System Check malware removal

Solved
By JWW2012
Jan 15, 2012
  1. Hello

    My parent's computer has picked up some infecton called system check and all I can say is it seems to b absolutely prolific. It hides all icons and everything.

    On going on to the computer, it seems to prevent everything loading. I also want to forewarn, no one has ever seemed to ensure programs are up to date on their compuer and also countless things are installed on it. In some respects I fear more will be encountered but I hope I can clean it, update it and sort out the loading speed. As it is at mum and dads, I may be slower responding.

    OK, first thing is, running up in nomal mode does not work, safe mode wih newoking also does not seem to connect to the internet. I also cannot install Malware Bytes, I think the virus is preventing that from working. So, Im at a loss with what to do.

    Any help will be much appreciated, shall I start with log scans, if so I will have to download them to memory sticks and take them over and run them. If anyone knows how to get internet working on safe mode than that would help too (I can then call them and get them to do stuff.

    Many Thanks
    John
  2. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    Welcome aboard [​IMG]

    Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
    Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
    Attached logs won't be reviewed.
    Complete as many steps as you can.
    Safe mode will be fine for now.

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
  3. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Hi Broni,

    I will try to do as many as possible but I think the virus is stopping Malwarebytes from running properly, I cant install it and if I click the shortcut that appears on the desktop it will open, but it wont allow me to update it.

    I will try my best to do as many as possible but the networking bit of safe mode appears to not be allowing connection to the internet (Just get the DNS 400 screen). Ill try sort and post logs tomorrow...or at least as many as I can!

    John
  4. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    Use another working computer and USB flash drive to download and transfer necessary tools to bad computer.

    To manually update MBAM, download this file: http://data.mbamupdates.com/tools/mbam-rules.exe
    Double click on downloaded file to update the program.
  5. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    Reopened...........
  6. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Progress

    Hi Broni,

    After putting the HDD back in to the comp and booting from it I managed to install comodo and do a virus scan. MBAM and GMER also worked but DDS crashes at about 70% everey time and the computer locks up. This is the same in safe mode.

    There is an ancient version of norton on it and gooodness knows what else from the lack of protection and updates which have occured. So I apologise in advance for anything these two logs may show.

    On startup I get a number of errors about TCP/IP missing from Norton and the system never aquires a network address from the router, but at the moment, at least it boots! I used unhide.exe to retrieve all the menu items and icons. The logs of the 2 that worked are below.

    MBAM:

    Malwarebytes Anti-Malware 1.60.0.1800
    www.malwarebytes.org

    Database version: v2011.12.24.05

    Windows XP Service Pack 3 x86 NTFS
    Internet Explorer 8.0.6001.18702
    HP_Owner :: PLAYROOM [administrator]

    29/01/2012 22:17:29
    mbam-log-2012-01-29 (22-17-29).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 234057
    Time elapsed: 19 minute(s), 32 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 2
    HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell (Hijack.Shell.Gen) -> Data: explorer.exe,C:\Documents and Settings\HP_Owner\Application Data\44575\2134A.exe -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|5F2.exe (Backdoor.CycBot) -> Data: C:\Program Files\LP\4A04\5F2.exe -> Quarantined and deleted successfully.

    Registry Data Items Detected: 9
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowControlPanel (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowHelp (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyDocs (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowRun (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
    HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.
    HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and repaired successfully.

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 1
    C:\Documents and Settings\All Users\Application Data\MUYVvCYIIAq4To.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    (end)

    GMER:

    GMER 1.0.15.15641 - http://www.gmer.net
    Rootkit quick scan 2012-01-30 18:40:25
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-17 ST3200826AS rev.3.03
    Running: snsi9chm.exe; Driver: C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\pxtcapow.sys


    ---- System - GMER 1.0.15 ----

    SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateKey [0xF3C8C7F8]
    SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateValueKey [0xF3C8CA4E]

    ---- Devices - GMER 1.0.15 ----

    Device Ntfs.sys (NT File System Driver/Microsoft Corporation)

    AttachedDevice SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)

    Device Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation)

    AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Ip fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Udp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)

    ---- EOF - GMER 1.0.15 ----

    Thanks
    John
  7. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    Good progress :)

    Download aswMBR to your desktop.
    Double click the aswMBR.exe to run it.
    If you see this question: Would you like to download latest Avast! virus definitions?" say "Yes".
    Click the "Scan" button to start scan.
    On completion of the scan click "Save log", save it to your desktop and post in your next reply.

    NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.

    ============================================================

    Download Bootkit Remover to your Desktop.

    • Unzip downloaded file to your Desktop.
    • Double-click on boot_cleaner.exe to run the program (Vista/7 users,right click on boot_cleaner.exe and click Run As Administrator).
    • It will show a Black screen with some data on it.
    • Right click on the screen and click Select All.
    • Press CTRL+C
    • Open a Notepad and press CTRL+V
    • Post the output back here.
  8. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Next Steps

    Broni,

    Managed to do the next steps, but as the comp I use is still struggling to connect to internet (never gets an IP address and symantec tells me tcp/ip is not enabled everytime i start) I could not get the latest avast definitions....which may make the first scan pointless. Ill let you be the judge of that.

    so: aswMBR

    aswMBR version 0.9.9.1532 Copyright(c) 2011 AVAST Software
    Run date: 2012-01-31 19:02:07
    -----------------------------
    19:02:07.812 OS Version: Windows 5.1.2600 Service Pack 3
    19:02:07.812 Number of processors: 2 586 0x403
    19:02:07.812 ComputerName: PLAYROOM UserName: HP_Owner
    19:02:08.625 Initialize success
    19:02:30.890 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-17
    19:02:30.890 Disk 0 Vendor: ST3200826AS 3.03 Size: 190782MB BusType: 3
    19:02:30.921 Disk 0 MBR read successfully
    19:02:30.921 Disk 0 MBR scan
    19:02:30.921 Disk 0 unknown MBR code
    19:02:30.921 Disk 0 Partition 1 00 0C FAT32 LBA RECOVERY 6142 MB offset 63
    19:02:30.937 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 184629 MB offset 12579840
    19:02:30.968 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 10 MB offset 390700800
    19:02:30.984 Disk 0 scanning sectors +390721952
    19:02:32.234 Disk 0 scanning C:\WINDOWS\system32\drivers
    19:02:45.937 Service scanning
    19:02:47.859 Modules scanning
    19:02:58.468 Disk 0 trace - called modules:
    19:02:58.500 ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys PCIIDEX.SYS
    19:02:58.531 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8754dab8]
    19:02:58.531 3 CLASSPNP.SYS[f76bcfd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-17[0x87552b00]
    19:02:58.546 Scan finished successfully
    19:06:05.015 Disk 0 MBR has been saved successfully to "L:\virus remover\MBR.dat"
    19:06:05.062 The log file has been saved successfully to "L:\virus remover\aswMBR.txt"

    AND BOOTKIT_REMOVER

    Bootkit Remover
    (c) 2009 Esage Lab
    www.esagelab.com

    Program version: 1.2.0.1
    OS Version: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)

    System volume is \\.\C:
    \\.\C: -> \\.\PhysicalDrive0 at offset 0x00000001`7fe80000
    Boot sector MD5 is: 04bb945744f67e09eac699dea7655d04

    Size Device Name MBR Status
    --------------------------------------------
    186 GB \\.\PhysicalDrive0 Unknown boot code

    Unknown boot code has been found on some of your physical disks.
    To inspect the boot code manually, dump the master boot sector:
    remover.exe dump <device_name> [output_file]
    To disinfect the master boot sector, use the following command:
    remover.exe fix <device_name>


    Done;
    Press any key to quit...


    I hope that makes sense.
    If you have any idea on how to get it back on the interweb that would be grand.
  9. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    We'll try to get your connection back as soon as I know the computer is fairly clean.

    Please download and run ListParts by Farbar (for 32-bit system)

    Please download and run ListParts64 by Farbar (for 64-bit system)

    Click on Scan button.

    Scan result will open in Notepad.
    Post it in your next reply.
  10. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Listparts scan

    Hi Broni,

    Listparts scan

    ListParts by Farbar
    Ran by HP_Owner on 01-02-2012 at 18:56:47
    Windows XP (X86)
    Running From: C:\Documents and Settings\HP_Owner\Desktop
    ************************************************************

    ========================= Memory info ======================

    Percentage of memory in use: 57%
    Total physical RAM: 1023.29 MB
    Available physical RAM: 430.48 MB
    Total Pagefile: 2460.04 MB
    Available Pagefile: 1944.85 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1999.12 MB

    ======================= Partitions =========================

    1 Drive c: (HP_PAVILION) (Fixed) (Total:180.3 GB) (Free:52.1 GB) NTFS ==>[Drive with boot components (Windows XP)]
    2 Drive d: (HP_RECOVERY) (Fixed) (Total:5.99 GB) (Free:2.53 GB) FAT32 ==>[Drive with boot components (Windows XP)]
    9 Drive l: (UDISK) (Removable) (Total:3.81 GB) (Free:2.84 GB) FAT32

    Disk ### Status Size Free Dyn Gpt
    -------- ---------- ------- ------- --- ---
    Disk 0 Online 186 GB 0 B

    Partitions of Disk 0:
    ===============

    Partition ### Type Size Offset
    ------------- ---------------- ------- -------
    Partition 1 Primary 6142 MB 32 KB
    Partition 2 Primary 180 GB 6143 MB
    Partition 3 Unknown 10 MB 186 GB

    Disk: 0
    Partition 1
    Type : 0C
    Hidden: No
    Active: No
    Volume ### Ltr Label Fs Type Size Status Info
    ---------- --- ----------- ----- ---------- ------- --------- --------
    * Volume 2 D HP_RECOVERY FAT32 Partition 6142 MB Healthy

    Disk: 0
    Partition 2
    Type : 07
    Hidden: No
    Active: Yes

    Volume ### Ltr Label Fs Type Size Status Info
    ---------- --- ----------- ----- ---------- ------- --------- --------
    * Volume 3 C HP_PAVILION NTFS Partition 180 GB Healthy System (partition with boot components)

    Disk: 0
    Partition 3
    Type : 17 (Suspicious Type)
    Hidden: Yes
    Active: No
    There is no volume associated with this partition.


    ****** End Of Log ******
  11. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    We have the newest TDL rootkit there.

    Download GETxPUD.exe to the desktop of your clean computer

    • Double click on GETxPUD.exe
    • A new folder will appear on the desktop.
    • Open the GETxPUD folder and click on the get&burn.bat
    • The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
    • Insert blank CD into your CD drive.
    • Click on Start and follow the prompts to burn the image to a CD.
    • Boot bad computer from the CD
    • Press Tool at the top
    • Choose Open Terminal
    • Type parted /dev/sda set 2 boot on
    • Press Enter
    • Type parted /dev/sda rm 3
    • Press Enter
    • Remove xPUD CD, reboot, run aswMBR and post the log
     
  12. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Stage Complete

    Hi Broni,

    Next instructions done, I now have that PC at my home so hopefully can be quicker. I have been gradually cleaning unused programs off etc, Id like to completely remove norton from it as it is 5 years out of date! I cant believe they left it so long, I also know moving old versions can be a pain so if you have any tips, would be great.

    Anyway as far as I see it at the mo need to clean, then connect to internet, then ill put the realtime protection on it.

    Note aswMBR could not get latest avast!....no internet on that comp.

    aswMBR:

    aswMBR version 0.9.9.1532 Copyright(c) 2011 AVAST Software
    Run date: 2012-02-01 20:30:59
    -----------------------------
    20:30:59.171 OS Version: Windows 5.1.2600 Service Pack 3
    20:30:59.171 Number of processors: 2 586 0x403
    20:30:59.171 ComputerName: PLAYROOM UserName: HP_Owner
    20:30:59.953 Initialize success
    20:31:09.359 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-17
    20:31:09.359 Disk 0 Vendor: ST3200826AS 3.03 Size: 190782MB BusType: 3
    20:31:09.375 Disk 0 MBR read successfully
    20:31:09.375 Disk 0 MBR scan
    20:31:09.390 Disk 0 unknown MBR code
    20:31:09.390 Disk 0 Partition 1 00 0C FAT32 LBA RECOVERY 6142 MB offset 63
    20:31:09.406 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 184629 MB offset 12579840
    20:31:09.406 Disk 0 scanning sectors +390700800
    20:31:09.484 Disk 0 scanning C:\WINDOWS\system32\drivers
    20:31:22.125 Service scanning
    20:31:24.375 Modules scanning
    20:31:34.875 Disk 0 trace - called modules:
    20:31:34.921 ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys
    20:31:34.921 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8754dab8]
    20:31:34.968 3 CLASSPNP.SYS[f76bcfd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-17[0x87552b00]
    20:31:34.968 Scan finished successfully
    20:34:08.687 Disk 0 MBR has been saved successfully to "G:\MBR.dat"
    20:34:08.703 The log file has been saved successfully to "G:\aswMBR2.txt"

    THANKS for your help so far
  13. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    Good job :)
    TDL rootkit is gone.

    As for Norton use this tool to remove it: https://www-secure.symantec.com/nor...&version=1&pvid=f-home&entsrc=redirect_pubweb

    We'll run one more tool and then we'll see what's going on with internet connection if it's not back after running the below tool.....

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.



    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try one of the following:

    1. Run Combofix from Safe Mode (How to...)

    2. Delete Combofix file, download fresh one, but rename combofix.exe to yourname.exe BEFORE saving it to your desktop.
    Do NOT run it yet.

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    Rkill.com
    Rkill.scr
    Rkill.exe

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    If normal mode still doesn't work, run BOTH tools from safe mode.

    In case #2, please post BOTH logs, rKill and Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
  14. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Progress

    Hi Broni,

    I have not yet uninstalled norton, ill do that in a bit.

    I have tried the above and keep getting combofix.exe is not a valid win32 application, same if I change it to jww.exe and run rkill before. Have tried in safe mode and normal.

    Also, I tried DDS again, it now worked so attach the DDS and then the Attach log produced

    Rkill Log worked...not sure it will give you much?

    Is combofox not working because i have to transfer it on a memory stick I wonder?

    RKILL:

    This log file is located at C:\rkill.log.
    Please post this only if requested to by the person helping you.
    Otherwise you can close this log when you wish.

    Rkill was run on 02/02/2012 at 0:12:25.
    Operating System: Microsoft Windows XP


    Processes terminated by Rkill or while it was running:



    Rkill completed on 02/02/2012 at 0:12:34.


    DDS:

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702
    Run by HP_Owner at 23:34:25 on 2012-02-01
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.327 [GMT 0:00]
    .
    AV: COMODO Antivirus *Disabled/Outdated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
    AV: Norton Internet Security *Disabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Disabled*
    .
    ============== Running Processes ===============
    .
    C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\LSI SoftModem\agrsmsvc.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\WINDOWS\system32\svchost.exe -k HPService
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Motive\McciCMService.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\WINDOWS\system32\SearchIndexer.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\vsnpstd3.exe
    C:\WINDOWS\vsnpstd2.exe
    C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    C:\HP\KBD\KBD.EXE
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\BT Broadband Desktop Help\btbb_wcm\McciTrayApp.exe
    C:\Program Files\HTC\HTC Sync\Application Launcher\Application Launcher.exe
    C:\WINDOWS\system32\SearchProtocolHost.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\ALCWZRD.EXE
    C:\WINDOWS\ALCMTR.EXE
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Zoom Telephonics, Inc\Zoom ADSL USB Modem\DSLMON.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Common Files\Teleca Shared\Generic.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\Common Files\Teleca Shared\logger.exe
    C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
    C:\Program Files\HTC\HTC Sync\ClientInitiatedStarter\ClientInitiatedStarter.exe
    C:\Program Files\HTC\HTC Sync\Mobile Phone Monitor\epmworker.exe
    C:\Program Files\HTC\HTC Sync\Mobile Phone Monitor\DbgOut.exe
    C:\Program Files\HTC\HTC Sync\Mobile Phone Monitor\HTCVBTServer.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files\HTC\HTC Sync\Mobile Phone Monitor\FsynSrvStarter.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymSCUI.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.co.uk/
    uSearch Page = hxxp://search.live.com
    uSearch Bar = hxxp://search.live.com/sphome.aspx
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyOverride = 127.0.0.1;*.local
    uInternet Settings,ProxyServer = http=127.0.0.1:58545
    mSearchAssistant = hxxp://search.live.com/sphome.aspx
    uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 5.0\reader\activex\AcroIEHelper.ocx
    BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
    BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
    BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files\windows live\messenger\wlchtc.dll
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7018.1622\swg.dll
    BHO: CNavExtBho Class: {bdf3e430-b101-42ad-a544-fadc6b084872} - c:\program files\norton internet security\norton antivirus\NavShExt.dll
    BHO: MSN Toolbar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\4.0.0357.1\npwinext.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    BHO: Ask Toolbar BHO: {f0d4b231-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
    BHO: SidebarAutoLaunch Class: {f2aa9440-6328-4933-b7c9-a6ccdf9cbf6d} - c:\program files\yahoo!\browser\YSidebarIEBHO.dll
    TB: Norton AntiVirus: {42cdd1bf-3ffb-4238-8ad1-7859df00b1d6} - c:\program files\norton internet security\norton antivirus\NavShExt.dll
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
    TB: Ask Toolbar: {f0d4b239-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
    TB: MSN Toolbar: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\4.0.0357.1\npwinext.dll
    TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    {555d4d79-4bd2-4094-a395-cfc534424a05}
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
    uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
    uRun: [tSfkTNduxrPpGPr.exe] c:\docume~1\hp_owner\locals~1\temp\tSfkTNduxrPpGPr.exe
    mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
    mRun: [URLLSTCK.exe] c:\program files\norton internet security\UrlLstCk.exe
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
    mRun: [snpstd3] c:\windows\vsnpstd3.exe
    mRun: [SNPSTD2] c:\windows\vsnpstd2.exe
    mRun: [REGSHAVE] c:\program files\regshave\REGSHAVE.EXE /AUTORUN
    mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
    mRun: [PS2] c:\windows\system32\ps2.exe
    mRun: [PCDrProfiler]
    mRun: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    mRun: [KBD] c:\hp\kbd\KBD.EXE
    mRun: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    mRun: [HPHUPD08] c:\program files\hp\digital imaging\{33d6cc28-9f75-4d1b-a11d-98895b3a3729}\hphupd08.exe
    mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
    mRun: [btbb_wcm_McciTrayApp] "c:\program files\bt broadband desktop help\btbb_wcm\McciTrayApp.exe"
    mRun: [fssui] "c:\program files\windows live\family safety\fsui.exe" -autorun
    mRun: [btbb_McciTrayApp] "c:\program files\bt broadband desktop help\btbb\BTHelpNotifier.exe"
    mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    mRun: [Mobile Connectivity Suite] "c:\program files\htc\htc sync\application launcher\Application Launcher.exe" /startoptions
    mRun: [SoundMan] SOUNDMAN.EXE
    mRun: [AlcWzrd] ALCWZRD.EXE
    mRun: [Alcmtr] ALCMTR.EXE
    mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
    mRun: [<NO NAME>]
    mRun: [MSN Toolbar] "c:\program files\msn toolbar\platform\4.0.0357.1\mswinext.exe"
    mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
    mRun: [oklbxWqyXCYA.exe] c:\documents and settings\all users\application data\oklbxWqyXCYA.exe
    mRun: [COMODO] c:\program files\comodo\comodo geekbuddy\CLPSLA.exe
    mRun: [CPA] c:\program files\comodo\comodo geekbuddy\VALA.exe
    mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\camtool.lnk - c:\program files\camtool\videomonitor\CamTool.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\zoom telephonics, inc\zoom adsl usb modem\DSLMON.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\exifla~1.lnk - c:\program files\finepixviewer\QuickDCF.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
    IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
    DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
    DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} - hxxp://zone.msn.com/binFrameWork/v10/StagingUI.cab55579.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {0DB074F0-617E-4EE9-912C-2965CF2AA5A4} - hxxp://download.microsoft.com/download/a/f/b/afba1967-2025-49da-8356-bc4132038945/VirtualEarth3D.cab
    DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} - file:///C:/Program%20Files/Mah%20Jong%20Medley/Images/stg_drm.ocx
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
    DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
    DPF: {3BB1D69B-A780-4BE1-876E-F3D488877135} - hxxp://download.microsoft.com/download/3/B/E/3BE57995-8452-41F1-8297-DD75EF049853/VirtualEarth3D.cab
    DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} - hxxp://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab
    DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader.cab
    DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} - hxxp://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab
    DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/EN-GB/a-UNO1/GAME_UNO1.cab
    DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1176457752796
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} - hxxp://67.15.101.3/g_bin/eng/poker_2_0_0_46.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://dl8-cdn-09.sun.com/s/ESD7/JSCDL/jdk/6u13-b03/jinstall-6u13-windows-i586-jc.cab?e=1243862917821&h=22269e38608aa2ff18c2a45c94b4b9f7/&filename=jinstall-6u13-windows-i586-jc.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} - hxxp://zone.msn.com/bingame/zpagames/zpa_txhe.cab60096.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - file:///C:/Program%20Files/Burger%20Island/Images/armhelper.ocx
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} - hxxp://zone.msn.com/binframework/v10/StProxy.cab55579.cab
    DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} - hxxps://connect2.environment-agency.gov.uk/dana-cached/setup/JuniperSetupSP1.cab
    DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://www.connect2ea.net/dana-cached/sc/JuniperSetupClient.cab
    TCP: DhcpNameServer = 192.168.1.254
    TCP: Interfaces\{63B704B7-990C-473B-AB45-968E2BF6496D} : DhcpNameServer = 192.168.1.254
    TCP: Interfaces\{7A545EDF-3EBE-41C5-B268-01AB4F12860F} : DhcpNameServer = 15.243.128.51 15.243.160.51
    AppInit_DLLs: c:\windows\system32\guard32.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\drivers\cmderd.sys [2011-12-19 18056]
    R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [2011-12-19 494816]
    R1 SAVRTPEL;SAVRTPEL;c:\program files\norton internet security\norton antivirus\SAVRTPEL.SYS [2005-2-4 53896]
    R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\CCEVTMGR.EXE [2005-3-4 185960]
    R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\CCSETMGR.EXE [2005-3-4 177768]
    R2 CLPSLS;COMODO livePCsupport Service;c:\program files\comodo\comodo geekbuddy\CLPSLS.exe [2011-11-23 1052472]
    R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2011-12-19 1960584]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2008-12-21 54752]
    R3 navapsvc;Norton AntiVirus Auto-Protect Service;c:\program files\norton internet security\norton antivirus\NAVAPSVC.exe [2005-3-24 128160]
    R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20050309.018\NAVENG.Sys [2005-1-3 73728]
    R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20050309.018\NavEx15.Sys [2005-1-3 631040]
    R3 SAVRT;SAVRT;c:\program files\norton internet security\norton antivirus\SAVRT.SYS [2005-2-4 334984]
    S0 13668810;13668810;c:\windows\system32\drivers\26232646.sys --> c:\windows\system32\drivers\26232646.sys [?]
    S2 ccProxy;Symantec Network Proxy;c:\program files\common files\symantec shared\CCPROXY.EXE [2005-3-4 239264]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 gupdate1ca1e82d3299a42;Google Update Service (gupdate1ca1e82d3299a42);c:\program files\google\update\GoogleUpdate.exe [2009-8-16 133104]
    S3 ccPwdSvc;Symantec Password Validation;c:\program files\common files\symantec shared\CCPWDSVC.EXE [2005-3-4 83560]
    S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-4-28 704872]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2009-8-16 133104]
    S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2010-4-26 25728]
    S3 SAVScan;SAVScan;c:\program files\norton internet security\norton antivirus\SAVSCAN.EXE [2005-2-17 198368]
    S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-4 39936]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
    .
    =============== Created Last 30 ================
    .
    2012-01-16 22:45:41 -------- d-sh--w- C:\$RECYCLE.BIN
    2012-01-16 20:57:26 -------- d-----w- c:\documents and settings\all users\application data\CPA_VA
    2012-01-16 20:54:54 -------- d-----w- C:\VritualRoot
    2012-01-16 20:17:14 1474832 ----a-w- c:\windows\system32\drivers\sfi.dat
    2012-01-16 19:45:52 -------- d-----w- C:\f8b78a383eb017763c
    2012-01-16 19:35:03 -------- d-----w- c:\documents and settings\all users\application data\Comodo
    2012-01-16 19:34:46 -------- d-----w- c:\program files\Comodo
    2012-01-15 20:47:27 832 ----a-w- c:\documents and settings\all users\application data\vkmlaaa.tmp
    2012-01-11 17:44:28 843 ----a-w- c:\documents and settings\all users\application data\xnylaaa.tmp
    2012-01-11 17:02:37 848 ----a-w- c:\documents and settings\all users\application data\dnvlaaa.tmp
    2012-01-09 20:38:25 -------- d-----w- c:\program files\75D9E
    2012-01-09 20:37:27 -------- d-----w- c:\documents and settings\hp_owner\application data\44575
    2012-01-09 20:37:25 -------- d-----w- c:\program files\LP
    .
    ==================== Find3M ====================
    .
    2012-01-15 20:53:33 138496 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-12-19 18:59:22 494816 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
    2011-12-19 18:59:22 31704 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
    2011-12-19 18:59:20 18056 ----a-w- c:\windows\system32\drivers\cmderd.sys
    2011-12-19 18:58:58 33984 ----a-w- c:\windows\system32\cmdcsr.dll
    2011-12-19 18:58:56 301224 ----a-w- c:\windows\system32\guard32.dll
    2011-12-10 15:24:06 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-23 13:25:32 1859584 ----a-w- c:\windows\system32\win32k.sys
    2011-11-04 19:20:51 916992 ----a-w- c:\windows\system32\wininet.dll
    2011-11-04 19:20:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2011-11-04 19:20:51 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2011-11-04 11:23:59 385024 ----a-w- c:\windows\system32\html.iec
    2007-05-12 13:59:02 774144 ----a-w- c:\program files\RngInterstitial.dll
    .
    ============= FINISH: 23:36:05.95 ===============

