CentrumXP Forum Tematyka portalu CentrumXP.pl Bezpieczeństwo Prosze o sprawdzenie loga!!!! ;|

Prosze o sprawdzenie loga!!!! ;|

Witam! od 2 tygodni walcze z z chyba trojanem nie mam pojecia jak go usunac, formatowalem juz dysk 2 razy, 2 razy od nowa system i za kazdym razem juz jest infekcja na starcie instalowalem kupe antywirow i wogole m.in Kasperskiego 7.0.0.125, spyware doctor, spybot, ad aware, anti trojan shield trojan remover i kupe innych i zaden bez powodzenia w kasperskim co chwile mam komunikat wykryto riskware inwader, oraz ze usunieto adware not a virus:AdWare.Win32.Doza.a i wykryto: kon trojanski Trojan.Win32.Inject.jt Plik: C:\DOCUME~1\PAN_KA~1\USTAWI~1\Temp\itfivpee.dll odnosnie riskware invader to mam 100 komunikatow na minute ale te sa mniej wazne chyba ;/ jakis tam inny anti trojan wykryl ze mam trojany ale nie moze ich usunac bo wersja nie jest zarejestrowana zrobilem loga z hijack this i z silent runner pomocy? Tylko prosze tlumaczyc jak lamerowi bo na rejestrach i innych syfach to nie zbyt sie znam :P "Silent Runners.vbs", revision 52, http://www.silentrunners.org/ Operating System: Windows XP SP2 Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS] HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++} "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "nwiz" = "nwiz.exe /install" ["NVIDIA Corporation"] "NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS] "SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."] "SDTray" = ""C:\Program Files\Spyware Doctor\SDTrayApp.exe"" ["PC Tools"] "SpeedTouch USB Diagnostics" = ""C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon" ["THOMSON Telecom Belgium"] "AVP" = ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"" ["Kaspersky Lab"] HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Rozszerzenie CPL kadrowania wyświetlania" -> {HKLM...CLSID} = "Rozszerzenie CPL kadrowania wyświetlania" \InProcServer32\(Default) = "deskpan.dll" [file not found] "{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] "{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {HKLM...CLSID} = "DesktopContext Class" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper" -> {HKLM...CLSID} = "NVIDIA CPL Extension" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"] "{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {HKLM...CLSID} = "Desktop Explorer" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {HKLM...CLSID} = "nView Desktop Context Menu" \InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"] "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] "{85E0B171-04FA-11D1-B7DA-00A0C90348D6}" = "Statystyki dla ochrony WWW" -> {HKLM...CLSID} = "Statystyki dla ochrony WWW" \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll" ["Kaspersky Lab"] HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify<> klogon\DLLName = "C:\WINDOWS\system32\klogon.dll" ["Kaspersky Lab"] HKLM\Software\Classes\*\shellex\ContextMenuHandlersKaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\ShellEx.dll" ["Kaspersky Lab"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Directory\shellex\ContextMenuHandlersWinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] HKLM\Software\Classes\Folder\shellex\ContextMenuHandlersKaspersky Anti-Virus\(Default) = "{dd230880-495a-11d1-b064-008048ec2fc5}" -> {HKLM...CLSID} = (no title provided) \InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\ShellEx.dll" ["Kaspersky Lab"] WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {HKLM...CLSID} = "WinRAR" \InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data] Group Policies {policy setting}: -------------------------------- Note: detected settings may not have any effect. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System "shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001 {Shutdown: Allow system to be shut down without having to log on} "undockwithoutlogon" = (REG_DWORD) hex:0x00000001 {Devices: Allow undock without having to log on} Active Desktop and Wallpaper: ----------------------------- Active Desktop may be disabled at this entry: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState Displayed if Active Desktop enabled and wallpaper not set by Group Policy: HKCU\Software\Microsoft\Internet Explorer\Desktop\General"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Displayed if Active Desktop disabled and wallpaper not set by Group Policy: HKCU\Control Panel\Desktop"Wallpaper" = "C:\WINDOWS\web\wallpaper\Idylla.bmp" Winsock2 Service Provider DLLs: ------------------------------- Namespace Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++} 000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] 000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS] 000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS] Transport Service Providers HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++} 0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range: %SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15 %SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05 Toolbars, Explorer Bars, Extensions: ------------------------------------ Explorer Bars HKLM\Software\Microsoft\Internet Explorer\Explorer Bars HKLM\Software\Classes\CLSID\{85E0B171-04FA-11D1-B7DA-00A0C90348D6}\(Default) = "Statystyki dla ochrony WWW" Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar] InProcServer32\(Default) = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll" ["Kaspersky Lab"] Extensions (Tools menu items, main toolbar menu buttons) HKLM\Software\Microsoft\Internet Explorer\Extensions{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}"ButtonText" = "Statystyki dla ochrony WWW" {FB5F1910-F110-11D2-BB9E-00C04F795683}"ButtonText" = "Messenger" "MenuText" = "Windows Messenger" "Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS] Running Services (Display Name, Service Name, Path {Service DLL}): ------------------------------------------------------------------ Kaspersky Anti-Virus 7.0, AVP, ""C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r" ["Kaspersky Lab"] NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"] PC Tools Auxiliary Service, sdAuxService, "C:\Program Files\Spyware Doctor\svcntaux.exe" ["PC Tools"] PC Tools Security Service, sdCoreService, "C:\Program Files\Spyware Doctor\swdsvc.exe" ["PC Tools"] ---------- (launch time: 2007-11-09 09:49:41) <>: Suspicious data at a malware launch point. + This report excludes default entries except where indicated. + To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter. + To search all directories of local fixed drives for DESKTOP.INI DLL launch points, use the -supp parameter or answer "No" at the first message box and "Yes" at the second message box. ---------- (total run time: 27 seconds, including 5 seconds for message boxes) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 09:48, on 2007-11-09 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Spyware Doctor\svcntaux.exe C:\Program Files\Spyware Doctor\swdsvc.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Spyware Doctor\SDTrayApp.exe C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wpabaln.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe" O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{565A749D-19BD-4159-A3F2-71B2A8CBAB39}: NameServer = 194.204.152.34 217.98.63.164 O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe -- End of file - 3454 bytes

Odpowiedzi: 5

no i jak? ma ktos jakies pomysly? Żółty? ;]
Pan_Kakenholz
Dodano
10.11.2007 14:19:37
ok! po zainstalowaniu autopatchera z sierpnia 2007 nie ma problemu z win32 host generic , jak narazie noadware 5.0 wykryl mi Backdoor.Bitrose Trojan.PWS.Transpy Gemius niby je usunal ale pewnie przy najblizszym skanie pokaze to samo albo juz inne nazwy log z combofix ComboFix 07-11-08.1 - Pan_Kakenholz 2007-11-10 9:32:58.4 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.1670 [GMT 1:00] Running from: C:\Documents and Settings\Pan_Kakenholz\Pulpit\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2007-10-10 to 2007-11-10 ))))))))))))))))))))))))))))))) . 2007-11-10 09:20 d-------- C:\Program Files\Malicious Software Removal Tool 2007-11-10 09:19 d-------- C:\Program Files\MSXML 6.0 2007-11-10 09:19 d-------- C:\Program Files\MSXML 4.0 2007-11-10 09:16 d-------- C:\Program Files\Java 2007-11-10 09:16 d-------- C:\Program Files\Common Files\Java 2007-11-10 09:08 d-------- C:\Program Files\MSBuild 2007-11-10 09:04 d-------- C:\WINDOWS\system32\XPSViewer 2007-11-10 09:03 d-------- C:\Program Files\Reference Assemblies 2007-11-10 09:03 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2007-11-10 08:57 d-------- C:\WINDOWS\system32\Lang 2007-11-10 08:57 d-------- C:\Program Files\Realtek AC97 2007-11-10 08:55 d-------- C:\Program Files\HighMAT CD Writing Wizard 2007-11-10 08:53 d-------- C:\WINDOWS\system32\URTTemp 2007-11-10 08:52 1,146,184 --a------ C:\WINDOWS\system32\FM20.DLL 2007-11-10 08:52 40,960 --a------ C:\WINDOWS\system32\SSUBTMR6.DLL 2007-11-10 08:52 32,584 --a------ C:\WINDOWS\system32\FM20ENU.DLL 2007-11-10 08:52 10,752 --a------ C:\WINDOWS\system32\aamd532.dll 2007-11-10 08:50 d-------- C:\Program Files\AutoPatcher 2007-11-09 12:03 d-------- C:\Program Files\SkanerOnline 2007-11-09 11:40 d-------- C:\Program Files\NoAdware5.0 2007-11-09 11:02 d-------- C:\Documents and Settings\Pan_Kakenholz\Dane aplikacji\DivX 2007-11-09 11:01 d-------- C:\Program Files\ffdshow 2007-11-09 11:01 d-------- C:\Program Files\DivX 2007-11-09 11:01 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2007-11-09 11:01 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-11-07 23:06 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-07 22:42 d-------- C:\Program Files\Trend Micro 2007-11-07 22:22 d-------- C:\Program Files\Kaspersky Lab 2007-11-07 22:22 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2007-11-07 22:22 1,304,608 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-11-07 22:22 82,061 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-11-07 22:22 81,549 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-11-07 22:22 23,840 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-11-07 22:21 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2007-11-07 22:19 d-------- C:\Program Files\Winamp 2007-11-07 22:00 d-------- C:\Program Files\Thomson 2007-11-07 22:00 70,688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-11-07 22:00 53,600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-11-07 