:18 12032 c:\windows\system32\drivers\rio8drv.sys
    - 2001-08-17 11:24 . 2009-10-19 07:39 12032 c:\windows\system32\drivers\rio8drv.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34432 c:\windows\system32\drivers\rawwan.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 34432 c:\windows\system32\drivers\rawwan.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 16512 c:\windows\system32\drivers\raspti.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 16512 c:\windows\system32\drivers\raspti.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 48384 c:\windows\system32\drivers\raspptp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 48384 c:\windows\system32\drivers\raspptp.sys
    - 2009-10-19 07:26 . 2009-10-19 07:26 41472 c:\windows\system32\drivers\raspppoe.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\drivers\raspppoe.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 51328 c:\windows\system32\drivers\rasl2tp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 51328 c:\windows\system32\drivers\rasl2tp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 17792 c:\windows\system32\drivers\ptilink.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 17792 c:\windows\system32\drivers\ptilink.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\drivers\psched.sys
    + 2008-04-14 04:01 . 2008-07-12 19:19 35840 c:\windows\system32\drivers\processr.sys
    - 2008-04-13 22:01 . 2009-10-19 07:40 35840 c:\windows\system32\drivers\processr.sys
    - 2008-04-14 11:00 . 2008-04-13 22:10 24960 c:\windows\system32\drivers\pciidex.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 24960 c:\windows\system32\drivers\pciidex.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 68224 c:\windows\system32\drivers\pci.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 68224 c:\windows\system32\drivers\pci.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 19712 c:\windows\system32\drivers\partmgr.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 19712 c:\windows\system32\drivers\partmgr.sys
    + 2008-04-14 04:10 . 2008-07-12 19:19 80128 c:\windows\system32\drivers\parport.sys
    - 2008-04-13 22:10 . 2009-10-19 07:40 80128 c:\windows\system32\drivers\parport.sys
    - 2008-04-13 22:01 . 2009-10-19 07:40 42752 c:\windows\system32\drivers\p3.sys
    + 2008-04-14 04:01 . 2008-07-12 19:19 42752 c:\windows\system32\drivers\p3.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 61696 c:\windows\system32\drivers\ohci1394.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 55936 c:\windows\system32\drivers\nwlnkspx.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 55936 c:\windows\system32\drivers\nwlnkspx.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 63232 c:\windows\system32\drivers\nwlnknb.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 63232 c:\windows\system32\drivers\nwlnknb.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 88320 c:\windows\system32\drivers\nwlnkipx.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 88320 c:\windows\system32\drivers\nwlnkipx.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 32512 c:\windows\system32\drivers\nwlnkfwd.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 32512 c:\windows\system32\drivers\nwlnkfwd.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 12416 c:\windows\system32\drivers\nwlnkflt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 12416 c:\windows\system32\drivers\nwlnkflt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 30848 c:\windows\system32\drivers\npfs.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 30848 c:\windows\system32\drivers\npfs.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 40320 c:\windows\system32\drivers\nmnt.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 40320 c:\windows\system32\drivers\nmnt.sys
    - 2001-08-17 11:24 . 2009-10-19 07:39 12032 c:\windows\system32\drivers\nikedrv.sys
    + 2001-08-17 17:24 . 2008-07-12 19:18 12032 c:\windows\system32\drivers\nikedrv.sys
    - 2008-04-13 22:21 . 2009-10-19 07:40 61824 c:\windows\system32\drivers\nic1394.sys
    + 2008-04-14 04:21 . 2008-07-12 19:19 61824 c:\windows\system32\drivers\nic1394.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 34688 c:\windows\system32\drivers\netbios.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34688 c:\windows\system32\drivers\netbios.sys
    + 2008-04-14 08:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 91520 c:\windows\system32\drivers\ndiswan.sys
    - 2008-04-13 22:26 . 2009-10-19 07:40 14592 c:\windows\system32\drivers\ndisuio.sys
    + 2008-04-14 04:26 . 2008-07-12 19:19 14592 c:\windows\system32\drivers\ndisuio.sys
    + 2008-04-14 08:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2008-04-14 04:16 . 2008-07-12 19:19 10880 c:\windows\system32\drivers\ndisip.sys
    - 2010-01-30 21:46 . 2008-04-14 03:16 10880 c:\windows\system32\drivers\NdisIP.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 15488 c:\windows\system32\drivers\mssmbios.sys
    - 2008-04-13 22:06 . 2009-10-19 07:40 15488 c:\windows\system32\drivers\mssmbios.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 35072 c:\windows\system32\drivers\msgpc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 35072 c:\windows\system32\drivers\msgpc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 19072 c:\windows\system32\drivers\msfs.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 19072 c:\windows\system32\drivers\msfs.sys
    - 2009-10-19 07:26 . 2009-10-19 07:26 92544 c:\windows\system32\drivers\mqac.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 92544 c:\windows\system32\drivers\mqac.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 42368 c:\windows\system32\drivers\mountmgr.sys
    + 2001-08-17 17:48 . 2008-07-12 19:18 12160 c:\windows\system32\drivers\mouhid.sys
    - 2001-08-17 11:48 . 2009-10-19 07:39 12160 c:\windows\system32\drivers\mouhid.sys
    + 2008-04-14 04:09 . 2008-07-12 19:19 23040 c:\windows\system32\drivers\mouclass.sys
    - 2008-04-13 22:09 . 2009-10-19 07:40 23040 c:\windows\system32\drivers\mouclass.sys
    + 2008-04-14 04:30 . 2008-07-12 19:19 30080 c:\windows\system32\drivers\modem.sys
    - 2008-04-13 22:30 . 2009-10-19 07:40 30080 c:\windows\system32\drivers\modem.sys
    - 2008-04-13 22:06 . 2009-10-19 07:40 63744 c:\windows\system32\drivers\mf.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 63744 c:\windows\system32\drivers\mf.sys
    + 2008-04-14 08:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
    - 2009-06-24 09:28 . 2009-06-24 09:28 92928 c:\windows\system32\drivers\ksecdd.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 14592 c:\windows\system32\drivers\kbdhid.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14592 c:\windows\system32\drivers\kbdhid.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 24576 c:\windows\system32\drivers\kbdclass.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\drivers\kbdclass.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 37248 c:\windows\system32\drivers\isapnp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 37248 c:\windows\system32\drivers\isapnp.sys
    + 2009-12-13 00:28 . 2008-04-14 08:00 11264 c:\windows\system32\drivers\irenum.sys
    - 2009-12-13 00:28 . 2008-04-14 11:00 11264 c:\windows\system32\drivers\irenum.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 75264 c:\windows\system32\drivers\ipsec.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\drivers\ipsec.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 20864 c:\windows\system32\drivers\ipinip.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 20864 c:\windows\system32\drivers\ipinip.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 32896 c:\windows\system32\drivers\ipfltdrv.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 32896 c:\windows\system32\drivers\ipfltdrv.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 36608 c:\windows\system32\drivers\ip6fw.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 36608 c:\windows\system32\drivers\ip6fw.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 36352 c:\windows\system32\drivers\intelppm.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\drivers\intelppm.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 42112 c:\windows\system32\drivers\imapi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 42112 c:\windows\system32\drivers\imapi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 52480 c:\windows\system32\drivers\i8042prt.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 52480 c:\windows\system32\drivers\i8042prt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 10368 c:\windows\system32\drivers\hidusb.sys
    - 2008-04-14 11:00 . 2008-04-14 04:15 10368 c:\windows\system32\drivers\hidusb.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 24960 c:\windows\system32\drivers\hidparse.sys
    - 2008-04-14 11:00 . 2008-04-14 04:15 24960 c:\windows\system32\drivers\hidparse.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\drivers\hidclass.sys
    - 2008-04-14 11:00 . 2008-04-14 04:15 36864 c:\windows\system32\drivers\hidclass.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 46464 c:\windows\system32\drivers\gagp30kx.sys
    - 2001-08-17 11:57 . 2009-10-19 07:39 12160 c:\windows\system32\drivers\fsvga.sys
    + 2001-08-17 17:57 . 2008-07-12 19:18 12160 c:\windows\system32\drivers\fsvga.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\drivers\flpydisk.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 44544 c:\windows\system32\drivers\fips.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 44544 c:\windows\system32\drivers\fips.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 27392 c:\windows\system32\drivers\fdc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 27392 c:\windows\system32\drivers\fdc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 71168 c:\windows\system32\drivers\dxg.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 71168 c:\windows\system32\drivers\dxg.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 10496 c:\windows\system32\drivers\dxapi.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 10496 c:\windows\system32\drivers\dxapi.sys
    - 2009-12-13 07:47 . 2008-04-14 04:15 60160 c:\windows\system32\drivers\drmk.sys
    + 2008-04-14 04:15 . 2008-07-12 19:19 60160 c:\windows\system32\drivers\drmk.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 14208 c:\windows\system32\drivers\diskdump.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14208 c:\windows\system32\drivers\diskdump.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\drivers\disk.sys
    - 2009-10-19 07:25 . 2009-10-19 07:25 36352 c:\windows\system32\drivers\disk.sys
    + 2008-04-14 04:01 . 2008-07-12 19:19 36736 c:\windows\system32\drivers\crusoe.sys
    - 2008-04-13 22:01 . 2009-10-19 07:40 36736 c:\windows\system32\drivers\crusoe.sys
    - 2001-08-17 11:24 . 2009-10-19 07:39 11776 c:\windows\system32\drivers\cpqdap01.sys
    + 2001-08-17 17:24 . 2008-07-12 19:18 11776 c:\windows\system32\drivers\cpqdap01.sys
    - 2010-05-06 21:22 . 2008-04-14 02:06 10240 c:\windows\system32\drivers\compbatt.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 10240 c:\windows\system32\drivers\compbatt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 49536 c:\windows\system32\drivers\classpnp.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 49536 c:\windows\system32\drivers\classpnp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\drivers\cdrom.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 63744 c:\windows\system32\drivers\cdfs.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 63744 c:\windows\system32\drivers\cdfs.sys
    + 2001-08-17 17:52 . 2008-07-12 19:18 18688 c:\windows\system32\drivers\cdaudio.sys
    - 2001-08-17 11:52 . 2009-10-19 07:39 18688 c:\windows\system32\drivers\cdaudio.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 13952 c:\windows\system32\drivers\cbidf2k.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 13952 c:\windows\system32\drivers\cbidf2k.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 71552 c:\windows\system32\drivers\bridge.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 71552 c:\windows\system32\drivers\bridge.sys
    - 2010-05-06 21:22 . 2008-04-14 02:06 14208 c:\windows\system32\drivers\battc.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 14208 c:\windows\system32\drivers\battc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\drivers\atmlane.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 55808 c:\windows\system32\drivers\atmlane.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 31360 c:\windows\system32\drivers\atmepvc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 31360 c:\windows\system32\drivers\atmepvc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\drivers\atmarpc.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\drivers\atmarpc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 96512 c:\windows\system32\drivers\atapi.sys
    - 2008-04-14 11:00 . 2008-04-13 22:10 96512 c:\windows\system32\drivers\atapi.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\drivers\asyncmac.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\drivers\asyncmac.sys
    - 2008-04-13 22:21 . 2009-10-19 07:40 60800 c:\windows\system32\drivers\arp1394.sys
    + 2008-04-14 04:21 . 2008-07-12 19:19 60800 c:\windows\system32\drivers\arp1394.sys
    - 2008-04-13 22:01 . 2009-10-19 07:40 37760 c:\windows\system32\drivers\amdk7.sys
    + 2008-04-14 04:01 . 2008-07-12 19:19 37760 c:\windows\system32\drivers\amdk7.sys
    + 2008-04-14 04:01 . 2008-07-12 19:19 37376 c:\windows\system32\drivers\amdk6.sys
    - 2008-04-13 22:01 . 2009-10-19 07:40 37376 c:\windows\system32\drivers\amdk6.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 43008 c:\windows\system32\drivers\amdagp.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 42752 c:\windows\system32\drivers\alim1541.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 44928 c:\windows\system32\drivers\agpcpq.sys