    DDS ATTACH

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume2
    Install Date: 13/04/2007 02:50:19
    System Uptime: 01/02/2012 20:24:52 (3 hours ago)
    .
    Motherboard: ASUSTeK Computer INC. | | Puffer2
    Processor: Intel(R) Pentium(R) 4 CPU 3.20GHz | CPU 1 | 3197/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 180 GiB total, 52.015 GiB free.
    D: is FIXED (FAT32) - 6 GiB total, 2.525 GiB free.
    E: is CDROM ()
    F: is CDROM ()
    H: is Removable
    I: is Removable
    J: is Removable
    K: is Removable
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
    Description: Photosmart B110 series
    Device ID: ROOT\MULTIFUNCTION\0000
    Manufacturer: HP
    Name: Photosmart B110 series
    PNP Device ID: ROOT\MULTIFUNCTION\0000
    Service:
    .
    ==== System Restore Points ===================
    .
    RP1: 09/01/2012 20:55:34 - System Checkpoint
    RP2: 11/01/2012 13:55:09 - System Checkpoint
    RP3: 29/01/2012 23:33:23 - System Checkpoint
    RP4: 31/01/2012 20:18:08 - System Checkpoint
    RP5: 01/02/2012 21:22:37 - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    32 Bit HP CIO Components Installer
    ABBYY FineReader 6.0 Sprint
    Adobe Acrobat 5.0
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Photoshop 7.0
    Adobe Reader 7.0
    Adobe Shockwave Player 11.5
    Adobe SVG Viewer 3.0
    Agere Systems PCI Soft Modem
    AiO_Scan
    AiOSoftware
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Ask Toolbar
    AutoUpdate
    B110
    Big Fish Games Client
    Bing Maps 3D
    Bonjour
    BT Wireless Connection Manager
    BT Yahoo! Applications
    BufferChm
    CameraDrivers
    camtool
    CC_ccProxyExt
    ccCommon
    ccPxyCore
    Command & Conquer Red Alert 2
    Comodo Dragon
    COMODO GeekBuddy
    COMODO Internet Security
    Coupon Printer for Windows
    CP_AtenaShokunin1Config
    CP_CalendarTemplates1
    CP_Package_Basic1
    CP_Package_Variety1
    CP_Package_Variety2
    CP_Package_Variety3
    CP_Panorama1Config
    Critical Update for Windows Media Player 11 (KB959772)
    CueTour
    Destinations
    DeviceDiscovery
    DeviceManagementQFolder
    Digimax Converter
    Digimax Master
    Diner Dash 2
    Disc2Phone
    DivX Codec
    DivX Content Uploader
    DivX Converter
    DivX Player
    DivX Web Player
    DocProc
    DocumentViewer
    DocumentViewerQFolder
    Easy Internet Sign-up
    Fax
    FinePixViewer Ver.3.2
    Free Mp3 Wma Converter V 1.6.1
    FUJIFILM USB Driver
    Google Chrome
    Google Toolbar for Internet Explorer
    Google Update Helper
    Google Updater
    GPBaseService2
    High Definition Audio Driver Package - KB888111
    HMV UK Download Manager
    Holly: A Christmas Tale Deluxe
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2570791)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB915800-v4)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB954708)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    Hotfix for Windows XP (KB976002-v5)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    HP Customer Participation Program 14.0
    HP Deskjet Printer Preload
    HP Document Viewer 5.3
    HP Image Zone 5.3
    HP Imaging Device Functions 14.0
    HP Multimedia Keyboard Software
    HP Photo Creations
    HP Photosmart 330,380,420,470,7800,8000,8200 Series
    HP Photosmart Cameras 5.0
    HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7
    HP PSC & OfficeJet 5.3.B
    HP Solution Center 14.0
    HP Update
    HPAppStudio
    HPProductAssistant
    HpSdpAppCoreApp
    HPSSupply
    HTC Driver
    HTC Sync
    ImageMixer VCD for FinePix
    InstantShareDevices
    InterVideo WinDVD Player
    iTunes
    J2SE Runtime Environment 5.0
    Java(TM) 6 Update 13
    Juniper Networks Cache Cleaner 5.5.0
    Juniper Networks Cache Cleaner 6.4.0
    Juniper Networks Cache Cleaner 6.5.0
    Juniper Networks Host Checker
    Juniper Networks Setup Client
    Juniper Networks Setup Client Activex Control
    Junk Mail filter update
    K-Lite Codec Pack 3.4.5 Full
    LightScribe 1.4.42.1
    LiveReg (Symantec Corporation)
    LiveUpdate 3.0 (Symantec Corporation)
    LSI PCI Soft Modem
    Malwarebytes Anti-Malware version 1.60.0.1800
    MarketResearch
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2656353)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft Application Error Reporting
    Microsoft Base Smart Card Cryptographic Service Provider Package
    Microsoft Choice Guard
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Default Manager
    Microsoft Halo
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2000 SR-1 Professional
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    MicroStaff WINASPI
    MobileMe Control Panel
    MSN Toolbar
    MSN Toolbar Platform
    MSRedist
    MSVCRT
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 4.0 SP2 Parser and SDK
    MSXML 6 Service Pack 2 (KB973686)
    Network
    NewCopy
    Norton AntiSpam
    Norton AntiVirus 2005
    Norton Internet Security
    Norton Internet Security 2005 (Symantec Corporation)
    Norton Security Center
    Norton WMI Update
    NVIDIA Display Control Panel
    NVIDIA Drivers
    NVIDIA nView Desktop Manager
    PanoStandAlone
    PC-Doctor 5 for Windows
    PhotoGallery
    PS_AIO_07_B110_SW_Min
    PS2
    PSPrinters08
    PSTAPlugin
    Python 2.2 pywin32 extensions (build 203)
    Python 2.2.3
    QFolder
    QuickTime
    QuickTransfer
    RandMap
    Readme
    RealArcade
    RealPlayer
    Realtek High Definition Audio Driver
    RegistryFix v6.1
    Safari
    Scan
    ScannerCopy
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 7 (KB972260)
    Security Update for Windows Internet Explorer 7 (KB974455)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2497640)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2530548)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2559049)
    Security Update for Windows Internet Explorer 8 (KB2586448)
    Security Update for Windows Internet Explorer 8 (KB2618444)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB974455)
    Security Update for Windows Internet Explorer 8 (KB976325)
    Security Update for Windows Internet Explorer 8 (KB978207)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Search 4 - KB963093
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2479943)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2491683)
    Security Update for Windows XP (KB2503658)
    Security Update for Windows XP (KB2503665)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2506223)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2511455)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2536276)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2544893)
    Security Update for Windows XP (KB2555917)
    Security Update for Windows XP (KB2562937)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2567053)
    Security Update for Windows XP (KB2567680)
    Security Update for Windows XP (KB2570222)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2619339)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2633171)
    Security Update for Windows XP (KB2639417)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Security Update for Windows XP (KB982802)
    Segoe UI
    Shop for HP Supplies
    SkinsHP1
    SmartCamera Ver 2.2
    SolutionCenter
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    Sonic_PrimoSDK
    Sony Ericsson Drivers
    SPBBC
    Status
    Symantec Network Drivers Update
    SymNet
    Teddy Factory
    The Battle for Middle-earth (tm)
    The Battle for Middle-earth (tm) II
    Toolbox
    TrayApp
    Uninstall 1.0.0.1
    Unload
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft Windows (KB971513)
    Update for Windows Internet Explorer 7 (KB976749)
    Update for Windows Internet Explorer 8 (KB2362765)
    Update for Windows Internet Explorer 8 (KB975364)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB976749)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Internet Explorer 8 (KB982664)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB2541763)
    Update for Windows XP (KB2607712)
    Update for Windows XP (KB2616676)
    Update for Windows XP (KB2641690)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971029)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    USB PC Cam Zoom
    USB PC Camera (SN9C103)
    Virtual DJ - Atomix Productions
    Web Games Player Plugin
    WebFldrs XP
    WebReg
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Imaging Component
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Family Safety
    Windows Live ID Sign-in Assistant
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sync
    Windows Live Upload Tool
    Windows Live Writer
    Windows Management Framework Core
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Search 4.0
    Windows XP Service Pack 3
    WinRAR archiver
    XviD 1.1 final uninstall
    Yahoo! Toolbar
    Zoom ADSL USB Modem
    .
    ==== Event Viewer Messages From Past Week ========
    .
    30/01/2012 18:29:31, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
    30/01/2012 18:29:31, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    30/01/2012 18:28:39, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD PCIIde ViaIde
    30/01/2012 18:28:31, error: Service Control Manager [7024] - The Symantec Network Proxy service terminated with service-specific error 4294967295 (0xFFFFFFFF).
    30/01/2012 18:28:31, error: Service Control Manager [7024] - The Background Intelligent Transfer Service service terminated with service-specific error 2147952450 (0x80072742).
    30/01/2012 18:28:31, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: A socket operation encountered a dead network.
    30/01/2012 18:28:31, error: Service Control Manager [7023] - The IPSEC Services service terminated with the following error: A socket operation encountered a dead network.
    30/01/2012 18:28:31, error: Service Control Manager [7023] - The Automatic Updates service terminated with the following error: %%2147952450
    30/01/2012 18:28:31, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    30/01/2012 18:28:31, error: Service Control Manager [7001] - The DHCP Client service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    30/01/2012 18:28:31, error: Service Control Manager [7000] - The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
    30/01/2012 14:10:19, error: Service Control Manager [7001] - The Network Location Awareness (NLA) service depends on the AFD service which failed to start because of the following error: The system cannot find the file specified.
    30/01/2012 14:10:19, error: Service Control Manager [7000] - The AFD service failed to start due to the following error: The system cannot find the file specified.
    29/01/2012 22:11:16, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD
    29/01/2012 21:13:41, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    29/01/2012 21:10:10, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    29/01/2012 21:09:09, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    29/01/2012 21:08:07, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD ASPI32 cmdGuard eeCtrl Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SAVRTPEL SYMTDI Tcpip
    29/01/2012 21:08:07, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
    29/01/2012 21:08:07, error: Service Control Manager [7001] - The fssfltr service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    29/01/2012 21:08:07, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
    29/01/2012 21:08:07, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    29/01/2012 21:08:07, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    29/01/2012 17:58:01, error: DCOM [10000] - Unable to start a DCOM Server: {9FC8AD10-2E1B-45BE-B57A-478803561E1F}. The error: "%5" Happened while starting this command: C:\PROGRA~1\Yahoo!\browser\ycommon.exe -Embedding
    .
    ==== End Of File ===========================
  15. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    This is not what I asked you to do.
    I asked you to remove Norton first and THEN run Combofix.
    Is Combofix located on your desktop?
    [​IMG]
  16. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Hi Norton is gone, uninstalled it.

    Combofix is on the desktop yep.

    Still get the Win32 application error, have tried several scenarios, safe mode etc etc. Could it possibly be because I transfer it to that computer using a memory stick and the computer I am using now (i.e. to post to the forums etc) is a 64bit win7?.

    EDIT - Ignore the above (except that Norton is uninstalled) I have solved the problem, basically the computer I was d/l it to was seeing it as a virus and thus while the icon appeared it was a 0 byte file and not allowing any of the data, will run it in a min and post log in seperate fix.
  17. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    COMBOFIX LOG

    ComboFix 12-01-30.02 - HP_Owner 02/02/2012 19:32:40.1.2 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.581 [GMT 0:00]
    Running from: c:\documents and settings\HP_Owner\Desktop\ComboFix.exe
    AV: COMODO Antivirus *Disabled/Outdated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\Administrator.PLAYROOM.000\WINDOWS
    c:\documents and settings\Administrator.PLAYROOM\WINDOWS
    c:\documents and settings\Administrator\WINDOWS
    c:\documents and settings\All Users\Application Data\dnvlaaa.tmp
    c:\documents and settings\All Users\Application Data\MUYVvCYIIAq4To
    c:\documents and settings\All Users\Application Data\TEMP
    c:\documents and settings\All Users\Application Data\vkmlaaa.tmp
    c:\documents and settings\All Users\Application Data\xnylaaa.tmp
    c:\documents and settings\Default User\WINDOWS
    c:\documents and settings\HP_Owner\Application Data\.#
    c:\documents and settings\HP_Owner\GoToAssistDownloadHelper.exe
    c:\documents and settings\HP_Owner\Local Settings\Application Data\assembly\tmp
    c:\documents and settings\HP_Owner\Start Menu\Programs\Scanner
    c:\documents and settings\HP_Owner\Start Menu\Programs\Scanner\Scanner.lnk
    c:\documents and settings\HP_Owner\Start Menu\Programs\Scanner\Uninstall Scanner.lnk
    c:\documents and settings\HP_Owner\Start Menu\Programs\System Check
    c:\documents and settings\HP_Owner\Start Menu\Programs\System Check\System Check.lnk
    c:\documents and settings\HP_Owner\Start Menu\Programs\System Check\Uninstall System Check.lnk
    c:\documents and settings\HP_Owner\WINDOWS
    c:\progra~1\COMMON~1\{34575~1
    c:\progra~1\COMMON~1\{34575~1\Bar888.dll
    c:\progra~1\COMMON~1\{34575~1\UnInstall.exe
    c:\progra~1\COMMON~1\{44575~1
    c:\program files\Common Files\uninstall information
    c:\program files\Internet Explorer\SET4D3.tmp
    c:\program files\Internet Explorer\SET4D4.tmp
    c:\program files\Internet Explorer\SET4D6.tmp
    c:\program files\Internet Explorer\SET85E.tmp
    c:\program files\Internet Explorer\SET85F.tmp
    c:\program files\Internet Explorer\SETC1.tmp
    c:\program files\Internet Explorer\SETC2.tmp
    c:\program files\Internet Explorer\SETC4.tmp
    c:\program files\Internet Explorer\SETC9A.tmp
    c:\program files\Internet Explorer\SETC9B.tmp
    c:\program files\LP
    c:\program files\LP\4A04\13.tmp
    c:\program files\LP\4A04\14.exe
    c:\program files\LP\4A04\14.tmp
    c:\program files\LP\4A04\2.tmp
    c:\program files\LP\4A04\3.tmp
    c:\program files\LP\4A04\4.exe
    c:\program files\LP\4A04\4.tmp
    c:\program files\LP\4A04\469.tmp
    c:\program files\LP\4A04\46D.tmp
    c:\program files\LP\4A04\5.exe
    c:\program files\LP\4A04\5.tmp
    c:\program files\LP\4A04\6.tmp
    c:\program files\LP\4A04\7.tmp
    c:\program files\LP\4A04\8.tmp
    c:\program files\LP\4A04\9.tmp
    c:\program files\LP\4A04\A.exe
    c:\program files\LP\4A04\A.tmp
    c:\program files\webhancer
    c:\windows\$NtUninstallKB7308$
    c:\windows\$NtUninstallKB7308$\2402932621
    c:\windows\$NtUninstallKB7308$\2423491839\@
    c:\windows\$NtUninstallKB7308$\2423491839\bckfg.tmp
    c:\windows\$NtUninstallKB7308$\2423491839\cfg.ini
    c:\windows\$NtUninstallKB7308$\2423491839\Desktop.ini
    c:\windows\$NtUninstallKB7308$\2423491839\keywords
    c:\windows\$NtUninstallKB7308$\2423491839\kwrd.dll
    c:\windows\$NtUninstallKB7308$\2423491839\L\xqemjimj
    c:\windows\$NtUninstallKB7308$\2423491839\U\00000001.@
    c:\windows\$NtUninstallKB7308$\2423491839\U\00000002.@
    c:\windows\$NtUninstallKB7308$\2423491839\U\00000004.@
    c:\windows\$NtUninstallKB7308$\2423491839\U\80000000.@
    c:\windows\$NtUninstallKB7308$\2423491839\U\80000004.@
    c:\windows\$NtUninstallKB7308$\2423491839\U\80000032.@
    c:\windows\curity~1
    c:\windows\curity~1\??curity\ctxad-552.0000
    c:\windows\curity~1\??curity\ctxad-552.0001
    c:\windows\curity~1\??curity\ctxad-552.0002
    c:\windows\curity~1\??curity\ctxad-552.0003
    c:\windows\system32\config\systemprofile\WINDOWS
    c:\windows\system32\FF05DA0D.dll
    c:\windows\system32\ps2.bat
    .
    Infected copy of c:\windows\system32\winlogon.exe was found and disinfected
    Restored copy from - c:\windows\ServicePackFiles\i386\winlogon.exe
    .
    Infected copy of c:\windows\system32\svchost.exe was found and disinfected
    Restored copy from - c:\windows\ServicePackFiles\i386\svchost.exe
    .
    c:\windows\explorer.exe . . . is infected!!
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-01-02 to 2012-02-02 )))))))))))))))))))))))))))))))
    .
    .
    2012-02-02 19:55 . 2012-02-02 19:55 20719 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\DIVWRAPPER.JS
    2012-02-02 19:55 . 2012-02-02 19:55 8782 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS
    2012-02-02 19:55 . 2012-02-02 19:55 7271 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS
    2012-02-02 19:55 . 2012-02-02 19:55 23327 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\COMBOBOX.JS
    2012-01-16 20:57 . 2012-01-16 20:57 -------- d-----w- c:\documents and settings\All Users\Application Data\CPA_VA
    2012-01-16 20:54 . 2012-01-16 20:54 -------- d-----w- C:\VritualRoot
    2012-01-16 20:17 . 2012-02-01 23:25 1474832 ----a-w- c:\windows\system32\drivers\sfi.dat
    2012-01-16 19:45 . 2012-01-16 19:45 -------- d-----w- C:\f8b78a383eb017763c
    2012-01-16 19:35 . 2012-01-16 20:57 -------- d-----w- c:\documents and settings\All Users\Application Data\Comodo
    2012-01-16 19:34 . 2012-01-16 20:08 -------- d-----w- c:\program files\Comodo
    2012-01-11 17:09 . 2012-01-11 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
    2012-01-11 17:03 . 2012-01-11 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
    2012-01-11 17:02 . 2012-01-11 17:02 -------- d-sh--w- c:\windows\system32\config\systemprofile\PrivacIE
    2012-01-09 21:32 . 2012-02-02 19:52 -------- d-----w- c:\documents and settings\Administrator.PLAYROOM
    2012-01-09 20:38 . 2012-02-01 18:48 -------- d-----w- c:\program files\75D9E
    2012-01-09 20:37 . 2012-01-17 01:14 -------- d-----w- c:\documents and settings\HP_Owner\Application Data\44575
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-01-15 20:53 . 2004-08-04 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-12-19 18:59 . 2011-12-19 18:59 97760 ----a-w- c:\windows\system32\drivers\inspect.sys
    2011-12-19 18:59 . 2011-12-19 18:59 494816 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
    2011-12-19 18:59 . 2011-12-19 18:59 31704 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
    2011-12-19 18:59 . 2011-12-19 18:59 18056 ----a-w- c:\windows\system32\drivers\cmderd.sys
    2011-12-19 18:58 . 2011-12-19 18:58 33984 ----a-w- c:\windows\system32\cmdcsr.dll
    2011-12-19 18:58 . 2011-12-19 18:58 301224 ----a-w- c:\windows\system32\guard32.dll
    2011-12-10 15:24 . 2010-12-25 13:11 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-23 13:25 . 2004-08-04 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
    2007-05-12 13:59 . 2007-05-12 13:59 774144 ----a-w- c:\program files\RngInterstitial.dll
    .
    .
    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    .
    [7] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
    [-] 2008-04-14 . DBD3103371FB897BB009348BA1AD9333 . 545280 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
    [7] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
    .
    [7] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
    [-] 2008-04-14 . 1852A19B834058F489F85EB520A88D15 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
    [7] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
    .
    [7] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
    [-] 2008-04-14 . EC4C168CF2E4AAF60848C5C7CFC02BD0 . 1058816 . . [6.00.2900.5512] . . c:\windows\explorer.exe
    [-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    [-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
    [7] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB938828$\explorer.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-12 68856]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-01 148888]
    "snpstd3"="c:\windows\vsnpstd3.exe" [2005-01-14 339968]
    "SNPSTD2"="c:\windows\vsnpstd2.exe" [2004-01-05 40960]
    "REGSHAVE"="c:\program files\REGSHAVE\REGSHAVE.EXE" [2002-02-04 53248]
    "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472]
    "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112]
    "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2005-05-11 253952]
    "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
    "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
    "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152]
    "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-08 61952]
    "btbb_wcm_McciTrayApp"="c:\program files\BT Broadband Desktop Help\btbb_wcm\McciTrayApp.exe" [2008-08-28 1516032]
    "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2010-04-28 647528]
    "Mobile Connectivity Suite"="c:\program files\HTC\HTC Sync\Application Launcher\Application Launcher.exe" [2009-05-27 598016]
    "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112]
    "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248]
    "nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-07-07 1753192]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
    "MSN Toolbar"="c:\program files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe" [2009-11-16 240992]
    "Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
    "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
    "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-10-06 59240]
    "COMODO"="c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe" [2011-11-23 208184]
    "CPA"="c:\program files\COMODO\COMODO GeekBuddy\VALA.exe" [2011-11-23 182584]
    "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-12-21 6676808]
    .
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-6-6 113664]
    camtool.lnk - c:\program files\camtool\VideoMonitor\CamTool.exe [N/A]
    DSLMON.lnk - c:\program files\Zoom Telephonics, Inc\Zoom ADSL USB Modem\DSLMON.exe [2006-12-3 929889]
    Exif Launcher.lnk - c:\program files\FinePixViewer\QuickDCF.exe [2002-1-9 200704]
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]
    Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\windows\system32\guard32.dll
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^camtool.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\camtool.lnk
    backup=c:\windows\pss\camtool.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^DSLMON.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\DSLMON.lnk
    backup=c:\windows\pss\DSLMON.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
    backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk
    backup=c:\windows\pss\Windows Search.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^HP_Owner^Start Menu^Programs^Startup^HMV UK Download Manager.lnk]
    path=c:\documents and settings\HP_Owner\Start Menu\Programs\Startup\HMV UK Download Manager.lnk
    backup=c:\windows\pss\HMV UK Download Manager.lnkStartup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    realsched.exe -osboot [X]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2011-10-09 18:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Motive SmartBridge]
    2006-02-06 17:52 462935 ----a-w- c:\progra~1\BTHOME~1\Help\SMARTB~1\BTHelpNotifier.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2011-10-24 14:28 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
    2005-05-04 01:43 90112 ------w- c:\windows\SOUNDMAN.EXE
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    2008-04-12 22:42 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
    2007-04-13 10:02 100056 ----a-w- c:\progra~1\SYMNET~1\SNDMon.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
    2005-08-31 16:11 2478080 ----a-w- c:\progra~1\Yahoo!\MESSEN~1\ypager.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YBrowser]
    2006-07-21 15:19 129536 ----a-w- c:\progra~1\Yahoo!\browser\ybrwicon.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat"=
    "c:\\Program Files\\Yahoo!\\Messenger\\ypager.exe"=
    "c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
    "c:\\Program Files\\EA GAMES\\The Battle for Middle-earth (tm)\\game.dat"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
    .
    R1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\drivers\cmderd.sys [19/12/2011 18:59 18056]
    R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [19/12/2011 18:59 494816]
    R2 CLPSLS;COMODO livePCsupport Service;c:\program files\Comodo\COMODO GeekBuddy\CLPSLS.exe [23/11/2011 10:27 1052472]
    S0 13668810;13668810;c:\windows\system32\drivers\26232646.sys --> c:\windows\system32\drivers\26232646.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 12:16 130384]
    S2 gupdate1ca1e82d3299a42;Google Update Service (gupdate1ca1e82d3299a42);c:\program files\Google\Update\GoogleUpdate.exe [16/08/2009 14:51 133104]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [16/08/2009 14:51 133104]
    S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [26/04/2010 20:23 25728]
    S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [04/08/2004 12:00 39936]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 12:16 753504]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    WINRM REG_MULTI_SZ WINRM
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    HPService REG_MULTI_SZ HPSLPSVC
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-01-07 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 17:57]
    .
    2012-02-01 c:\windows\Tasks\Google Software Updater.job
    - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-12 09:27]
    .
    2012-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc8adaf4a818e4.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-08-16 14:51]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.co.uk/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    mSearch Bar = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html
    uInternet Connection Wizard,ShellNext = iexplore
    DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
    .
    - - - - ORPHANS REMOVED - - - -
    .
    HKLM-Run-PCDrProfiler - (no file)
    HKLM-Run-btbb_McciTrayApp - c:\program files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
    SafeBoot-13668810.sys
    MSConfigStartUp-lxczbmgr - c:\program files\Lexmark 1200 Series\lxczbmgr.exe
    MSConfigStartUp-oklbxWqyXCYA - c:\documents and settings\All Users\Application Data\oklbxWqyXCYA.exe
    AddRemove-Halo - c:\program files\Microsoft Games\Halo\UNINSTAL.EXE
    AddRemove-LSI Soft Modem - c:\windows\agrsmdel
    AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-02-02 19:57
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    detected NTDLL code modification:
    ZwClose
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'lsass.exe'(764)
    c:\windows\system32\guard32.dll
    .
    - - - - - - - > 'explorer.exe'(5424)
    c:\windows\system32\WININET.dll
    c:\windows\system32\guard32.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    - - - - - - - > 'csrss.exe'(676)
    c:\windows\system32\cmdcsr.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\nvsvc32.exe
    c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
    c:\program files\LSI SoftModem\agrsmsvc.exe
    c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Common Files\LightScribe\LSSrvc.exe
    c:\program files\Common Files\Motive\McciCMService.exe
    c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    c:\windows\system32\SearchIndexer.exe
    c:\windows\system32\wscntfy.exe
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    c:\windows\ALCWZRD.EXE
    c:\windows\system32\RUNDLL32.EXE
    c:\program files\COMODO\COMODO GeekBuddy\CLPS.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\windows\system32\msiexec.exe
    c:\program files\Common Files\Teleca Shared\Generic.exe
    c:\program files\Common Files\Teleca Shared\logger.exe
    c:\program files\Common Files\Teleca Shared\CapabilityManager.exe
    c:\program files\HTC\HTC Sync\ClientInitiatedStarter\ClientInitiatedStarter.exe
    c:\program files\HTC\HTC Sync\Mobile Phone Monitor\epmworker.exe
    c:\program files\HTC\HTC Sync\Mobile Phone Monitor\DbgOut.exe
    c:\windows\system32\MsiExec.exe
    c:\program files\HTC\HTC Sync\Mobile Phone Monitor\HTCVBTServer.exe
    c:\program files\HTC\HTC Sync\Mobile Phone Monitor\FsynSrvStarter.exe
    c:\windows\system32\wbem\unsecapp.exe
    .
    **************************************************************************
    .
    Completion time: 2012-02-02 20:08:19 - machine was rebooted
    ComboFix-quarantined-files.txt 2012-02-02 20:08
    .
    Pre-Run: 57,815,080,960 bytes free
    Post-Run: 58,135,019,520 bytes free
    .
    - - End Of File - - 2C17BD740F80E65D61031C100211A6A8

    While scanning I saw that it found zero access rootkit.