22:00 5,606 --a------ C:\WINDOWS\system32\stci.dll 2007-11-07 22:00 5,280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-11-07 22:00 3,968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-11-07 21:59 d-------- C:\Program Files\Spyware Doctor 2007-11-07 21:59 d-------- C:\Documents and Settings\Pan_Kakenholz\Dane aplikacji\PC Tools 2007-11-07 21:59 d-------- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-07 21:59 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-11-07 21:59 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-11-07 21:59 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-11-07 21:59 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-11-07 21:58 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-11-07 21:58 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2007-11-07 21:58 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2007-11-07 21:56 d--h----- C:\Program Files\InstallShield Installation Information 2007-11-07 21:55 466,944 --a------ C:\WINDOWS\system32\CapabilityTable.exe 2007-11-07 21:55 208,896 --a------ C:\WINDOWS\system32\nvusmb.exe 2007-11-07 21:55 208,896 --a------ C:\WINDOWS\system32\nvunrm.exe 2007-11-07 21:55 208,896 --------- C:\WINDOWS\system32\nvuide.exe 2007-11-07 21:55 101,888 --a------ C:\WINDOWS\system32\drivers\nvtcp.sys 2007-11-07 21:54 d-------- C:\WINDOWS\nview 2007-11-07 21:54 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-11-07 21:53 d-------- C:\Program Files\Common Files\InstallShield 2007-11-07 21:53 d-------- C:\NVIDIA 2007-11-07 21:53 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-11-06 23:13 26,496 --a------ C:\WINDOWS\system32\dllcache\usbstor.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-10 08:29 3,284 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx 2007-11-10 08:29 17,228 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2007-11-06 21:10 --------- d-----w C:\Program Files\microsoft frontpage 2007-11-06 21:09 --------- d-----w C:\Program Files\Usługi online 2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll 2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll 2007-09-17 00:07 8,491,008 ----a-w C:\WINDOWS\system32\nvcpl.dll 2007-09-17 00:07 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe 2007-09-17 00:07 6,853,088 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-09-17 00:07 6,853,088 ----a-w C:\WINDOWS\system32\dllcache\nv4_mini.sys 2007-09-17 00:07 6,746,112 ----a-w C:\WINDOWS\system32\nvoglnt.dll 2007-09-17 00:07 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll 2007-09-17 00:07 5,783,040 ----a-w C:\WINDOWS\system32\nv4_disp.dll 2007-09-17 00:07 5,783,040 ----a-w C:\WINDOWS\system32\dllcache\nv4_disp.dll 2007-09-17 00:07 5,509,120 ----a-w C:\WINDOWS\system32\nvdispsr.dll 2007-09-17 00:07 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll 2007-09-17 00:07 458,752 ----a-w C:\WINDOWS\system32\nvmccssr.dll 2007-09-17 00:07 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll 2007-09-17 00:07 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe 2007-09-17 00:07 425,984 ----a-w C:\WINDOWS\system32\keystone.exe 2007-09-17 00:07 364,544 ----a-w C:\WINDOWS\system32\nvapi.dll 2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcodins.dll 2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcod.dll 2007-09-17 00:07 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll 2007-09-17 00:07 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvrshe.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvrsar.dll 2007-09-17 00:07 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll 2007-09-17 00:07 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll 2007-09-17 00:07 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll 2007-09-17 00:07 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll 2007-09-17 00:07 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll 2007-09-17 00:07 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll 2007-09-17 00:07 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll 2007-09-17 00:07 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll 2007-09-17 00:07 3,629,056 ----a-w C:\WINDOWS\system32\nvvitvsr.dll 2007-09-17 00:07 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll 2007-09-17 00:07 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll 2007-09-17 00:07 3,166,208 ----a-w C:\WINDOWS\system32\nvgamesr.dll 2007-09-17 00:07 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll 2007-09-17 00:07 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll 2007-09-17 00:07 290,816 ----a-w C:\WINDOWS\system32\nvwrsth.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrsfr.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrses.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrsel.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvrsit.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvrsde.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrspt.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrsnl.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrsesm.dll 2007-09-17 00:07 270,336 ----a-w C:\WINDOWS\system32\nvrsru.dll 2007-09-17 00:07 266,240 ----a-w C:\WINDOWS\system32\nvrsptb.dll 2007-09-17 00:07 266,240 ----a-w C:\WINDOWS\system32\nvrsja.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrstr.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrssl.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrssk.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrsko.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrshu.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsth.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrssv.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrspl.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsno.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsda.dll 2007-09-17 00:07 249,856 ----a-w C:\WINDOWS\system32\nvrsfi.dll 2007-09-17 00:07 249,856 ----a-w C:\WINDOWS\system32\nvrscs.dll 2007-09-17 00:07 245,760 ----a-w C:\WINDOWS\system32\nvrseng.dll 2007-09-17 00:07 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll 2007-09-17 00:07 225,280 ----a-w C:\WINDOWS\system32\nvrszhc.dll 2007-09-17 00:07 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll 2007-09-17 00:07 2,854,912 ----a-w C:\WINDOWS\system32\nvmoblsr.dll 2007-09-17 00:07 2,441,216 ----a-w C:\WINDOWS\system32\nvwssr.dll 2007-09-17 00:07 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll 2007-09-17 00:07 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll 2007-09-17 00:07 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll 2007-09-17 00:07 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll 2007-09-17 00:07 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll 2007-09-17 00:07 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe 2007-09-17 00:07 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe 2007-09-17 00:07 126,976 ----a-w C:\WINDOWS\system32\nvrszht.dll 2007-09-17 00:07 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll 2007-09-17 00:07 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe 2007-09-17 00:07 1,478,656 ----a-w C:\WINDOWS\system32\nview.dll 2007-09-17 00:07 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe 2007-09-17 00:07 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll 2007-09-17 00:07 1,073,152 ----a-w C:\WINDOWS\system32\nvcpluir.dll 2007-09-17 00:07 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll . ((((((((((((((((((((((((((((( snapshot@2007-11-09_16.17.57.37 ))))))))))))))))))))))))))))))))))))))))) . + 2004-08-04 11:00:00 701,440 ------w C:\WINDOWS\$SQLUninstallMSXML2SP6-KB887606-x86-PLK$\msxml2.dll + 2004-08-03 21:38:26 199,168 ------w C:\WINDOWS\$SQLUninstallMSXML2SP6-KB887606-x86-PLK$\spuninst\spuninst.exe + 2004-10-22 10:02:56 814,080 ------w C:\WINDOWS\$SQLUninstallMSXML2SP6-KB887606-x86-PLK$\spuninst\SQLSTPCustomDLL.dll + 2004-08-03 21:35:22 344,576 ------w C:\WINDOWS\$SQLUninstallMSXML2SP6-KB887606-x86-PLK$\spuninst\updspapi.dll - 2004-08-04 11:00:00 1,852,416 ----a-w C:\WINDOWS\AppPatch\AcGenral.dll + 2004-11-10 23:01:24 1,852,928 ----a-w C:\WINDOWS\AppPatch\AcGenral.dll + 2007-11-10 07:53:38 7,680 ----a-w C:\WINDOWS\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll + 2007-11-10 07:53:36 12,288 ----a-w C:\WINDOWS\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll + 2007-11-10 07:53:38 33,792 ----a-w C:\WINDOWS\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2007-11-10 07:53:38 8,192 ----a-w C:\WINDOWS\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2007-11-10 07:53:38 32,768 ----a-w C:\WINDOWS\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll + 2007-11-10 07:53:38 4,608 ----a-w C:\WINDOWS\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\IIEHost.dll + 2007-11-10 07:53:38 26,112 ----a-w C:\WINDOWS\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2007-11-10 07:54:58 45,056 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_pl_b03f5f7f11d50a3a\Microsoft.Jscript.resources.dll + 2007-11-10 07:53:36 720,896 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2007-11-10 07:54:58 36,864 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.resources\7.0.5000.0_pl_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll + 2007-11-10 07:53:36 28,672 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2007-11-10 07:53:36 299,008 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2007-11-10 07:53:36 6,144 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll + 2007-11-10 07:53:36 11,264 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2007-11-10 07:53:36 32,768 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2007-11-10 07:53:36 6,656 ----a-w C:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2007-11-10 07:54:58 724,992 ----a-w C:\WINDOWS\assembly\GAC\mscorcfg.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\mscorcfg.resources.dll + 2007-11-10 07:53:38 1,564,672 ----a-w C:\WINDOWS\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll + 2007-11-10 07:54:58 237,568 ----a-w C:\WINDOWS\assembly\GAC\mscorlib.resources\1.0.5000.0_pl_b77a5c561934e089\Mscorlib.resources.dll + 2007-11-10 07:54:58 10,240 ----a-w C:\WINDOWS\assembly\GAC\Regcode.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\RegCode.resources.dll + 2007-11-10 07:53:38 32,768 ----a-w C:\WINDOWS\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll + 2007-11-10 07:54:58 15,872 ----a-w C:\WINDOWS\assembly\GAC\System.Configuration.Install.