    + 2008-04-14 04:06 . 2008-07-12 19:19 42368 c:\windows\system32\drivers\agp440.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11648 c:\windows\system32\drivers\acpiec.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 11648 c:\windows\system32\drivers\acpiec.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 53376 c:\windows\system32\drivers\1394bus.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\driverquery.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 62976 c:\windows\system32\driverquery.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 57344 c:\windows\system32\dpwsockx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dpwsockx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 42768 c:\windows\system32\dpwsock.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42768 c:\windows\system32\dpwsock.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 83456 c:\windows\system32\dpvsetup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 83456 c:\windows\system32\dpvsetup.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 21504 c:\windows\system32\dpvacm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dpvacm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53520 c:\windows\system32\dpserial.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53520 c:\windows\system32\dpserial.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61952 c:\windows\system32\dpnwsock.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61952 c:\windows\system32\dpnwsock.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\dpnsvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dpnsvr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 62464 c:\windows\system32\dpnmodem.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dpnmodem.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60928 c:\windows\system32\dpnhupnp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\dpnhupnp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35328 c:\windows\system32\dpnhpast.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\dpnhpast.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dpmodemx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\dpmodemx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29696 c:\windows\system32\dplaysvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\dplaysvr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33040 c:\windows\system32\dplay.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33040 c:\windows\system32\dplay.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\dot3msm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dot3gpclnt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39936 c:\windows\system32\dot3gpclnt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 57856 c:\windows\system32\dot3cfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\dot3cfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dot3api.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\dot3api.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53840 c:\windows\system32\dosx.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 53840 c:\windows\system32\dosx.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 10752 c:\windows\system32\doskey.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\doskey.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 48128 c:\windows\system32\docprop2.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 48128 c:\windows\system32\docprop2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 46080 c:\windows\system32\docprop.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 46080 c:\windows\system32\docprop.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 45568 c:\windows\system32\dnsrslvr.dll
    + 2008-04-14 08:00 . 2009-04-20 17:06 45568 c:\windows\system32\dnsrslvr.dll
    + 2008-04-14 09:41 . 2008-07-12 19:19 52224 c:\windows\system32\dmutil.dll
    - 2008-04-14 03:41 . 2009-10-19 07:40 52224 c:\windows\system32\dmutil.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 23552 c:\windows\system32\dmserver.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dmserver.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 82432 c:\windows\system32\dmscript.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\dmscript.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dmremote.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\dmremote.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dmocx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\dmocx.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 35840 c:\windows\system32\dmloader.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dmloader.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18432 c:\windows\system32\dmintf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\dmintf.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 61440 c:\windows\system32\dmcompos.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dmcompos.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\dmband.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dmband.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 13894 c:\windows\system32\dllcache\zonelibm.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 29760 c:\windows\system32\dllcache\znetm.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 41029 c:\windows\system32\dllcache\zcorem.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 36937 c:\windows\system32\dllcache\zclientm.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\xolehlp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\xmlprovi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\xcopy.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 91648 c:\windows\system32\dllcache\xactsrv.dll
    + 2009-12-13 06:36 . 2009-08-07 00:24 35552 c:\windows\system32\dllcache\wups.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\wupdmgr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\wtsapi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\wstdecod.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\dllcache\wsock32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\dllcache\wsnmp32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\wshtcpip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\wshrm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\wshisn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\wship6.dll
    + 2008-07-12 19:09 . 2008-07-12 19:09 90112 c:\windows\system32\dllcache\wshext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\wshcon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 80896 c:\windows\system32\dllcache\wscsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\wscntfy.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12032 c:\windows\system32\dllcache\ws2ifsl.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\ws2help.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\dllcache\ws2_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\wpnpinst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\wpabaln.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10368 c:\windows\system32\dllcache\wowexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\wmpui.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 99840 c:\windows\system32\dllcache\wmpshell.dll
    + 2009-12-13 06:36 . 2008-07-12 19:25 64000 c:\windows\system32\dllcache\wmplayer.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\wmpcore.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\wmpcd.dll
    + 2009-12-13 06:37 . 2008-07-12 19:25 96256 c:\windows\system32\dllcache\wmpband.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 95232 c:\windows\system32\dllcache\wmiutils.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 52224 c:\windows\system32\dllcache\wmitimep.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\dllcache\wmiscmgr.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 41472 c:\windows\system32\dllcache\wmipsess.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\wmiprop.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\wmipjobj.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 61952 c:\windows\system32\dllcache\wmipiprt.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 75264 c:\windows\system32\dllcache\wmipicmp.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\wmimsg.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 60928 c:\windows\system32\dllcache\wmicookr.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 88576 c:\windows\system32\dllcache\wmiaprpl.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\wmi2xml.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dllcache\wmerrenu.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 37376 c:\windows\system32\dllcache\wmdmps.dll
    + 2008-07-12 19:25 . 2008-07-12 19:25 33792 c:\windows\system32\dllcache\wmdmlog.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\dllcache\wlnotify.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\wlanapi.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\wisc10.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\winstrm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\dllcache\winsta.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\winshfhc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 99328 c:\windows\system32\dllcache\winscard.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\winrnr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\winmsd.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\winmgmtr.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\winmgmt.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\winipsec.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\winchat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\win87em.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\dllcache\wiascr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13600 c:\windows\system32\dllcache\wfwnet.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\dllcache\wextract.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 31232 c:\windows\system32\dllcache\weitekp9.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 41600 c:\windows\system32\dllcache\weitekp9.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40448 c:\windows\system32\dllcache\webhits.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\dllcache\webclnt.dll
    + 2008-04-14 08:00 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 43520 c:\windows\system32\dllcache\wbemsvc.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\wbemprox.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 43008 c:\windows\system32\dllcache\wbemperf.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\wbemcons.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\wbemads.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\wb32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17664 c:\windows\system32\dllcache\watchdog.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\dllcache\wanarp.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\wamreg51.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 76800 c:\windows\system32\dllcache\wam51.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\wabmig.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 85504 c:\windows\system32\dllcache\wabimp.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\wabfind.dll
    + 2012-03-07 22:06 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\w3ssl.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 73728 c:\windows\system32\dllcache\w3ext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\w32topl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49664 c:\windows\system32\dllcache\w32tm.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 48256 c:\windows\system32\dllcache\w32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\vwipxspx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\vssadmin.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\vss_ps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 52352 c:\windows\system32\dllcache\volsnap.sys
    + 2009-12-13 00:29 . 2008-04-14 11:00 86073 c:\windows\system32\dllcache\voicesub.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\vmmreg32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 81664 c:\windows\system32\dllcache\videoprt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 18176 c:\windows\system32\dllcache\vga64k.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51456 c:\windows\system32\dllcache\vga256.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\vga.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\version.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\verifier.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\verifier.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51712 c:\windows\system32\dllcache\vdmredir.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\vdmdbg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30749 c:\windows\system32\dllcache\vbajet32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\utilman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\dllcache\utildll.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\userinit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 47872 c:\windows\system32\dllcache\user.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\usbmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\usb8023.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\ureg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\ups.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\upnpcont.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\unsecapp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\uniplat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74240 c:\windows\system32\dllcache\unimdmat.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 76288 c:\windows\system32\dllcache\uniime.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 32339 c:\windows\system32\dllcache\uniansi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\umdmxfrm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dllcache\umandlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\dllcache\ufat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\udhisapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66048 c:\windows\system32\dllcache\udfs.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\dllcache\typeperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\dllcache\twunk_32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49680 c:\windows\system32\dllcache\twunk_16.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\dllcache\twext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\twain_32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94784 c:\windows\system32\dllcache\twain.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\tsshutdn.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\tsprof.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\tspkg.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\tskill.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\tsgqec.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\tsdiscon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12168 c:\windows\system32\dllcache\tsddd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\tsd32.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\tscon.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 93696 c:\windows\system32\dllcache\tscfgwmi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 52224 c:\windows\system32\dllcache\tsappcmp.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\trnsprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\dllcache\trkwks.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\trialoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31232 c:\windows\system32\dllcache\traffic.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\tracert6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\tracert.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\tools.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13888 c:\windows\system32\dllcache\toolhelp.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 61952 c:\windows\system32\dllcache\tmplprov.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\tmigrate.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 73216 c:\windows\system32\dllcache\tlntsvr.exe
    + 2008-04-14 08:00 . 2009-06-12 12:31 80896 c:\windows\system32\dllcache\tlntsess.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\tlntadmn.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\tintlphr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\tftp.exe
    + 2008-04-14 08:00 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 21896 c:\windows\system32\dllcache\tdtcp.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 19464 c:\windows\system32\dllcache\tdspx.sys
    + 2009-12-13 06:34 . 2008-04-14 08:00 12040 c:\windows\system32\dllcache\tdpipe.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 21896 c:\windows\system32\dllcache\tdipx.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 19072 c:\windows\system32\dllcache\tdi.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 13192 c:\windows\system32\dllcache\tdasync.sys
    + 1999-03-19 21:10 . 2003-03-24 21:52 16384 c:\windows\system32\dllcache\tcptsat.dll