    Small problem now is pc asks for a cd with Trayapp on it....think its related to HP from googling it but sure you will have a nice solution for that error message?

    Suspect combo found a fair bit...saw a number of dialogue boxes :S
  18. Broni

    Broni Malware Annihilator Posts: 46,164   +251

    1. Please open Notepad (Start>All Programs>Accessories>Notepad).

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    FCopy::
    c:\windows\ServicePackFiles\i386\winlogon.exe | c:\windows\system32\winlogon.exe
    c:\windows\ServicePackFiles\i386\svchost.exe | c:\windows\system32\svchost.exe
    c:\windows\ServicePackFiles\i386\explorer.exe | c:\windows\explorer.exe
    
    File::
    c:\windows\system32\drivers\26232646.sys
    
    
    Folder::
    
    Driver::
    13668810
    
    Registry::
    
    ClearJavaCache::
    

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
     
  19. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Combofix Take 2

    Cheers,

    Hopefully making progress though that explorer.exe is infected is bothersome. apart from trayapp alot of the other warning and popups when the pc starts have gone though.

    Latest Combofix Scan was too big, so part 1 below:


    ComboFix 12-01-30.02 - HP_Owner 02/02/2012 23:43:00.2.2 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.412 [GMT 0:00]
    Running from: c:\documents and settings\HP_Owner\Desktop\ComboFix.exe
    Command switches used :: c:\documents and settings\HP_Owner\Desktop\CFScript.txt
    AV: COMODO Antivirus *Disabled/Outdated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
    .
    FILE ::
    "c:\windows\system32\drivers\26232646.sys"
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\AutoRun.ini
    c:\windows\EventSystem.log
    c:\windows\expl.dat
    c:\windows\OLD105.tmp
    c:\windows\OLD111.tmp
    c:\windows\OLD11D.tmp
    c:\windows\OLD129.tmp
    c:\windows\OLD135.tmp
    c:\windows\OLD141.tmp
    c:\windows\OLD14D.tmp
    c:\windows\OLD159.tmp
    c:\windows\OLD165.tmp
    c:\windows\OLD171.tmp
    c:\windows\OLD180.tmp
    c:\windows\OLD189.tmp
    c:\windows\OLD195.tmp
    c:\windows\OLD1A1.tmp
    c:\windows\OLD1AF.tmp
    c:\windows\OLD1B9.tmp
    c:\windows\OLD1C5.tmp
    c:\windows\OLD1D1.tmp
    c:\windows\OLD1DD.tmp
    c:\windows\OLD23.tmp
    c:\windows\OLD2D.tmp
    c:\windows\OLD39.tmp
    c:\windows\OLD45.tmp
    c:\windows\OLD51.tmp
    c:\windows\OLD5D.tmp
    c:\windows\OLD69.tmp
    c:\windows\OLD75.tmp
    c:\windows\OLD81.tmp
    c:\windows\OLD8D.tmp
    c:\windows\OLD99.tmp
    c:\windows\OLDA5.tmp
    c:\windows\OLDB1.tmp
    c:\windows\OLDBD.tmp
    c:\windows\OLDC9.tmp
    c:\windows\OLDD5.tmp
    c:\windows\OLDE1.tmp
    c:\windows\OLDED.tmp
    c:\windows\OLDF9.tmp
    c:\windows\system32\drivers\etc\hosts.ics
    c:\windows\system32\svch.dat
    c:\windows\system32\winl.dat
    .
    Infected copy of c:\windows\system32\winlogon.exe was found and disinfected
    Restored copy from - c:\windows\ServicePackFiles\i386\winlogon.exe
    .
    Infected copy of c:\windows\system32\svchost.exe was found and disinfected
    Restored copy from - c:\windows\ServicePackFiles\i386\svchost.exe
    .
    c:\windows\explorer.exe . . . is infected!!
    .
    .
    --------------- FCopy ---------------
    .
    c:\windows\ServicePackFiles\i386\winlogon.exe --> c:\windows\system32\winlogon.exe
    c:\windows\ServicePackFiles\i386\svchost.exe --> c:\windows\system32\svchost.exe
    c:\windows\ServicePackFiles\i386\explorer.exe --> c:\windows\explorer.exe
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    -------\Service_13668810
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-01-03 to 2012-02-03 )))))))))))))))))))))))))))))))
    .
    .
    2012-02-03 00:08 . 2012-02-03 00:08 63115 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\USERTILE.JS
    2012-02-03 00:08 . 2012-02-03 00:08 6429 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UICORE.JS
    2012-02-03 00:08 . 2012-02-03 00:08 4599 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UIRESOURCE.JS
    2012-02-03 00:08 . 2012-02-03 00:08 9310 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXTBOX.JS
    2012-02-03 00:08 . 2012-02-03 00:08 8646 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TILEBOX.JS
    2012-02-03 00:08 . 2012-02-03 00:08 5927 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXT.JS
    2012-02-03 00:08 . 2012-02-03 00:08 8613 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\SAVEDUSER.JS
    2012-02-03 00:08 . 2012-02-03 00:08 1651 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\QUERYSTRING.JS
    2012-02-03 00:08 . 2012-02-03 00:08 6910 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\NEWUSERCOMM.JS
    2012-02-03 00:08 . 2012-02-03 00:08 8288 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\IMAGE.JS
    2012-02-03 00:08 . 2012-02-03 00:08 6208 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LINK.JS
    2012-02-03 00:08 . 2012-02-03 00:08 18541 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LOCALIZATION.JS
    2012-02-03 00:07 . 2012-02-03 00:07 51852 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\EXTERNALWRAPPER.JS
    2012-02-03 00:07 . 2012-02-03 00:07 20719 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\DIVWRAPPER.JS
    2012-02-03 00:07 . 2012-02-03 00:07 23327 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\COMBOBOX.JS
    2012-02-03 00:07 . 2012-02-03 00:07 8782 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS
    2012-02-03 00:07 . 2012-02-03 00:07 7271 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS
    2012-02-02 23:55 . 2008-04-14 00:12 545280 ----a-w- c:\windows\system32\OLD441.tmp
    2012-01-16 20:57 . 2012-01-16 20:57 -------- d-----w- c:\documents and settings\All Users\Application Data\CPA_VA
    2012-01-16 20:54 . 2012-01-16 20:54 -------- d-----w- C:\VritualRoot
    2012-01-16 20:17 . 2012-02-01 23:25 1474832 ----a-w- c:\windows\system32\drivers\sfi.dat
    2012-01-16 19:45 . 2012-01-16 19:45 -------- d-----w- C:\f8b78a383eb017763c
    2012-01-16 19:35 . 2012-01-16 20:57 -------- d-----w- c:\documents and settings\All Users\Application Data\Comodo
    2012-01-16 19:34 . 2012-01-16 20:08 -------- d-----w- c:\program files\Comodo
    2012-01-11 17:09 . 2012-01-11 17:09 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
    2012-01-11 17:03 . 2012-01-11 17:03 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
    2012-01-11 17:02 . 2012-01-11 17:02 -------- d-sh--w- c:\windows\system32\config\systemprofile\PrivacIE
    2012-01-09 21:32 . 2012-02-02 19:52 -------- d-----w- c:\documents and settings\Administrator.PLAYROOM
    2012-01-09 20:38 . 2012-02-01 18:48 -------- d-----w- c:\program files\75D9E
    2012-01-09 20:37 . 2012-01-17 01:14 -------- d-----w- c:\documents and settings\HP_Owner\Application Data\44575
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-02-02 23:47 . 2004-08-04 12:00 1058816 ----a-w- c:\windows\explorer.exe
    2012-01-15 20:53 . 2004-08-04 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-12-19 18:59 . 2011-12-19 18:59 97760 ----a-w- c:\windows\system32\drivers\inspect.sys
    2011-12-19 18:59 . 2011-12-19 18:59 494816 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
    2011-12-19 18:59 . 2011-12-19 18:59 31704 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
    2011-12-19 18:59 . 2011-12-19 18:59 18056 ----a-w- c:\windows\system32\drivers\cmderd.sys
    2011-12-19 18:58 . 2011-12-19 18:58 33984 ----a-w- c:\windows\system32\cmdcsr.dll
    2011-12-19 18:58 . 2011-12-19 18:58 301224 ----a-w- c:\windows\system32\guard32.dll
    2011-12-10 15:24 . 2010-12-25 13:11 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-23 13:25 . 2004-08-04 12:00 1859584 ----a-w- c:\windows\system32\win32k.sys
    2007-05-12 13:59 . 2007-05-12 13:59 774144 ----a-w- c:\program files\RngInterstitial.dll
    .
    .
    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    .
    [7] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
    [-] 2008-04-14 . DBD3103371FB897BB009348BA1AD9333 . 545280 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
    [7] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
    .
    [7] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
    [-] 2008-04-14 . 1852A19B834058F489F85EB520A88D15 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
    [7] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
    .
    [-] 2012-02-02 . EC4C168CF2E4AAF60848C5C7CFC02BD0 . 1058816 . . [6.00.2900.5512] . . c:\windows\explorer.exe
    [7] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
    [-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
    [-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
    [7] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB938828$\explorer.exe
    .
    ((((((((((((((((((((((((((((( SnapShot@2012-02-02_19.57.29 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-09-22 22:39 . 2008-04-14 00:12 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 54784 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    + 2006-12-01 23:46 . 2006-12-01 23:46 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    + 2006-12-01 23:08 . 2006-12-01 23:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2006-12-01 23:26 . 2006-12-01 23:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    + 2006-12-01 23:25 . 2006-12-01 23:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2006-12-01 21:56 . 2006-12-01 21:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    + 2005-01-03 03:57 . 2005-01-03 03:57 82432 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
    + 2005-01-03 04:11 . 2003-08-12 22:25 28672 c:\windows\Web\Wallpaper\welcome\AWhelper.dll
    + 2006-12-05 21:39 . 2004-01-05 17:34 40960 c:\windows\vsnpstd2.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\vmmreg32.dll
    + 2007-07-27 15:18 . 2004-12-08 17:40 20480 c:\windows\usnpstd3.exe
    + 2006-12-05 21:39 . 2004-02-23 14:17 20480 c:\windows\usnpstd2.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\twunk_32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 49680 c:\windows\twunk_16.exe
    + 2007-07-27 15:19 . 2005-08-01 15:01 57344 c:\windows\twain_32\SNPSTD3D\TwainUI.dll
    + 2007-07-27 15:19 . 2005-08-01 15:01 57344 c:\windows\twain_32\SNPSTD3C\TwainUI.dll
    + 2007-07-27 15:19 . 2005-08-01 15:01 57344 c:\windows\twain_32\SNPSTD3B\TwainUI.dll
    + 2007-07-27 15:19 . 2005-08-01 15:01 57344 c:\windows\twain_32\SNPSTD3A\TwainUI.dll
    + 2006-12-05 21:39 . 2004-01-29 16:12 45056 c:\windows\twain_32\snpstd2\TwainUI.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50688 c:\windows\twain_32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 94784 c:\windows\twain.dll
    + 2012-02-02 23:01 . 2012-02-02 23:01 16384 c:\windows\Temp\Perflib_Perfdata_84.dat
    + 2012-02-03 00:07 . 2012-02-03 00:07 16384 c:\windows\Temp\Perflib_Perfdata_15c.dat
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\TASKMAN.EXE
    + 2007-07-28 09:20 . 2003-05-19 15:07 86016 c:\windows\system32\YPcservice.exe
    + 2007-07-28 09:18 . 2001-10-11 09:26 65536 c:\windows\system32\YCRWin32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11776 c:\windows\system32\xolehlp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50176 c:\windows\system32\xmlprovi.dll
    + 2008-05-26 21:18 . 2008-05-26 21:18 56320 c:\windows\system32\xmlfilter.dll
    + 2008-08-29 15:02 . 2008-08-29 15:02 61136 c:\windows\system32\xinput9_1_0.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 30720 c:\windows\system32\xcopy.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 91648 c:\windows\system32\xactsrv.dll
    + 2004-08-04 18:00 . 2008-04-14 00:12 52736 c:\windows\system32\wzcsapi.dll
    + 2007-04-13 09:50 . 2009-08-06 18:24 44768 c:\windows\system32\wups2.dll
    + 2004-08-04 12:00 . 2009-08-06 18:24 35552 c:\windows\system32\wups.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\wupdmgr.exe
    + 2006-09-28 17:56 . 2006-09-28 17:56 55808 c:\windows\system32\WudfSvc.dll
    + 2006-09-28 19:13 . 2006-09-28 19:13 95344 c:\windows\system32\WUDFCoinstaller.dll
    + 2004-08-04 12:00 . 2009-08-06 18:24 53472 c:\windows\system32\wuauclt.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 18432 c:\windows\system32\wtsapi32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50688 c:\windows\system32\wstdecod.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 22528 c:\windows\system32\wsock32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 41984 c:\windows\system32\wsnmp32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19456 c:\windows\system32\wshtcpip.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11264 c:\windows\system32\wshrm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\wshisn.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14336 c:\windows\system32\wship6.dll
    + 2004-08-04 12:00 . 2008-05-09 10:53 90112 c:\windows\system32\wshext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 36864 c:\windows\system32\wshcon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 80896 c:\windows\system32\wscsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 13824 c:\windows\system32\wscntfy.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\ws2help.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 82432 c:\windows\system32\ws2_32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11264 c:\windows\system32\wpnpinst.exe
    + 2004-08-11 08:45 . 2004-08-11 08:45 10752 c:\windows\system32\wpdtrace.dll
    + 2006-10-18 20:47 . 2006-10-18 20:47 38400 c:\windows\system32\wpdshextres.dll
    + 2006-10-18 19:00 . 2006-10-18 19:00 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2004-08-11 08:45 . 2006-10-18 20:47 63488 c:\windows\system32\wpdmtpus.dll
    + 2004-08-11 08:45 . 2006-10-18 20:47 35840 c:\windows\system32\wpdconns.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 32256 c:\windows\system32\wpabaln.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 13824 c:\windows\system32\wowfaxui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 10368 c:\windows\system32\wowexec.exe
    + 2007-06-30 09:38 . 1999-09-10 12:06 45056 c:\windows\system32\WNASPI32.DLL
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\wmpui.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 99840 c:\windows\system32\wmpshell.dll
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\wmpcore.dll
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\wmpcd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\wmiprop.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\wmerrenu.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 37376 c:\windows\system32\wmdmps.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 33792 c:\windows\system32\wmdmlog.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 92672 c:\windows\system32\wlnotify.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\winstrm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 53760 c:\windows\system32\winsta.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17408 c:\windows\system32\winshfhc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 99328 c:\windows\system32\winscard.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\winrnr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\winmsd.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 32256 c:\windows\system32\winipsec.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\winchat.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\win87em.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\win.com
    + 2004-08-04 12:00 . 2008-04-14 00:12 75776 c:\windows\system32\wiascr.dll
    + 2008-01-13 17:52 . 2001-08-17 22:36 87040 c:\windows\system32\wiafbdrv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13600 c:\windows\system32\wfwnet.drv
    + 2004-08-04 12:00 . 2008-04-14 00:12 65024 c:\windows\system32\wextract.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\webhits.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 68096 c:\windows\system32\webclnt.dll
    + 2004-08-04 18:00 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud.drv
    + 2004-08-04 12:00 . 2009-06-25 08:25 54272 c:\windows\system32\wdigest.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\wbem\xml\wmi2xml.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 95232 c:\windows\system32\wbem\wmiutils.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 52224 c:\windows\system32\wbem\wmitimep.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 41472 c:\windows\system32\wbem\wmipsess.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 62464 c:\windows\system32\wbem\wmipjobj.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 61952 c:\windows\system32\wbem\wmipiprt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 75264 c:\windows\system32\wbem\wmipicmp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61440 c:\windows\system32\wbem\wmimsg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 60928 c:\windows\system32\wbem\wmicookr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 88576 c:\windows\system32\wbem\wmiaprpl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\wbem\winmgmtr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\wbem\winmgmt.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 43520 c:\windows\system32\wbem\wbemsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\wbem\wbemprox.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 43008 c:\windows\system32\wbem\wbemperf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\wbem\wbemads.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\wbem\unsecapp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 59904 c:\windows\system32\wbem\trnsprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61952 c:\windows\system32\wbem\tmplprov.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 86528 c:\windows\system32\wbem\stdprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 40960 c:\windows\system32\wbem\smtpcons.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 36352 c:\windows\system32\wbem\scrcons.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 47104 c:\windows\system32\wbem\ncprov.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16384 c:\windows\system32\wbem\mofcomp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53248 c:\windows\system32\wbem\fwdprov.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 21504 c:\windows\system32\wbem\evntrprv.dll
    + 2004-08-04 12:00 . 2008-04-13 18:44 17664 c:\windows\system32\watchdog.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\w3ssl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\w32topl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49664 c:\windows\system32\w32tm.exe
    + 2006-10-10 01:00 . 2006-10-10 01:00 39672 c:\windows\system32\VXBLOCK.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33792 c:\windows\system32\vssadmin.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\vss_ps.dll
    + 2007-07-27 15:18 . 2007-03-12 10:41 61440 c:\windows\system32\vsnpstd3.dll
    + 2007-04-13 16:15 . 2004-02-17 09:56 36864 c:\windows\system32\vsnpstd2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18176 c:\windows\system32\vga64k.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51456 c:\windows\system32\vga256.dll
    + 2007-04-13 16:16 . 2008-04-14 00:12 53760 c:\windows\system32\vfwwdm32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20535 c:\windows\system32\vfpodbc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\version.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\verifier.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\verifier.dll
    + 2006-03-17 00:38 . 2008-04-14 00:12 28672 c:\windows\system32\verclsid.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 51712 c:\windows\system32\vdmredir.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 26112 c:\windows\system32\vdmdbg.dll
    + 1998-12-24 10:23 . 1998-12-24 10:23 40960 c:\windows\system32\VBAME.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 30749 c:\windows\system32\vbajet32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50176 c:\windows\system32\utilman.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\utildll.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 49211 c:\windows\system32\usrvpa.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 45116 c:\windows\system32\usrvoica.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 49209 c:\windows\system32\usrv80a.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 41019 c:\windows\system32\usrsvpia.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 69700 c:\windows\system32\usrshuta.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 49211 c:\windows\system32\usrsdpia.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 77883 c:\windows\system32\usrrtosa.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 61508 c:\windows\system32\usrprbda.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 77891 c:\windows\system32\usrmlnka.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 53305 c:\windows\system32\usrlbva.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 86073 c:\windows\system32\usrfaxa.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 77890 c:\windows\system32\usrdpa.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 69699 c:\windows\system32\usrcoina.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 61500 c:\windows\system32\usrcntra.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 19968 c:\windows\system32\usmt\log.dll
    + 2008-09-22 22:39 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 26112 c:\windows\system32\userinit.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 47872 c:\windows\system32\user.exe
    + 2004-08-04 06:56 . 2008-04-14 00:12 74240 c:\windows\system32\usbui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\usbmon.dll
    + 2003-02-21 12:16 . 2003-02-21 12:16 49152 c:\windows\system32\URTTemp\regtlib.exe
    + 2005-01-03 03:34 . 2003-02-21 02:09 77824 c:\windows\system32\URTTemp\mscorsn.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\ureg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18432 c:\windows\system32\ups.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\upnpcont.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 13824 c:\windows\system32\uniplat.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 74240 c:\windows\system32\unimdmat.dll
    + 2007-10-19 22:24 . 2008-04-14 00:11 76288 c:\windows\system32\uniime.dll
    + 2008-05-26 21:19 . 2008-05-26 21:19 97792 c:\windows\system32\UncCplExt.dll
    + 2004-09-16 08:00 . 2004-09-16 08:00 77824 c:\windows\system32\UMLoader.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\umdmxfrm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 35840 c:\windows\system32\umandlg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 82432 c:\windows\system32\ufat.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\udhisapi.dll
    + 2007-01-29 08:58 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 57856 c:\windows\system32\twext.dll
  20. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Part 2