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Configuration.Install.resources.dll + 2007-11-10 07:53:38 77,824 ----a-w C:\WINDOWS\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2007-11-10 07:53:38 303,104 ----a-w C:\WINDOWS\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll + 2007-11-10 07:54:58 122,880 ----a-w C:\WINDOWS\assembly\GAC\System.Data.resources\1.0.5000.0_pl_b77a5c561934e089\System.Data.resources.dll + 2007-11-10 07:53:38 1,294,336 ----a-w C:\WINDOWS\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll + 2007-11-10 07:54:58 139,264 ----a-w C:\WINDOWS\assembly\GAC\System.Design.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Design.resources.dll + 2007-11-10 07:53:38 1,703,936 ----a-w C:\WINDOWS\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll + 2007-11-10 07:54:58 11,264 ----a-w C:\WINDOWS\assembly\GAC\System.DirectoryServices.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.DirectoryServices.resources.dll + 2007-11-10 07:53:38 90,112 ----a-w C:\WINDOWS\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2007-11-10 07:54:58 6,144 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing.Design.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Drawing.design.resources.dll + 2007-11-10 07:53:38 65,536 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2007-11-10 07:54:58 24,576 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Drawing.resources.dll + 2007-11-10 07:53:38 466,944 ----a-w C:\WINDOWS\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll + 2007-11-10 07:54:58 32,768 ----a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.EnterpriseServices.resources.dll + 2007-11-10 07:53:38 241,664 ----a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2007-11-10 07:53:38 66,560 ----a-w C:\WINDOWS\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll + 2007-11-10 07:54:58 24,576 ----a-w C:\WINDOWS\assembly\GAC\system.management.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Management.resources.dll + 2007-11-10 07:53:38 372,736 ----a-w C:\WINDOWS\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll + 2007-11-10 07:54:58 61,440 ----a-w C:\WINDOWS\assembly\GAC\System.Messaging.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Messaging.resources.dll + 2007-11-10 07:53:38 241,664 ----a-w C:\WINDOWS\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll + 2007-11-10 07:54:58 81,920 ----a-w C:\WINDOWS\assembly\GAC\System.resources\1.0.5000.0_pl_b77a5c561934e089\System.resources.dll + 2007-11-10 07:54:58 28,672 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Remoting.resources\1.0.5000.0_pl_b77a5c561934e089\System.runtime.remoting.resources.dll + 2007-11-10 07:53:38 323,584 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2007-11-10 07:54:58 12,288 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll + 2007-11-10 07:53:38 131,072 ----a-w C:\WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2007-11-10 07:54:58 7,680 ----a-w C:\WINDOWS\assembly\GAC\System.Security.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Security.resources.dll + 2007-11-10 07:53:38 77,824 ----a-w C:\WINDOWS\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2007-11-10 07:54:58 40,960 ----a-w C:\WINDOWS\assembly\GAC\System.ServiceProcess.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll + 2007-11-10 07:53:38 126,976 ----a-w C:\WINDOWS\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2007-11-10 07:54:58 77,824 ----a-w C:\WINDOWS\assembly\GAC\System.Web.Mobile.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll + 2007-11-10 07:53:38 819,200 ----a-w C:\WINDOWS\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2007-11-10 07:53:38 57,344 ----a-w C:\WINDOWS\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2007-11-10 07:54:58 126,976 ----a-w C:\WINDOWS\assembly\GAC\System.Web.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Web.resources.dll + 2007-11-10 07:54:58 61,440 ----a-w C:\WINDOWS\assembly\GAC\System.Web.Services.resources\1.0.5000.0_pl_b03f5f7f11d50a3a\System.Web.Services.resources.dll + 2007-11-10 07:53:38 573,440 ----a-w C:\WINDOWS\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2007-11-10 07:53:38 1,257,472 ----a-w C:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2007-11-10 07:54:58 180,224 ----a-w C:\WINDOWS\assembly\GAC\System.Windows.Forms.resources\1.0.5000.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll + 2007-11-10 07:53:38 2,052,096 ----a-w C:\WINDOWS\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll + 2007-11-10 07:54:58 114,688 ----a-w C:\WINDOWS\assembly\GAC\System.XML.resources\1.0.5000.0_pl_b77a5c561934e089\System.xml.resources.dll + 2007-11-10 07:53:38 1,339,392 ----a-w C:\WINDOWS\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.Xml.dll + 2007-11-10 07:53:38 1,224,704 ----a-w C:\WINDOWS\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2007-11-10 08:18:00 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2007-11-10 08:18:06 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2007-11-10 08:03:42 151,552 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2007-11-10 08:18:08 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2007-11-10 08:04:06 3,915,776 ----a-w C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2007-11-10 08:18:08 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2007-11-10 08:18:04 2,902,016 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2007-11-10 08:17:54 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2007-11-10 08:17:54 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2007-11-10 08:04:08 344,064 ----a-w C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2007-11-10 08:18:12 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2007-11-10 08:18:02 5,156,864 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2007-11-10 08:17:58 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2007-11-10 08:17:54 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2007-11-10 08:17:56 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2007-11-10 08:18:06 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2007-11-10 08:18:06 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2007-11-10 08:18:06 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2007-11-10 08:17:58 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2007-11-10 08:17:58 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2007-11-10 08:17:58 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2007-11-10 08:17:58 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2007-11-10 08:17:58 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2007-11-10 08:03:42 352,256 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2007-11-10 08:18:14 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2007-11-10 08:18:14 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2007-11-10 08:17:52 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2007-11-10 08:18:12 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2007-11-10 08:18:14 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2007-11-10 08:17:54 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2007-11-10 08:17:52 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2007-11-10 08:17:52 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2007-11-10 08:04:06 593,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll + 2007-11-10 08:04:06 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll + 2007-11-10 08:04:08 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2007-11-10 08:04:08 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2007-11-10 08:04:08 376,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2007-11-10 08:04:08 151,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2007-11-10 08:04:08 4,972,544 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2007-11-10 08:04:08 897,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2007-11-10 08:04:08 528,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2007-11-10 08:03:42 94,208 ----a-w C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2007-11-10 08:18:10 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2007-11-10 08:18:00 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2007-11-10 08:18:10 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2007-11-10 08:18:08 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2007-11-10 08:17:56 888,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2007-11-10 08:18:06 5,001,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2007-11-10 08:18:00 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2007-11-10 08:18:00 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2007-11-10 08:18:00 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2007-11-10 08:18:12 577,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2007-11-10 08:03:42 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2007-11-10 08:03:42 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2007-11-10 08:03:42 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2007-11-10 08:18:10 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2007-11-10 08:18:12 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2007-11-10 08:18:10 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2007-11-10 08:18:10 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2007-11-10 08:03:42 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2007-11-10 08:18:00 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2007-11-10 08:03:44 159,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll + 2007-11-10 08:03:44 16,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2007-11-10 08:03:44 5,623,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2007-11-10 08:18:02 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2007-11-10 08:04:08 688,128 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll + 2007-11-10 08:18:12 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2007-11-10 08:18:02 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2007-11-10 08:18:02 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2007-11-10 08:18:04 5,152,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2007-11-10 08:08:02 1,108,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll + 2007-11-10 08:08:02 1,641,272 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll + 2007-11-10 08:08:02 588,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll + 2007-11-10 08:18:04 2,027,520 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2007-11-10 