    + 1999-03-19 21:07 . 2003-03-24 21:52 32827 c:\windows\system32\dllcache\tcptest.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\tcpsvcs.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\tcpmonui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\tcpmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\tcpmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\tcmsetup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\taskman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\tasklist.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76288 c:\windows\system32\dllcache\taskkill.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 78848 c:\windows\system32\dllcache\tapiui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19200 c:\windows\system32\dllcache\tapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14976 c:\windows\system32\dllcache\tape.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\tabletoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\syskey.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\sysinv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\sysinfo.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18896 c:\windows\system32\dllcache\sysedit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\dllcache\synceng.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dllcache\syncapp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\svchost.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 46592 c:\windows\system32\dllcache\svcext51.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\dllcache\strmfilt.dll
    - 2009-12-13 05:58 . 2009-10-21 05:38 75776 c:\windows\system32\dllcache\strmfilt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\stimon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\dllcache\sti.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 86528 c:\windows\system32\dllcache\stdprov.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 59392 c:\windows\system32\dllcache\stclient.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\status.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\sstub.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\ssstars.scr
    + 2012-03-07 22:11 . 2008-04-14 08:00 46592 c:\windows\system32\dllcache\sspifilt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\ssmyst.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 47104 c:\windows\system32\dllcache\ssmypics.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\ssmarque.scr
    + 2012-03-07 22:11 . 2008-04-14 08:00 45056 c:\windows\system32\dllcache\ssinc51.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\ssdpsrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\dllcache\ssdpapi.dll
    sjy, Mar 8, 2012
    #57

  18. sjy Newcomer, in training Posts: 58

    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\ssbezier.scr
    + 2008-04-14 08:00 . 2008-04-14 08:00 96768 c:\windows\system32\dllcache\srvsvc.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 47104 c:\windows\system32\dllcache\srdiag.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\srclient.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 58434 c:\windows\system32\dllcache\srchctls.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 73472 c:\windows\system32\dllcache\sr.sys
    - 2010-12-02 01:19 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2008-04-14 08:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\dllcache\spoolss.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\spnpinst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\spiisupd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\spgrmr.dll
    + 2009-12-13 00:29 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\spcplui.dll
    + 2009-12-13 00:29 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\spcommon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\sort.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 56832 c:\windows\system32\dllcache\sol.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\snmpthrd.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\snmpstup.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\snmpapi.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\snmp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\dllcache\sniffpol.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\smtpcons.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\smtpapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\smss.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 89600 c:\windows\system32\dllcache\smlogsvc.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\smierrsm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14592 c:\windows\system32\dllcache\smclib.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\smb6w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\sma3w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 38912 c:\windows\system32\dllcache\sm9aw.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\sm93w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\sm92w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\sm90w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\sm8dw.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\sm8cw.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\sm8aw.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\sm89w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\sm87w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\sm81w.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\sm59w.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\slbrccsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\slbiop.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\slayerxp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\skeys.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\sisbkup.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\simptcp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 70144 c:\windows\system32\dllcache\sigverif.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\sigtab.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 42573 c:\windows\system32\dllcache\shvlzm.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 66113 c:\windows\system32\dllcache\shvl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\shutdown.exe
    + 1999-03-19 21:06 . 2003-03-24 21:52 16437 c:\windows\system32\dllcache\shtml.exe
    + 1999-03-19 21:09 . 2003-03-24 21:52 20536 c:\windows\system32\dllcache\shtml.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\dllcache\shscrap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\shrpubw.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 45056 c:\windows\system32\dllcache\shmgrate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\dllcache\shimeng.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\dllcache\shgina.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\shfolder.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\shadow.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\sfmapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\setupn.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 73216 c:\windows\system32\dllcache\setup50.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\dllcache\setup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 31232 c:\windows\system32\dllcache\sethc.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\serwvdrv.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\servdeps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\serialui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\senscfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\sens.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\dllcache\sendmail.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\sendcmsg.dll
    + 2008-04-14 08:00 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\seclogon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\secedit.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\dllcache\sdbinst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\scriptpw.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\scredir.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 36352 c:\windows\system32\dllcache\scrcons.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\sclgntfy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 95744 c:\windows\system32\dllcache\scardsvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\dllcache\scarddlg.dll
    + 2008-04-14 08:00 . 2009-02-06 10:39 35328 c:\windows\system32\dllcache\sc.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\savedump.exe
    + 2009-12-13 00:29 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\sapisvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\dllcache\samlib.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\safrslv.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\safrdm.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 43520 c:\windows\system32\dllcache\safrcdlg.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\rwinsta.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 79872 c:\windows\system32\dllcache\rwia330.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 79872 c:\windows\system32\dllcache\rwia001.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\rw330ext.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 27648 c:\windows\system32\dllcache\rw001ext.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 42574 c:\windows\system32\dllcache\rvsezm.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 48706 c:\windows\system32\dllcache\rvse.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\runonce.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\rundll32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\runas.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\rtutils.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\rtm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\rtipxmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\dllcache\rtcshare.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\dllcache\rsvpsp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\rsvpmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\rsopprov.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\rsmui.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\rsmsink.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\rsmps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\rsm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\rshx32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\rsh.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dllcache\rsfsaps.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\rrcm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\rpcns4.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\dllcache\routemon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\route.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 30592 c:\windows\system32\dllcache\rndismp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\rexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\dllcache\resutils.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\replace.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\remotepg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\relog.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\regsvr32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\regsvc.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\register.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\regini.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49664 c:\windows\system32\dllcache\regapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\reg.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 67072 c:\windows\system32\dllcache\rdshost.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\rdsaddin.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 87176 c:\windows\system32\dllcache\rdpwsx.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\rdpsnd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92424 c:\windows\system32\dllcache\rdpdd.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\rdpclip.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\rcp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dllcache\rcimlby.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 34432 c:\windows\system32\dllcache\rawwan.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 58368 c:\windows\system32\dllcache\rastapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\rasser.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\rassapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\rasrad.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61952 c:\windows\system32\dllcache\rasqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16512 c:\windows\system32\dllcache\raspti.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 48384 c:\windows\system32\dllcache\raspptp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\dllcache\raspppoe.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 56832 c:\windows\system32\dllcache\rasphone.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\dllcache\rasmxs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\rasman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51328 c:\windows\system32\dllcache\rasl2tp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\rasdial.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\rasctrs.dll
    - 2009-12-13 05:58 . 2009-10-12 13:28 79872 c:\windows\system32\dllcache\raschap.dll
    + 2008-04-14 08:00 . 2009-10-12 13:38 79872 c:\windows\system32\dllcache\raschap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\rasautou.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 88576 c:\windows\system32\dllcache\rasauto.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 20736 c:\windows\system32\dllcache\ramdisk.sys
    + 2009-12-13 06:36 . 2008-04-14 08:00 43520 c:\windows\system32\dllcache\racpldlg.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\qwinsta.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\dllcache\qutil.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\quser.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\qprocess.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\qmgrprxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\qcliprov.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\qappsrv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17792 c:\windows\system32\dllcache\ptilink.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34304 c:\windows\system32\dllcache\pstorsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 43520 c:\windows\system32\dllcache\pstorec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\psched.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\pschdprf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 96768 c:\windows\system32\dllcache\psbase.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\dllcache\psapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\proquota.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\dllcache\profmap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15860 c:\windows\system32\dllcache\prnqctl.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 29454 c:\windows\system32\dllcache\prnport.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 32546 c:\windows\system32\dllcache\prnmngr.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 21527 c:\windows\system32\dllcache\prnjobs.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 25415 c:\windows\system32\dllcache\prndrvr.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 35755 c:\windows\system32\dllcache\prncnfg.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\prflbmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\powrprof.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\powercfg.exe
    + 2009-12-13 06:33 . 2008-04-14 08:00 92672 c:\windows\system32\dllcache\policman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\dllcache\pnrpnsp.dll