    + 2008-07-29 20:10 . 2008-07-29 20:10 26112 c:\windows\system32\TsWpfWrp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\tsshutdn.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\tskill.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\tsdiscon.exe
    + 2004-08-04 12:00 . 2008-04-14 00:13 12168 c:\windows\system32\tsddd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\tsd32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44544 c:\windows\system32\tscupgrd.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\tscon.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 93696 c:\windows\system32\tscfgwmi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 52224 c:\windows\system32\tsappcmp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 90112 c:\windows\system32\trkwks.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 12800 c:\windows\system32\tree.com
    + 2004-08-04 12:00 . 2004-08-04 12:00 31232 c:\windows\system32\traffic.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\tracert6.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 12288 c:\windows\system32\tracert.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13888 c:\windows\system32\toolhelp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\tftp.exe
    + 2004-08-04 18:00 . 2009-06-12 12:31 76288 c:\windows\system32\telnet.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\tcpsvcs.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmonui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14848 c:\windows\system32\tcpmib.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\tcmsetup.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\taskman.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 78848 c:\windows\system32\tapiui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19200 c:\windows\system32\tapi.dll
    + 2007-07-02 12:48 . 1998-07-12 23:00 21504 c:\windows\system32\TABCTFR.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\syskey.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\sysinv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18896 c:\windows\system32\sysedit.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 57856 c:\windows\system32\synceng.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\syncapp.exe
    + 2008-05-26 20:59 . 2008-05-26 20:59 18904 c:\windows\system32\structuredqueryschematrivial.bin
    + 2004-08-04 12:00 . 2009-10-21 05:38 75776 c:\windows\system32\strmfilt.dll
    + 2004-08-04 06:56 . 2008-04-14 00:12 74752 c:\windows\system32\storprop.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14848 c:\windows\system32\stimon.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 68096 c:\windows\system32\sti.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 59392 c:\windows\system32\stclient.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14336 c:\windows\system32\ssstars.scr
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\ssmyst.scr
    + 2004-08-04 12:00 . 2008-04-14 00:12 47104 c:\windows\system32\ssmypics.scr
    + 2004-08-04 12:00 . 2008-04-14 00:12 20992 c:\windows\system32\ssmarque.scr
    + 2004-08-04 12:00 . 2008-04-14 00:12 71680 c:\windows\system32\ssdpsrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 34816 c:\windows\system32\ssdpapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\ssbezier.scr
    + 2004-08-04 12:00 . 2010-08-27 05:57 99840 c:\windows\system32\srvsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\srclient.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49179 c:\windows\system32\sqlwoa.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 24603 c:\windows\system32\sqlwid.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 24661 c:\windows\system32\spxcoins.dll
    + 2005-01-03 03:44 . 2009-05-12 14:12 26144 c:\windows\system32\spupdsvc.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 72192 c:\windows\system32\sprio800.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 70656 c:\windows\system32\sprio600.dll
    + 2004-08-04 12:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 75264 c:\windows\system32\spoolss.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 26624 c:\windows\system32\spool\drivers\w32x86\3\fxsdrv.dll
    + 2004-08-04 18:00 . 2008-04-14 04:42 11264 c:\windows\system32\spnpinst.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 69632 c:\windows\system32\spnike.dll
    + 2007-04-13 14:04 . 2009-05-12 14:12 16928 c:\windows\system32\spmsg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 24576 c:\windows\system32\sort.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 56832 c:\windows\system32\sol.exe
    + 2008-08-19 10:54 . 2008-07-18 21:10 45768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
    + 2007-08-24 08:53 . 2007-07-30 18:19 43352 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll
    + 2007-06-22 11:35 . 2007-04-16 21:45 43352 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.374\wups2.dll
    + 2008-08-19 10:54 . 2008-07-18 21:10 36552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
    + 2007-08-24 08:53 . 2007-07-30 18:18 33624 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll
    + 2007-06-22 11:35 . 2007-04-16 21:47 33624 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.374\wups.dll
    + 2007-04-13 09:50 . 2005-05-26 03:16 41240 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\5.8.0.2469\wups.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\snmpapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50688 c:\windows\system32\smss.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 89600 c:\windows\system32\smlogsvc.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\slbrccsp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 98304 c:\windows\system32\slbiop.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\slayerxp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 26112 c:\windows\system32\skeys.exe
    + 2007-06-24 22:22 . 1998-03-04 10:40 83968 c:\windows\system32\Skbase40.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\sisbkup.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 70144 c:\windows\system32\sigverif.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 13312 c:\windows\system32\sigtab.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19456 c:\windows\system32\shutdown.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 27648 c:\windows\system32\shscrap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 77824 c:\windows\system32\shrpubw.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 45056 c:\windows\system32\shmgrate.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 65024 c:\windows\system32\shimeng.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 68096 c:\windows\system32\shgina.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\shfolder.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\shadow.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\sfmapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11753 c:\windows\system32\setver.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\Setup\startoc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\Setup\ocgen.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 62976 c:\windows\system32\Setup\ntoc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 77312 c:\windows\system32\Setup\netoc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 90112 c:\windows\system32\Setup\msdtcstp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 23040 c:\windows\system32\setup.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 31232 c:\windows\system32\sethc.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\serwvdrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 56320 c:\windows\system32\servdeps.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\serialui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\senscfg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 39424 c:\windows\system32\sens.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 54784 c:\windows\system32\sendmail.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 29184 c:\windows\system32\sendcmsg.dll
    + 2004-08-04 12:00 . 2009-06-25 08:25 56832 c:\windows\system32\secur32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\seclogon.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 87552 c:\windows\system32\searchfilterhost.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 29184 c:\windows\system32\sdhcinst.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 77312 c:\windows\system32\sdbinst.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\scredir.dll
    + 1998-03-24 19:54 . 1998-03-24 19:54 15872 c:\windows\system32\SCP32.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 20480 c:\windows\system32\sclgntfy.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 95744 c:\windows\system32\scardsvr.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 69632 c:\windows\system32\scarddlg.dll
    + 2004-08-04 12:00 . 2009-02-06 10:39 35328 c:\windows\system32\sc.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 13312 c:\windows\system32\savedump.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 64000 c:\windows\system32\samlib.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 45568 c:\windows\system32\safrslv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 29696 c:\windows\system32\safrdm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 43520 c:\windows\system32\safrcdlg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\rwinsta.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 14336 c:\windows\system32\runonce.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 33280 c:\windows\system32\rundll32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\runas.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 44032 c:\windows\system32\rtutils.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\rtm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 31744 c:\windows\system32\rtipxmib.dll
    + 2008-05-26 21:18 . 2008-05-26 21:18 38400 c:\windows\system32\rtffilt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 77312 c:\windows\system32\rtcshare.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 92672 c:\windows\system32\rsvpsp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\rsvpmsg.dll
    + 2007-07-27 15:18 . 2005-02-01 12:45 57344 c:\windows\system32\rsnpstd3.dll
    + 2007-04-13 16:15 . 2004-02-24 19:56 40960 c:\windows\system32\rsnpstd2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\rsmui.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\rsmsink.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\rsmps.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\rsm.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 39936 c:\windows\system32\rshx32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14848 c:\windows\system32\rsh.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\rpcns4.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\routemon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19968 c:\windows\system32\route.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 13824 c:\windows\system32\rexec.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 58880 c:\windows\system32\resutils.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47104 c:\windows\system32\Restore\srdiag.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\replace.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 60416 c:\windows\system32\remotepg.dll
    + 2005-01-03 04:29 . 2005-07-04 07:30 26624 c:\windows\system32\ReinstallBackups\0006\DriverFiles\PS2.sys
    + 2005-01-03 04:29 . 2004-10-25 22:17 90112 c:\windows\system32\ReinstallBackups\0006\DriverFiles\ps2.bat
    + 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\kbdclass.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 52736 c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\i8042prt.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 68224 c:\windows\system32\ReinstallBackups\0002\DriverFiles\i386\pci.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\pciidex.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 95360 c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\atapi.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 11776 c:\windows\system32\regsvr32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 59904 c:\windows\system32\regsvc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33792 c:\windows\system32\regini.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 49664 c:\windows\system32\regapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 50176 c:\windows\system32\reg.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 67072 c:\windows\system32\rdshost.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 13824 c:\windows\system32\rdsaddin.exe
    + 2004-08-04 12:00 . 2008-04-14 00:13 87176 c:\windows\system32\rdpwsx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\rdpsnd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:13 92424 c:\windows\system32\rdpdd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 62976 c:\windows\system32\rdpclip.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 21504 c:\windows\system32\rcp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 35840 c:\windows\system32\rcimlby.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 58368 c:\windows\system32\rastapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\rasser.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16384 c:\windows\system32\rassapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\rasrad.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 61952 c:\windows\system32\rasqec.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 56832 c:\windows\system32\rasphone.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 22528 c:\windows\system32\rasmxs.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 61440 c:\windows\system32\rasman.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\rasdial.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\rasctrs.dll
    + 2004-08-04 12:00 . 2009-10-12 13:38 79872 c:\windows\system32\raschap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\rasautou.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 88576 c:\windows\system32\rasauto.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 43520 c:\windows\system32\racpldlg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\qwinsta.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 76800 c:\windows\system32\qutil.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\qprocess.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\qmgrprxy.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 62464 c:\windows\system32\qcliprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\qappsrv.exe
    + 2005-01-03 03:33 . 2004-10-11 16:18 94208 c:\windows\system32\pywintypes22.dll
    + 2007-06-26 20:32 . 2007-04-23 00:15 64760 c:\windows\system32\pxinsa64.exe
    + 2007-06-26 20:32 . 2007-04-23 00:15 72440 c:\windows\system32\pxhpinst.exe
    + 2007-06-26 20:32 . 2007-04-23 00:15 64760 c:\windows\system32\pxcpya64.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 34304 c:\windows\system32\pstorsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 43520 c:\windows\system32\pstorec.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\pschdprf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 96768 c:\windows\system32\psbase.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 23040 c:\windows\system32\psapi.dll
    + 2005-01-03 04:01 . 2004-10-25 22:17 90112 c:\windows\system32\ps2.EXE
    + 2004-08-04 12:00 . 2008-04-14 00:12 50176 c:\windows\system32\proquota.exe
    + 2008-05-26 21:18 . 2008-05-26 21:18 71680 c:\windows\system32\propdefs.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 27648 c:\windows\system32\profmap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\prflbmsg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17408 c:\windows\system32\powrprof.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 49152 c:\windows\system32\powercfg.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 58880 c:\windows\system32\pnrpnsp.dll
    + 2004-08-04 11:00 . 2009-03-08 04:31 46592 c:\windows\system32\pngfilt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 46592 c:\windows\system32\pmspl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\plustab.dll
    + 2004-08-04 18:00 . 2008-04-14 00:12 15360 c:\windows\system32\pjlmon.dll
    + 2005-10-28 22:49 . 2005-10-28 22:49 84480 c:\windows\system32\pintool.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\ping6.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\ping.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\pifmgr.dll
    + 2004-08-04 18:00 . 2008-04-13 18:35 24064 c:\windows\system32\pidgen.dll
    + 2004-08-04 18:00 . 2008-04-14 00:12 35328 c:\windows\system32\pid.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\perfts.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 34816 c:\windows\system32\perfproc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\perfos.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\perfnet.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\perfmon.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\perfdisk.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 28626 c:\windows\system32\perfd009.dat
    + 2004-08-04 12:00 . 2008-04-14 00:12 39936 c:\windows\system32\perfctrs.dll
    + 2004-11-09 20:25 . 2012-02-02 19:35 96886 c:\windows\system32\perfc009.dat
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\pentnt.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\pautoenr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\pathping.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\panmap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 58368 c:\windows\system32\packager.exe
    + 2000-01-10 23:33 . 2000-01-10 23:33 65586 c:\windows\system32\OUTLWAB.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\osuninst.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\osuninst.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 51200 c:\windows\system32\oobe\oobebaln.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 29184 c:\windows\system32\oobe\msoobe.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 19456 c:\windows\system32\oobe\msobweb.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 30720 c:\windows\system32\oobe\msobshel.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16384 c:\windows\system32\oobe\msobdl.dll
    + 2005-01-03 04:11 . 2004-01-22 17:51 40960 c:\windows\system32\omano.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\olethk32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\olesvr32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 24064 c:\windows\system32\olesvr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 84992 c:\windows\system32\olepro32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 37376 c:\windows\system32\olecnv32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 74752 c:\windows\system32\olecli32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 82944 c:\windows\system32\olecli.dll
    + 2004-08-04 12:00 . 2011-09-26 10:41 20480 c:\windows\system32\oleaccrc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39744 c:\windows\system32\ole2.dll
    + 2008-05-26 21:19 . 2008-05-26 21:19 11264 c:\windows\system32\oephRes.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 20511 c:\windows\system32\odtext32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 20510 c:\windows\system32\odpdx32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 20510 c:\windows\system32\odfox32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 20510 c:\windows\system32\odexl32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 20511 c:\windows\system32\oddbse32.dll
    + 2004-08-04 12:00 . 2008-04-13 17:26 12288 c:\windows\system32\odbcp32r.dll
    + 2004-08-04 12:00 . 2008-04-14 00:10 53279 c:\windows\system32\odbcji32.dll
    + 2004-08-04 12:00 . 2008-04-13 17:26 94208 c:\windows\system32\odbcint.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 65536 c:\windows\system32\odbccu32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 65536 c:\windows\system32\odbccr32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 69632 c:\windows\system32\odbcconf.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 24576 c:\windows\system32\odbcbcp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 32768 c:\windows\system32\odbcad32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 16384 c:\windows\system32\odbc32gt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26224 c:\windows\system32\odbc16gt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\ocmanage.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\ntvdmd.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 36864 c:\windows\system32\ntsdexts.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 31744 c:\windows\system32\ntsd.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 91136 c:\windows\system32\ntprint.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\ntmsevt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 40960 c:\windows\system32\ntmsapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\ntlanui2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 57856 c:\windows\system32\ntlanui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 44032 c:\windows\system32\ntlanman.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34560 c:\windows\system32\ntio804.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 35424 c:\windows\system32\ntio412.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 35648 c:\windows\system32\ntio411.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 34560 c:\windows\system32\ntio404.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 33840 c:\windows\system32\ntio.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 67072 c:\windows\system32\ntdsapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\ntdos804.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29274 c:\windows\system32\ntdos412.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29370 c:\windows\system32\ntdos411.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\ntdos404.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 27866 c:\windows\system32\ntdos.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 76800 c:\windows\system32\nslookup.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 54784 c:\windows\system32\npptools.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\npp\nppagent.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 57344 c:\windows\system32\npp\ndisnpp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 69120 c:\windows\system32\notepad.exe
    + 2006-06-29 07:05 . 2009-01-07 18:20 23552 c:\windows\system32\normaliz.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 28672 c:\windows\system32\nmmkcert.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\nmevtmsg.dll
    + 2006-06-28 16:59 . 2009-01-07 18:20 24576 c:\windows\system32\nlsdl.dll
    + 2004-08-04 12:00 . 2008-03-07 17:02 98304 c:\windows\system32\nlhtml.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 80896 c:\windows\system32\netui0.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 36864 c:\windows\system32\netstat.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 86016 c:\windows\system32\netsh.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 11776 c:\windows\system32\netrap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 42496 c:\windows\system32\net.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\nddenb32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\nddeapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 36352 c:\windows\system32\ncobjapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\system32\nbtstat.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\narrhook.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 53760 c:\windows\system32\narrator.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 30208 c:\windows\system32\napipsec.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 90624 c:\windows\system32\mydocs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 90112 c:\windows\system32\mycomput.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 87552 c:\windows\system32\mui\0009\hhctrlui.dll
    + 2004-08-04 12:00 . 2008-06-12 14:23 91648 c:\windows\system32\mtxoci.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 34304 c:\windows\system32\mtxlegih.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 30720 c:\windows\system32\mtxdm.dll
    + 2004-08-04 12:00 . 2008-06-12 14:23 66560 c:\windows\system32\mtxclu.dll
    + 2004-08-04 18:00 . 2009-11-27 17:11 17920 c:\windows\system32\msyuv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\msxmlr.dll
    + 2008-09-22 22:40 . 2008-04-13 17:27 79872 c:\windows\system32\msxml6r.dll
  21. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Part 3