08:18:10 2,940,928 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2007-11-10 08:04:08 163,840 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2007-11-10 08:04:08 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2007-11-10 08:04:08 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2007-11-10 08:04:08 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2007-11-10 08:04:06 1,167,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2007-11-10 08:04:08 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2007-11-10 08:19:18 11,304,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\6b3a30345af57913d3a225430865a720\mscorlib.ni.dll + 2007-11-10 08:20:22 6,676,480 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\[u]0[/u]94d2e2b4511438fcb30c66fa67eed36\System.Data.ni.dll + 2007-11-10 08:20:40 10,702,848 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\8df0471b02a187b394ffad5e1624aca3\System.Design.ni.dll + 2007-11-10 08:20:44 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\bda4f053ca44415aad1bed56a4bb5874\System.Drawing.Design.ni.dll + 2007-11-10 08:20:44 1,601,536 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\214c9ce24f7ebcd2c2e110da474be3e5\System.Drawing.ni.dll + 2007-11-10 08:21:00 13,107,200 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f45f721fab5a66c55707b29d62750aa9\System.Windows.Forms.ni.dll + 2007-11-10 08:21:08 5,623,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\39326a8d90735fee0f4dfead43c9bc28\System.Xml.ni.dll + 2007-11-10 08:19:52 8,130,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\458281b0983e70fd9b3bab65e0a48058\System.ni.dll + 2007-11-10 07:54:36 61,440 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_a2dc5e50\CustomMarshalers.dll + 2007-11-10 07:54:38 3,379,200 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_c82a8a96\mscorlib.dll + 2007-11-10 07:54:42 1,466,368 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_8a8f6d58\System.Design.dll + 2007-11-10 07:54:44 90,112 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_fa35ce57\System.Drawing.Design.dll + 2007-11-10 07:54:46 835,584 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_8ed61f18\System.Drawing.dll + 2007-11-10 07:54:48 3,014,656 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_41fc7aeb\System.Windows.Forms.dll + 2007-11-10 07:54:52 2,088,960 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_9a4bd606\System.Xml.dll + 2007-11-10 07:54:44 1,953,792 ----a-w C:\WINDOWS\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_0c9b2cd6\System.dll + 2006-02-15 00:22:26 142,464 ------w C:\WINDOWS\Driver Cache\i386\aec.sys + 2006-10-30 09:50:16 134,400 ------w C:\WINDOWS\Driver Cache\i386\halmacpi.dll + 2006-10-31 10:26:12 36,864 ------w C:\WINDOWS\Driver Cache\i386\hidclass.sys + 2006-03-17 00:33:10 262,784 ------w C:\WINDOWS\Driver Cache\i386\http.sys + 2006-06-14 08:47:46 172,416 ------w C:\WINDOWS\Driver Cache\i386\kmixer.sys + 2006-06-20 08:50:28 453,248 ------w C:\WINDOWS\Driver Cache\i386\mrxsmb.sys + 2006-08-18 09:36:46 14,592 ------w C:\WINDOWS\Driver Cache\i386\ndisuio.sys + 2007-02-28 16:04:46 2,137,600 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe + 2007-02-28 16:04:56 2,058,880 ------w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe + 2007-02-28 16:04:48 2,017,280 ------w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe + 2007-02-28 16:04:58 2,181,632 ------w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe + 2005-08-13 00:11:00 61,312 ------w C:\WINDOWS\Driver Cache\i386\ohci1394.sys + 2005-03-25 21:49:56 363,520 ------w C:\WINDOWS\Driver Cache\i386\psisdecd.dll + 2006-06-14 08:47:46 6,400 ------w C:\WINDOWS\Driver Cache\i386\splitter.sys + 2006-10-23 11:14:42 30,208 ------w C:\WINDOWS\Driver Cache\i386\usbehci.sys + 2006-10-23 11:14:42 59,264 ------w C:\WINDOWS\Driver Cache\i386\usbhub.sys + 2006-10-23 11:14:42 17,152 ------w C:\WINDOWS\Driver Cache\i386\usbohci.sys + 2006-10-23 11:14:42 143,488 ------w C:\WINDOWS\Driver Cache\i386\usbport.sys + 2006-10-23 11:14:42 20,608 ------w C:\WINDOWS\Driver Cache\i386\usbuhci.sys + 2006-06-14 09:00:46 82,944 ------w C:\WINDOWS\Driver Cache\i386\wdmaud.sys + 2006-08-18 12:39:20 52,736 ------w C:\WINDOWS\Driver Cache\i386\wzcsapi.dll + 2006-08-18 12:39:22 476,160 ------w C:\WINDOWS\Driver Cache\i386\wzcsvc.dll + 2007-03-13 09:57:12 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE - 2004-08-04 11:00:00 1,033,728 ----a-w C:\WINDOWS\explorer.exe + 2007-06-13 13:23:50 1,034,752 ----a-w C:\WINDOWS\explorer.exe - 2004-08-04 11:00:00 10,752 ----a-w C:\WINDOWS\hh.exe + 2005-05-26 23:22:02 10,752 ----a-w C:\WINDOWS\hh.exe + 2007-11-10 08:19:56 32,768 ----a-r C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe + 2006-11-07 08:06:48 16,832 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscinst.vbs + 2006-11-07 08:06:48 12,451 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscuinst.vbs + 2005-09-23 06:28:52 72,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll + 2002-05-14 07:42:38 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll + 2002-07-19 09:52:48 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll + 2002-06-27 10:45:32 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll + 2002-05-14 07:42:38 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll + 2005-09-23 06:28:52 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll + 2005-09-23 06:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2005-09-23 06:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2005-09-23 06:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll + 2005-09-23 06:28:52 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2003-02-21 00:59:44 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\alinkui.dll + 2003-02-21 01:55:06 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\cscompui.dll + 2003-02-21 01:02:16 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\vbc7ui.dll + 2003-02-21 03:04:20 155,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1033\Vsavb7rtUI.dll + 2003-04-07 17:09:32 20,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1045\alinkui.dll + 2003-04-07 17:09:30 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1045\cscompui.dll + 2003-04-07 17:09:18 155,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1045\vbc7ui.dll + 2003-04-07 17:08:02 180,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\1045\Vsavb7rtUI.dll + 2003-02-21 05:24:08 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Accessibility.dll + 2003-02-21 03:00:36 98,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\alink.dll + 2003-02-20 17:19:42 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2004-07-14 23:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2003-02-20 17:19:22 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_rc.dll + 2004-07-14 23:49:18 20,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe + 2004-07-14 23:49:26 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe + 2004-07-14 23:49:22 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2002-07-29 09:11:50 219,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\c_g18030.dll + 2003-02-21 05:24:10 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CasPol.exe + 2003-02-21 05:24:32 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe + 2004-07-14 22:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2004-07-15 09:23:28 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\csc.exe + 2004-07-15 09:23:44 626,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cscomp.dll + 2003-02-21 05:24:34 12,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cscompmgd.dll + 2003-02-21 05:24:36 33,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CustomMarshalers.dll + 2003-02-21 02:12:24 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\cvtres.exe + 2003-02-21 08:21:40 524,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll + 2003-02-20 17:16:32 798,720 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\EventLogMessages.dll + 2004-07-14 22:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll + 2003-10-08 12:30:14 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\gacutil.exe + 2003-02-21 05:24:38 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExec.exe + 2004-07-15 12:31:00 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll + 2004-07-15 12:31:04 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IEHost.dll + 2003-02-21 05:24:40 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\IIEHost.dll + 2004-07-14 22:35:30 196,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ilasm.exe + 2003-02-21 05:24:42 15,872 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe + 2003-02-20 17:22:24 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtilLib.dll + 2003-02-21 05:24:44 26,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ISymWrapper.dll + 2003-02-21 05:24:52 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\jsc.exe + 2004-07-15 12:28:58 720,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll + 2004-07-15 12:28:56 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll + 2003-02-21 05:24:54 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.Vsa.dll + 2003-02-21 05:25:02 6,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualC.Dll + 2003-02-21 05:24:58 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.dll + 2003-02-21 05:25:06 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2003-02-21 05:25:02 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Microsoft_VsaVb.dll + 2004-07-15 12:28:50 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPol.exe + 2004-07-15 12:28:50 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe + 2003-02-21 05:25:06 1,564,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorcfg.dll + 2004-07-14 22:32:44 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll + 2004-07-14 22:32:46 233,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll + 2003-02-20 17:09:14 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2004-07-14 22:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2004-07-14 22:33:04 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2004-07-15 12:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2003-02-20 16:43:52 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscormmc.dll + 2003-02-20 17:06:34 65,536 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorpe.dll + 2004-07-14 22:33:22 143,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll + 2004-07-14 22:33:24 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll + 2003-02-20 17:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2004-07-14 22:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2003-02-20 17:09:24 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscortim.dll + 2004-07-14 22:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2003-02-21 02:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll + 2003-02-20 17:18:34 20,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mtxoci8.dll + 2003-02-20 16:43:36 22,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\[u]0[/u]409\mscorsecr.dll + 2003-04-07 17:08:44 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MUI\[u]0[/u]415\mscorsecr.dll + 2004-08-10 14:20:00 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe + 2003-02-20 17:09:46 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\ngen.exe + 2004-07-14 22:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll + 2003-04-07 17:08:06 45,056 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\aspnet_rc.dll + 2003-04-07 17:21:40 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\caspol.resources.dll + 2003-04-07 17:21:42 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\ConfigWizards.resources.dll + 2003-04-07 17:21:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\InstallUtil.resources.dll + 2003-04-07 17:21:46 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\JSC.resources.dll + 2003-04-07 17:30:56 45,056 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\Microsoft.JScript.resources.dll + 2003-04-07 17:29:26 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\Microsoft.VisualBasic.resources.dll + 2003-04-07 17:22:22 724,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\mscorcfg.resources.dll + 2003-04-07 17:29:42 237,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\mscorlib.resources.dll + 2003-04-07 17:08:08 167,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\mscorrc.dll + 2003-04-07 17:22:24 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\Regasm.Resources.dll + 2003-04-07 17:19:04 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\RegCode.resources.dll + 2003-04-07 17:08:28 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\ShFusRes.dll + 2003-04-07 17:31:08 15,872 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Configuration.Install.resources.dll + 2003-04-07 17:29:48 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Data.resources.dll + 2003-04-07 17:22:32 139,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Design.resources.dll + 2003-04-07 17:31:14 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.DirectoryServices.resources.dll + 2003-04-07 17:29:54 6,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Drawing.Design.resources.dll + 2003-04-07 17:30:04 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Drawing.resources.dll + 2003-04-07 17:28:34 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.EnterpriseServices.resources.dll + 2003-04-07 17:22:36 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Management.resources.dll + 2003-04-07 17:28:38 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Messaging.resources.dll + 2003-04-07 17:22:38 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\system.resources.dll + 2003-04-07 17:21:00 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Runtime.Remoting.resources.dll + 2003-04-07 17:22:42 12,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Runtime.Serialization.Formatters.Soap.resources.dll + 2003-04-07 17:30:14 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Security.resources.dll + 2003-04-07 17:22:46 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.ServiceProcess.resources.dll + 2003-04-07 17:31:42 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Web.Mobile.resources.dll + 2003-04-07 17:30:20 126,976 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Web.resources.dll + 2003-04-07 17:29:20 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Web.Services.resources.dll + 2003-04-07 17:19:54 180,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.Windows.Forms.resources.dll + 2003-04-07 17:31:48 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\pl\System.xml.resources.dll + 2003-02-21 05:25:24 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe + 2004-07-15 12:28:48 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegCode.dll + 2003-02-21 05:25:30 12,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe + 2004-07-14 22:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW400\_fusion.dll + 2003-02-20 17:09:34 253,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\shfusion.dll + 2003-02-20 17:09:34 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\shfusres.dll + 2004-07-14 22:35:04 319,488 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SOS.dll + 2003-02-21 05:26:38 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll + 2004-07-15 12:32:00 1,294,336 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.dll + 2004-07-15 12:31:14 303,104 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll + 2004-07-15 12:29:02 1,703,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Design.dll + 2004-07-15 12:28:54 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll + 2004-07-15 12:31:16 1,224,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.dll + 2003-02-21 05:26:48 65,536 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll + 2004-07-15 12:28:58 466,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll + 2004-07-15 12:28:56 241,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll + 2004-07-14 22:35:12 66,560 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll + 2004-07-15 12:31:58 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Management.dll + 2004-07-15 12:31:12 241,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll + 2004-07-15 12:28:58 323,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll + 2004-07-15 12:31:54 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll + 2004-07-15 12:28:52 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Security.dll + 2004-07-15 12:28:54 126,976 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll + 2004-10-08 04:20:12 1,257,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2004-07-15 12:28:58 819,200 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll + 2004-07-15 12:28:52 57,344 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll + 2004-07-15 12:31:16 573,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll + 2004-07-15 12:32:02 2,052,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll + 2004-07-15 12:29:00 1,339,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.XML.dll + 2004-06-22 11:51:38 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe + 2004-07-15 09:23:20 737,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\vbc.exe + 2004-07-15 06:15:14 1,032,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll + 2004-07-15 00:11:56 31,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll + 2005-09-23 06:28:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2005-09-23 06:28:42 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2005-09-23 06:28:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2005-09-23 06:29:04 183,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2005-09-23 06:28:28 208,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2005-09-23 06:28:56 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2005-09-23 06:28:58 138,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2005-09-23 06:28:36 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2007-04-13 02:21:18 58,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2005-09-23 06:28:32 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2007-04-13 02:20:52 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2007-04-13 02:20:52 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2007-04-13 02:20:52 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2007-04-13 02:20:50 75,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2005-09-23 06:28:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2007-04-13 02:20:52 32,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe + 2005-09-23 06:28:32 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe + 2007-04-13 02:20:52 33,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2007-04-13 02:20:52 32,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2007-04-13 02:20:52 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll + 2005-09-23 06:28:56 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe + 2007-04-13 02:21:16 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2005-09-23 06:28:42 76,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2005-09-23 06:28:42 1,144,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll + 2005-09-23 06:28:42 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2005-09-23 06:28:58 17,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2005-09-23 06:28:56 68,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2005-09-23 06:28:44 31,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe + 2005-09-23 06:28:38 52,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2007-04-13 02:20:58 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2005-09-23 06:29:12 547,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2005-09-23 06:28:56 788,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2005-09-23 06:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2007-04-13 02:21:16 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe + 2005-09-23 06:28:56 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2005-09-23 06:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2005-09-23 06:28:56 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2007-04-13 02:21:16 228,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2007-04-13 02:21:16 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2005-09-23 06:28:56 55,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll + 2005-09-23 06:28:56 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2005-09-23 06:28:48 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe + 2007-11-10 08:00:32 609,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll + 2007-11-10 08:00:32 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll + 2007-11-10 08:00:32 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll + 2007-11-10 08:00:32 