    + 2008-04-23 00:16 . 2009-03-08 09:31 46592 c:\windows\system32\dllcache\pngfilt.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\pmxmcro.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 46592 c:\windows\system32\dllcache\pmspl.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\pmigrate.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\plustab.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 70144 c:\windows\system32\dllcache\pintlphr.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 53760 c:\windows\system32\dllcache\pintlcsd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\ping6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\ping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\pifmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\pidgen.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\permchk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\perfts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\dllcache\perfproc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\perfos.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\perfnet.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\perfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\perfdisk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\perfctrs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\pentnt.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 38400 c:\windows\system32\dllcache\pchsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\pautoenr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\pathping.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19712 c:\windows\system32\dllcache\partmgr.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\panmap.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\pagecnt.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 15360 c:\windows\system32\dllcache\padrs804.dll
    + 2009-12-13 00:28 . 2008-04-14 11:00 14336 c:\windows\system32\dllcache\padrs412.dll
    + 2009-12-13 00:28 . 2008-04-14 11:00 36927 c:\windows\system32\dllcache\padrs411.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 15872 c:\windows\system32\dllcache\padrs404.dll
    + 2008-04-14 08:00 . 2011-11-18 12:35 60416 c:\windows\system32\dllcache\packager.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 40448 c:\windows\system32\dllcache\osuninst.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\osuninst.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\opnfiles.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 51200 c:\windows\system32\dllcache\oobebaln.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\olethk32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\olesvr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\olesvr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 84992 c:\windows\system32\dllcache\olepro32.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 65536 c:\windows\system32\dllcache\oledb32r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37376 c:\windows\system32\dllcache\olecnv32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74752 c:\windows\system32\dllcache\olecli32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\dllcache\olecli.dll
    + 2008-04-14 08:00 . 2011-09-26 07:11 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39744 c:\windows\system32\dllcache\ole2.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\oemiglib.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\oemig50.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20511 c:\windows\system32\dllcache\odtext32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\dllcache\odpdx32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\dllcache\odfox32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20510 c:\windows\system32\dllcache\odexl32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20511 c:\windows\system32\dllcache\oddbse32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\odbcp32r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53279 c:\windows\system32\dllcache\odbcji32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94208 c:\windows\system32\dllcache\odbcint.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\dllcache\odbccu32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\dllcache\odbccr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\dllcache\odbcconf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\odbcad32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\odbc32gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26224 c:\windows\system32\dllcache\odbc16gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\ocmsn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67584 c:\windows\system32\dllcache\ocmanage.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\ocgen.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65536 c:\windows\system32\dllcache\nwwks.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 55936 c:\windows\system32\dllcache\nwlnkspx.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 63232 c:\windows\system32\dllcache\nwlnknb.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 88320 c:\windows\system32\dllcache\nwlnkipx.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 32512 c:\windows\system32\dllcache\nwlnkfwd.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 12416 c:\windows\system32\dllcache\nwlnkflt.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\nwcfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\dllcache\nwapi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\nwapi16.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\ntvdmd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\ntsdexts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\ntsd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 91136 c:\windows\system32\dllcache\ntprint.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\ntoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\ntmsevt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\ntmsapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\ntlanui2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\dllcache\ntlanui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\ntlanman.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\dllcache\ntio804.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 35424 c:\windows\system32\dllcache\ntio412.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 35648 c:\windows\system32\dllcache\ntio411.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 34560 c:\windows\system32\dllcache\ntio404.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 33840 c:\windows\system32\dllcache\ntio.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\ntdsbcli.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 67072 c:\windows\system32\dllcache\ntdsapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29146 c:\windows\system32\dllcache\ntdos804.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29274 c:\windows\system32\dllcache\ntdos412.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29370 c:\windows\system32\dllcache\ntdos411.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 29146 c:\windows\system32\dllcache\ntdos404.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 27866 c:\windows\system32\dllcache\ntdos.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\dllcache\nslookup.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 44544 c:\windows\system32\dllcache\nsepm.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\npwmsdrm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\dllcache\npptools.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\nppagent.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 30848 c:\windows\system32\dllcache\npfs.sys
    + 2009-12-13 06:37 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\notiflag.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\notepad.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 40320 c:\windows\system32\dllcache\nmnt.sys
    + 2012-03-07 22:06 . 2008-04-14 08:00 28672 c:\windows\system32\dllcache\nmmkcert.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\nmevtmsg.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\nmcom.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 81920 c:\windows\system32\dllcache\nmchat.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 28672 c:\windows\system32\dllcache\nmasnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\nlhtml.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\nextlink.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 80896 c:\windows\system32\dllcache\netui0.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\netstat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 86016 c:\windows\system32\dllcache\netsh.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\netrap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77312 c:\windows\system32\dllcache\netoc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34688 c:\windows\system32\dllcache\netbios.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\dllcache\net.exe
    + 2008-04-14 08:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 91520 c:\windows\system32\dllcache\ndiswan.sys
    + 2008-04-14 08:00 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\ndisnpp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\nddenb32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\nddeapi.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 47104 c:\windows\system32\dllcache\ncprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36352 c:\windows\system32\dllcache\ncobjapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\nbtstat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dllcache\narrhook.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\dllcache\narrator.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\napipsec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90624 c:\windows\system32\dllcache\mydocs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\dllcache\mycomput.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90624 c:\windows\system32\dllcache\muisetup.exe
    + 2009-12-13 06:34 . 2008-06-12 14:23 91648 c:\windows\system32\dllcache\mtxoci.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 34304 c:\windows\system32\dllcache\mtxlegih.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\mtxdm.dll
    + 2008-04-14 08:00 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    sjy, Mar 8, 2012
    #58

  19. sjy Newcomer, in training Posts: 58

    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\msxmlr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 79872 c:\windows\system32\dllcache\msxml6r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\msxml3r.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37916 c:\windows\system32\dllcache\msxml2r.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\msxactps.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\dllcache\msw3prt.dll
    - 2010-03-16 13:31 . 2009-11-27 16:28 28672 c:\windows\system32\dllcache\msvidc32.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 28672 c:\windows\system32\dllcache\msvidc32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\msvcrt40.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\msvcirt.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\mstinit.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\mst123.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\msswch.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\mssoapr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dllcache\mssign32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\dllcache\msshamsg.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
    - 2010-03-16 13:31 . 2009-11-27 16:28 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\msratelc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69632 c:\windows\system32\dllcache\msr2c.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 48128 c:\windows\system32\dllcache\msprivs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\dllcache\msports.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 27136 c:\windows\system32\dllcache\mspmsnsv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\mspatcha.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\msorc32r.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\msoobe.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\msobweb.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\msobshel.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\msobjs.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msobdl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\mslwvtts.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\mslbui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60192 c:\windows\system32\dllcache\msjter40.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\msisip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\msiregmv.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 98304 c:\windows\system32\dllcache\msir3jp.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\msinfo32.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\msimn.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 78848 c:\windows\system32\dllcache\msiexec.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\msidntld.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51712 c:\windows\system32\dllcache\msident.dll
    + 2008-07-12 19:10 . 2009-03-08 09:31 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2008-04-23 00:16 . 2011-12-17 19:46 66560 c:\windows\system32\dllcache\mshtmled.dll
    - 2010-12-02 01:17 . 2010-09-10 05:57 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2008-07-12 19:10 . 2009-03-08 09:31 45568 c:\windows\system32\dllcache\mshta.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\msgsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\msgrocm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35072 c:\windows\system32\dllcache\msgpc.sys
    + 2009-12-13 06:34 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\msg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19072 c:\windows\system32\dllcache\msfs.sys
    + 2012-03-07 22:10 . 2011-12-17 19:46 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    - 2009-12-13 05:57 . 2010-09-10 05:57 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\dllcache\msdtcstp.dll
    + 2009-12-13 06:34 . 2008-06-12 14:23 58880 c:\windows\system32\dllcache\msdtclog.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\msdmo.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\msdfmap.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\msdatt.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 94208 c:\windows\system32\dllcache\msdatl3.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msdasqlr.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msdaremr.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msdaprsr.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\msdaosp.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msdaorar.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68608 c:\windows\system32\dllcache\msctfp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36864 c:\windows\system32\dllcache\mscpxl32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\mscpx32r.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 69632 c:\windows\system32\dllcache\msconf.dll
    + 2008-04-14 08:00 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 65024 c:\windows\system32\dllcache\msaudite.dll