    + 2002-02-04 09:43 . 2002-02-04 09:43 82432 c:\windows\system32\msxml4r.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\msxml3r.dll
    + 2007-07-28 09:19 . 2002-02-21 17:56 24576 c:\windows\system32\msxml3a.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 37916 c:\windows\system32\msxml2r.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 72704 c:\windows\system32\msw3prt.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07 28672 c:\windows\system32\msvidc32.dll
    + 2004-08-04 12:00 . 2008-04-13 18:30 61440 c:\windows\system32\msvcrt40.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 57344 c:\windows\system32\msvcirt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 12288 c:\windows\system32\mstinit.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\msswch.dll
    + 2008-05-26 21:18 . 2008-05-26 21:18 44032 c:\windows\system32\msstrc.dll
    + 1998-08-09 09:07 . 1998-08-09 09:07 94208 c:\windows\system32\MSSTKPRP.DLL
    + 2008-05-26 21:17 . 2008-05-26 21:17 32768 c:\windows\system32\mssprxy.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 87552 c:\windows\system32\mssitlb.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\mssign32.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 11776 c:\windows\system32\msshooks.dll
    + 2008-09-22 22:40 . 2008-04-13 18:14 76800 c:\windows\system32\msshavmsg.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 60416 c:\windows\system32\msscntrs.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 34816 c:\windows\system32\msscb.dll
    + 1999-01-22 18:46 . 1999-01-22 18:46 65536 c:\windows\system32\MSRTEDIT.DLL
    + 2004-08-04 12:00 . 2009-11-27 16:07 11264 c:\windows\system32\msrle32.dll
    + 1999-10-13 21:12 . 1999-10-13 21:12 28944 c:\windows\system32\MSRECR40.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 73802 c:\windows\system32\msrclr40.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 60416 c:\windows\system32\msratelc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69632 c:\windows\system32\msr2c.dll
    + 2004-08-04 12:00 . 2008-04-13 16:23 48128 c:\windows\system32\msprivs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 41984 c:\windows\system32\msports.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 27136 c:\windows\system32\mspmsnsv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 29696 c:\windows\system32\mspatcha.dll
    + 2004-08-04 12:00 . 2008-04-13 17:24 20480 c:\windows\system32\msorc32r.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\msobjs.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\mslbui.dll
    + 2004-08-04 12:00 . 2008-03-25 04:50 60192 c:\windows\system32\msjter40.dll
    + 2007-07-28 09:17 . 2003-02-28 18:26 21264 c:\windows\system32\msjdbc10.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 15360 c:\windows\system32\msisip.dll
    + 2007-10-19 22:27 . 2004-08-04 12:00 98304 c:\windows\system32\msir3jp.dll
    + 1997-07-10 23:00 . 1997-07-10 23:00 22016 c:\windows\system32\MSIMRT32.DLL
    + 1997-07-10 23:00 . 1997-07-10 23:00 10544 c:\windows\system32\MSIMRT16.DLL
    + 1997-07-10 23:00 . 1997-07-10 23:00 14336 c:\windows\system32\MSIMRT.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 78848 c:\windows\system32\msiexec.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\msidntld.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 51712 c:\windows\system32\msident.dll
    + 2004-08-04 12:00 . 2009-03-08 04:31 48128 c:\windows\system32\mshtmler.dll
    + 2004-08-04 11:00 . 2011-11-04 19:20 66560 c:\windows\system32\mshtmled.dll
    + 2004-08-04 12:00 . 2009-03-08 04:31 45568 c:\windows\system32\mshta.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 33792 c:\windows\system32\msgsvc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20992 c:\windows\system32\msg.exe
    + 2006-10-17 10:58 . 2009-03-08 04:31 13312 c:\windows\system32\msfeedssync.exe
    + 2006-11-07 20:03 . 2011-11-04 19:20 55296 c:\windows\system32\msfeedsbs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 94282 c:\windows\system32\msencode.dll
    + 2004-08-04 12:00 . 2008-06-12 14:23 58880 c:\windows\system32\msdtclog.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
    + 2004-08-04 12:00 . 2008-04-14 00:11 14336 c:\windows\system32\msdmo.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 68608 c:\windows\system32\msctfp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 36864 c:\windows\system32\mscpxl32.dll
    + 2004-08-04 12:00 . 2008-04-13 17:26 12288 c:\windows\system32\mscpx32r.dll
    + 2008-07-25 10:16 . 2008-07-25 10:16 83968 c:\windows\system32\mscories.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 69632 c:\windows\system32\msconf.dll
    + 2004-08-04 12:00 . 2008-06-24 16:43 74240 c:\windows\system32\mscms.dll
    + 2007-07-02 12:48 . 1998-07-12 23:00 59904 c:\windows\system32\Mscc2fr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 65024 c:\windows\system32\msaudite.dll
    + 2004-08-04 12:00 . 2009-09-04 21:03 58880 c:\windows\system32\msasn1.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 86016 c:\windows\system32\msapsspc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\system32\msacm32.drv
    + 2004-08-04 12:00 . 2008-04-14 00:11 71680 c:\windows\system32\msacm32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61168 c:\windows\system32\msacm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\mrinfo.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 47104 c:\windows\system32\mprui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 99840 c:\windows\system32\mprmsg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 53248 c:\windows\system32\mprdim.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\mprddm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 87040 c:\windows\system32\mprapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 59904 c:\windows\system32\mpr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\mpnotify.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\more.com
    + 2004-08-04 12:00 . 2004-08-04 12:00 10112 c:\windows\system32\modex.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\mode.com
    + 2004-08-04 12:00 . 2008-04-14 00:12 32768 c:\windows\system32\mnmsrvc.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 34560 c:\windows\system32\mnmdd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 68768 c:\windows\system32\mmsystem.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 17408 c:\windows\system32\mmfutil.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\mmdrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 61440 c:\windows\system32\mmcshext.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 33792 c:\windows\system32\mmcperf.exe
    + 2004-08-04 12:00 . 2008-03-07 17:02 29696 c:\windows\system32\mimefilt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51712 c:\windows\system32\migpwd.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 60928 c:\windows\system32\miglibnt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 18944 c:\windows\system32\midimap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 46258 c:\windows\system32\mib.bin
    + 2004-08-04 12:00 . 2008-04-14 00:11 14848 c:\windows\system32\mgmtapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 22528 c:\windows\system32\mfcsubs.dll
    + 2003-03-19 03:44 . 2003-03-19 03:44 49152 c:\windows\system32\MFC71KOR.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 49152 c:\windows\system32\MFC71JPN.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 61440 c:\windows\system32\MFC71ITA.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 61440 c:\windows\system32\MFC71FRA.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 61440 c:\windows\system32\MFC71ESP.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 57344 c:\windows\system32\MFC71ENU.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 65536 c:\windows\system32\MFC71DEU.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 45056 c:\windows\system32\MFC71CHT.DLL
    + 2003-03-19 03:44 . 2003-03-19 03:44 40960 c:\windows\system32\MFC71CHS.DLL
    + 1998-06-17 01:08 . 1998-06-17 01:08 53248 c:\windows\system32\MFC42ENU.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:11 40960 c:\windows\system32\mf3216.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39274 c:\windows\system32\mem.exe
    + 1999-03-03 10:05 . 1999-03-03 10:05 81920 c:\windows\system32\MDT2FW95.DLL
    + 2008-09-22 22:39 . 2008-04-14 00:11 86016 c:\windows\system32\mdmxsdk.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\mdhcp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 28160 c:\windows\system32\mciwave.drv
    + 2004-08-04 12:00 . 2008-04-14 00:11 23552 c:\windows\system32\mciwave.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25264 c:\windows\system32\mciseq.drv
    + 2004-08-04 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 35328 c:\windows\system32\mciqtz32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\mcicda.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 84480 c:\windows\system32\mciavi32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73376 c:\windows\system32\mciavi.drv
    + 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\mcdsrv32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\mcd32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 14336 c:\windows\system32\mcastmib.dll
    + 1998-10-01 11:00 . 1998-10-01 11:00 40208 c:\windows\system32\MAPISRVR.EXE
    + 2004-08-04 12:00 . 2008-04-14 00:12 57344 c:\windows\system32\makecab.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 72704 c:\windows\system32\magnify.exe
    + 2007-05-27 17:11 . 2007-04-17 18:03 55536 c:\windows\system32\Macromed\Director\SwDnld.exe
    + 2007-05-11 20:59 . 2007-04-30 15:32 53248 c:\windows\system32\Macromed\Common\SwSupport.dll
    + 2008-01-13 17:52 . 2006-06-07 18:23 61440 c:\windows\system32\lxczcnv7.dll
    + 2008-01-13 17:52 . 2006-03-07 16:59 61440 c:\windows\system32\lxczcnv6.dll
    + 2008-01-13 17:52 . 2006-01-10 22:11 61440 c:\windows\system32\lxczcnv5.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 13312 c:\windows\system32\lsass.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 10240 c:\windows\system32\lprhelp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 22016 c:\windows\system32\lpk.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\logoff.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 59392 c:\windows\system32\logman.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\loghours.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 75264 c:\windows\system32\locator.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 11776 c:\windows\system32\localui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 97280 c:\windows\system32\loadperf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\lnkstub.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 13824 c:\windows\system32\lmhsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 19968 c:\windows\system32\linkinfo.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 29696 c:\windows\system32\lights.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 58880 c:\windows\system32\licwmi.dll
    + 2004-08-04 12:00 . 2011-11-04 19:20 43520 c:\windows\system32\licmgr10.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 11264 c:\windows\system32\LAPRXY.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 89600 c:\windows\system32\langwrbk.dll
    + 2005-01-03 03:51 . 2010-09-28 16:43 17685 c:\windows\system32\Lang\WzrdLang.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 10246 c:\windows\system32\Lang\TradChin.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 12264 c:\windows\system32\Lang\Thai.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 13565 c:\windows\system32\Lang\SWEDISH.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 15521 c:\windows\system32\Lang\Spanish.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 15530 c:\windows\system32\Lang\Russian.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 14672 c:\windows\system32\Lang\Portuguese.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 11441 c:\windows\system32\Lang\Korean.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 13377 c:\windows\system32\Lang\Japanese.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 15739 c:\windows\system32\Lang\Italian.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 14920 c:\windows\system32\Lang\German.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 15407 c:\windows\system32\Lang\French.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 12220 c:\windows\system32\Lang\English.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 14502 c:\windows\system32\Lang\Dutch.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 13851 c:\windows\system32\Lang\Danish.bin
    + 2005-01-03 03:51 . 2010-09-28 16:31 11835 c:\windows\system32\Lang\Arabic.bin
    + 2008-09-22 22:39 . 2008-04-14 00:11 37376 c:\windows\system32\l2gpstore.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 92224 c:\windows\system32\krnl386.exe
    + 2007-10-19 22:27 . 2004-08-04 12:00 70656 c:\windows\system32\korwbrkr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\system32\kmsvc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42537 c:\windows\system32\keyboard.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 42809 c:\windows\system32\key01.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 14710 c:\windows\system32\kb16.com
    + 2004-08-04 12:00 . 2011-11-04 19:20 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47952 c:\windows\system32\jobexec.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 65536 c:\windows\system32\jgsh400.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\jgsd400.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 27648 c:\windows\system32\jgpl400.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\jgmd400.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44544 c:\windows\system32\jgaw400.dll
    + 2007-07-28 09:17 . 2003-02-28 18:26 15120 c:\windows\system32\jdbgmgr.exe
    + 2007-07-28 09:17 . 2003-02-28 18:26 63248 c:\windows\system32\javaprxy.dll
    + 2004-08-04 18:00 . 2009-11-27 16:07 48128 c:\windows\system32\iyuv_32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 54272 c:\windows\system32\ixsso.dll
    + 2005-01-03 04:06 . 2002-11-21 17:57 20480 c:\windows\system32\IVIresize.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32768 c:\windows\system32\isrdbg32.dll
    + 2004-08-04 12:00 . 2010-11-18 18:12 81920 c:\windows\system32\isign32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\irclass.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 22016 c:\windows\system32\ipxwan.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 66560 c:\windows\system32\ipxsap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39936 c:\windows\system32\ipxrtmgr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 23552 c:\windows\system32\ipxroute.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\ipxrip.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\ipxpromn.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 83968 c:\windows\system32\ipxmontr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 59904 c:\windows\system32\ipv6mon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 53248 c:\windows\system32\ipv6.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\ipsec6.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 94720 c:\windows\system32\iphlpapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 55808 c:\windows\system32\ipconfig.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\iologmsg.dll
    + 2004-08-04 11:00 . 2009-03-08 04:32 94720 c:\windows\system32\inseng.dll
    + 2008-07-29 18:24 . 2008-07-29 18:24 97800 c:\windows\system32\infocardapi.dll
    + 2004-08-04 12:00 . 2008-04-13 16:22 48128 c:\windows\system32\inetres.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 15872 c:\windows\system32\inetppui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 75264 c:\windows\system32\inetpp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32768 c:\windows\system32\inetmib1.dll
    + 2007-07-02 12:48 . 1998-07-12 23:00 15360 c:\windows\system32\inetfr.DLL
    + 2008-01-13 17:56 . 2006-04-28 09:16 98345 c:\windows\system32\IMHOST32.DLL
    + 2004-08-04 12:00 . 2009-03-08 04:31 34816 c:\windows\system32\imgutil.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 36921 c:\windows\system32\imeshare.dll
    + 2007-10-19 22:24 . 2008-04-14 00:10 10240 c:\windows\system32\IME\TINTLGNT\tmigrate.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 44032 c:\windows\system32\IME\TINTLGNT\TINTLPHR.EXE
    + 2007-10-19 22:24 . 2008-04-14 00:10 67584 c:\windows\system32\IME\PINTLGNT\pmigrate.dll
    + 2007-10-19 22:24 . 2008-04-13 16:43 70144 c:\windows\system32\IME\PINTLGNT\pintlphr.exe
    + 2007-10-19 22:24 . 2004-08-04 12:00 59392 c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
    + 2004-08-04 12:00 . 2008-04-14 00:11 81920 c:\windows\system32\ils.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 70656 c:\windows\system32\ifsutil.dll
    + 2006-11-07 02:26 . 2009-03-08 04:32 36864 c:\windows\system32\ieudinit.exe
    + 2004-08-04 12:00 . 2009-03-08 04:32 71680 c:\windows\system32\iesetup.dll
    + 2004-08-04 12:00 . 2009-03-08 04:32 55808 c:\windows\system32\iernonce.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 81920 c:\windows\system32\ieencode.dll
    + 2006-06-29 07:05 . 2009-01-07 18:20 26112 c:\windows\system32\idndl.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 65536 c:\windows\system32\icwphbk.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 73728 c:\windows\system32\icwdial.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 54784 c:\windows\system32\icmui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\icfgnt5.dll
    + 2004-08-04 12:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
    + 2008-07-29 18:24 . 2008-07-29 18:24 11264 c:\windows\system32\icardres.dll
    + 2006-10-17 10:58 . 2009-03-08 04:31 59904 c:\windows\system32\icardie.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 11264 c:\windows\system32\icaapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 59392 c:\windows\system32\iassvcs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 86528 c:\windows\system32\iassam.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\iaspolcy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\iasnap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\iashlpr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 41472 c:\windows\system32\iasads.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\iasacct.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 41984 c:\windows\system32\htui.dll
    + 2004-08-04 12:00 . 2009-10-21 05:38 25088 c:\windows\system32\httpapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44544 c:\windows\system32\hticons.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32285 c:\windows\system32\hsfcisp2.dll
    + 2004-08-30 21:47 . 2004-08-30 21:47 98304 c:\windows\system32\hpzjsn01.dll
    + 2005-01-03 03:54 . 2003-12-09 21:58 28672 c:\windows\system32\hpzjfw01.dll
    + 2005-01-03 03:54 . 2004-09-29 19:14 69632 c:\windows\system32\HPZipm12.exe
    + 2005-01-03 03:54 . 2004-09-29 19:08 61440 c:\windows\system32\HPZinw12.exe
    + 2005-02-17 15:40 . 2005-02-17 15:40 73728 c:\windows\system32\HPTcpMib.dll
    + 2005-01-03 04:11 . 2002-03-20 04:05 45056 c:\windows\system32\hpreg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\hnetmon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 72704 c:\windows\system32\hlink.dll
    + 2004-08-04 06:56 . 2008-04-14 00:11 21504 c:\windows\system32\hidserv.dll
    + 2004-08-04 18:00 . 2008-04-14 00:11 20992 c:\windows\system32\hid.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 41472 c:\windows\system32\hhsetup.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\help.exe
    + 2005-01-08 00:07 . 2005-01-08 00:07 61952 c:\windows\system32\HdAShCut.exe
    + 2005-01-08 00:07 . 2005-01-08 00:07 25088 c:\windows\system32\HdAProp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 39424 c:\windows\system32\grpconv.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19694 c:\windows\system32\graphics.com
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\graftabl.com
    + 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\gdi.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 76800 c:\windows\system32\gcdef.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\fxssend.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\fxsroute.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 23552 c:\windows\system32\fxsmon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 23552 c:\windows\system32\fxsext32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 55296 c:\windows\system32\fxsevent.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 26624 c:\windows\system32\fxsdrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 72192 c:\windows\system32\fxscom.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 60416 c:\windows\system32\fwcfg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 42496 c:\windows\system32\ftp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 56320 c:\windows\system32\fsutil.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 81408 c:\windows\system32\fsusd.dll
    + 2007-06-30 09:36 . 2002-02-04 22:33 69632 c:\windows\system32\FREGSHEX.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 55296 c:\windows\system32\freecell.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 29696 c:\windows\system32\format.com
    + 2004-08-04 12:00 . 2008-04-14 00:12 20992 c:\windows\system32\fontview.exe
    + 2004-08-04 12:00 . 2009-10-15 16:28 81920 c:\windows\system32\fontsub.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\fmifs.dll
    + 1999-10-28 22:49 . 1999-10-28 22:49 26384 c:\windows\system32\FM20ENU.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 23040 c:\windows\system32\fltmc.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 16896 c:\windows\system32\fltlib.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 87552 c:\windows\system32\fldrclnr.dll
    + 2007-06-30 09:36 . 2002-06-25 09:06 45056 c:\windows\system32\FINFCOPY.dll
    + 2007-06-30 09:36 . 2002-02-26 17:27 65536 c:\windows\system32\FINFCHECK.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 27136 c:\windows\system32\findstr.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 21504 c:\windows\system32\feclient.dll
    + 2007-06-30 09:36 . 2002-02-12 16:00 45056 c:\windows\system32\FCLKBTN.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\fc.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 20992 c:\windows\system32\faxpatch.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 80384 c:\windows\system32\faultrep.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 24064 c:\windows\system32\extrac32.exe
    + 1999-02-16 19:38 . 1999-02-16 19:38 38912 c:\windows\system32\EXSEC32.DLL
    + 2004-08-04 18:00 . 2004-08-04 18:00 15872 c:\windows\system32\expand.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 56320 c:\windows\system32\eventlog.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\eventcls.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39424 c:\windows\system32\esentutl.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\esentprf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\ersvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 20480 c:\windows\system32\encapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\system32\en\mmcex.resources.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 28672 c:\windows\system32\en\microsoft.managementconsole.resources.dll
    + 2004-11-09 20:17 . 2004-11-09 20:17 21640 c:\windows\system32\emptyregdb.dat
    + 2004-08-04 12:00 . 2004-08-04 12:00 12642 c:\windows\system32\edlin.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 69886 c:\windows\system32\edit.com
    + 2008-09-22 22:39 . 2008-04-14 00:11 33792 c:\windows\system32\eapsvc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 59392 c:\windows\system32\eapqec.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\system32\eappprxy.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 94208 c:\windows\system32\eappgnui.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 30720 c:\windows\system32\eapolqec.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\dvdupgrd.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 55296 c:\windows\system32\dvdplay.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 10752 c:\windows\system32\dumprep.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 19456 c:\windows\system32\dswave.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 51200 c:\windows\system32\dssec.dll
    + 2007-04-13 16:15 . 2003-10-24 10:21 53248 c:\windows\system32\dsnpstd2.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 92672 c:\windows\system32\dskquota.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 71680 c:\windows\system32\dsdmoprp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 62976 c:\windows\system32\dsauth.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 16384 c:\windows\system32\ds32gt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\drwtsn32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 28112 c:\windows\system32\drwatson.exe
    + 2008-03-04 21:40 . 2006-08-28 15:44 88560 c:\windows\system32\DRVSTORE\z558sdmw_9394ED7204022F0909155FC18EC385A82B466B70\Z558mgmt.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 10832 c:\windows\system32\DRVSTORE\z558sdmw_9394ED7204022F0909155FC18EC385A82B466B70\Z558cm95.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 88560 c:\windows\system32\DRVSTORE\z558sdm2_9394ED7204022F0909155FC18EC385A82B466B70\Z558mgmt.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 86368 c:\windows\system32\DRVSTORE\z558obxw_3F0ADC568A28D65DE282A24556F969F90D0DF371\Z558obex.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 10832 c:\windows\system32\DRVSTORE\z558obxw_3F0ADC568A28D65DE282A24556F969F90D0DF371\Z558cm95.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 86368 c:\windows\system32\DRVSTORE\z558obx2_3F0ADC568A28D65DE282A24556F969F90D0DF371\Z558obex.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 97056 c:\windows\system32\DRVSTORE\z558mdmw_A19AC7A9C5445FA3AD13ADE06E9784DD1BEC1B2B\Z558mdm.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 10832 c:\windows\system32\DRVSTORE\z558mdmw_A19AC7A9C5445FA3AD13ADE06E9784DD1BEC1B2B\Z558cm95.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 97056 c:\windows\system32\DRVSTORE\z558mdm2_A19AC7A9C5445FA3AD13ADE06E9784DD1BEC1B2B\Z558mdm.sys
    + 2008-03-04 21:40 . 2006-08-28 15:44 61504 c:\windows\system32\DRVSTORE\z558bus_136AB054077A57B4DC845E4307C2E0B885AC84A2\Z558bus.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 87824 c:\windows\system32\DRVSTORE\z550sdmw_6381084063DC92D8EA69071ABC9237F2EE5CF158\Z550mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 10832 c:\windows\system32\DRVSTORE\z550sdmw_6381084063DC92D8EA69071ABC9237F2EE5CF158\Z550cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 87824 c:\windows\system32\DRVSTORE\z550sdm2_6381084063DC92D8EA69071ABC9237F2EE5CF158\Z550mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 85696 c:\windows\system32\DRVSTORE\z550obxw_3CDD265B0595A0D8DFEAD7B6E194EB810CC396BE\Z550obex.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 10832 c:\windows\system32\DRVSTORE\z550obxw_3CDD265B0595A0D8DFEAD7B6E194EB810CC396BE\Z550cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 85696 c:\windows\system32\DRVSTORE\z550obx2_3CDD265B0595A0D8DFEAD7B6E194EB810CC396BE\Z550obex.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 96352 c:\windows\system32\DRVSTORE\z550mdmw_9A77265F85F930344BFDF62F6EDEA9E21D13D5AB\Z550mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 10832 c:\windows\system32\DRVSTORE\z550mdmw_9A77265F85F930344BFDF62F6EDEA9E21D13D5AB\Z550cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 96352 c:\windows\system32\DRVSTORE\z550mdm2_9A77265F85F930344BFDF62F6EDEA9E21D13D5AB\Z550mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 16:37 60800 c:\windows\system32\DRVSTORE\z550bus_23BA2C85B1427198EB2F84794612301D31A2B517\Z550bus.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 88560 c:\windows\system32\DRVSTORE\z535sdmw_B879025BB9A08B07DDC5386907E5AA1005526811\z535mgmt.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 10832 c:\windows\system32\DRVSTORE\z535sdmw_B879025BB9A08B07DDC5386907E5AA1005526811\z535cm95.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 88560 c:\windows\system32\DRVSTORE\z535sdm2_B879025BB9A08B07DDC5386907E5AA1005526811\z535mgmt.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 86368 c:\windows\system32\DRVSTORE\z535obxw_2590EC095375176AC4C40E4D3DEE47BFE1D94699\z535obex.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 10832 c:\windows\system32\DRVSTORE\z535obxw_2590EC095375176AC4C40E4D3DEE47BFE1D94699\z535cm95.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 86368 c:\windows\system32\DRVSTORE\z535obx2_2590EC095375176AC4C40E4D3DEE47BFE1D94699\z535obex.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 97056 c:\windows\system32\DRVSTORE\z535mdmw_7688904778F33B0EF9607469167254DC5E912D36\z535mdm.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 10832 c:\windows\system32\DRVSTORE\z535mdmw_7688904778F33B0EF9607469167254DC5E912D36\z535cm95.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 97056 c:\windows\system32\DRVSTORE\z535mdm2_7688904778F33B0EF9607469167254DC5E912D36\z535mdm.sys
    + 2008-03-04 21:40 . 2007-01-02 15:26 61504 c:\windows\system32\DRVSTORE\z535bus_DCD91EE8DEE80D3F874CFD56813F3DFB94BF1FF8\z535bus.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 85408 c:\windows\system32\DRVSTORE\z530sdmw_7CE664B8B6F578872DC59E086511B18A66B49CA3\z530mgmt.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 10736 c:\windows\system32\DRVSTORE\z530sdmw_7CE664B8B6F578872DC59E086511B18A66B49CA3\z530cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 85408 c:\windows\system32\DRVSTORE\z530sdm2_7CE664B8B6F578872DC59E086511B18A66B49CA3\z530mgmt.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 83344 c:\windows\system32\DRVSTORE\z530obxw_FD421C2424AE65A119ABC16012CA2153897D4825\z530obex.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 10736 c:\windows\system32\DRVSTORE\z530obxw_FD421C2424AE65A119ABC16012CA2153897D4825\z530cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 83344 c:\windows\system32\DRVSTORE\z530obx2_FD421C2424AE65A119ABC16012CA2153897D4825\z530obex.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 94064 c:\windows\system32\DRVSTORE\z530mdmw_ED2CD1341CD36120CE066D4CA433D5D6E86BD7CF\z530mdm.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 10736 c:\windows\system32\DRVSTORE\z530mdmw_ED2CD1341CD36120CE066D4CA433D5D6E86BD7CF\z530cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 94064 c:\windows\system32\DRVSTORE\z530mdm2_ED2CD1341CD36120CE066D4CA433D5D6E86BD7CF\z530mdm.sys
    + 2008-03-04 21:40 . 2006-02-17 21:26 58288 c:\windows\system32\DRVSTORE\z530bus_711F5B1543E0E2E75095437AAD113BA7EC90C151\z530bus.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 88560 c:\windows\system32\DRVSTORE\z525sdmw_4739E4159E316047F5F452CB07B092EFE246CEEA\z525mgmt.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 10832 c:\windows\system32\DRVSTORE\z525sdmw_4739E4159E316047F5F452CB07B092EFE246CEEA\z525cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 88560 c:\windows\system32\DRVSTORE\z525sdm2_4739E4159E316047F5F452CB07B092EFE246CEEA\z525mgmt.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 86368 c:\windows\system32\DRVSTORE\z525obxw_28BEEEF3E5E976D190C8B7611E2A302AF561302E\z525obex.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 10832 c:\windows\system32\DRVSTORE\z525obxw_28BEEEF3E5E976D190C8B7611E2A302AF561302E\z525cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 86368 c:\windows\system32\DRVSTORE\z525obx2_28BEEEF3E5E976D190C8B7611E2A302AF561302E\z525obex.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 97056 c:\windows\system32\DRVSTORE\z525mdmw_BCF80DF43817A6E2FF54119C6253B27FE7DCAD13\z525mdm.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 10832 c:\windows\system32\DRVSTORE\z525mdmw_BCF80DF43817A6E2FF54119C6253B27FE7DCAD13\z525cm95.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 97056 c:\windows\system32\DRVSTORE\z525mdm2_BCF80DF43817A6E2FF54119C6253B27FE7DCAD13\z525mdm.sys
    + 2008-03-04 21:40 . 2006-02-17 21:17 61536 c:\windows\system32\DRVSTORE\z525bus_3C7F5F79E689172B34A461EC0A6F4BFC389B600F\z525bus.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 84928 c:\windows\system32\DRVSTORE\z520sdmw_00D3F40169DE920AC43D88AA6EF98245DBB4F4A1\z520mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 10736 c:\windows\system32\DRVSTORE\z520sdmw_00D3F40169DE920AC43D88AA6EF98245DBB4F4A1\z520cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 84928 c:\windows\system32\DRVSTORE\z520sdm2_00D3F40169DE920AC43D88AA6EF98245DBB4F4A1\z520mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 82864 c:\windows\system32\DRVSTORE\z520obxw_1775DF8AB6F50291DB10A5E8971E87950BA0EB0C\z520obex.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 10736 c:\windows\system32\DRVSTORE\z520obxw_1775DF8AB6F50291DB10A5E8971E87950BA0EB0C\z520cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 82864 c:\windows\system32\DRVSTORE\z520obx2_1775DF8AB6F50291DB10A5E8971E87950BA0EB0C\z520obex.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 93488 c:\windows\system32\DRVSTORE\z520mdmw_E7C347162E16943CCB9FD999DD13C9386BFAC43D\z520mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 10736 c:\windows\system32\DRVSTORE\z520mdmw_E7C347162E16943CCB9FD999DD13C9386BFAC43D\z520cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 93488 c:\windows\system32\DRVSTORE\z520mdm2_E7C347162E16943CCB9FD999DD13C9386BFAC43D\z520mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 18:54 57648 c:\windows\system32\DRVSTORE\z520bus_9A02E2C69777D5FE8B0AFED25A3954B87E40B176\z520bus.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 85504 c:\windows\system32\DRVSTORE\w900sdmw_29A2E5B331F007667257BC3A492448AA5412B7FE\w900mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 10736 c:\windows\system32\DRVSTORE\w900sdmw_29A2E5B331F007667257BC3A492448AA5412B7FE\w900cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 85504 c:\windows\system32\DRVSTORE\w900sdm2_29A2E5B331F007667257BC3A492448AA5412B7FE\w900mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 83440 c:\windows\system32\DRVSTORE\w900obxw_0E4C0E31D6475770EDFD1870908B5C4C7A27F6CD\w900obex.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 10736 c:\windows\system32\DRVSTORE\w900obxw_0E4C0E31D6475770EDFD1870908B5C4C7A27F6CD\w900cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 83440 c:\windows\system32\DRVSTORE\w900obx2_0E4C0E31D6475770EDFD1870908B5C4C7A27F6CD\w900obex.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 94064 c:\windows\system32\DRVSTORE\w900mdmw_90932CB2543B32CBED4E0BC2C3770ED450157BF7\w900mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 10736 c:\windows\system32\DRVSTORE\w900mdmw_90932CB2543B32CBED4E0BC2C3770ED450157BF7\w900cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 94064 c:\windows\system32\DRVSTORE\w900mdm2_90932CB2543B32CBED4E0BC2C3770ED450157BF7\w900mdm.sys
    + 2008-03-04 21:40 . 2006-03-13 18:55 58256 c:\windows\system32\DRVSTORE\w900bus_A13D909859C3DD3A4D2024E90C5667A0715A2654\w900bus.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 85408 c:\windows\system32\DRVSTORE\w810sdmw_4FBD832A66FA44975E6A1999A17F07E15CA668BB\w810mgmt.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 10736 c:\windows\system32\DRVSTORE\w810sdmw_4FBD832A66FA44975E6A1999A17F07E15CA668BB\w810cm95.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 85408 c:\windows\system32\DRVSTORE\w810sdm2_4FBD832A66FA44975E6A1999A17F07E15CA668BB\w810mgmt.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 83344 c:\windows\system32\DRVSTORE\w810obxw_D045EC4F539AF2BD3AC1262B67E2FF4D18A63D99\w810obex.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 10736 c:\windows\system32\DRVSTORE\w810obxw_D045EC4F539AF2BD3AC1262B67E2FF4D18A63D99\w810cm95.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 83344 c:\windows\system32\DRVSTORE\w810obx2_D045EC4F539AF2BD3AC1262B67E2FF4D18A63D99\w810obex.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 94064 c:\windows\system32\DRVSTORE\w810mdmw_0BFD58F44BE28989A9FB32BF6B064CED549D04B5\w810mdm.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 10736 c:\windows\system32\DRVSTORE\w810mdmw_0BFD58F44BE28989A9FB32BF6B064CED549D04B5\w810cm95.sys
  22. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Part 4