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll + 2007-11-10 08:00:32 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll + 2007-11-10 08:00:32 81,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll + 2007-11-10 08:00:32 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll + 2007-11-10 08:00:32 83,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll + 2007-11-10 08:00:32 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll + 2007-11-10 08:00:32 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll + 2007-11-10 08:00:32 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll + 2007-11-10 08:00:32 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll + 2007-11-10 08:00:32 82,432 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll + 2007-11-10 08:00:32 82,432 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll + 2007-11-10 08:00:32 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll + 2007-11-10 08:00:32 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll + 2007-11-10 08:00:32 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll + 2007-11-10 08:00:32 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll + 2007-11-10 08:00:34 245,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll + 2007-04-13 02:21:10 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll + 2005-09-23 06:28:48 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2007-04-13 02:21:10 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2005-09-23 06:28:48 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2007-04-13 02:21:08 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2005-09-23 06:29:10 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll + 2005-09-23 06:29:10 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2005-09-23 06:29:08 667,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll + 2005-09-23 06:28:30 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2005-09-23 06:29:10 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll + 2005-09-23 06:28:30 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2005-09-23 06:28:30 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2005-09-23 06:28:30 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2007-04-13 02:20:52 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2005-09-23 06:28:48 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2007-04-13 02:21:18 802,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2005-09-23 06:28:56 73,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2005-09-23 06:28:56 288,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2007-04-13 02:21:16 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2007-04-13 02:21:16 326,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2005-09-23 06:28:56 81,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2007-04-13 02:21:16 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2007-04-13 02:21:16 102,912 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2005-09-23 06:29:00 330,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2005-09-23 06:28:56 67,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2005-09-23 06:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2007-04-13 02:21:18 227,328 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2007-04-13 02:21:18 68,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2005-09-23 06:28:56 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2007-04-13 02:21:12 5,634,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2005-09-23 06:29:00 22,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]409\mscorsecr.dll + 2007-04-13 02:21:16 99,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2007-04-13 02:21:18 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2005-09-23 06:28:56 78,336 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll + 2007-04-13 02:21:12 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2005-09-23 06:28:56 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2005-09-23 06:28:56 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2005-09-23 06:29:02 59,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe + 2005-09-23 06:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2005-09-23 06:28:56 107,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2005-09-23 06:29:00 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2007-04-13 02:21:18 382,464 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2007-04-13 02:21:18 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2007-04-13 02:21:18 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll + 2005-09-23 06:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2007-04-13 02:21:16 2,902,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll + 2007-04-13 02:21:18 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2007-04-13 02:21:18 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2007-04-13 02:20:58 888,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2007-04-13 02:21:16 5,001,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2005-09-23 06:28:56 397,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2007-04-13 02:21:18 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll + 2007-04-13 02:21:16 2,940,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll + 2005-09-23 06:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2007-04-13 02:21:16 577,536 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2007-04-13 02:21:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2007-04-13 02:21:18 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2007-04-13 02:21:18 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2007-04-13 02:21:16 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll + 2005-09-23 06:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2007-04-13 02:21:16 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2005-09-23 06:28:56 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2005-09-23 06:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2005-09-23 06:28:56 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2007-04-13 02:21:18 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2007-04-13 02:21:16 5,156,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2005-09-23 06:28:56 835,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2005-09-23 06:28:56 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll + 2005-09-23 06:28:56 823,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2007-04-13 02:21:16 5,152,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2007-04-13 02:21:16 2,027,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll + 2005-09-23 06:28:56 71,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2007-04-13 02:21:28 1,166,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe + 2007-04-13 02:20:50 1,330,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll + 2007-04-13 02:20:52 406,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2005-09-23 06:28:56 28,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2006-10-30 03:06:24 74,012 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\baseline.dat + 2006-10-30 02:25:56 99,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\DeleteTemp.exe + 2006-10-29 22:15:06 220,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\dlmgr.dll + 2006-10-29 22:17:56 1,054,720 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\gencomp.dll + 2006-10-29 22:14:26 163,328 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\HtmlLite.dll + 2006-10-30 02:25:54 194,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\RebootStub.exe + 2006-10-30 02:25:56 167,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\runmsi.exe + 2006-10-30 02:25:56 365,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe + 2006-10-30 02:17:12 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1025.dll + 2006-10-30 02:17:30 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1028.dll + 2006-10-30 02:17:36 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1029.dll + 2006-10-30 02:17:44 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1030.dll + 2006-10-30 02:17:50 89,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1031.dll + 2006-10-30 02:17:56 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1032.dll + 2006-10-30 02:18:10 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1035.dll + 2006-10-30 02:18:16 91,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1036.dll + 2006-10-30 02:18:22 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1037.dll + 2006-10-30 02:18:30 89,600 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1038.dll + 2006-10-30 02:18:36 88,064 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1040.dll + 2006-10-30 02:18:42 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1041.dll + 2006-10-30 02:18:48 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1042.dll + 2006-10-30 02:18:56 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1043.dll + 2006-10-30 02:19:02 83,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1044.dll + 2006-10-30 02:19:08 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1045.dll + 2006-10-30 02:19:14 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1046.dll + 2006-10-30 02:19:28 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1049.dll + 2006-10-30 02:19:34 83,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1053.dll + 2006-10-30 02:19:42 82,432 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.1055.dll + 2006-10-30 02:17:24 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.2052.dll + 2006-10-30 02:19:22 90,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.2070.dll + 2006-10-30 02:18:02 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.3082.dll + 2006-10-29 22:15:20 80,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setupres.dll + 2006-10-29 22:15:22 1,621,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\SITSetup.dll + 2006-10-29 22:16:52 1,139,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vs_setup.dll + 2006-10-29 22:18:26 590,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vs70uimgr.dll + 2006-10-29 22:20:20 541,184 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vsbasereqs.dll + 2006-10-29 22:18:12 816,128 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\vsscenario.dll + 2006-10-30 02:17:14 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1025.dll + 2006-10-30 02:17:30 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1028.dll + 2006-10-30 