    + 2008-04-14 08:00 . 2009-09-04 21:03 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 86016 c:\windows\system32\dllcache\msapsspc.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\msadrh15.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\msador15.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\msader15.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\msaddsr.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\msadcs.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msadcor.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\msadcfr.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\msadcf.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\msadcer.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\msacm32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61168 c:\windows\system32\dllcache\msacm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\mrinfo.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\mqupgrd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 95744 c:\windows\system32\dllcache\mqsec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 89088 c:\windows\system32\dllcache\mqlogmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\mqise.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\dllcache\mqgentr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47616 c:\windows\system32\dllcache\mqdscli.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\mqcertui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\mqbkup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 92544 c:\windows\system32\dllcache\mqac.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 47104 c:\windows\system32\dllcache\mprui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 99840 c:\windows\system32\dllcache\mprmsg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\mprdim.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\mprddm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\dllcache\mprapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\mpr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\mpnotify.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 42368 c:\windows\system32\dllcache\mountmgr.sys
    + 2009-12-13 06:33 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\mofcomp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10112 c:\windows\system32\dllcache\modex.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\mnmsrvc.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 34560 c:\windows\system32\dllcache\mnmdd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68768 c:\windows\system32\dllcache\mmsystem.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\mmfutil.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\mmdrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\mmcshext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\mmcperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\mimefilt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\dllcache\miglibnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34304 c:\windows\system32\dllcache\migisol.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\midimap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\mgmtapi.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 92416 c:\windows\system32\dllcache\mga.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 92032 c:\windows\system32\dllcache\mga.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22528 c:\windows\system32\dllcache\mfcsubs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\mf3216.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 85504 c:\windows\system32\dllcache\metada51.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39274 c:\windows\system32\dllcache\mem.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\medctroc.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\mdsync.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\mdhcp.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 37888 c:\windows\system32\dllcache\md5filt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28160 c:\windows\system32\dllcache\mciwave.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\mciwave.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25264 c:\windows\system32\dllcache\mciseq.drv
    + 2008-04-14 08:00 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\mciqtz32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\mcicda.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 84480 c:\windows\system32\dllcache\mciavi32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 73376 c:\windows\system32\dllcache\mciavi.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 10496 c:\windows\system32\dllcache\mcdsrv32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\mcd32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\mcastmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\makecab.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\dllcache\magnify.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\lsass.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\lprmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\lprhelp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\lpk.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 22528 c:\windows\system32\dllcache\lpdsvc.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\lonsint.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\logscrpt.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\logoff.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\dllcache\logman.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 50176 c:\windows\system32\dllcache\loghours.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\log.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\dllcache\locator.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\localui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 97280 c:\windows\system32\dllcache\loadperf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\lnkstub.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\lmmib2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\lmhsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\linkinfo.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\lights.exe
    + 2009-12-13 06:33 . 2008-04-14 08:00 58880 c:\windows\system32\dllcache\licwmi.dll
    + 2008-07-12 19:10 . 2011-12-17 19:46 43520 c:\windows\system32\dllcache\licmgr10.dll
    - 2010-12-02 01:17 . 2010-09-10 05:57 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2008-07-12 19:24 . 2008-07-12 19:24 11264 c:\windows\system32\dllcache\laprxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 89600 c:\windows\system32\dllcache\langwrbk.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 37376 c:\windows\system32\dllcache\l2store.dll
    + 2008-04-14 08:00 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    + 2009-12-13 06:33 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\krnlprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92224 c:\windows\system32\dllcache\krnl386.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 70656 c:\windows\system32\dllcache\korwbrkr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\kmsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42537 c:\windows\system32\dllcache\keyboard.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 42809 c:\windows\system32\dllcache\key01.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\jupiw.dll
    - 2009-12-13 05:57 . 2010-09-10 05:57 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2008-04-23 00:16 . 2011-12-17 19:46 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47952 c:\windows\system32\dllcache\jobexec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54272 c:\windows\system32\dllcache\ixsso.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\isrdbg32.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\isignup.exe
    + 2009-12-13 06:36 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\iscomlog.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 68608 c:\windows\system32\dllcache\isatq.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\irenum.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\ipxwan.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\dllcache\ipxsap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\ipxrtmgr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\ipxroute.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\ipxrip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\ipxpromn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 83968 c:\windows\system32\dllcache\ipxmontr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\ipv6mon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\ipv6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\ipsec6.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\dllcache\ipsec.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\iprip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20864 c:\windows\system32\dllcache\ipinip.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 94720 c:\windows\system32\dllcache\iphlpapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32896 c:\windows\system32\dllcache\ipfltdrv.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\dllcache\ipconfig.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 36608 c:\windows\system32\dllcache\ip6fw.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\iologmsg.dll
    + 2008-07-12 19:10 . 2009-03-08 09:32 94720 c:\windows\system32\dllcache\inseng.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\infoadmn.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\inetwiz.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\inetsloc.dll
    + 2008-04-14 11:00 . 2008-04-14 08:00 48128 c:\windows\system32\dllcache\inetres.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\inetppui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 75264 c:\windows\system32\dllcache\inetpp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\inetmib1.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\inetin51.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 59392 c:\windows\system32\dllcache\imscinst.exe
    + 2009-12-13 00:28 . 2008-04-14 11:00 59904 c:\windows\system32\dllcache\imkrinst.exe
    + 2009-12-13 00:28 . 2008-04-14 11:00 45109 c:\windows\system32\dllcache\imjpuex.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 81976 c:\windows\system32\dllcache\imjpdct.dll
    + 2009-12-13 00:28 . 2008-04-14 11:00 57398 c:\windows\system32\dllcache\imjpdadm.exe
    + 2008-07-12 19:10 . 2009-03-08 09:31 34816 c:\windows\system32\dllcache\imgutil.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 36921 c:\windows\system32\dllcache\imeshare.dll
    + 2009-12-13 00:28 . 2008-04-14 11:00 44032 c:\windows\system32\dllcache\imekrmig.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 86016 c:\windows\system32\dllcache\imekrmbx.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 81920 c:\windows\system32\dllcache\ils.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\iisrstas.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\iisreset.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 64512 c:\windows\system32\dllcache\iismap.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 79872 c:\windows\system32\dllcache\iislog51.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 68608 c:\windows\system32\dllcache\iisext51.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\iiscrmap.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 60928 c:\windows\system32\dllcache\iisclex4.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\iisadmin.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 70656 c:\windows\system32\dllcache\ifsutil.dll
    + 2012-03-07 22:10 . 2011-12-16 12:22 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2008-07-12 19:10 . 2009-03-08 09:32 71680 c:\windows\system32\dllcache\iesetup.dll
    + 2008-04-23 00:16 . 2009-03-08 09:32 55808 c:\windows\system32\dllcache\iernonce.dll
    + 2009-12-13 06:36 . 2008-07-12 19:10 69120 c:\windows\system32\dllcache\iedw.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\icwutil.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 73728 c:\windows\system32\dllcache\icwtutor.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\icwrmind.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\icwres.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 65536 c:\windows\system32\dllcache\icwphbk.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\icwdl.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 73728 c:\windows\system32\dllcache\icwdial.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 86016 c:\windows\system32\dllcache\icwconn2.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\icwconn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54784 c:\windows\system32\dllcache\icmui.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\icfgnt5.dll
    + 2012-03-07 22:10 . 2009-03-08 09:31 59904 c:\windows\system32\dllcache\icardie.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\icaapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\dllcache\iassvcs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 86528 c:\windows\system32\dllcache\iassam.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\iaspolcy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\iasnap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\iashlpr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\dllcache\iasads.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\iasacct.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41984 c:\windows\system32\dllcache\htui.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\httpod51.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\httpapi.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\htrn_jis.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\hscupd.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 42573 c:\windows\system32\dllcache\hrtzzm.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 57409 c:\windows\system32\dllcache\hrtz.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\hostmib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\hnetmon.dll
    + 2009-12-13 06:36 . 2009-03-08 09:24 68608 c:\windows\system32\dllcache\hmmapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 72704 c:\windows\system32\dllcache\hlink.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 41472 c:\windows\system32\dllcache\hhsetup.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87552 c:\windows\system32\dllcache\hhctrlui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\hh.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 99840 c:\windows\system32\dllcache\helphost.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\help.exe
    + 2009-12-13 00:28 . 2008-04-14 11:00 36864 c:\windows\system32\dllcache\hanjadic.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\h323cc.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\gzip.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\grpconv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\gpupdate.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\getmac.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\dllcache\gdi.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 76800 c:\windows\system32\dllcache\gcdef.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\fxssend.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\fxsroute.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\fxsmon.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\fxsext32.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 55296 c:\windows\system32\dllcache\fxsevent.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\fxsdrv.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 72192 c:\windows\system32\dllcache\fxscom.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 53248 c:\windows\system32\dllcache\fwdprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\fwcfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\dllcache\ftp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\fsutil.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 81408 c:\windows\system32\dllcache\fsusd.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 55296 c:\windows\system32\dllcache\freecell.exe