    + 2008-03-04 21:40 . 2006-02-20 18:59 94064 c:\windows\system32\DRVSTORE\w810mdm2_0BFD58F44BE28989A9FB32BF6B064CED549D04B5\w810mdm.sys
    + 2008-03-04 21:40 . 2006-02-20 18:59 58288 c:\windows\system32\DRVSTORE\w810bus_19818AD353804A5BD8813328571E90C7C25F3308\w810bus.sys
    + 2008-03-04 21:40 . 2006-03-13 18:52 87792 c:\windows\system32\DRVSTORE\w800sdmw_52ACC6D2C254F74020549727BF34BB7941E0C0B6\w800mgmt.sys
    + 2008-03-04 21:40 . 2006-03-13 18:52 10768 c:\windows\system32\DRVSTORE\w800sdmw_52ACC6D2C254F74020549727BF34BB7941E0C0B6\w800cm95.sys
    + 2008-03-04 21:40 . 2006-03-13 18:52 87792 c:\windows\system32\DRVSTORE\w800sdm2_52ACC6D2C254F74020549727BF34BB7941E0C0B6\w800mgmt.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 85664 c:\windows\system32\DRVSTORE\w800obxw_014D3A30070F317DF47D02CDEF6732BFE11C2247\w800obex.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 10768 c:\windows\system32\DRVSTORE\w800obxw_014D3A30070F317DF47D02CDEF6732BFE11C2247\w800cm95.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 85664 c:\windows\system32\DRVSTORE\w800obx2_014D3A30070F317DF47D02CDEF6732BFE11C2247\w800obex.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 96224 c:\windows\system32\DRVSTORE\w800mdmw_0DA26FC493941513A4C768EAC92AA00B306E2590\w800mdm.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 10768 c:\windows\system32\DRVSTORE\w800mdmw_0DA26FC493941513A4C768EAC92AA00B306E2590\w800cm95.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 96224 c:\windows\system32\DRVSTORE\w800mdm2_0DA26FC493941513A4C768EAC92AA00B306E2590\w800mdm.sys
    + 2008-03-04 21:39 . 2006-03-13 18:52 60768 c:\windows\system32\DRVSTORE\w800bus_69B11FC87B31548BA1B6F6DF548027A745FB48C7\w800bus.sys
    + 2008-03-04 21:39 . 2006-02-19 17:48 88560 c:\windows\system32\DRVSTORE\w700sdmw_FC685B295AA7CA47EF46A4A08C077A96AE0FE91B\W700mgmt.sys
    + 2008-03-04 21:39 . 2006-02-19 17:47 10832 c:\windows\system32\DRVSTORE\w700sdmw_FC685B295AA7CA47EF46A4A08C077A96AE0FE91B\W700cm95.sys
    + 2008-03-04 21:39 . 2006-02-19 17:48 88560 c:\windows\system32\DRVSTORE\w700sdm2_FC685B295AA7CA47EF46A4A08C077A96AE0FE91B\W700mgmt.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 14336 c:\windows\system32\drprov.dll
    + 2004-08-04 11:00 . 2004-08-11 08:45 95232 c:\windows\system32\drmstor.dll
    + 2006-09-28 18:00 . 2006-09-28 18:00 82944 c:\windows\system32\drivers\WudfRd.sys
    + 2006-09-28 17:55 . 2006-09-28 17:55 77568 c:\windows\system32\drivers\WudfPf.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 19200 c:\windows\system32\drivers\wstcodec.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 12032 c:\windows\system32\drivers\ws2ifsl.sys
    + 2004-08-11 08:45 . 2006-10-18 19:00 38528 c:\windows\system32\drivers\wpdusb.sys
    + 2005-01-03 03:44 . 2008-04-13 19:17 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-01-19 09:45 . 2008-01-19 09:45 35176 c:\windows\system32\drivers\wdfldr.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 34560 c:\windows\system32\drivers\wanarp.sys
    + 2004-08-04 12:00 . 2008-04-13 18:41 52352 c:\windows\system32\drivers\volsnap.sys
    + 2004-08-04 12:00 . 2008-04-13 18:44 81664 c:\windows\system32\drivers\videoprt.sys
    + 2004-08-04 12:00 . 2008-04-13 18:44 20992 c:\windows\system32\drivers\vga.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 58112 c:\windows\system32\drivers\vdmindvd.sys
    + 2007-06-30 09:36 . 2001-11-24 17:11 81924 c:\windows\system32\drivers\VC4CB104.SYS
    + 2004-08-04 12:00 . 2008-04-13 18:45 20608 c:\windows\system32\drivers\usbuhci.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 26368 c:\windows\system32\drivers\usbstor.sys
    + 2007-06-18 13:15 . 2008-04-13 18:45 15104 c:\windows\system32\drivers\usbscan.sys
    + 2008-01-13 17:49 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
    + 2005-05-09 23:52 . 2005-05-09 23:52 22396 c:\windows\system32\drivers\USBkey.sys
    + 2004-08-04 18:00 . 2008-04-13 18:45 15872 c:\windows\system32\drivers\usbintel.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 59520 c:\windows\system32\drivers\usbhub.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 30208 c:\windows\system32\drivers\usbehci.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
    + 2004-08-04 18:00 . 2008-04-13 18:45 25728 c:\windows\system32\drivers\usbcamd2.sys
    + 2004-08-04 18:00 . 2008-04-13 18:45 25600 c:\windows\system32\drivers\usbcamd.sys
    + 2007-04-13 16:16 . 2008-04-13 18:45 60032 c:\windows\system32\drivers\usbaudio.sys
    + 2007-11-03 13:06 . 2011-05-10 07:06 42496 c:\windows\system32\drivers\usbaapl.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 66048 c:\windows\system32\drivers\udfs.sys
    + 2004-08-04 18:00 . 2008-04-13 18:56 12288 c:\windows\system32\drivers\tunmp.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 21376 c:\windows\system32\drivers\tsbvcap.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 51712 c:\windows\system32\drivers\tosdvd.sys
    + 2004-08-04 07:01 . 2008-04-14 00:13 40840 c:\windows\system32\drivers\termdd.sys
    + 2004-08-04 12:00 . 2008-04-14 00:13 21896 c:\windows\system32\drivers\tdtcp.sys
    + 2004-08-04 12:00 . 2008-04-14 00:13 12040 c:\windows\system32\drivers\tdpipe.sys
    + 2004-08-04 12:00 . 2008-04-13 19:00 19072 c:\windows\system32\drivers\tdi.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 14976 c:\windows\system32\drivers\tape.sys
    + 2005-01-03 03:44 . 2008-04-13 19:15 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2005-01-03 03:44 . 2008-04-13 18:45 56576 c:\windows\system32\drivers\swmidi.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 15232 c:\windows\system32\drivers\streamip.sys
    + 2004-08-04 18:00 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
    + 2004-08-04 12:00 . 2008-04-13 18:36 73472 c:\windows\system32\drivers\sr.sys
    + 2004-08-04 18:00 . 2008-04-13 18:46 25344 c:\windows\system32\drivers\sonydcam.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 14592 c:\windows\system32\drivers\smclib.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 11136 c:\windows\system32\drivers\slip.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 11392 c:\windows\system32\drivers\sfloppy.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 11008 c:\windows\system32\drivers\sffp_sd.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 11904 c:\windows\system32\drivers\sffdisk.sys
    + 2004-08-04 12:00 . 2008-04-13 19:15 64512 c:\windows\system32\drivers\serial.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 15744 c:\windows\system32\drivers\serenum.sys
    + 2004-08-04 12:00 . 2007-11-13 10:25 20480 c:\windows\system32\drivers\secdrv.sys
    + 2004-08-04 12:00 . 2008-04-13 18:36 79232 c:\windows\system32\drivers\sdbus.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 96384 c:\windows\system32\drivers\scsiport.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 12424 c:\windows\system32\drivers\s616whnt.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 12424 c:\windows\system32\drivers\s616wh.sys
    + 2008-04-02 19:43 . 2007-04-03 13:59 99080 c:\windows\system32\drivers\s616unic.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 98568 c:\windows\system32\drivers\s616obex.sys
    + 2008-04-02 19:51 . 2007-04-03 13:59 23176 c:\windows\system32\drivers\s616nd5.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 15112 c:\windows\system32\drivers\s616mdfl.sys
    + 2008-04-02 19:43 . 2007-04-03 13:59 11016 c:\windows\system32\drivers\s616cr.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 12424 c:\windows\system32\drivers\s616cmnt.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 12424 c:\windows\system32\drivers\s616cm.sys
    + 2008-03-04 21:45 . 2007-04-03 13:59 83208 c:\windows\system32\drivers\s616bus.sys
    + 2005-01-03 03:49 . 2005-03-04 18:10 74496 c:\windows\system32\drivers\Rtlnicxp.sys
    + 2004-08-04 04:31 . 2004-08-04 04:31 20992 c:\windows\system32\drivers\RTL8139.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismp.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 12032 c:\windows\system32\drivers\riodrv.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 12032 c:\windows\system32\drivers\rio8drv.sys
    + 2008-09-22 22:40 . 2008-04-13 18:46 59136 c:\windows\system32\drivers\rfcomm.sys
    + 2004-08-04 04:59 . 2008-04-13 18:40 57600 c:\windows\system32\drivers\redbook.sys
    + 2008-09-22 22:40 . 2004-08-03 21:41 13776 c:\windows\system32\drivers\recagent.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 34432 c:\windows\system32\drivers\rawwan.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 16512 c:\windows\system32\drivers\raspti.sys
    + 2004-08-04 12:00 . 2008-04-13 19:19 48384 c:\windows\system32\drivers\raspptp.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 41472 c:\windows\system32\drivers\raspppoe.sys
    + 2004-08-04 12:00 . 2008-04-13 19:19 51328 c:\windows\system32\drivers\rasl2tp.sys
    + 2006-10-18 03:00 . 2006-10-18 03:00 36624 c:\windows\system32\drivers\pxhelp20.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 17792 c:\windows\system32\drivers\ptilink.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 69120 c:\windows\system32\drivers\psched.sys
    + 2005-01-03 04:01 . 2005-07-04 07:30 26624 c:\windows\system32\drivers\PS2.sys
    + 2004-08-04 18:00 . 2008-04-13 18:31 35840 c:\windows\system32\drivers\processr.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 24960 c:\windows\system32\drivers\pciidex.sys
    + 2004-08-04 12:00 . 2008-04-13 18:36 68224 c:\windows\system32\drivers\pci.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 19712 c:\windows\system32\drivers\partmgr.sys
    + 2004-08-04 18:00 . 2008-04-13 18:40 80128 c:\windows\system32\drivers\parport.sys
    + 2004-08-04 18:00 . 2008-04-13 18:31 42752 c:\windows\system32\drivers\p3.sys
    + 2004-08-04 12:00 . 2008-04-13 18:46 61696 c:\windows\system32\drivers\ohci1394.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 55936 c:\windows\system32\drivers\nwlnkspx.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 63232 c:\windows\system32\drivers\nwlnknb.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 88320 c:\windows\system32\drivers\nwlnkipx.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 32512 c:\windows\system32\drivers\nwlnkfwd.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 12416 c:\windows\system32\drivers\nwlnkflt.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 30848 c:\windows\system32\drivers\npfs.sys
    + 2004-08-04 12:00 . 2008-04-13 18:53 40320 c:\windows\system32\drivers\nmnt.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 12032 c:\windows\system32\drivers\nikedrv.sys
    + 2004-08-04 18:00 . 2008-04-13 18:51 61824 c:\windows\system32\drivers\nic1394.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 34688 c:\windows\system32\drivers\netbios.sys
    + 2004-08-04 12:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
    + 2004-08-04 12:00 . 2008-04-13 19:20 91520 c:\windows\system32\drivers\ndiswan.sys
    + 2004-08-04 18:00 . 2008-04-13 18:55 14592 c:\windows\system32\drivers\ndisuio.sys
    + 2004-08-04 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 10880 c:\windows\system32\drivers\ndisip.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 85248 c:\windows\system32\drivers\nabtsfec.sys
    + 2008-09-22 22:40 . 2008-04-13 18:43 12672 c:\windows\system32\drivers\mutohpen.sys
    + 2004-08-04 18:00 . 2008-04-13 18:36 15488 c:\windows\system32\drivers\mssmbios.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 35072 c:\windows\system32\drivers\msgpc.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 19072 c:\windows\system32\drivers\msfs.sys
    + 2004-08-04 12:00 . 2008-04-13 18:39 42368 c:\windows\system32\drivers\mountmgr.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 12160 c:\windows\system32\drivers\mouhid.sys
    + 2004-08-04 18:00 . 2008-04-13 18:39 23040 c:\windows\system32\drivers\mouclass.sys
    + 2004-08-04 18:00 . 2008-04-13 19:00 30080 c:\windows\system32\drivers\modem.sys
    + 2004-08-04 18:00 . 2008-04-13 18:36 63744 c:\windows\system32\drivers\mf.sys
    + 2008-09-22 22:39 . 2004-08-03 21:41 11868 c:\windows\system32\drivers\mdmxsdk.sys
    + 2004-08-04 18:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
    + 2004-08-04 12:00 . 2008-04-13 18:39 14592 c:\windows\system32\drivers\kbdhid.sys
    + 2004-08-04 12:00 . 2008-04-13 18:39 24576 c:\windows\system32\drivers\kbdclass.sys
    + 2004-08-04 12:00 . 2008-04-13 18:36 37248 c:\windows\system32\drivers\isapnp.sys
    + 2004-08-04 12:00 . 2008-04-13 18:54 11264 c:\windows\system32\drivers\irenum.sys
    + 2004-08-04 12:00 . 2008-04-13 19:19 75264 c:\windows\system32\drivers\ipsec.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 20864 c:\windows\system32\drivers\ipinip.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 32896 c:\windows\system32\drivers\ipfltdrv.sys
    + 2004-08-04 12:00 . 2008-04-13 18:53 36608 c:\windows\system32\drivers\ip6fw.sys
    + 2004-08-04 12:00 . 2008-04-13 18:31 36352 c:\windows\system32\drivers\intelppm.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 42112 c:\windows\system32\drivers\imapi.sys
    + 2004-08-04 12:00 . 2008-04-13 19:18 52480 c:\windows\system32\drivers\i8042prt.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 24960 c:\windows\system32\drivers\hidparse.sys
    + 2008-09-22 22:39 . 2008-04-13 18:45 19200 c:\windows\system32\drivers\hidir.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 36864 c:\windows\system32\drivers\hidclass.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 25600 c:\windows\system32\drivers\hidbth.sys
    + 2006-09-19 13:44 . 2009-05-18 12:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 46464 c:\windows\system32\drivers\gagp30kx.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 12160 c:\windows\system32\drivers\fsvga.sys
    + 2007-04-13 10:20 . 2001-05-24 13:24 22395 c:\windows\system32\drivers\fpga.bin
    + 2004-08-04 12:00 . 2008-04-13 18:40 20480 c:\windows\system32\drivers\flpydisk.sys
    + 2004-08-04 12:00 . 2008-04-13 18:33 44544 c:\windows\system32\drivers\fips.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 27392 c:\windows\system32\drivers\fdc.sys
    + 2004-08-04 12:00 . 2008-04-13 18:38 71168 c:\windows\system32\drivers\dxg.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\drivers\dxapi.sys
    + 2005-01-03 03:44 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
    + 2005-01-03 03:44 . 2008-04-13 18:45 52864 c:\windows\system32\drivers\dmusic.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 14208 c:\windows\system32\drivers\diskdump.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 36352 c:\windows\system32\drivers\disk.sys
    + 2004-08-04 18:00 . 2008-04-13 18:31 36736 c:\windows\system32\drivers\crusoe.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 11776 c:\windows\system32\drivers\cpqdap01.sys
    + 2004-08-04 12:00 . 2008-04-13 19:16 49536 c:\windows\system32\drivers\classpnp.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 15423 c:\windows\system32\drivers\ch7xxnt5.dll
    + 2004-08-04 12:00 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
    + 2004-08-04 12:00 . 2008-04-13 19:14 63744 c:\windows\system32\drivers\cdfs.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 18688 c:\windows\system32\drivers\cdaudio.sys
    + 2007-04-13 16:16 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\ccdecode.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 13952 c:\windows\system32\drivers\cbidf2k.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 18944 c:\windows\system32\drivers\bthusb.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 36480 c:\windows\system32\drivers\bthprint.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 37888 c:\windows\system32\drivers\bthmodem.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\bthenum.sys
    + 2004-08-04 12:00 . 2008-04-13 18:53 71552 c:\windows\system32\drivers\bridge.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 17279 c:\windows\system32\drivers\atv10nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 14143 c:\windows\system32\drivers\atv06nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 25471 c:\windows\system32\drivers\atv04nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 11359 c:\windows\system32\drivers\atv02nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 21183 c:\windows\system32\drivers\atv01nt5.dll
    + 2004-08-04 12:00 . 2008-04-13 18:51 55808 c:\windows\system32\drivers\atmlane.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 31360 c:\windows\system32\drivers\atmepvc.sys
    + 2004-08-04 12:00 . 2008-04-13 18:51 59904 c:\windows\system32\drivers\atmarpc.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 63488 c:\windows\system32\drivers\atinxsxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 31744 c:\windows\system32\drivers\atinxbxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 73216 c:\windows\system32\drivers\atintuxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinttxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 28672 c:\windows\system32\drivers\atinsnxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 52224 c:\windows\system32\drivers\atinraxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 14336 c:\windows\system32\drivers\atinpdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 13824 c:\windows\system32\drivers\atinmdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 57856 c:\windows\system32\drivers\atinbtxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 26367 c:\windows\system32\drivers\ati1snxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 30671 c:\windows\system32\drivers\ati1raxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 56623 c:\windows\system32\drivers\ati1btxx.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 14336 c:\windows\system32\drivers\asyncmac.sys
    + 2004-08-04 18:00 . 2008-04-13 18:51 60800 c:\windows\system32\drivers\arp1394.sys
    + 2004-08-04 18:00 . 2008-04-13 18:31 37760 c:\windows\system32\drivers\amdk7.sys
    + 2004-08-04 18:00 . 2008-04-13 18:31 37376 c:\windows\system32\drivers\amdk6.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 43008 c:\windows\system32\drivers\amdagp.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 42752 c:\windows\system32\drivers\alim1541.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 44928 c:\windows\system32\drivers\agpcpq.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 42368 c:\windows\system32\drivers\agp440.sys
    + 2007-04-13 10:20 . 2004-03-02 07:26 50007 c:\windows\system32\drivers\adildr.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 11648 c:\windows\system32\drivers\acpiec.sys
    + 2004-08-04 12:00 . 2008-04-13 18:46 53376 c:\windows\system32\drivers\1394bus.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 57344 c:\windows\system32\dpwsockx.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42768 c:\windows\system32\dpwsock.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 83456 c:\windows\system32\dpvsetup.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 21504 c:\windows\system32\dpvacm.dll
    + 2007-04-23 00:02 . 2007-04-23 00:02 57344 c:\windows\system32\dpv11.dll
    + 2007-04-23 00:02 . 2007-04-23 00:02 53248 c:\windows\system32\dpuGUI10.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53520 c:\windows\system32\dpserial.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61952 c:\windows\system32\dpnwsock.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\dpnsvr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\dpnmodem.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 60928 c:\windows\system32\dpnhupnp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 35328 c:\windows\system32\dpnhpast.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 23552 c:\windows\system32\dpmodemx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 29696 c:\windows\system32\dplaysvr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 33040 c:\windows\system32\dplay.dll
    + 2007-04-23 00:02 . 2007-04-23 00:02 73728 c:\windows\system32\dpl100.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 56320 c:\windows\system32\dot3msm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39936 c:\windows\system32\dot3gpclnt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57856 c:\windows\system32\dot3cfg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 26112 c:\windows\system32\dot3api.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53840 c:\windows\system32\dosx.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\doskey.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 48128 c:\windows\system32\docprop2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 46080 c:\windows\system32\docprop.dll
    + 2004-08-04 12:00 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll
    + 2004-08-04 18:00 . 2008-04-14 00:11 52224 c:\windows\system32\dmutil.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 23552 c:\windows\system32\dmserver.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 82432 c:\windows\system32\dmscript.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\dmremote.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\dmocx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 35840 c:\windows\system32\dmloader.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\dmintf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 61440 c:\windows\system32\dmcompos.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 28672 c:\windows\system32\dmband.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13894 c:\windows\system32\dllcache\zonelibm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 29760 c:\windows\system32\dllcache\znetm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 41029 c:\windows\system32\dllcache\zcorem.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 36937 c:\windows\system32\dllcache\zclientm.exe
    + 2004-08-04 12:00 . 2009-08-06 18:24 35552 c:\windows\system32\dllcache\wups.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\dllcache\wupdmgr.exe
    + 2004-08-04 12:00 . 2009-08-06 18:24 53472 c:\windows\system32\dllcache\wuauclt.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\dllcache\wshisn.dll
    + 2008-05-09 10:53 . 2008-05-09 10:53 90112 c:\windows\system32\dllcache\wshext.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12032 c:\windows\system32\dllcache\ws2ifsl.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 10368 c:\windows\system32\dllcache\wowexec.exe
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\dllcache\wmpui.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 99840 c:\windows\system32\dllcache\wmpshell.dll
    + 2004-08-04 11:00 . 2006-10-18 20:46 64000 c:\windows\system32\dllcache\wmplayer.exe
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\dllcache\wmpcore.dll
    + 2004-08-04 11:00 . 2004-08-11 08:45 20480 c:\windows\system32\dllcache\wmpcd.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 96256 c:\windows\system32\dllcache\wmpband.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 52224 c:\windows\system32\dllcache\wmitimep.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\dllcache\wmiprop.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 75264 c:\windows\system32\dllcache\wmipicmp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61440 c:\windows\system32\dllcache\wmimsg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\dllcache\wmi2xml.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\dllcache\wmerrenu.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 37376 c:\windows\system32\dllcache\wmdmps.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\dllcache\wisc10.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\dllcache\winstrm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\dllcache\winmsd.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\winmgmtr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\winmgmt.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\dllcache\winchat.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\win87em.dll
    + 2008-01-13 17:52 . 2001-08-17 22:36 87040 c:\windows\system32\dllcache\wiafbdrv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13600 c:\windows\system32\dllcache\wfwnet.drv
    + 2004-08-04 12:00 . 2004-08-04 12:00 31232 c:\windows\system32\dllcache\weitekp9.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 41600 c:\windows\system32\dllcache\weitekp9.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\dllcache\webhits.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\wbemads.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\wb32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\dllcache\w32topl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49664 c:\windows\system32\dllcache\w32tm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 48256 c:\windows\system32\dllcache\w32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33792 c:\windows\system32\dllcache\vssadmin.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\vss_ps.dll
    + 2007-10-19 22:24 . 2008-04-14 00:11 86073 c:\windows\system32\dllcache\voicesub.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\dllcache\vmmreg32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18176 c:\windows\system32\dllcache\vga64k.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51456 c:\windows\system32\dllcache\vga256.dll
    + 2007-04-13 16:16 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\dllcache\verifier.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\dllcache\utildll.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47872 c:\windows\system32\dllcache\user.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\dllcache\ureg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\unsecapp.exe
    + 2007-10-19 22:24 . 2008-04-14 00:11 76288 c:\windows\system32\dllcache\uniime.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32339 c:\windows\system32\dllcache\uniansi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\umdmxfrm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 82432 c:\windows\system32\dllcache\ufat.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\dllcache\twunk_32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 49680 c:\windows\system32\dllcache\twunk_16.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 94784 c:\windows\system32\dllcache\twain.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\tsshutdn.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\tsprof.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\tskill.exe
  23. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    Part 5