02:17:38 99,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1029.dll + 2006-10-30 02:17:44 99,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1030.dll + 2006-10-30 02:17:50 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1031.dll + 2006-10-30 02:17:58 104,448 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1032.dll + 2006-10-30 02:18:10 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1035.dll + 2006-10-30 02:18:16 103,424 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1036.dll + 2006-10-30 02:18:24 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1037.dll + 2006-10-30 02:18:30 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1038.dll + 2006-10-30 02:18:36 101,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1040.dll + 2006-10-30 02:18:42 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1041.dll + 2006-10-30 02:18:50 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1042.dll + 2006-10-30 02:18:56 99,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1043.dll + 2006-10-30 02:19:02 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1044.dll + 2006-10-30 02:19:08 99,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1045.dll + 2006-10-30 02:19:16 99,328 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1046.dll + 2006-10-30 02:19:28 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1049.dll + 2006-10-30 02:19:36 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1053.dll + 2006-10-30 02:19:42 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.1055.dll + 2006-10-30 02:17:24 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.2052.dll + 2006-10-30 02:19:22 101,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.2070.dll + 2006-10-30 02:18:04 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.3082.dll + 2006-10-29 22:18:36 98,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapRes.dll + 2006-10-29 22:19:30 1,103,872 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\WapUI.dll + 2006-10-30 02:34:02 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe + 2006-10-30 02:33:58 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe + 2007-11-10 08:03:38 626,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\install.exe + 2007-11-10 08:03:38 80,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\install.res.1033.dll + 2006-10-30 02:34:00 352,256 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll + 2006-10-30 02:34:00 151,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll + 2006-10-30 02:34:02 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe + 2006-10-30 02:34:02 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll + 2006-10-30 02:34:00 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll + 2006-10-30 02:34:02 122,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe + 2006-10-30 02:34:02 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll + 2006-10-30 02:34:02 5,623,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll + 2006-10-30 02:34:00 159,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll + 2006-10-30 02:34:00 16,384 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2006-10-30 02:34:02 143,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe + 2006-07-25 20:32:00 14,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe + 2006-10-20 15:08:52 797,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll + 2006-10-20 15:09:02 4,874,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll + 2006-10-20 13:03:40 2,628,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll + 2006-10-20 20:29:46 72,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll + 2006-10-20 20:21:24 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll + 2006-10-20 20:21:24 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe + 2006-10-20 20:29:52 106,272 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2006-10-20 20:21:26 897,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll + 2006-10-20 20:21:26 14,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe - 2004-08-04 11:00:00 41,984 ----a-w C:\WINDOWS\msagent\agentdp2.dll + 2006-10-12 13:56:14 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll - 2004-08-04 11:00:00 58,880 ----a-w C:\WINDOWS\msagent\agentdpv.dll + 2007-03-09 14:00:46 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll - 2004-08-04 11:00:00 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe + 2006-10-12 11:54:08 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe + 2006-06-02 19:34:06 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll + 2006-10-10 12:44:50 557,568 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe - 2004-08-04 12:00:00 159,744 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe + 2005-09-28 18:13:00 171,520 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\kbdnepr.dll + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\kbdpash.dll - 2004-08-04 11:00:00 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll + 2006-08-16 11:59:44 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll + 2006-12-21 13:16:24 116,736 ------w C:\WINDOWS\system32\aaclient.dll - 2004-08-04 11:00:00 56,832 ----a-w C:\WINDOWS\system32\authz.dll + 2005-03-02 18:18:38 56,832 ----a-w C:\WINDOWS\system32\authz.dll + 2005-10-28 23:25:12 133,120 ------w C:\WINDOWS\system32\axaltocm.dll + 2005-10-28 15:40:16 96,792 ------w C:\WINDOWS\system32\basecsp.dll + 2005-10-28 23:25:32 26,112 ------w C:\WINDOWS\system32\bcsprsrc.dll - 2004-08-04 11:00:00 1,017,344 ----a-w C:\WINDOWS\system32\browseui.dll + 2007-06-15 08:14:14 1,022,976 ----a-w C:\WINDOWS\system32\browseui.dll - 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\catsrv.dll + 2005-07-26 04:42:32 225,792 ----a-w C:\WINDOWS\system32\catsrv.dll - 2004-08-04 12:00:00 628,224 ----a-w C:\WINDOWS\system32\catsrvut.dll + 2005-07-26 04:42:34 625,152 ----a-w C:\WINDOWS\system32\catsrvut.dll - 2004-08-04 11:00:00 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll + 2007-06-15 08:14:14 151,552 ----a-w C:\WINDOWS\system32\cdfview.dll - 2004-08-04 11:00:00 66,560 ----a-w C:\WINDOWS\system32\cdm.dll + 2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll - 2004-08-04 11:00:00 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll + 2005-09-10 01:55:34 2,067,968 ----a-w C:\WINDOWS\system32\cdosys.dll - 2004-08-04 11:00:00 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll + 2006-06-22 05:18:14 69,120 ----a-w C:\WINDOWS\system32\ciodm.dll - 2004-08-04 12:00:00 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll + 2005-07-26 04:42:34 110,080 ----a-w C:\WINDOWS\system32\clbcatex.dll - 2004-08-04 12:00:00 501,248 ----a-w C:\WINDOWS\system32\clbcatq.dll + 2005-07-26 04:42:34 498,688 ----a-w C:\WINDOWS\system32\clbcatq.dll - 2004-08-04 12:00:00 62,464 ----a-w C:\WINDOWS\system32\colbact.dll + 2005-07-26 04:42:34 60,416 ----a-w C:\WINDOWS\system32\colbact.dll - 2004-08-04 12:00:00 195,584 ----a-w C:\WINDOWS\system32\Com\comadmin.dll + 2005-07-26 04:42:34 195,072 ----a-w C:\WINDOWS\system32\Com\comadmin.dll - 2004-08-04 11:00:00 611,328 ----a-w C:\WINDOWS\system32\comctl32.dll + 2006-08-25 15:51:16 617,472 ----a-w C:\WINDOWS\system32\comctl32.dll - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\comrepl.dll + 2005-07-26 04:42:34 97,792 ----a-w C:\WINDOWS\system32\comrepl.dll - 2004-08-04 12:00:00 1,251,840 ----a-w C:\WINDOWS\system32\comsvcs.dll + 2005-07-26 04:42:34 1,267,200 ----a-w C:\WINDOWS\system32\comsvcs.dll - 2004-08-04 12:00:00 540,160 ----a-w C:\WINDOWS\system32\comuid.dll + 2005-07-26 04:42:34 540,160 ----a-w C:\WINDOWS\system32\comuid.dll - 2004-08-04 11:00:00 98,304 ----a-w C:\WINDOWS\system32\cscript.exe + 2007-07-31 19:45:06 114,688 ----a-w C:\WINDOWS\system32\cscript.exe - 2004-08-04 11:00:00 1,055,232 ----a-w C:\WINDOWS\system32\danim.dll + 2007-06-15 08:14:14 1,055,744 ----a-w C:\WINDOWS\system32\danim.dll + 2005-09-23 06:28:38 83,456 ----a-w C:\WINDOWS\system32\dfshim.dll - 2004-08-04 11:00:00 110,592 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll + 2006-05-19 13:26:54 111,104 ----a-w C:\WINDOWS\system32\dhcpcsvc.dll - 2004-08-04 11:00:00 45,083 ----a-w C:\WINDOWS\system32\dispex.dll + 2007-07-31 19:45:24 32,768 ----a-w C:\WINDOWS\system32\dispex.dll - 2004-08-04 11:00:00 100,352 ----a-w C:\WINDOWS\system32\dllcache\6to4svc.dll + 2006-08-16 11:59:44 100,352 ----a-w C:\WINDOWS\system32\dllcache\6to4svc.dll - 2004-08-04 12:00:00 1,852,416 ----a-w C:\WINDOWS\system32\dllcache\acgenral.dll + 2004-11-10 23:01:24 1,852,928 ----a-w C:\WINDOWS\system32\dllcache\acgenral.dll - 2004-08-03 21:39:38 142,464 ----a-w C:\WINDOWS\system32\dllcache\aec.sys + 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\dllcache\aec.sys - 2004-08-04 11:00:00 41,984 ----a-w C:\WINDOWS\system32\dllcache\agentdp2.dll + 2006-10-12 13:56:14 42,496 ----a-w C:\WINDOWS\system32\dllcache\agentdp2.dll - 2004-08-04 11:00:00 58,880 ----a-w C:\WINDOWS\system32\dllcache\agentdpv.dll + 2007-03-09 14:00:46 57,344 ----a-w C:\WINDOWS\system32\dllcache\agentdpv.dll - 2004-08-04 11:00:00 256,512 ----a-w C:\WINDOWS\system32\dllcache\agentsvr.exe + 2006-10-12 11:54:08 256,512 ----a-w C:\WINDOWS\system32\dllcache\agentsvr.exe - 2004-08-04 12:00:00 56,832 ----a-w C:\WINDOWS\system32\dllcache\authz.dll + 2005-03-02 18:18:38 56,832 ----a-w C:\WINDOWS\system32\dllcache\authz.dll - 2004-08-04 11:00:00 1,017,344 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll + 2007-06-15 08:14:14 1,022,976 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll - 2004-08-04 12:00:00 229,888 ----a-w C:\WINDOWS\system32\dllcache\catsrv.dll + 2005-07-26 04:42:32 225,792 ----a-w C:\WINDOWS\system32\dllcache\catsrv.dll - 2004-08-04 12:00:00 628,224 ----a-w C:\WINDOWS\system32\dllcache\catsrvut.dll + 2005-07-26 04:42:34 625,152 ----a-w C:\WINDOWS\system32\dllcache\catsrvut.dll - 2004-08-04 11:00:00 151,040 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll + 2007-06-15 08:14:14 151,552 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll - 2004-08-04 11:00:00 66,560 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll + 2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll - 2004-08-04 11:00:00 2,067,968 ----a-w C:\WINDOWS\system32\dllcache\cdosys.dll + 2005-09-10 01:55:34 2,067,968 ----a-w C:\WINDOWS\system32\dllcache\cdosys.dll - 2004-08-04 11:00:00 69,120 ----a-w C:\WINDOWS\system32\dllcache\ciodm.dll + 2006-06-22 05:18:14 69,120 ----a-w C:\WINDOWS\system32\dllcache\ciodm.dll - 2004-08-04 12:00:00 110,080 ----a-w