    + 1999-03-19 20:32 . 2003-03-24 21:52 20538 c:\windows\system32\dllcache\fpremadm.exe
    + 1999-03-19 21:09 . 2003-03-24 21:52 20541 c:\windows\system32\dllcache\fpexedll.dll
    + 1998-11-04 23:39 . 2003-03-24 21:52 94208 c:\windows\system32\dllcache\fpencode.dll
    + 2012-03-07 22:11 . 2003-03-24 21:52 20541 c:\windows\system32\dllcache\fpadmdll.dll
    + 2012-03-07 22:11 . 2003-03-24 21:52 24632 c:\windows\system32\dllcache\fpadmcgi.exe
    + 1998-05-15 20:55 . 1998-05-15 20:55 14608 c:\windows\system32\dllcache\fp98sadm.exe
    + 1999-03-19 21:09 . 2003-03-24 21:52 49212 c:\windows\system32\dllcache\fp4awebs.dll
    + 1999-03-19 21:09 . 2003-03-24 21:52 32826 c:\windows\system32\dllcache\fp4avss.dll
    + 1999-03-19 21:09 . 2003-03-24 21:52 41020 c:\windows\system32\dllcache\fp4avnb.dll
    + 1999-03-19 21:09 . 2003-03-24 21:52 49210 c:\windows\system32\dllcache\fp4areg.dll
    + 1999-03-20 04:59 . 2003-03-24 21:52 82035 c:\windows\system32\dllcache\fp4anscp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32828 c:\windows\system32\dllcache\fp40ext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\fontview.exe
    + 2008-04-14 08:00 . 2009-10-15 16:28 81920 c:\windows\system32\dllcache\fontsub.dll
    - 2010-01-31 16:53 . 2009-10-15 16:39 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\fmifs.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 23040 c:\windows\system32\dllcache\fltmc.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\fltlib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87552 c:\windows\system32\dllcache\fldrclnr.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\flattemp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44544 c:\windows\system32\dllcache\fips.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\dllcache\findstr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\feclient.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 73728 c:\windows\system32\dllcache\fdeploy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14848 c:\windows\system32\dllcache\fc.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 80384 c:\windows\system32\dllcache\faultrep.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\extrac32.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\exstrace.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\expand.exe
    + 2012-03-07 22:11 . 2001-08-18 03:36 12288 c:\windows\system32\dllcache\EXCH_smtpctrs.dll
    + 2012-03-07 22:11 . 2001-08-18 03:36 26112 c:\windows\system32\dllcache\EXCH_seos.dll
    + 2012-03-07 22:11 . 2001-08-18 03:36 57856 c:\windows\system32\dllcache\EXCH_scripto.dll
    + 2012-03-07 22:11 . 2001-08-18 03:36 23040 c:\windows\system32\dllcache\EXCH_regtrace.exe
    + 2012-03-07 22:11 . 2001-08-18 03:36 38912 c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
    + 2012-03-07 22:11 . 2001-08-18 03:36 65536 c:\windows\system32\dllcache\EXCH_mailmsg.dll
    + 2012-03-07 22:11 . 2001-08-18 03:36 43520 c:\windows\system32\dllcache\EXCH_fcachdll.dll
    + 2012-03-07 22:10 . 2001-08-18 03:36 45056 c:\windows\system32\dllcache\EXCH_aqadmin.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\dllcache\evtrig.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 97965 c:\windows\system32\dllcache\evtquery.vbs
    + 2008-04-14 08:00 . 2008-04-14 08:00 45056 c:\windows\system32\dllcache\evtgprov.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 92160 c:\windows\system32\dllcache\evntwin.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\evntrprv.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\evntcmd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\eventlog.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\eventcls.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\evcreate.exe
    + 2012-03-07 22:11 . 2008-04-14 08:00 25856 c:\windows\system32\dllcache\et4000.sys
    + 2012-03-07 22:11 . 2008-04-14 08:00 45056 c:\windows\system32\dllcache\esunid.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 57856 c:\windows\system32\dllcache\esuimgd.dll
    + 2012-03-07 22:11 . 2008-04-14 08:00 31744 c:\windows\system32\dllcache\esucmd.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\esentutl.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\esentprf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\dllcache\ersvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\encapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\efsadu.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12642 c:\windows\system32\dllcache\edlin.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\eapsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 59392 c:\windows\system32\dllcache\eapqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\eappprxy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 94208 c:\windows\system32\dllcache\eappgnui.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30720 c:\windows\system32\dllcache\eapolqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 10496 c:\windows\system32\dllcache\dxapi.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 55632 c:\windows\system32\dllcache\dwil1033.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\dvdupgrd.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\dumprep.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\dswave.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dllcache\dssec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 92672 c:\windows\system32\dllcache\dskquota.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\dsdmoprp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\dsauth.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\ds32gt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\drwtsn32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 28112 c:\windows\system32\dllcache\drwatson.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 62976 c:\windows\system32\dllcache\drvqry.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\drprov.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\dllcache\drmstor.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\dpwsockx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42768 c:\windows\system32\dllcache\dpwsock.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 83456 c:\windows\system32\dllcache\dpvsetup.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\dpvacm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53520 c:\windows\system32\dllcache\dpserial.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61952 c:\windows\system32\dllcache\dpnwsock.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\dpnsvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\dpnmodem.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60928 c:\windows\system32\dllcache\dpnhupnp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35328 c:\windows\system32\dllcache\dpnhpast.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\dpmodemx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\dplaysvr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 33040 c:\windows\system32\dllcache\dplay.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\dot3msm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\dot3clnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57856 c:\windows\system32\dllcache\dot3cfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\dot3api.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53840 c:\windows\system32\dllcache\dosx.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\doskey.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 48128 c:\windows\system32\dllcache\docprop2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 46080 c:\windows\system32\dllcache\docprop.dll
    + 2008-04-14 08:00 . 2009-04-20 17:06 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 23552 c:\windows\system32\dllcache\dmserver.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82432 c:\windows\system32\dllcache\dmscript.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\dmremote.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\dmocx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 35840 c:\windows\system32\dllcache\dmloader.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\dmintf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 61440 c:\windows\system32\dllcache\dmcompos.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dllcache\dmband.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\dispex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\diskperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14208 c:\windows\system32\dllcache\diskdump.sys
    + 2012-03-07 22:06 . 2008-04-14 08:00 86528 c:\windows\system32\dllcache\directdb.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\dimsroam.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\dimsntfy.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\dimap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68608 c:\windows\system32\dllcache\digest.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\dllcache\diantz.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 74240 c:\windows\system32\dllcache\dhcpsapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 48640 c:\windows\system32\dllcache\dhcpqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 85020 c:\windows\system32\dllcache\dgsetup.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dllcache\dfsshlex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\dfrgsnap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dllcache\dfrgres.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\dllcache\dfrgfat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\devenum.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\dllcache\deskperf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\deskmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\deskadp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\defrag.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20634 c:\windows\system32\dllcache\debug.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\dllcache\ddrawex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\ddeshare.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\ddeml.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 40960 c:\windows\system32\dllcache\dcap32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\davclnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54272 c:\windows\system32\dllcache\dataclen.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47616 c:\windows\system32\dllcache\d3dxof.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\dllcache\d3dpmesh.dll
    + 2009-12-13 06:36 . 2008-07-12 19:09 33792 c:\windows\system32\dllcache\custsat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27200 c:\windows\system32\dllcache\ctl3dv2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\dllcache\ctl3d32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\dllcache\ctfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 73728 c:\windows\system32\dllcache\csseqchk.dll
    + 2008-04-14 08:00 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2010-03-16 13:31 . 2009-12-14 07:08 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\cryptsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64512 c:\windows\system32\dllcache\cryptnet.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\dllcache\cryptext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\cryptdll.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74752 c:\windows\system32\dllcache\cryptdlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\dllcache\credssp.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 18944 c:\windows\system32\dllcache\cprofile.exe
    + 2009-12-13 00:29 . 2008-04-14 11:00 57399 c:\windows\system32\dllcache\cplexe.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27097 c:\windows\system32\dllcache\country.sys
    + 2012-03-07 22:10 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\counters.dll
    + 2008-07-12 19:09 . 2009-03-08 09:33 18944 c:\windows\system32\dllcache\corpol.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\convlog.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\dllcache\convert.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 33792 c:\windows\system32\dllcache\controt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\dllcache\console.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\dllcache\conime.exe
    + 2012-03-07 22:06 . 2008-04-14 08:00 45056 c:\windows\system32\dllcache\confmrsl.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 97792 c:\windows\system32\dllcache\comrepl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30160 c:\windows\system32\dllcache\compobj.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\compfilt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\compact.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\comp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32816 c:\windows\system32\dllcache\commdlg.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 28160 c:\windows\system32\dllcache\comaddin.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\colbact.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\dllcache\cobramsg.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 46592 c:\windows\system32\dllcache\coadmin.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\dllcache\cnvfat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\cnetcfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dllcache\cmutil.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 63488 c:\windows\system32\dllcache\cmstp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\cmsetacl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\cmpbk32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dllcache\cmmon32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\dllcache\cmdl32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\cmcfg32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 58368 c:\windows\system32\dllcache\clusapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\dllcache\clipsrv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\dllcache\cleanmgr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\dllcache\clb.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49536 c:\windows\system32\dllcache\classpnp.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 56832 c:\windows\system32\dllcache\cipher.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\dllcache\ciodm.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 56320 c:\windows\system32\dllcache\chtskdic.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 97792 c:\windows\system32\dllcache\chtmbx.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 42575 c:\windows\system32\dllcache\chkrzm.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 40515 c:\windows\system32\dllcache\chkr.dll
    sjy, Mar 8, 2012
    #59

  20. sjy Newcomer, in training Posts: 58

    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\chkntfs.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\dllcache\chkdsk.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\chgusr.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\chgport.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\chglogon.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 80384 c:\windows\system32\dllcache\charmap.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\dllcache\cfgmgr32.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 38912 c:\windows\system32\dllcache\cfgbkend.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 15872 c:\windows\system32\dllcache\cdmodem.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\dllcache\cdm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 63744 c:\windows\system32\dllcache\cdfs.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\dllcache\ccfgnt.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\cb32.exe