    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\tsdiscon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\dllcache\tsd32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44544 c:\windows\system32\dllcache\tscupgrd.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\tscon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 52224 c:\windows\system32\dllcache\tsappcmp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 59904 c:\windows\system32\dllcache\trnsprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 40960 c:\windows\system32\dllcache\trialoc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31232 c:\windows\system32\dllcache\traffic.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\dllcache\tracert6.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13888 c:\windows\system32\dllcache\toolhelp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61952 c:\windows\system32\dllcache\tmplprov.dll
    + 2007-10-19 22:24 . 2008-04-14 00:10 10240 c:\windows\system32\dllcache\tmigrate.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 44032 c:\windows\system32\dllcache\tintlphr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\tftp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19464 c:\windows\system32\dllcache\tdspx.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 21896 c:\windows\system32\dllcache\tdipx.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 13192 c:\windows\system32\dllcache\tdasync.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\dllcache\tcpsvcs.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\tcmsetup.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\dllcache\taskman.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 78848 c:\windows\system32\dllcache\tapiui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19200 c:\windows\system32\dllcache\tapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\dllcache\syskey.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\sysinv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18896 c:\windows\system32\dllcache\sysedit.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\dllcache\syncapp.exe
    + 2004-08-04 18:00 . 2008-04-13 18:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 47104 c:\windows\system32\dllcache\srdiag.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 24661 c:\windows\system32\dllcache\spxcoins.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61440 c:\windows\system32\dllcache\spcplui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 77824 c:\windows\system32\dllcache\spcommon.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 56832 c:\windows\system32\dllcache\sol.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\dllcache\snmpstup.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 40960 c:\windows\system32\dllcache\smtpcons.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\smierrsm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14592 c:\windows\system32\dllcache\smclib.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\dllcache\smb6w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\dllcache\sma3w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 38912 c:\windows\system32\dllcache\sm9aw.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\dllcache\sm93w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\dllcache\sm92w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\dllcache\sm90w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\dllcache\sm8dw.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 29184 c:\windows\system32\dllcache\sm8cw.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\dllcache\sm8aw.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\dllcache\sm89w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30208 c:\windows\system32\dllcache\sm87w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30208 c:\windows\system32\dllcache\sm81w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\dllcache\sm59w.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\slbrccsp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\dllcache\sisbkup.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\dllcache\simptcp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42573 c:\windows\system32\dllcache\shvlzm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 66113 c:\windows\system32\dllcache\shvl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\shadow.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\dllcache\sfmapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\serwvdrv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\serialui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\dllcache\senscfg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\dllcache\scredir.dll
    + 2004-08-04 12:00 . 2009-02-06 10:39 35328 c:\windows\system32\dllcache\sc.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\dllcache\sapisvr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\rwinsta.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 79872 c:\windows\system32\dllcache\rwia330.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 79872 c:\windows\system32\dllcache\rwia001.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42574 c:\windows\system32\dllcache\rvsezm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 48706 c:\windows\system32\dllcache\rvse.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\runas.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\dllcache\rtm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\dllcache\rsvpmsg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\dllcache\rsmui.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\dllcache\rsmsink.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\dllcache\rsm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\dllcache\rpcns4.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\dllcache\routemon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 19968 c:\windows\system32\dllcache\route.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\dllcache\replace.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\register.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 33792 c:\windows\system32\dllcache\regini.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 34432 c:\windows\system32\dllcache\rawwan.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\dllcache\rasser.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\dllcache\rasrad.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16512 c:\windows\system32\dllcache\raspti.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 22528 c:\windows\system32\dllcache\rasmxs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\dllcache\rasdial.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\dllcache\rasctrs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\dllcache\rasautou.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\dllcache\qwinsta.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\quser.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\qappsrv.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 17792 c:\windows\system32\dllcache\ptilink.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\dllcache\pschdprf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\prflbmsg.dll
    + 2004-08-04 11:00 . 2009-03-08 04:31 46592 c:\windows\system32\dllcache\pngfilt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\dllcache\pmxmcro.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 46592 c:\windows\system32\dllcache\pmspl.dll
    + 2007-10-19 22:24 . 2008-04-14 00:10 67584 c:\windows\system32\dllcache\pmigrate.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\dllcache\plustab.dll
    + 2007-10-19 22:24 . 2008-04-13 16:43 70144 c:\windows\system32\dllcache\pintlphr.exe
    + 2007-10-19 22:24 . 2008-04-14 00:10 53760 c:\windows\system32\dllcache\pintlcsd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\dllcache\ping6.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\dllcache\pifmgr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\perfts.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\dllcache\pentnt.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\dllcache\pathping.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\dllcache\panmap.dll
    + 2007-10-19 22:24 . 2008-04-14 00:10 15360 c:\windows\system32\dllcache\padrs804.dll
    + 2007-10-19 22:25 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\padrs412.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 36927 c:\windows\system32\dllcache\padrs411.dll
    + 2007-10-19 22:24 . 2008-04-14 00:10 15872 c:\windows\system32\dllcache\padrs404.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\dllcache\osuninst.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\dllcache\olethk32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\dllcache\olesvr32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 24064 c:\windows\system32\dllcache\olesvr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 82944 c:\windows\system32\dllcache\olecli.dll
    + 2004-08-04 12:00 . 2011-09-26 10:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39744 c:\windows\system32\dllcache\ole2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26224 c:\windows\system32\dllcache\odbc16gt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 55936 c:\windows\system32\dllcache\nwlnkspx.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 63232 c:\windows\system32\dllcache\nwlnknb.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 32512 c:\windows\system32\dllcache\nwlnkfwd.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 12416 c:\windows\system32\dllcache\nwlnkflt.sys
    + 2004-08-04 18:00 . 2004-08-04 18:00 36864 c:\windows\system32\dllcache\ntsdexts.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 31744 c:\windows\system32\dllcache\ntsd.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\dllcache\ntmsevt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\ntlanui2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 57856 c:\windows\system32\dllcache\ntlanui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34560 c:\windows\system32\dllcache\ntio804.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 35424 c:\windows\system32\dllcache\ntio412.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 35648 c:\windows\system32\dllcache\ntio411.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 34560 c:\windows\system32\dllcache\ntio404.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 33840 c:\windows\system32\dllcache\ntio.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\dllcache\ntdos804.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29274 c:\windows\system32\dllcache\ntdos412.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29370 c:\windows\system32\dllcache\ntdos411.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\dllcache\ntdos404.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 27866 c:\windows\system32\dllcache\ntdos.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 10240 c:\windows\system32\dllcache\npwmsdrm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\dllcache\notiflag.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\nmevtmsg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\system32\dllcache\nbtstat.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\dllcache\narrhook.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 90112 c:\windows\system32\dllcache\mycomput.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\system32\dllcache\mtxoci.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2004-08-04 18:00 . 2009-11-27 17:11 17920 c:\windows\system32\dllcache\msyuv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\dllcache\msxmlr.dll
    + 2008-09-22 22:40 . 2008-04-13 17:27 79872 c:\windows\system32\dllcache\msxml6r.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\dllcache\msxml3r.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 37916 c:\windows\system32\dllcache\msxml2r.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07 28672 c:\windows\system32\dllcache\msvidc32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\msswch.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\dllcache\mssoapr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\dllcache\mssign32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 60416 c:\windows\system32\dllcache\msratelc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69632 c:\windows\system32\dllcache\msr2c.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 41984 c:\windows\system32\dllcache\msports.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\dllcache\msobjs.dll
    + 2004-08-04 12:00 . 2008-03-25 04:50 60192 c:\windows\system32\dllcache\msjter40.dll
    + 2007-10-19 22:27 . 2004-08-04 12:00 98304 c:\windows\system32\dllcache\msir3jp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39936 c:\windows\system32\dllcache\msinfo32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\msidntld.dll
    + 2004-08-04 12:00 . 2009-03-08 04:31 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2004-08-04 11:00 . 2011-11-04 19:20 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 12:00 . 2009-03-08 04:31 45568 c:\windows\system32\dllcache\mshta.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 20992 c:\windows\system32\dllcache\msg.exe
    + 2007-05-10 06:26 . 2011-11-04 19:20 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\system32\dllcache\msdtclog.dll
    + 2008-06-24 16:43 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 65024 c:\windows\system32\dllcache\msaudite.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61168 c:\windows\system32\dllcache\msacm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\dllcache\mrinfo.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 47104 c:\windows\system32\dllcache\mprui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 99840 c:\windows\system32\dllcache\mprmsg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\dllcache\mprddm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\dllcache\mpnotify.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10112 c:\windows\system32\dllcache\modex.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 68768 c:\windows\system32\dllcache\mmsystem.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\mmdrv.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34304 c:\windows\system32\dllcache\migisol.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 92416 c:\windows\system32\dllcache\mga.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 92032 c:\windows\system32\dllcache\mga.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39274 c:\windows\system32\dllcache\mem.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\dllcache\mdhcp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 28160 c:\windows\system32\dllcache\mciwave.drv
    + 2004-08-04 12:00 . 2004-08-04 12:00 25264 c:\windows\system32\dllcache\mciseq.drv
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\dllcache\mcicda.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73376 c:\windows\system32\dllcache\mciavi.drv
    + 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\dllcache\mcdsrv32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\dllcache\mcd32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\dllcache\logoff.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\dllcache\loghours.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\dllcache\lnkstub.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 29696 c:\windows\system32\dllcache\lights.exe
    + 2004-08-04 12:00 . 2011-11-04 19:20 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-04 11:00 . 2006-10-18 20:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 89600 c:\windows\system32\dllcache\langwrbk.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 92224 c:\windows\system32\dllcache\krnl386.exe
    + 2007-10-19 22:27 . 2004-08-04 12:00 70656 c:\windows\system32\dllcache\korwbrkr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42537 c:\windows\system32\dllcache\keyboard.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 42809 c:\windows\system32\dllcache\key01.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\dllcache\jupiw.dll
    + 2004-08-04 12:00 . 2011-11-04 19:20 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47952 c:\windows\system32\dllcache\jobexec.dll
    + 2004-08-04 18:00 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\isignup.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\irclass.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 66560 c:\windows\system32\dllcache\ipxsap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39936 c:\windows\system32\dllcache\ipxrtmgr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\dllcache\ipxrip.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\dllcache\ipxpromn.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 83968 c:\windows\system32\dllcache\ipxmontr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\dllcache\ipsec6.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 32896 c:\windows\system32\dllcache\ipfltdrv.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\dllcache\iologmsg.dll
    + 2004-08-04 11:00 . 2009-03-08 04:32 94720 c:\windows\system32\dllcache\inseng.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 59392 c:\windows\system32\dllcache\imscinst.exe
    + 2007-10-19 22:24 . 2004-08-04 12:00 59904 c:\windows\system32\dllcache\imkrinst.exe
    + 2007-10-19 22:24 . 2004-08-04 12:00 45109 c:\windows\system32\dllcache\imjpuex.exe
    + 2007-10-19 22:24 . 2008-04-14 00:09 81976 c:\windows\system32\dllcache\imjpdct.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 57398 c:\windows\system32\dllcache\imjpdadm.exe
    + 2004-08-04 12:00 . 2009-03-08 04:31 34816 c:\windows\system32\dllcache\imgutil.dll
    + 2007-10-19 22:24 . 2004-08-04 12:00 44032 c:\windows\system32\dllcache\imekrmig.exe
    + 2007-10-19 22:24 . 2008-04-14 00:09 86016 c:\windows\system32\dllcache\imekrmbx.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 70656 c:\windows\system32\dllcache\ifsutil.dll
    + 2007-05-10 06:26 . 2009-08-28 10:28 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2004-08-04 12:00 . 2009-03-08 04:32 71680 c:\windows\system32\dllcache\iesetup.dll
    + 2004-08-04 12:00 . 2009-03-08 04:32 55808 c:\windows\system32\dllcache\iernonce.dll
    + 2004-08-04 11:00 . 2006-10-17 11:04 69120 c:\windows\system32\dllcache\iedw.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 73728 c:\windows\system32\dllcache\icwtutor.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 61440 c:\windows\system32\dllcache\icwres.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 54784 c:\windows\system32\dllcache\icmui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\icfgnt5.dll
    + 2007-08-20 10:04 . 2009-03-08 04:31 59904 c:\windows\system32\dllcache\icardie.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 59392 c:\windows\system32\dllcache\iassvcs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 86528 c:\windows\system32\dllcache\iassam.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\dllcache\iaspolcy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\dllcache\iasnap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\dllcache\iashlpr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 41472 c:\windows\system32\dllcache\iasads.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\dllcache\iasacct.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\htrn_jis.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42573 c:\windows\system32\dllcache\hrtzzm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 57409 c:\windows\system32\dllcache\hrtz.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\hnetmon.dll
    + 2004-08-04 12:00 . 2009-03-08 04:24 68608 c:\windows\system32\dllcache\hmmapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 87552 c:\windows\system32\dllcache\hhctrlui.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 99840 c:\windows\system32\dllcache\helphost.exe
    + 2007-10-19 22:24 . 2004-08-04 12:00 36864 c:\windows\system32\dllcache\hanjadic.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\dllcache\gdi.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 76800 c:\windows\system32\dllcache\gcdef.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\dllcache\fxssend.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\dllcache\fxsroute.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53248 c:\windows\system32\dllcache\fwdprov.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 56320 c:\windows\system32\dllcache\fsutil.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 81408 c:\windows\system32\dllcache\fsusd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 55296 c:\windows\system32\dllcache\freecell.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\fmifs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\flattemp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\dllcache\fc.exe
    + 2004-08-04 18:00 . 2004-08-04 18:00 15872 c:\windows\system32\dllcache\expand.exe
    + 2001-08-18 04:36 . 2001-08-18 04:36 12288 c:\windows\system32\dllcache\EXCH_smtpctrs.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 26112 c:\windows\system32\dllcache\EXCH_seos.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 57856 c:\windows\system32\dllcache\EXCH_scripto.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 23040 c:\windows\system32\dllcache\EXCH_regtrace.exe
    + 2001-08-18 04:36 . 2001-08-18 04:36 38912 c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 65536 c:\windows\system32\dllcache\EXCH_mailmsg.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 43520 c:\windows\system32\dllcache\EXCH_fcachdll.dll
    + 2001-08-18 04:36 . 2001-08-18 04:36 45056 c:\windows\system32\dllcache\EXCH_aqadmin.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\dllcache\eventcls.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25856 c:\windows\system32\dllcache\et4000.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 45056 c:\windows\system32\dllcache\esunid.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 57856 c:\windows\system32\dllcache\esuimgd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\dllcache\esucmd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 39424 c:\windows\system32\dllcache\esentutl.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\dllcache\esentprf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12642 c:\windows\system32\dllcache\edlin.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\dllcache\dxapi.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 55632 c:\windows\system32\dllcache\dwil1033.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 62976 c:\windows\system32\dllcache\dsauth.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\dllcache\drwtsn32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 28112 c:\windows\system32\dllcache\drwatson.exe
    + 2004-08-04 11:00 . 2004-08-11 08:45 95232 c:\windows\system32\dllcache\drmstor.dll
    + 2005-01-03 03:44 . 2008-04-13 18:45 60160 c:\windows\system32\dllcache\drmk.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 42768 c:\windows\system32\dllcache\dpwsock.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53520 c:\windows\system32\dllcache\dpserial.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61952 c:\windows\system32\dllcache\dpnwsock.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\dllcache\dpnmodem.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 33040 c:\windows\system32\dllcache\dplay.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 53840 c:\windows\system32\dllcache\dosx.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\dllcache\doskey.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 46080 c:\windows\system32\dllcache\docprop.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\dllcache\dmocx.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\dllcache\dmintf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\dllcache\diskperf.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\dllcache\dimap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 74240 c:\windows\system32\dllcache\dhcpsapi.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 85020 c:\windows\system32\dllcache\dgsetup.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\dllcache\dfrgres.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\dllcache\deskperf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\dllcache\deskmon.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\deskadp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20634 c:\windows\system32\dllcache\debug.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 39424 c:\windows\system32\dllcache\ddeml.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47616 c:\windows\system32\dllcache\d3dxof.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34816 c:\windows\system32\dllcache\d3dpmesh.dll
    + 2004-08-04 11:00 . 2006-11-07 20:03 33792 c:\windows\system32\dllcache\custsat.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27200 c:\windows\system32\dllcache\ctl3dv2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27136 c:\windows\system32\dllcache\ctl3d32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73728 c:\windows\system32\dllcache\csseqchk.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\dllcache\cprofile.exe
    + 2007-10-19 22:24 . 2004-08-04 12:00 57399 c:\windows\system32\dllcache\cplexe.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 27097 c:\windows\system32\dllcache\country.sys
    + 2004-08-04 12:00 . 2009-03-08 04:33 18944 c:\windows\system32\dllcache\corpol.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\dllcache\convert.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 66560 c:\windows\system32\dllcache\console.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30160 c:\windows\system32\dllcache\compobj.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\dllcache\compact.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\comp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 32816 c:\windows\system32\dllcache\commdlg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\dllcache\cnvfat.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32768 c:\windows\system32\dllcache\cnetcfg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\cmpbk32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\dllcache\clb.dll
    + 2007-10-19 22:24 . 2008-04-14 00:09 56320 c:\windows\system32\dllcache\chtskdic.dll
    + 2007-10-19 22:24 . 2008-04-14 00:09 97792 c:\windows\system32\dllcache\chtmbx.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42575 c:\windows\system32\dllcache\chkrzm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 40515 c:\windows\system32\dllcache\chkr.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\dllcache\chkntfs.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\dllcache\chkdsk.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\dllcache\chgusr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\chgport.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\chglogon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 80384 c:\windows\system32\dllcache\charmap.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\dllcache\cdmodem.dll
    + 2004-08-04 12:00 . 2009-08-06 18:24 96480 c:\windows\system32\dllcache\cdm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27648 c:\windows\system32\dllcache\ccfgnt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\cb32.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 54528 c:\windows\system32\dllcache\cap7146.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\dllcache\c_iscii.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\dllcache\brpinfo.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\dllcache\bootvid.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 42577 c:\windows\system32\dllcache\bckgzm.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 82501 c:\windows\system32\dllcache\bckg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73216 c:\windows\system32\dllcache\avwav.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\dllcache\avmeter.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 64000 c:\windows\system32\dllcache\avicap32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69584 c:\windows\system32\dllcache\avicap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 80384 c:\windows\system32\dllcache\autodisc.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\dllcache\atrace.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34816 c:\windows\system32\dllcache\atmpvcno.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 31360 c:\windows\system32\dllcache\atmepvc.sys
    + 2004-08-04 12:00 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\dllcache\atkctrs.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\dllcache\arp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12498 c:\windows\system32\dllcache\append.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\dllcache\adptif.dll
    + 2004-08-04 12:00 . 2009-03-08 04:32 72704 c:\windows\system32\dllcache\admparse.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 64512 c:\windows\system32\dllcache\acctres.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\dllcache\aaaamon.dll
    + 2007-04-23 00:01 . 2007-04-23 00:01 12288 c:\windows\system32\DivXWMPExtType.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32768 c:\windows\system32\dispex.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\diskperf.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 39936 c:\windows\system32\dimsroam.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 19456 c:\windows\system32\dimsntfy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\dimap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 68608 c:\windows\system32\digest.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 87040 c:\windows\system32\diantz.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 74240 c:\windows\system32\dhcpsapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 48640 c:\windows\system32\dhcpqec.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 85020 c:\windows\system32\dgsetup.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 28672 c:\windows\system32\dfsshlex.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 39424 c:\windows\system32\dfrgsnap.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\dfrgres.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 82944 c:\windows\system32\dfrgfat.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 59904 c:\windows\system32\devenum.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\deskperf.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\deskmon.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\deskadp.dll
    + 2005-01-03 03:33 . 2000-01-31 12:00 17920 c:\windows\system32\delphimm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\defrag.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 20634 c:\windows\system32\debug.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 27136 c:\windows\system32\ddrawex.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 30208 c:\windows\system32\ddeshare.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 39424 c:\windows\system32\ddeml.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 28672 c:\windows\system32\dbnmpntw.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 24576 c:\windows\system32\dbmsrpcn.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 25088 c:\windows\system32\davclnt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 54272 c:\windows\system32\dataclen.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 47616 c:\windows\system32\d3dxof.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34816 c:\windows\system32\d3dpmesh.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27200 c:\windows\system32\ctl3dv2.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27136 c:\windows\system32\ctl3d32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\ctfmon.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 73728 c:\windows\system32\csseqchk.dll
    + 2004-08-04 12:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
    + 2007-07-27 15:18 . 2004-02-16 12:59 61440 c:\windows\system32\csnpstd3.dll
    + 2007-04-13 16:15 . 2004-02-16 12:59 61440 c:\windows\system32\csnpstd2.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 62464 c:\windows\system32\cryptsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 64512 c:\windows\system32\cryptnet.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 53760 c:\windows\system32\cryptext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 33280 c:\windows\system32\cryptdll.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 74752 c:\windows\system32\cryptdlg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 12800 c:\windows\system32\credssp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27097 c:\windows\system32\country.sys
    + 2004-08-04 12:00 . 2009-03-08 04:33 18944 c:\windows\system32\corpol.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\convert.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 66560 c:\windows\system32\console.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 27648 c:\windows\system32\conime.exe
    + 2004-11-09 20:11 . 2012-02-03 00:09 65536 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2007-04-13 01:47 . 2007-04-13 01:47 16384 c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
    + 2004-11-09 20:11 . 2012-02-03 00:09 49152 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2004-08-04 12:00 . 2008-04-14 00:11 97792 c:\windows\system32\comrepl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 30160 c:\windows\system32\compobj.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\compact.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\comp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 32816 c:\windows\system32\commdlg.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 50620 c:\windows\system32\command.com
    + 2004-08-04 12:00 . 2004-08-04 12:00 10544 c:\windows\system32\comm.drv
    + 2004-08-04 12:00 . 2008-04-14 00:11 28160 c:\windows\system32\comaddin.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 61440 c:\windows\system32\Com\comempty.dat
    + 2004-08-04 12:00 . 2008-04-14 00:11 60416 c:\windows\system32\colbact.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\cnvfat.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 32768 c:\windows\system32\cnetcfg.dll
    + 2004-08-04 18:00 . 2008-04-14 00:11 47104 c:\windows\system32\cnbjmon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 39424 c:\windows\system32\cmutil.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 63488 c:\windows\system32\cmstp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 13312 c:\windows\system32\cmsetacl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\cmpbk32.dll
  24. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    + 2004-08-04 12:00 . 2008-04-14 00:12 39936 c:\windows\system32\cmmon32.exe
    + 2007-07-02 12:48 . 1998-07-12 19:00 32768 c:\windows\system32\CMDLGFR.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 25600 c:\windows\system32\cmdl32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 15872 c:\windows\system32\cmcfg32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 58368 c:\windows\system32\clusapi.dll
    + 2007-07-28 09:17 . 2003-02-28 18:26 49424 c:\windows\system32\clspack.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 33280 c:\windows\system32\clipsrv.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 20480 c:\windows\system32\cliconfg.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 77824 c:\windows\system32\cliconfg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 64000 c:\windows\system32\cleanmgr.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\clb.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 69120 c:\windows\system32\ciodm.dll
    + 2005-01-03 04:11 . 2005-01-03 04:11 16359 c:\windows\system32\CHODDI.SYS
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\chkntfs.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\chkdsk.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 80384 c:\windows\system32\charmap.exe
    + 2004-08-04 12:00 . 2008-04-14 00:09 16896 c:\windows\system32\cfgmgr32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 38912 c:\windows\system32\cfgbkend.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\cdmodem.dll
    + 2004-08-04 12:00 . 2009-08-06 18:24 96480 c:\windows\system32\cdm.dll
    + 2005-03-10 12:06 . 2005-03-10 12:06 77824 c:\windows\system32\CddbLangZT.dll
    + 2005-03-10 12:06 . 2005-03-10 12:06 77824 c:\windows\system32\CddbLangZH.dll
    + 2005-03-10 12:06 . 2005-03-10 12:06 81920 c:\windows\system32\CddbLangKO.dll
    + 2005-03-10 12:06 . 2005-03-10 12:06 86016 c:\windows\system32\CddbLangJA.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 27648 c:\windows\system32\ccfgnt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 85504 c:\windows\system32\catsrvps.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 50688 c:\windows\system32\camocx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\cacls.exe
    + 2004-08-04 12:00 . 2010-01-13 14:01 86016 c:\windows\system32\cabview.dll
    + 2004-08-04 18:00 . 2008-04-14 00:11 60416 c:\windows\system32\cabinet.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 50688 c:\windows\system32\btpanui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 30208 c:\windows\system32\bthserv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 20992 c:\windows\system32\bthci.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 78336 c:\windows\system32\browsewm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 77824 c:\windows\system32\browser.dll
    + 2004-08-04 12:00 . 2008-04-13 17:03 63488 c:\windows\system32\browselc.dll
    + 2005-01-03 03:33 . 1998-02-09 09:00 29952 c:\windows\system32\borlndmm.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\bootvid.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 71680 c:\windows\system32\blastcln.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 17408 c:\windows\system32\bidispl.dll
    + 2005-10-28 22:49 . 2005-10-28 22:49 25600 c:\windows\system32\bcsprsrc.dll
    + 2005-01-03 03:33 . 2000-01-31 12:00 16896 c:\windows\system32\bcbmm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 29184 c:\windows\system32\batmeter.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 52736 c:\windows\system32\basesrv.dll
    + 2005-10-28 15:40 . 2005-10-28 15:40 96792 c:\windows\system32\basecsp.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73216 c:\windows\system32\avwav.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\avmeter.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07 84992 c:\windows\system32\avifil32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 64000 c:\windows\system32\avicap32.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 69584 c:\windows\system32\avicap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11264 c:\windows\system32\autolfn.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 80384 c:\windows\system32\autodisc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 62464 c:\windows\system32\authz.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14336 c:\windows\system32\auditusr.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 42496 c:\windows\system32\audiosrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 12288 c:\windows\system32\attrib.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\atrace.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 34816 c:\windows\system32\atmpvcno.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 30208 c:\windows\system32\atmlib.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11264 c:\windows\system32\atmadm.exe
    + 2003-03-19 02:05 . 2003-03-19 02:05 89088 c:\windows\system32\atl71.dll
    + 2007-07-28 09:18 . 2002-01-05 04:18 84992 c:\windows\system32\ATL70.DLL
    + 2004-08-04 12:00 . 2009-07-17 19:01 58880 c:\windows\system32\atl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\atkctrs.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\system32\ativtmxx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\at.exe
    + 2004-08-04 12:00 . 2010-03-05 14:37 65536 c:\windows\system32\asycfilt.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\arp.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 12498 c:\windows\system32\append.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 70656 c:\windows\system32\amstream.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 17408 c:\windows\system32\alrsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 44544 c:\windows\system32\alg.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 98304 c:\windows\system32\ahui.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 68096 c:\windows\system32\adsmsext.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\adptif.dll
    + 2004-08-04 12:00 . 2009-03-08 04:32 72704 c:\windows\system32\admparse.dll
    + 2007-04-13 10:20 . 2001-02-08 10:05 46892 c:\windows\system32\ADADIX16.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:11 98304 c:\windows\system32\actxprxy.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 64512 c:\windows\system32\acctres.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\aaaamon.dll
    + 2004-08-04 18:00 . 2004-08-04 18:00 55632 c:\windows\system32\1033\dwintl.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 13600 c:\windows\system\WFWNET.DRV
    + 2004-08-04 12:00 . 2004-08-04 12:00 19200 c:\windows\system\TAPI.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 24064 c:\windows\system\OLESVR.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 82944 c:\windows\system\OLECLI.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 68768 c:\windows\system\MMSYSTEM.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 28160 c:\windows\system\MCIWAVE.DRV
    + 2004-08-04 12:00 . 2004-08-04 12:00 25264 c:\windows\system\MCISEQ.DRV
    + 2004-08-04 12:00 . 2004-08-04 12:00 73376 c:\windows\system\MCIAVI.DRV
    + 2005-01-03 03:41 . 1998-05-07 16:04 52736 c:\windows\system\hpsysdrv.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 32816 c:\windows\system\COMMDLG.DLL
    + 2004-08-04 12:00 . 2004-08-04 12:00 69584 c:\windows\system\AVICAP.DLL
    + 2004-08-04 12:00 . 2008-04-14 00:12 58434 c:\windows\srchasst\srchctls.dll
    + 2005-01-03 03:48 . 2005-05-04 01:43 90112 c:\windows\SOUNDMAN.EXE
    + 2005-01-03 04:08 . 2001-06-20 08:43 45056 c:\windows\SMINST\INSTALL.DLL
    + 2007-07-28 09:17 . 2003-02-28 18:26 46352 c:\windows\setdebug.exe
    + 2008-09-22 22:40 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\startoc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui2.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\riafui1.dll
    + 2008-09-22 22:40 . 2008-04-13 18:46 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rexec.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\resutils.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\remotepg.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 49664 c:\windows\ServicePackFiles\i386\regapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\reg.exe
    + 2008-09-22 22:40 . 2008-04-13 18:40 57600 c:\windows\ServicePackFiles\i386\redbook.sys
    + 2008-09-22 22:40 . 2004-08-03 21:41 13776 c:\windows\ServicePackFiles\i386\recagent.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
    + 2008-09-22 22:40 . 2008-04-14 00:13 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
    + 2008-09-22 22:40 . 2008-04-14 00:13 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 21504 c:\windows\ServicePackFiles\i386\rcp.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
    + 2008-09-22 22:40 . 2008-04-13 19:19 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
    + 2008-09-22 22:40 . 2008-04-13 18:57 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 56832 c:\windows\ServicePackFiles\i386\rasphone.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 61440 c:\windows\ServicePackFiles\i386\rasman.dll
    + 2008-09-22 22:40 . 2008-04-13 19:19 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 79872 c:\windows\ServicePackFiles\i386\raschap.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
    + 2008-09-22 22:40 . 2008-04-13 18:41 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\qutil.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\qprocess.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 43520 c:\windows\ServicePackFiles\i386\pstorec.dll
    + 2008-09-22 22:40 . 2008-04-13 18:56 69120 c:\windows\ServicePackFiles\i386\psched.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 96768 c:\windows\ServicePackFiles\i386\psbase.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\psapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 50176 c:\windows\ServicePackFiles\i386\proquota.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\profmap.dll
    + 2008-09-22 22:40 . 2008-04-13 18:31 35840 c:\windows\ServicePackFiles\i386\processr.sys
    + 2008-09-22 22:40 . 2008-04-13 18:41 17664 c:\windows\ServicePackFiles\i386\ppa3.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\powrprof.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 49152 c:\windows\ServicePackFiles\i386\powercfg.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 52736 c:\windows\ServicePackFiles\i386\plotui.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\plotter.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\ping.exe
    + 2008-09-22 22:39 . 2008-04-13 18:35 24064 c:\windows\ServicePackFiles\i386\pidgen.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\pid.dll
    + 2008-09-22 22:40 . 2008-04-13 18:44 28032 c:\windows\ServicePackFiles\i386\perm3.sys
    + 2008-09-22 22:40 . 2008-04-13 18:44 27904 c:\windows\ServicePackFiles\i386\perm2.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 34816 c:\windows\ServicePackFiles\i386\perfproc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\perfos.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\perfnet.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\perfmon.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll
    + 2008-09-22 22:40 . 2008-04-13 18:40 24960 c:\windows\ServicePackFiles\i386\pciidex.sys
    + 2008-09-22 22:40 . 2008-04-13 18:36 68224 c:\windows\ServicePackFiles\i386\pci.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll
    + 2008-09-22 22:40 . 2004-08-03 21:31 29502 c:\windows\ServicePackFiles\i386\pca200e.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll
    + 2008-09-22 22:40 . 2008-04-13 18:40 19712 c:\windows\ServicePackFiles\i386\partmgr.sys
    + 2008-09-22 22:40 . 2008-04-13 18:40 80128 c:\windows\ServicePackFiles\i386\parport.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 58368 c:\windows\ServicePackFiles\i386\packager.exe
    + 2008-09-22 22:40 . 2008-04-13 18:31 42752 c:\windows\ServicePackFiles\i386\p3.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\osuninst.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 84992 c:\windows\ServicePackFiles\i386\olepro32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 74752 c:\windows\ServicePackFiles\i386\olecli32.dll
    + 2008-09-22 22:40 . 2008-04-13 18:46 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\oemig50.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\odtext32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odfox32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 20510 c:\windows\ServicePackFiles\i386\odexl32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll
    + 2008-09-22 22:40 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll
    + 2008-09-22 22:40 . 2008-04-14 00:10 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll
    + 2008-09-22 22:40 . 2008-04-13 17:26 94208 c:\windows\ServicePackFiles\i386\odbcint.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll
    + 2008-09-22 22:40 . 2004-08-04 12:00 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ocgen.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 96256 c:\windows\ServicePackFiles\i386\occache.dll
    + 2008-09-22 22:40 . 2008-04-14 00:10 86016 c:\windows\ServicePackFiles\i386\obepopc.dll
    + 2008-09-22 22:40 . 2007-04-02 18:44 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll
    + 2008-09-22 22:40 . 2008-04-13 18:56 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 91136 c:\windows\ServicePackFiles\i386\ntprint.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 62976 c:\windows\ServicePackFiles\i386\ntoc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll
    + 2008-09-22 22:40 . 2004-08-04 12:00 34560 c:\windows\ServicePackFiles\i386\ntio804.sys
    + 2008-09-22 22:40 . 2004-08-04 12:00 35424 c:\windows\ServicePackFiles\i386\ntio412.sys
    + 2008-09-22 22:40 . 2004-08-04 12:00 35648 c:\windows\ServicePackFiles\i386\ntio411.sys
    + 2008-09-22 22:40 . 2004-08-04 12:00 34560 c:\windows\ServicePackFiles\i386\ntio404.sys
    + 2008-09-22 22:40 . 2004-08-04 12:00 33840 c:\windows\ServicePackFiles\i386\ntio.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll
    + 2008-09-22 22:40 . 2004-08-04 12:00 47564 c:\windows\ServicePackFiles\i386\ntdetect.com
    + 2008-09-22 22:40 . 2008-04-14 00:12 76800 c:\windows\ServicePackFiles\i386\nslookup.exe
    + 2008-09-22 22:40 . 2008-04-13 18:54 28672 c:\windows\ServicePackFiles\i386\nscirda.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 54784 c:\windows\ServicePackFiles\i386\npptools.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\nppagent.exe
    + 2008-09-22 22:40 . 2008-04-13 18:32 30848 c:\windows\ServicePackFiles\i386\npfs.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 69120 c:\windows\ServicePackFiles\i386\notepad.exe
    + 2008-09-22 22:40 . 2008-04-13 18:53 40320 c:\windows\ServicePackFiles\i386\nmnt.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 77824 c:\windows\ServicePackFiles\i386\nmcom.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 81920 c:\windows\ServicePackFiles\i386\nmchat.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll
    + 2008-09-22 22:40 . 2008-04-13 18:51 61824 c:\windows\ServicePackFiles\i386\nic1394.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 80896 c:\windows\ServicePackFiles\i386\netui0.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 36864 c:\windows\ServicePackFiles\i386\netstat.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\netsh.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 11776 c:\windows\ServicePackFiles\i386\netrap.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 77312 c:\windows\ServicePackFiles\i386\netoc.dll
    + 2008-09-22 22:40 . 2008-04-13 18:56 34688 c:\windows\ServicePackFiles\i386\netbios.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\net.exe
    + 2008-09-22 22:40 . 2008-04-13 18:57 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys
    + 2008-09-22 22:40 . 2008-04-13 19:20 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys
    + 2008-09-22 22:40 . 2008-04-13 18:55 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys
    + 2008-09-22 22:40 . 2008-04-13 18:57 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll
    + 2008-09-22 22:40 . 2008-04-13 18:46 10880 c:\windows\ServicePackFiles\i386\ndisip.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 47104 c:\windows\ServicePackFiles\i386\ncprov.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 53760 c:\windows\ServicePackFiles\i386\narrator.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\napipsec.dll
    + 2008-09-22 22:40 . 2008-04-13 18:46 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\mydocs.dll
    + 2008-09-22 22:40 . 2008-04-13 18:43 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 90624 c:\windows\ServicePackFiles\i386\muisetup.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\msyuv.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\msxactps.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll
    + 2008-09-22 22:40 . 2008-04-13 18:30 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\mstinit.exe
    + 2008-09-22 22:40 . 2008-04-13 18:46 49024 c:\windows\ServicePackFiles\i386\mstape.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\mst123.dll
    + 2008-09-22 22:40 . 2008-04-13 18:36 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys
    + 2008-09-22 22:40 . 2008-04-13 18:14 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\msrle32.dll
    + 2008-09-22 22:40 . 2008-04-13 16:23 48128 c:\windows\ServicePackFiles\i386\msprivs.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll
    + 2008-09-22 22:40 . 2008-04-13 17:24 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\msoobe.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 19456 c:\windows\ServicePackFiles\i386\msobweb.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 30720 c:\windows\ServicePackFiles\i386\msobshel.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\msobdl.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\mslbui.dll
    + 2008-09-22 22:40 . 2008-03-25 04:50 60192 c:\windows\ServicePackFiles\i386\msjter40.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msisip.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe
    + 2008-09-22 22:40 . 2008-04-13 18:54 22016 c:\windows\ServicePackFiles\i386\msircomm.sys
    + 2008-09-22 22:40 . 2008-04-14 00:12 60416 c:\windows\ServicePackFiles\i386\msimn.exe
    + 2008-09-22 22:40 . 2008-04-14 00:12 78848 c:\windows\ServicePackFiles\i386\msiexec.exe
    + 2008-09-22 22:40 . 2008-04-14 00:11 51712 c:\windows\ServicePackFiles\i386\msident.dll
    + 2008-09-22 22:40 . 2008-04-13 16:26 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll
    + 2008-09-22 22:40 . 2008-04-14 00:12 29184 c:\windows\ServicePackFiles\i386\mshta.exe
    + 2008-09-22 22:40 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 82944 c:\windows\ServicePackFiles\i386\msgsc.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll
    + 2008-09-22 22:40 . 2008-04-13 18:56 35072 c:\windows\ServicePackFiles\i386\msgpc.sys
    + 2008-09-22 22:40 . 2008-04-13 18:32 19072 c:\windows\ServicePackFiles\i386\msfs.sys
    + 2008-09-22 22:40 . 2008-04-13 18:46 51200 c:\windows\ServicePackFiles\i386\msdv.sys
    + 2008-09-22 22:40 . 2008-04-14 00:11 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\msdmo.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\msdatt.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll
    + 2008-09-22 22:40 . 2008-04-13 17:26 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll
    + 2008-09-22 22:40 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll
    + 2008-09-22 22:40 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll
    + 2008-09-22 22:40 . 2008-04-13 17:24 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\msctfp.dll
    + 2008-09-22 22:40 . 2008-04-14 00:11 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll
    + 2008-09-22 22:39 . 2008-04-13 17:26 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 69632 c:\windows\ServicePackFiles\i386\msconf.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\mscms.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msasn1.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\msador15.dll
    + 2008-09-22 22:39 . 2008-04-13 17:26 24576 c:\windows\ServicePackFiles\i386\msader15.dll
    + 2008-09-22 22:39 . 2008-04-13 17:25 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\msadcs.dll
    + 2008-09-22 22:39 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcor.dll
    + 2008-09-22 22:39 . 2008-04-13 17:25 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\msadcf.dll
    + 2008-09-22 22:39 . 2008-04-13 17:25 20480 c:\windows\ServicePackFiles\i386\msadcer.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\msacm32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 53248 c:\windows\ServicePackFiles\i386\mprdim.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 87040 c:\windows\ServicePackFiles\i386\mprapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\mpr.dll
    + 2008-09-22 22:39 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\mpe.sys
    + 2008-09-22 22:39 . 2008-04-13 18:39 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys
    + 2008-09-22 22:39 . 2008-04-13 18:39 23040 c:\windows\ServicePackFiles\i386\mouclass.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 16896 c:\windows\ServicePackFiles\i386\more.com
    + 2008-09-22 22:39 . 2008-04-14 00:12 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe
    + 2008-09-22 22:39 . 2008-04-13 19:00 30080 c:\windows\ServicePackFiles\i386\modem.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\midimap.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\mf3216.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 63744 c:\windows\ServicePackFiles\i386\mf.sys
    + 2008-09-22 22:39 . 2008-04-13 18:41 26112 c:\windows\ServicePackFiles\i386\memstpci.sys
    + 2008-09-22 22:39 . 2004-08-03 21:41 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\mciwave.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\mciseq.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 57344 c:\windows\ServicePackFiles\i386\makecab.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 72704 c:\windows\ServicePackFiles\i386\magnify.exe
    + 2008-09-22 22:39 . 2004-08-03 21:39 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 13312 c:\windows\ServicePackFiles\i386\lsass.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 18944 c:\windows\ServicePackFiles\i386\lprmon.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\lpk.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 59392 c:\windows\ServicePackFiles\i386\logman.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\log.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 75264 c:\windows\ServicePackFiles\i386\locator.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 11776 c:\windows\ServicePackFiles\i386\localui.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 97280 c:\windows\ServicePackFiles\i386\loadperf.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\licwmi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll
    + 2008-09-22 22:39 . 2008-04-14 00:10 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:10 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
    + 2008-09-22 22:39 . 2008-04-13 16:43 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:10 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
    + 2008-09-22 22:39 . 2008-04-14 00:10 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll
    + 2008-09-22 22:39 . 2008-04-14 00:10 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe
    + 2008-09-22 22:39 . 2008-04-14 00:09 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe
    + 2008-09-22 22:39 . 2008-04-14 00:09 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 37376 c:\windows\ServicePackFiles\i386\l2store.dll
  25. JWW2012