    + 2009-12-13 06:33 . 2008-04-14 08:00 85504 c:\windows\system32\dllcache\catsrvps.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 54528 c:\windows\system32\dllcache\cap7146.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\camocx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\cacls.exe
    + 2008-04-14 08:00 . 2010-01-13 14:01 86016 c:\windows\system32\dllcache\cabview.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\dllcache\cabinet.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 10752 c:\windows\system32\dllcache\c_iscii.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\dllcache\btpanui.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\brpinfo.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 78336 c:\windows\system32\dllcache\browsewm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\dllcache\browser.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 63488 c:\windows\system32\dllcache\browselc.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\browscap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71552 c:\windows\system32\dllcache\bridge.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\bootvid.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\dllcache\blastcln.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\bidispl.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 42577 c:\windows\system32\dllcache\bckgzm.exe
    + 2012-03-07 22:04 . 2008-04-14 08:00 82501 c:\windows\system32\dllcache\bckg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\batmeter.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 52736 c:\windows\system32\dllcache\basesrv.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 73216 c:\windows\system32\dllcache\avwav.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 16384 c:\windows\system32\dllcache\avmeter.dll
    - 2010-03-16 13:31 . 2009-11-27 16:28 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\dllcache\avicap32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69584 c:\windows\system32\dllcache\avicap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\autolfn.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 80384 c:\windows\system32\dllcache\autodisc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\dllcache\authz.dll
    + 1999-03-19 21:06 . 2003-03-24 21:52 16439 c:\windows\system32\dllcache\author.exe
    + 1999-03-19 21:09 . 2003-03-24 21:52 20540 c:\windows\system32\dllcache\author.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\auditusr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\dllcache\audiosrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\dllcache\attrib.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\atrace.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\dllcache\atmpvcno.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\atmlib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 55808 c:\windows\system32\dllcache\atmlane.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 31360 c:\windows\system32\dllcache\atmepvc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\dllcache\atmarpc.sys
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\atmadm.exe
    + 2008-04-14 08:00 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\dllcache\atkctrs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\dllcache\at.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\dllcache\asyncmac.sys
    + 2008-04-14 08:00 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
    - 2010-12-02 01:18 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dllcache\asr_pfu.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\dllcache\asr_ldm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\dllcache\asr_fmt.exe
    + 2012-03-07 22:10 . 2008-04-14 08:00 29184 c:\windows\system32\dllcache\asptxn.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 10240 c:\windows\system32\dllcache\aspperf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\arp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12498 c:\windows\system32\dllcache\append.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 70656 c:\windows\system32\dllcache\amstream.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\dllcache\alrsvc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44544 c:\windows\system32\dllcache\alg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\ahui.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\agtintl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\agt0c0a.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\agt0816.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt0804.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt041f.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt041d.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt0419.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\dllcache\agt0416.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt0415.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt0414.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\agt0413.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt0412.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt0411.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 20992 c:\windows\system32\dllcache\agt0410.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\agt040e.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt040d.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\agt040c.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt040b.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\dllcache\agt0409.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 22016 c:\windows\system32\dllcache\agt0408.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 21504 c:\windows\system32\dllcache\agt0407.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt0406.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 19456 c:\windows\system32\dllcache\agt0405.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt0404.dll
    + 2009-12-13 00:29 . 2008-04-14 11:00 19456 c:\windows\system32\dllcache\agt0401.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dllcache\agentsr.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\agentpsh.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 49152 c:\windows\system32\dllcache\agentmpx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 57344 c:\windows\system32\dllcache\agentdpv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\dllcache\agentdp2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system32\dllcache\agentanm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\dllcache\adsmsext.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 49664 c:\windows\system32\dllcache\adrot.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\dllcache\adptif.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 43520 c:\windows\system32\dllcache\admwprox.dll
    + 2008-07-12 19:09 . 2009-03-08 09:32 72704 c:\windows\system32\dllcache\admparse.dll
    + 1999-03-19 21:06 . 2003-03-24 21:52 16439 c:\windows\system32\dllcache\admin.exe
    + 1999-03-19 21:09 . 2003-03-24 21:52 20540 c:\windows\system32\dllcache\admin.dll
    + 2012-03-07 22:10 . 2008-04-14 08:00 29696 c:\windows\system32\dllcache\admexs.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\dllcache\actxprxy.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 64512 c:\windows\system32\dllcache\acctres.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\dllcache\aaaamon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\dispex.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\dispex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17920 c:\windows\system32\diskperf.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 17920 c:\windows\system32\diskperf.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\dimsroam.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\dimsntfy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\dimsntfy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44032 c:\windows\system32\dimap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 44032 c:\windows\system32\dimap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68608 c:\windows\system32\digest.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 68608 c:\windows\system32\digest.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 87040 c:\windows\system32\diantz.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 87040 c:\windows\system32\diantz.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 74240 c:\windows\system32\dhcpsapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 74240 c:\windows\system32\dhcpsapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 48640 c:\windows\system32\dhcpqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 48640 c:\windows\system32\dhcpqec.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 85020 c:\windows\system32\dgsetup.dll
    - 2009-12-13 00:28 . 2008-04-14 11:00 85020 c:\windows\system32\dgsetup.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\dfsshlex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dfsshlex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\dfrgsnap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\dfrgsnap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 51200 c:\windows\system32\dfrgres.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 51200 c:\windows\system32\dfrgres.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 82944 c:\windows\system32\dfrgfat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system32\dfrgfat.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 59904 c:\windows\system32\devenum.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 59904 c:\windows\system32\devenum.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 18432 c:\windows\system32\deskperf.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 18432 c:\windows\system32\deskperf.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\deskmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\deskmon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16384 c:\windows\system32\deskadp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 16384 c:\windows\system32\deskadp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\defrag.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\defrag.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 20634 c:\windows\system32\debug.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20634 c:\windows\system32\debug.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\ddrawex.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27136 c:\windows\system32\ddrawex.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\ddeshare.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 30208 c:\windows\system32\ddeshare.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\ddeml.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\ddeml.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 28672 c:\windows\system32\dbnmpntw.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 28672 c:\windows\system32\dbnmpntw.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 24576 c:\windows\system32\dbmsrpcn.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 24576 c:\windows\system32\dbmsrpcn.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\davclnt.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\davclnt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 54272 c:\windows\system32\dataclen.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 54272 c:\windows\system32\dataclen.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 47616 c:\windows\system32\d3dxof.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 47616 c:\windows\system32\d3dxof.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34816 c:\windows\system32\d3dpmesh.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\d3dpmesh.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27200 c:\windows\system32\ctl3dv2.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27200 c:\windows\system32\ctl3dv2.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27136 c:\windows\system32\ctl3d32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27136 c:\windows\system32\ctl3d32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 15360 c:\windows\system32\ctfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15360 c:\windows\system32\ctfmon.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 73728 c:\windows\system32\csseqchk.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 73728 c:\windows\system32\csseqchk.dll
    + 2008-04-14 08:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
    - 2008-04-14 11:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\cryptsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62464 c:\windows\system32\cryptsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 64512 c:\windows\system32\cryptnet.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64512 c:\windows\system32\cryptnet.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 53760 c:\windows\system32\cryptext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 53760 c:\windows\system32\cryptext.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\cryptdll.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\cryptdll.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 74752 c:\windows\system32\cryptdlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 74752 c:\windows\system32\cryptdlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12800 c:\windows\system32\credssp.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12800 c:\windows\system32\credssp.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27097 c:\windows\system32\country.sys
    - 2008-04-14 11:00 . 2008-04-14 11:00 27097 c:\windows\system32\country.sys
    - 2009-10-19 07:25 . 2009-10-19 07:25 18944 c:\windows\system32\corpol.dll
    + 2008-07-12 19:09 . 2009-03-08 09:33 18944 c:\windows\system32\corpol.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13824 c:\windows\system32\convert.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13824 c:\windows\system32\convert.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 66560 c:\windows\system32\console.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\console.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\conime.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 27648 c:\windows\system32\conime.exe
    + 2012-03-07 22:16 . 2012-03-07 22:16 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012012030720120308\index.dat
    + 2009-12-13 06:38 . 2012-03-08 12:20 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2012-01-01 16:40 . 2012-03-08 12:20 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2012-01-01 16:40 . 2012-03-04 20:52 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-12-13 06:33 . 2008-04-14 08:00 97792 c:\windows\system32\comrepl.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 97792 c:\windows\system32\comrepl.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 30160 c:\windows\system32\compobj.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30160 c:\windows\system32\compobj.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\compact.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\compact.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\comp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\comp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32816 c:\windows\system32\commdlg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32816 c:\windows\system32\commdlg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50620 c:\windows\system32\command.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 50620 c:\windows\system32\command.com
    - 2008-04-14 11:00 . 2008-04-14 11:00 10544 c:\windows\system32\comm.drv
    + 2008-04-14 08:00 . 2008-04-14 08:00 10544 c:\windows\system32\comm.drv
    - 2009-12-13 06:33 . 2008-04-14 11:00 28160 c:\windows\system32\comaddin.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 28160 c:\windows\system32\comaddin.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 61440 c:\windows\system32\Com\comempty.dat
    + 2009-12-13 06:34 . 2008-04-14 08:00 61440 c:\windows\system32\Com\comempty.dat
    + 2009-12-13 06:33 . 2008-04-14 08:00 60416 c:\windows\system32\colbact.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 60416 c:\windows\system32\colbact.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26624 c:\windows\system32\cnvfat.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26624 c:\windows\system32\cnvfat.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\cnetcfg.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\cnetcfg.dll
    - 2008-04-14 03:41 . 2009-10-19 07:40 47104 c:\windows\system32\cnbjmon.dll
    + 2008-04-14 09:41 . 2008-07-12 19:19 47104 c:\windows\system32\cnbjmon.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 39424 c:\windows\system32\cmutil.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39424 c:\windows\system32\cmutil.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 63488 c:\windows\system32\cmstp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 63488 c:\windows\system32\cmstp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\cmsetACL.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\cmsetACL.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\cmpbk32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\cmpbk32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 39936 c:\windows\system32\cmmon32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 39936 c:\windows\system32\cmmon32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 25600 c:\windows\system32\cmdl32.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\cmdl32.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 15872 c:\windows\system32\cmcfg32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 15872 c:\windows\system32\cmcfg32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 58368 c:\windows\system32\clusapi.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 58368 c:\windows\system32\clusapi.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 33280 c:\windows\system32\clipsrv.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 33280 c:\windows\system32\clipsrv.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 20480 c:\windows\system32\cliconfg.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 20480 c:\windows\system32\cliconfg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\cliconfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 77824 c:\windows\system32\cliconfg.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 64000 c:\windows\system32\cleanmgr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\cleanmgr.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 10752 c:\windows\system32\clb.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 10752 c:\windows\system32\clb.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 56832 c:\windows\system32\cipher.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 56832 c:\windows\system32\cipher.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 69120 c:\windows\system32\ciodm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69120 c:\windows\system32\ciodm.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\chkntfs.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\chkntfs.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11776 c:\windows\system32\chkdsk.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 11776 c:\windows\system32\chkdsk.exe
    + 2009-12-13 06:34 . 2008-04-14 08:00 80384 c:\windows\system32\charmap.exe
    - 2009-12-13 06:34 . 2008-04-14 11:00 80384 c:\windows\system32\charmap.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 16896 c:\windows\system32\cfgmgr32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 16896 c:\windows\system32\cfgmgr32.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 38912 c:\windows\system32\cfgbkend.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 38912 c:\windows\system32\cfgbkend.dll
    - 2009-12-13 06:34 . 2008-04-14 11:00 15872 c:\windows\system32\cdmodem.dll
    + 2009-12-13 06:34 . 2008-04-14 08:00 15872 c:\windows\system32\cdmodem.dll
    + 2008-04-14 08:00 . 2009-08-07 00:24 96480 c:\windows\system32\cdm.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 96480 c:\windows\system32\cdm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 27648 c:\windows\system32\ccfgnt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 27648 c:\windows\system32\ccfgnt.dll
    - 2009-12-13 06:33 . 2008-04-14 11:00 85504 c:\windows\system32\catsrvps.dll
    + 2009-12-13 06:33 . 2008-04-14 08:00 85504 c:\windows\system32\catsrvps.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\camocx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\camocx.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 19968 c:\windows\system32\cacls.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19968 c:\windows\system32\cacls.exe
    + 2008-04-14 08:00 . 2010-01-13 14:01 86016 c:\windows\system32\cabview.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 60416 c:\windows\system32\cabinet.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 60416 c:\windows\system32\cabinet.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 50688 c:\windows\system32\btpanui.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 50688 c:\windows\system32\btpanui.dll
    + 2008-04-14 08:00 . 2008-04-14 14:41 30208 c:\windows\system32\bthserv.dll
    - 2008-04-14 11:00 . 2008-04-14 03:41 30208 c:\windows\system32\bthserv.dll
    + 2008-04-14 08:00 . 2008-04-14 14:41 20992 c:\windows\system32\bthci.dll
    - 2008-04-14 11:00 . 2008-04-14 03:41 20992 c:\windows\system32\bthci.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 78336 c:\windows\system32\browsewm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 78336 c:\windows\system32\browsewm.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 77824 c:\windows\system32\browser.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 63488 c:\windows\system32\browselc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 63488 c:\windows\system32\browselc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\bootvid.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\bootvid.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 71680 c:\windows\system32\blastcln.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\bidispl.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\bidispl.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 29184 c:\windows\system32\batmeter.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 29184 c:\windows\system32\batmeter.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 52736 c:\windows\system32\basesrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 52736 c:\windows\system32\basesrv.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 73216 c:\windows\system32\avwav.dll
    + 2012-03-07 22:04 . 2008-04-14 08:00 16384 c:\windows\system32\avmeter.dll
    + 2008-04-14 08:00 . 2009-11-27 16:07 84992 c:\windows\system32\avifil32.dll
    - 2009-10-19 07:25 . 2009-11-27 16:28 84992 c:\windows\system32\avifil32.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 64000 c:\windows\system32\avicap32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 64000 c:\windows\system32\avicap32.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 69584 c:\windows\system32\avicap.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 69584 c:\windows\system32\avicap.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\autolfn.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\autolfn.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 80384 c:\windows\system32\autodisc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 80384 c:\windows\system32\autodisc.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 62464 c:\windows\system32\authz.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 62464 c:\windows\system32\authz.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 14336 c:\windows\system32\auditusr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 14336 c:\windows\system32\auditusr.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 42496 c:\windows\system32\audiosrv.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 42496 c:\windows\system32\audiosrv.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 12288 c:\windows\system32\attrib.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12288 c:\windows\system32\attrib.exe
    - 2009-12-13 06:37 . 2008-04-14 11:00 11264 c:\windows\system32\atrace.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 11264 c:\windows\system32\atrace.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 34816 c:\windows\system32\atmpvcno.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 34816 c:\windows\system32\atmpvcno.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 30208 c:\windows\system32\atmlib.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\atmlib.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 11264 c:\windows\system32\atmadm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\atmadm.exe
    + 2008-04-14 08:00 . 2009-07-17 19:01 58880 c:\windows\system32\atl.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 58880 c:\windows\system32\atl.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 13312 c:\windows\system32\atkctrs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 13312 c:\windows\system32\atkctrs.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25088 c:\windows\system32\at.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 25088 c:\windows\system32\at.exe
    + 2008-04-14 08:00 . 2010-03-05 14:37 65536 c:\windows\system32\asycfilt.dll
    - 2008-04-14 11:00 . 2010-03-05 14:37 65536 c:\windows\system32\asycfilt.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 32768 c:\windows\system32\asr_pfu.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32768 c:\windows\system32\asr_pfu.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 32256 c:\windows\system32\asr_ldm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 32256 c:\windows\system32\asr_ldm.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 30208 c:\windows\system32\asr_fmt.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 30208 c:\windows\system32\asr_fmt.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 19456 c:\windows\system32\arp.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 19456 c:\windows\system32\arp.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 12498 c:\windows\system32\append.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 12498 c:\windows\system32\append.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 70656 c:\windows\system32\amstream.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 70656 c:\windows\system32\amstream.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 17408 c:\windows\system32\alrsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 17408 c:\windows\system32\alrsvc.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 44544 c:\windows\system32\alg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 44544 c:\windows\system32\alg.exe
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\ahui.exe
    - 2008-04-14 11:00 . 2008-04-14 11:00 98304 c:\windows\system32\ahui.exe
    - 2009-10-19 07:25 . 2009-10-19 07:25 68096 c:\windows\system32\adsmsext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 68096 c:\windows\system32\adsmsext.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 26112 c:\windows\system32\adptif.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 26112 c:\windows\system32\adptif.dll
    - 2009-10-19 07:25 . 2009-10-19 07:25 72704 c:\windows\system32\admparse.dll
    + 2008-07-12 19:09 . 2009-03-08 09:32 72704 c:\windows\system32\admparse.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 98304 c:\windows\system32\actxprxy.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 98304 c:\windows\system32\actxprxy.dll
    + 2012-03-07 22:06 . 2008-04-14 08:00 64512 c:\windows\system32\acctres.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 25600 c:\windows\system32\aaaamon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 25600 c:\windows\system32\aaaamon.dll
    + 2008-04-14 08:00 . 2008-04-14 08:00 55632 c:\windows\system32\1033\dwintl.dll
    - 2008-04-14 11:00 . 2008-04-14 11:00 55632 c:\windows\system32\1033\dwintl.dll
    + 2009-12-13 00:28 . 2008-04-14 08:00 13600 c:\windows\system\WFWNET.DRV
    - 2009-12-13 00:28 . 2008-04-14 11:00 13600 c:\windows\system\WFWNET.DRV
    - 2009-12-13 00:28 . 2008-04-14 11:00 19200 c:\windows\system\TAPI.DLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 19200 c:\windows\system\TAPI.DLL
    - 2009-12-13 00:28 . 2008-04-14 11:00 24064 c:\windows\system\OLESVR.DLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 24064 c:\windows\system\OLESVR.DLL
    - 2009-12-13 00:28 . 2008-04-14 11:00 82944 c:\windows\system\OLECLI.DLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 82944 c:\windows\system\OLECLI.DLL
    - 2009-12-13 00:28 . 2008-04-14 11:00 68768 c:\windows\system\MMSYSTEM.DLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 68768 c:\windows\system\MMSYSTEM.DLL
    - 2009-12-13 00:28 . 2008-04-14 11:00 28160 c:\windows\system\MCIWAVE.DRV
    + 2008-04-14 08:00 . 2008-04-14 08:00 28160 c:\windows\system\MCIWAVE.DRV
    - 2009-12-13 00:28 . 2008-04-14 11:00 25264 c:\windows\system\MCISEQ.DRV
    + 2008-04-14 08:00 . 2008-04-14 08:00 25264 c:\windows\system\MCISEQ.DRV
    + 2008-04-14 08:00 . 2008-04-14 08:00 73376 c:\windows\system\MCIAVI.DRV
    - 2009-12-13 00:28 . 2008-04-14 11:00 73376 c:\windows\system\MCIAVI.DRV
    - 2009-12-13 00:28 . 2008-04-14 11:00 32816 c:\windows\system\COMMDLG.DLL
    + 2008-04-14 08:00 . 2008-04-14 08:00 32816 c:\windows\system\COMMDLG.DLL
    - 2009-12-13 00:28 . 2008-04-14 11:00 69584 c:\windows\system\AVICAP.DLL
    + 2009-12-13 00:28 . 2008-04-14 08:00 69584 c:\windows\system\AVICAP.DLL
    - 2009-12-13 06:37 . 2008-04-14 11:00 58434 c:\windows\srchasst\srchctls.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 58434 c:\windows\srchasst\srchctls.dll
    + 2009-12-13 06:36 . 2008-04-14 08:00 38400 c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    - 2009-12-13 06:36 . 2008-04-14 11:00 38400 c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    + 2009-12-13 06:37 . 2008-04-14 08:00 35328 c:\windows\pchealth\helpctr\binaries\notiflag.exe
    - 2009-12-13 06:37 . 2008-04-14 11:00 35328 c:\windows\pchealth\helpctr\binaries\notiflag.exe
    + 2009-12-13 06:36 . 2008-04-14 08:00 18432 c:\windows\pchealth\helpctr\binaries\HscUpd.exe
    - 2009-12-13 06:36 . 2008-04-14 11:00 18432 c:\windows\pchealth\helpctr\binaries\HscUpd.exe
    - 2009-12-13 06:37 . 2008-04-14 11:00 99840 c:\windows\pchealth\helpctr\binaries\HelpHost.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 99840 c:\windows\pchealth\helpctr\binaries\HelpHost.exe
    + 2009-12-13 06:37 . 2008-04-14 08:00 21504 c:\windows\pchealth\helpctr\binaries\brpinfo.dll
    - 2009-12-13 06:37 . 2008-04-14 11:00 21504 c:\windows\pchealth\helpctr\binaries\brpinfo.dll
    sjy, Mar 8, 2012
    #60
Page 3 of 5
Topic Status:
Not open for further replies.

Add New Comment

Social Login & Guest Posting

TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.