    JWW2012 Newcomer, in training Topic Starter Posts: 49

    + 2008-09-22 22:39 . 2008-04-13 18:31 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 92224 c:\windows\ServicePackFiles\i386\krnl386.exe
    + 2008-09-22 22:39 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\kpropid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\kperpid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 24576 c:\windows\ServicePackFiles\i386\knpropid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\knperpid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 42537 c:\windows\ServicePackFiles\i386\keyboard.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\kdsui.dll
    + 2008-09-22 22:39 . 2008-04-13 18:39 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys
    + 2008-09-22 22:39 . 2008-04-13 18:39 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\ixsso.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\ispid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\isign32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:10 24064 c:\windows\ServicePackFiles\i386\isenpid.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 37248 c:\windows\ServicePackFiles\i386\isapnp.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\irmon.dll
    + 2008-09-22 22:39 . 2008-04-13 18:54 11264 c:\windows\ServicePackFiles\i386\irenum.sys
    + 2008-09-22 22:39 . 2008-04-13 18:54 88192 c:\windows\ServicePackFiles\i386\irda.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 53248 c:\windows\ServicePackFiles\i386\ipv6.exe
    + 2008-09-22 22:39 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll
    + 2008-09-22 22:39 . 2008-04-13 19:19 75264 c:\windows\ServicePackFiles\i386\ipsec.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\iprip.dll
    + 2008-09-22 22:39 . 2008-04-13 18:57 20864 c:\windows\ServicePackFiles\i386\ipinip.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe
    + 2008-09-22 22:39 . 2008-04-13 18:53 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys
    + 2008-09-22 22:39 . 2008-04-13 18:31 36352 c:\windows\ServicePackFiles\i386\intelppm.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 96256 c:\windows\ServicePackFiles\i386\inseng.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe
    + 2008-09-22 22:39 . 2008-04-13 16:22 48128 c:\windows\ServicePackFiles\i386\inetres.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\inetppui.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 75264 c:\windows\ServicePackFiles\i386\inetpp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\imgutil.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 36921 c:\windows\ServicePackFiles\i386\imeshare.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 42112 c:\windows\ServicePackFiles\i386\imapi.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ils.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 93184 c:\windows\ServicePackFiles\i386\iexplore.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 62976 c:\windows\ServicePackFiles\i386\iesetup.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\iernonce.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 81920 c:\windows\ServicePackFiles\i386\ieencode.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\iedw.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\icwutil.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\icwdl.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 73728 c:\windows\ServicePackFiles\i386\icwdial.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\icwconn.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\iccvid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 11264 c:\windows\ServicePackFiles\i386\icaapi.dll
    + 2008-09-22 22:39 . 2008-04-13 19:18 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys
    + 2008-09-22 22:39 . 2008-04-13 18:41 18560 c:\windows\ServicePackFiles\i386\i2omp.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 41984 c:\windows\ServicePackFiles\i386\htui.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\httpapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 18432 c:\windows\ServicePackFiles\i386\hscupd.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\hostmib.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 72704 c:\windows\ServicePackFiles\i386\hlink.dll
    + 2008-09-22 22:39 . 2008-04-13 18:45 10368 c:\windows\ServicePackFiles\i386\hidusb.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\hidserv.dll
    + 2008-09-22 22:39 . 2008-04-13 18:45 24960 c:\windows\ServicePackFiles\i386\hidparse.sys
    + 2008-09-22 22:39 . 2008-04-13 18:45 19200 c:\windows\ServicePackFiles\i386\hidir.sys
    + 2008-09-22 22:39 . 2008-04-13 18:45 36864 c:\windows\ServicePackFiles\i386\hidclass.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 25600 c:\windows\ServicePackFiles\i386\hidbth.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\hid.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\hh.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\help.exe
    + 2008-09-22 22:39 . 2008-04-13 18:31 77696 c:\windows\ServicePackFiles\i386\halsp.dll
    + 2008-09-22 22:39 . 2008-04-13 18:31 81152 c:\windows\ServicePackFiles\i386\halacpi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\h323cc.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 28288 c:\windows\ServicePackFiles\i386\grserial.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 39424 c:\windows\ServicePackFiles\i386\grpconv.exe
    + 2008-09-22 22:39 . 2008-04-13 18:45 59136 c:\windows\ServicePackFiles\i386\gckernel.sys
    + 2008-09-22 22:39 . 2008-04-13 18:45 10624 c:\windows\ServicePackFiles\i386\gameenum.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 72192 c:\windows\ServicePackFiles\i386\fxscom.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 42496 c:\windows\ServicePackFiles\i386\ftp.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\fpencode.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\format.com
    + 2008-09-22 22:39 . 2004-08-03 21:31 34173 c:\windows\ServicePackFiles\i386\forehe.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\fontview.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 80896 c:\windows\ServicePackFiles\i386\fontsub.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 23040 c:\windows\ServicePackFiles\i386\fltmc.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 16896 c:\windows\ServicePackFiles\i386\fltlib.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll
    + 2008-09-22 22:39 . 2008-04-13 18:33 44544 c:\windows\ServicePackFiles\i386\fips.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 27136 c:\windows\ServicePackFiles\i386\findstr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\feclient.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 27392 c:\windows\ServicePackFiles\i386\fdc.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 80384 c:\windows\ServicePackFiles\i386\faultrep.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\extrac32.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 55808 c:\windows\ServicePackFiles\i386\extmgr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 92160 c:\windows\ServicePackFiles\i386\evntwin.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\eventlog.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 23040 c:\windows\ServicePackFiles\i386\ersvc.dll
    + 2008-09-22 22:39 . 2008-04-13 16:26 40960 c:\windows\ServicePackFiles\i386\ep9res.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 20480 c:\windows\ServicePackFiles\i386\encapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 59392 c:\windows\ServicePackFiles\i386\eapqec.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll
    + 2008-09-22 22:39 . 2008-04-13 18:38 71168 c:\windows\ServicePackFiles\i386\dxg.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 10752 c:\windows\ServicePackFiles\i386\dumprep.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dswave.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 51200 c:\windows\ServicePackFiles\i386\dssec.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 92672 c:\windows\ServicePackFiles\i386\dskquota.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 14336 c:\windows\ServicePackFiles\i386\drprov.dll
    + 2008-09-22 22:39 . 2008-04-13 18:45 60160 c:\windows\ServicePackFiles\i386\drmk.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 26112 c:\windows\ServicePackFiles\i386\dot3api.dll
    + 2008-09-22 22:39 . 2004-08-04 12:00 53840 c:\windows\ServicePackFiles\i386\dosx.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 48128 c:\windows\ServicePackFiles\i386\docprop2.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 52224 c:\windows\ServicePackFiles\i386\dmutil.dll
    + 2008-09-22 22:39 . 2008-04-13 18:45 52864 c:\windows\ServicePackFiles\i386\dmusic.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 23552 c:\windows\ServicePackFiles\i386\dmserver.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 82432 c:\windows\ServicePackFiles\i386\dmscript.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 15872 c:\windows\ServicePackFiles\i386\dmremote.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 35840 c:\windows\ServicePackFiles\i386\dmloader.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dmband.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\dispex.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 14208 c:\windows\ServicePackFiles\i386\diskdump.sys
    + 2008-09-22 22:39 . 2008-04-13 18:40 36352 c:\windows\ServicePackFiles\i386\disk.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 86528 c:\windows\ServicePackFiles\i386\directdb.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 68608 c:\windows\ServicePackFiles\i386\digest.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 87040 c:\windows\ServicePackFiles\i386\diantz.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 59904 c:\windows\ServicePackFiles\i386\devenum.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\defrag.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 40960 c:\windows\ServicePackFiles\i386\dcap32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 25088 c:\windows\ServicePackFiles\i386\davclnt.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 54272 c:\windows\ServicePackFiles\i386\dataclen.dll
    + 2008-09-22 22:39 . 2004-08-03 21:32 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 33792 c:\windows\ServicePackFiles\i386\custsat.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 53760 c:\windows\ServicePackFiles\i386\cryptext.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll
    + 2008-09-22 22:39 . 2008-04-13 18:31 36736 c:\windows\ServicePackFiles\i386\crusoe.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 12800 c:\windows\ServicePackFiles\i386\credssp.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 35328 c:\windows\ServicePackFiles\i386\corpol.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 27648 c:\windows\ServicePackFiles\i386\conime.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 97792 c:\windows\ServicePackFiles\i386\comrepl.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 10240 c:\windows\ServicePackFiles\i386\compbatt.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 28160 c:\windows\ServicePackFiles\i386\comaddin.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\colbact.dll
    + 2008-09-22 22:39 . 2008-04-13 16:44 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\cmutil.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 63488 c:\windows\ServicePackFiles\i386\cmstp.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 58368 c:\windows\ServicePackFiles\i386\clusapi.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe
    + 2008-09-22 22:39 . 2008-04-13 19:16 49536 c:\windows\ServicePackFiles\i386\classpnp.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 69120 c:\windows\ServicePackFiles\i386\ciodm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:09 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll
    + 2008-09-22 22:39 . 2008-04-13 18:40 62976 c:\windows\ServicePackFiles\i386\cdrom.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 66560 c:\windows\ServicePackFiles\i386\cdm.dll
    + 2008-09-22 22:39 . 2008-04-13 19:14 63744 c:\windows\ServicePackFiles\i386\cdfs.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\camocx.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 19968 c:\windows\ServicePackFiles\i386\cacls.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 84480 c:\windows\ServicePackFiles\i386\cabview.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 60416 c:\windows\ServicePackFiles\i386\cabinet.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 50688 c:\windows\ServicePackFiles\i386\btpanui.dll
    + 2008-09-22 22:39 . 2008-04-13 18:46 18944 c:\windows\ServicePackFiles\i386\bthusb.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\bthserv.dll
    + 2008-09-22 22:39 . 2008-04-13 18:46 36480 c:\windows\ServicePackFiles\i386\bthprint.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 17024 c:\windows\ServicePackFiles\i386\bthenum.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 20992 c:\windows\ServicePackFiles\i386\bthci.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 78336 c:\windows\ServicePackFiles\i386\browsewm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 77824 c:\windows\ServicePackFiles\i386\browser.dll
    + 2008-09-22 22:39 . 2008-04-13 17:03 63488 c:\windows\ServicePackFiles\i386\browselc.dll
    + 2008-09-22 22:39 . 2008-04-13 18:53 71552 c:\windows\ServicePackFiles\i386\bridge.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 71680 c:\windows\ServicePackFiles\i386\blastcln.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\bidispl.dll
    + 2008-09-22 22:39 . 2008-04-13 18:46 11776 c:\windows\ServicePackFiles\i386\bdasup.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 14208 c:\windows\ServicePackFiles\i386\battc.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 29184 c:\windows\ServicePackFiles\i386\batmeter.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 52736 c:\windows\ServicePackFiles\i386\basesrv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 84992 c:\windows\ServicePackFiles\i386\avifil32.dll
    + 2008-09-22 22:39 . 2008-04-13 18:46 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 38912 c:\windows\ServicePackFiles\i386\avc.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\autolfn.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 62464 c:\windows\ServicePackFiles\i386\authz.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\author.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\author.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 14336 c:\windows\ServicePackFiles\i386\auditusr.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll
    + 2008-09-22 22:39 . 2008-04-14 00:12 12288 c:\windows\ServicePackFiles\i386\attrib.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 30208 c:\windows\ServicePackFiles\i386\atmlib.dll
    + 2008-09-22 22:39 . 2008-04-13 18:51 55808 c:\windows\ServicePackFiles\i386\atmlane.sys
    + 2008-09-22 22:39 . 2008-04-13 18:51 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 11264 c:\windows\ServicePackFiles\i386\atmadm.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 58880 c:\windows\ServicePackFiles\i386\atl.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll
    + 2008-09-22 22:39 . 2004-08-03 21:29 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 31744 c:\windows\ServicePackFiles\i386\atinxbxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 73216 c:\windows\ServicePackFiles\i386\atintuxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 13824 c:\windows\ServicePackFiles\i386\atinttxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 28672 c:\windows\ServicePackFiles\i386\atinsnxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 52224 c:\windows\ServicePackFiles\i386\atinraxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 14336 c:\windows\ServicePackFiles\i386\atinpdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 13824 c:\windows\ServicePackFiles\i386\atinmdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 57856 c:\windows\ServicePackFiles\i386\atinbtxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 34735 c:\windows\ServicePackFiles\i386\ati1xsxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 29455 c:\windows\ServicePackFiles\i386\ati1xbxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 36463 c:\windows\ServicePackFiles\i386\ati1tuxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 21343 c:\windows\ServicePackFiles\i386\ati1ttxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 26367 c:\windows\ServicePackFiles\i386\ati1snxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 63663 c:\windows\ServicePackFiles\i386\ati1rvxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 30671 c:\windows\ServicePackFiles\i386\ati1raxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 12047 c:\windows\ServicePackFiles\i386\ati1pdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 11615 c:\windows\ServicePackFiles\i386\ati1mdxx.sys
    + 2008-09-22 22:39 . 2004-08-03 21:29 56623 c:\windows\ServicePackFiles\i386\ati1btxx.sys
    + 2008-09-22 22:39 . 2008-04-13 18:40 96512 c:\windows\ServicePackFiles\i386\atapi.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 25088 c:\windows\ServicePackFiles\i386\at.exe
    + 2008-09-22 22:39 . 2008-04-13 18:57 14336 c:\windows\ServicePackFiles\i386\asyncmac.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 65024 c:\windows\ServicePackFiles\i386\asycfilt.dll
    + 2008-09-22 22:39 . 2008-04-13 18:51 60800 c:\windows\ServicePackFiles\i386\arp1394.sys
    + 2008-09-22 22:39 . 2004-08-03 21:31 36224 c:\windows\ServicePackFiles\i386\an983.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 70656 c:\windows\ServicePackFiles\i386\amstream.dll
    + 2008-09-22 22:39 . 2008-04-13 18:31 37760 c:\windows\ServicePackFiles\i386\amdk7.sys
    + 2008-09-22 22:39 . 2008-04-13 18:31 37376 c:\windows\ServicePackFiles\i386\amdk6.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 43008 c:\windows\ServicePackFiles\i386\amdagp.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 17408 c:\windows\ServicePackFiles\i386\alrsvc.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 42752 c:\windows\ServicePackFiles\i386\alim1541.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 44544 c:\windows\ServicePackFiles\i386\alg.exe
    + 2008-09-22 22:39 . 2008-04-14 00:12 98304 c:\windows\ServicePackFiles\i386\ahui.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agtintl.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 20480 c:\windows\ServicePackFiles\i386\agt0c0a.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0816.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0804.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt041f.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt041d.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0419.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 20480 c:\windows\ServicePackFiles\i386\agt0416.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0415.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0414.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0413.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0412.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt0411.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 20992 c:\windows\ServicePackFiles\i386\agt0410.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19968 c:\windows\ServicePackFiles\i386\agt040e.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt040d.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 21504 c:\windows\ServicePackFiles\i386\agt040c.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 19456 c:\windows\ServicePackFiles\i386\agt040b.dll
    + 2008-09-22 22:39 . 2008-04-13 17:32 19968 c:\windows\ServicePackFiles\i386\agt0409.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 22016 c:\windows\ServicePackFiles\i386\agt0408.dll
    + 2008-09-22 22:39 . 2007-04-02 18:26 21504 c:\windows\ServicePackFiles\i386\agt0407.dll
    + 2008-09-22 22:39 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0406.dll
    + 2008-09-22 22:39 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0405.dll
    + 2008-09-22 22:39 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0404.dll
    + 2008-09-22 22:39 . 2007-04-02 18:25 19456 c:\windows\ServicePackFiles\i386\agt0401.dll
    + 2008-09-22 22:39 . 2008-04-13 18:36 44928 c:\windows\ServicePackFiles\i386\agpcpq.sys
    + 2008-09-22 22:39 . 2008-04-13 18:36 42368 c:\windows\ServicePackFiles\i386\agp440.sys
    + 2008-09-22 22:39 . 2008-04-14 00:11 44032 c:\windows\ServicePackFiles\i386\agentsr.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agentpsh.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 49152 c:\windows\ServicePackFiles\i386\agentmpx.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 57344 c:\windows\ServicePackFiles\i386\agentdpv.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 42496 c:\windows\ServicePackFiles\i386\agentdp2.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 24064 c:\windows\ServicePackFiles\i386\agentanm.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 99840 c:\windows\ServicePackFiles\i386\advpack.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 68096 c:\windows\ServicePackFiles\i386\adsmsext.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 61440 c:\windows\ServicePackFiles\i386\admparse.dll
    + 2008-09-22 22:39 . 2004-08-03 21:32 10880 c:\windows\ServicePackFiles\i386\admjoy.sys
    + 2008-09-22 22:39 . 2008-04-14 00:12 16439 c:\windows\ServicePackFiles\i386\admin.exe
    + 2008-09-22 22:39 . 2008-04-14 00:11 20540 c:\windows\ServicePackFiles\i386\admin.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 98304 c:\windows\ServicePackFiles\i386\actxprxy.dll
    + 2008-09-22 22:39 . 2008-04-14 00:11 39424 c:\windows\ServicePackFiles\i386\acadproc.dll
    + 2008-09-22 22:39 . 2004-08-03 21:32 84480 c:\windows\ServicePackFiles\i386\ac97via.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 48128 c:\windows\ServicePackFiles\i386\61883.sys
    + 2008-09-22 22:39 . 2008-04-13 18:40 12288 c:\windows\ServicePackFiles\i386\4mmdat.sys
    + 2008-09-22 22:39 . 2008-04-13 18:46 53376 c:\windows\ServicePackFiles\i386\1394bus.sys
    + 2005-01-03 03:39 . 2004-08-11 08:45 86016 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpshell.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 73728 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmplayer.exe
    + 2005-01-03 03:39 . 2004-08-11 08:45 28672 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpenc.exe
    + 2005-01-03 03:39 . 2004-08-11 08:45 77824 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpband.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 28672 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\custsat.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 73728 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe
    + 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmpband.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 28672 c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\custsat.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 20480 c:\windows\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\wmpcd.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}$BACKUP$\System\wmpcd.dll
    + 2005-01-03 03:38 . 2004-08-11 08:45 95232 c:\windows\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmstor.dll
    + 2004-08-04 12:00 . 2004-08-04 12:00 87040 c:\windows\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmstor.dll
    + 2005-01-03 03:38 . 2004-08-11 08:45 96768 c:\windows\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\logagent.exe
    + 2005-01-03 03:39 . 2004-08-11 08:45 18944 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdusb.sys
    + 2005-01-03 03:39 . 2004-08-11 08:45 10752 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdtrace.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 66560 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpus.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 61952 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdconns.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 38912 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd_ci.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 38912 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfmgr.exe
    + 2005-01-03 03:39 . 2004-08-11 08:45 15872 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfapi.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 47104 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\uwdf.exe
    + 2006-12-05 19:20 . 2004-08-11 08:45 18944 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wpdusb.sys
    + 2006-12-05 19:20 . 2004-08-11 08:45 10752 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wpdtrace.dll
    + 2006-12-05 19:20 . 2004-08-11 08:45 66560 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wpdmtpus.dll
    + 2006-12-05 19:20 . 2004-08-11 08:45 61952 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wpdconns.dll
    + 2006-12-05 19:20 . 2004-08-11 08:45 38912 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wpd_ci.dll
    + 2006-12-05 19:20 . 2004-08-11 08:45 38912 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wdfmgr.exe
    + 2006-12-05 19:20 . 2004-08-11 08:45 15872 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\wdfapi.dll
    + 2006-12-05 19:20 . 2004-08-11 08:45 47104 c:\windows\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}$BACKUP$\System\uwdf.exe
    + 2005-01-03 03:39 . 2004-08-11 08:45 20480 c:\windows\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\wmpui.dll
    + 2005-01-03 03:39 . 2004-08-11 08:45 20480 c:\windows\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\wmpcore.dll


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.