C:\WINDOWS\system32\dllcache\clbcatex.dll + 2005-07-26 04:42:34 110,080 ----a-w C:\WINDOWS\system32\dllcache\clbcatex.dll - 2004-08-04 12:00:00 501,248 ----a-w C:\WINDOWS\system32\dllcache\clbcatq.dll + 2005-07-26 04:42:34 498,688 ----a-w C:\WINDOWS\system32\dllcache\clbcatq.dll - 2004-08-04 12:00:00 62,464 ----a-w C:\WINDOWS\system32\dllcache\colbact.dll + 2005-07-26 04:42:34 60,416 ----a-w C:\WINDOWS\system32\dllcache\colbact.dll - 2004-08-04 12:00:00 195,584 ----a-w C:\WINDOWS\system32\dllcache\comadmin.dll + 2005-07-26 04:42:34 195,072 ----a-w C:\WINDOWS\system32\dllcache\comadmin.dll - 2004-08-04 12:00:00 611,328 ----a-w C:\WINDOWS\system32\dllcache\comctl32.dll + 2006-08-25 15:51:16 617,472 ----a-w C:\WINDOWS\system32\dllcache\comctl32.dll - 2004-08-04 12:00:00 82,432 ----a-w C:\WINDOWS\system32\dllcache\comrepl.dll + 2005-07-26 04:42:34 97,792 ----a-w C:\WINDOWS\system32\dllcache\comrepl.dll - 2004-08-04 12:00:00 1,251,840 ----a-w C:\WINDOWS\system32\dllcache\comsvcs.dll + 2005-07-26 04:42:34 1,267,200 ----a-w C:\WINDOWS\system32\dllcache\comsvcs.dll - 2004-08-04 12:00:00 540,160 ----a-w C:\WINDOWS\system32\dllcache\comuid.dll + 2005-07-26 04:42:34 540,160 ----a-w C:\WINDOWS\system32\dllcache\comuid.dll - 2004-08-04 11:00:00 98,304 ----a-w C:\WINDOWS\system32\dllcache\cscript.exe + 2007-07-31 19:45:06 114,688 ----a-w C:\WINDOWS\system32\dllcache\cscript.exe - 2004-08-04 12:00:00 28,672 ----a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2006-06-02 19:34:06 33,792 ----a-w C:\WINDOWS\system32\dllcache\custsat.dll - 2004-08-04 11:00:00 1,055,232 ----a-w C:\WINDOWS\system32\dllcache\danim.dll + 2007-06-15 08:14:14 1,055,744 ----a-w C:\WINDOWS\system32\dllcache\danim.dll - 2004-08-04 12:00:00 110,592 ----a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll + 2006-05-19 13:26:54 111,104 ----a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll - 2004-08-04 12:00:00 81,408 ----a-w C:\WINDOWS\system32\dllcache\directdb.dll + 2007-05-16 15:18:58 86,528 ----a-w C:\WINDOWS\system32\dllcache\directdb.dll - 2004-08-04 11:00:00 45,083 ----a-w C:\WINDOWS\system32\dllcache\dispex.dll + 2007-07-31 19:45:24 32,768 ----a-w C:\WINDOWS\system32\dllcache\dispex.dll - 2004-08-04 12:00:00 148,480 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll + 2006-06-26 17:45:40 148,480 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll - 2004-08-04 11:00:00 499,229 ----a-w C:\WINDOWS\system32\dllcache\dxmasf.dll + 2006-08-24 12:18:20 499,766 ----a-w C:\WINDOWS\system32\dllcache\dxmasf.dll - 2004-08-04 11:00:00 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll + 2007-06-15 08:14:14 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll - 2004-08-04 11:00:00 201,728 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll + 2007-06-15 08:14:14 205,824 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll - 2004-08-04 11:00:00 243,200 ----a-w C:\WINDOWS\system32\dllcache\es.dll + 2005-07-26 04:42:34 243,200 ----a-w C:\WINDOWS\system32\dllcache\es.dll - 2004-08-04 12:00:00 1,092,608 ----a-w C:\WINDOWS\system32\dllcache\esent.dll + 2005-10-20 22:30:54 1,092,608 ----a-w C:\WINDOWS\system32\dllcache\esent.dll - 2004-08-04 11:00:00 1,033,728 ----a-w C:\WINDOWS\system32\dllcache\explorer.exe + 2007-06-13 13:23:50 1,034,752 ----a-w C:\WINDOWS\system32\dllcache\explorer.exe - 2004-08-04 11:00:00 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2007-06-15 08:14:14 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2006-10-14 15:43:18 27,648 ------w C:\WINDOWS\system32\dllcache\FilterPipelinePrintProc.dll - 2004-08-04 12:00:00 16,896 ----a-w C:\WINDOWS\system32\dllcache\fltlib.dll + 2006-08-21 12:28:22 16,896 ----a-w C:\WINDOWS\system32\dllcache\fltlib.dll - 2004-08-04 12:00:00 22,528 ----a-w C:\WINDOWS\system32\dllcache\fltmc.exe + 2006-08-21 09:14:58 23,040 ----a-w C:\WINDOWS\system32\dllcache\fltmc.exe - 2004-08-04 12:00:00 124,800 ----a-w C:\WINDOWS\system32\dllcache\fltmgr.sys + 2006-08-21 09:14:58 128,896 ----a-w C:\WINDOWS\system32\dllcache\fltmgr.sys - 2004-08-04 11:00:00 79,360 ----a-w C:\WINDOWS\system32\dllcache\fontsub.dll + 2005-10-17 21:21:40 80,896 ----a-w C:\WINDOWS\system32\dllcache\fontsub.dll - 2004-08-04 12:00:00 278,016 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll + 2007-06-19 13:32:56 282,112 ----a-w C:\WINDOWS\system32\dllcache\gdi32.dll - 2004-08-04 11:00:00 10,752 ----a-w C:\WINDOWS\system32\dllcache\hh.exe + 2005-05-26 23:22:02 10,752 ----a-w C:\WINDOWS\system32\dllcache\hh.exe - 2004-08-04 11:00:00 38,912 ----a-w C:\WINDOWS\system32\dllcache\hhsetup.dll + 2005-05-27 02:08:16 41,472 ----a-w C:\WINDOWS\system32\dllcache\hhsetup.dll + 2006-10-31 10:26:12 36,864 ------w C:\WINDOWS\system32\dllcache\hidclass.sys - 2004-08-04 11:00:00 77,850 ----a-w C:\WINDOWS\system32\dllcache\hlink.dll + 2006-07-21 08:29:02 72,704 ----a-w C:\WINDOWS\system32\dllcache\hlink.dll - 2004-08-04 11:00:00 253,952 ----a-w C:\WINDOWS\system32\dllcache\icm32.dll + 2005-06-29 01:52:58 254,976 ----a-w C:\WINDOWS\system32\dllcache\icm32.dll - 2004-08-04 12:00:00 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe + 2007-06-14 10:32:36 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe - 2004-08-04 11:00:00 249,344 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll + 2007-06-15 08:14:14 251,904 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll - 2004-08-04 12:00:00 678,400 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll + 2007-05-16 15:18:58 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll - 2004-08-04 11:00:00 96,768 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll + 2007-06-15 08:14:14 96,768 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll - 2004-08-04 12:00:00 95,744 ----a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll + 2006-05-19 13:26:54 95,744 ----a-w C:\WINDOWS\system32\dllcache\iphlpapi.dll - 2004-08-04 11:00:00 134,912 ----a-w C:\WINDOWS\system32\dllcache\ipnat.sys + 2005-01-31 21:28:02 134,912 ----a-w C:\WINDOWS\system32\dllcache\ipnat.sys - 2004-08-04 11:00:00 183,296 ----a-w C:\WINDOWS\system32\dllcache\ipsecsvc.dll + 2005-09-15 04:07:16 184,320 ----a-w C:\WINDOWS\system32\dllcache\ipsecsvc.dll - 2004-08-04 11:00:00 143,872 ----a-w C:\WINDOWS\system32\dllcache\itircl.dll + 2005-05-27 02:08:16 155,136 ----a-w C:\WINDOWS\system32\dllcache\itircl.dll - 2004-08-04 11:00:00 134,144 ----a-w C:\WINDOWS\system32\dllcache\itss.dll + 2005-05-27 02:08:16 137,216 ----a-w C:\WINDOWS\system32\dllcache\itss.dll + 2006-06-01 18:49:32 163,840 ------w C:\WINDOWS\system32\dllcache\jgdw400.dll + 2006-06-01 18:49:32 27,648 ------w C:\WINDOWS\system32\dllcache\jgpl400.dll - 2004-08-04 11:00:00 450,560 ----a-w C:\WINDOWS\system32\dllcache\jscript.dll + 2007-07-31 19:45:24 491,520 ----a-w C:\WINDOWS\system32\dllcache\jscript.dll - 2004-08-04 11:00:00 15,872 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll + 2007-06-15 08:14:14 16,384 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll - 2004-08-04 12:00:00 294,400 ----a-w C:\WINDOWS\system32\dllcache\kerberos.dll + 2005-06-15 17:51:00 295,936 ----a-w C:\WINDOWS\system32\dllcache\kerberos.dll - 2004-08-04 12:00:00 1,012,224 ----a-w C:\WINDOWS\system32\dllcache\kernel32.dll + 2007-04-16 16:11:16 1,014,784 ----a-w C:\WINDOWS\system32\dllcache\kernel32.dll - 2004-08-03 22:07:50 171,776 ----a-w C:\WINDOWS\system32\dllcache\kmixer.sys + 2006-06-14 08:47:46 172,416 ----a-w C:\WINDOWS\system32\dllcache\kmixer.sys - 2004-08-04 11:00:00 18,944 ----a-w C:\WINDOWS\system32\dllcache\linkinfo.dll + 2005-09-01 02:28:38 19,968 ----a-w C:\WINDOWS\system32\dllcache\linkinfo.dll - 2004-08-04 12:00:00 723,968 ----a-w C:\WINDOWS\system32\dllcache\lsasrv.dll + 2006-08-17 12:43:18 728,576 ----a-w C:\WINDOWS\system32\dllcache\lsasrv.dll - 2004-08-04 11:00:00 73,216 ----a-w C:\WINDOWS\system32\dllcache\magnify.exe + 2006-10-04 13:34:54 73,216 ----a-w C:\WINDOWS\system32\dllcache\magnify.exe - 2004-08-04 11:00:00 39,936 ----a-w C:\WINDOWS\system32\dllcache\mf3216.dll + 2007-03-08 15:38:48 40,960 ----a-w C:\WINDOWS\system32\dllcache\mf3216.dll - 2004-08-04 11:00:00 924,432 ----a-w C:\WINDOWS\system32\dllcache\mfc40u.dll + 2006-11-01 19:19:04 927,504 ----a-w C:\WINDOWS\system32\dllcache\mfc40u.dll - 2004-08-04 12:00:00 1,024,000 ----a-w C:\WINDOWS\system32\dllcache\mfc42u.dll + 2006-12-14 13:45:54 981,760 ----a-w C:\WINDOWS\system32\dllcache\mfc42u.dll - 2004-08-04 12:00:00 7,680 ----a-w C:\WINDOWS\system32\dllcache\migregdb.exe + 2005-07-25 23:46:58 7,680 ----a-w C:\WINDOWS\system32\dllcache\migregdb.exe - 2004-08-04 11:00:00 586,240 ----a-w C:\WINDOWS\system32\dllcache\mlang.dll + 2004-10-15 20:54:44 586,240 ----a-w C:\WINDOWS\system32\dllcache\mlang.dll + 2006-06-20 08:50:28 453,248 ------w C:\WINDOWS\system32\dllcache\mrxsmb.sys - 2004-08-04 12:00:00 143,360 ----a-w C:\WINDOWS\system32\dllcache\msadco.dll + 2006-03-23 05:51:28 143,360 ----a-w C:\WINDOWS\system32\dllcache\msadco.dll - 2004-08-04 12:00:00 536,576 ----a-w C:\WINDOWS\system32\dllcache\msado15.dll + 2006-12-26 13:09:22 536,576 ----a-w C:\WINDOWS\system32\dllcache\msado15.dll - 2004-08-04 12:00:00 180,224 ----a-w C:\WINDOWS\system32\dllcache\msadomd.dll + 2006-12-26 13:09:22 180,224 ----a-w C:\WINDOWS\system32\dllcache\msadomd.dll - 2004-08-04 12:00:00 200,704 ----a-w C:\WINDOWS\system32\dllcache\msadox.dll + 2006-12-26 13:09:22 200,704 ----a-w C:\WINDOWS\system32\dllcache\msadox.dll - 2004-08-04 12:00:00 73,728 ----a-w C:\WINDOWS\system32\dllcache\mscms.dll + 2005-06-29 01:52:58 74,240 ----a-w C:\WINDOWS\system32\dllcache\mscms.dll - 2004-08-04 12:00:00 159,744 ----a-w C:\WINDOWS\system32\dllcache\msconfig.exe + 2005-09-28 18:13:00 171,520 ----a-w C:\WINDOWS\system32\dllcache\msconfig.exe - 2004-08-04 12:00:00 294,400 ----a-w C:\WINDOWS\system32\dllcache\msctf.dll + 2004-12-06 22:55:12 297,472 ----a-w C:\WINDOWS\system32\dllcache\msctf.dll - 2004-08-04 12:00:00 425,472 ----a-w C:\WINDOWS\system32\dllcache\msdtcprx.dll + 2006-03-01 19:44:20 426,496 ----a-w C:\WINDOWS\system32\dllcache\msdtcprx.dll - 2004-08-04 12:00:00 949,248 ----a-w C:\WINDOWS\system32\dllcache\msdtctm.dll + 2006-03-01 19:44:20 956,416 ----a-w C:\WINDOWS\system32\dllcache\msdtctm.dll - 2004-08-04 12:00:00 161,280 ----a-w C:\WINDOWS\system32\dllcache\msdtcuiu.dll + 2006-03-01 19:44:20 161,280 ----a-w C:\WINDOWS\system32\dllcache\msdtcuiu.dll - 2004-08-04 11:00:00 537,088 ----a-w C:\WINDOWS\system32\dllcache\msftedit.dll + 2006-11-27 14:55:46 539,136 ----a-w C:\WINDOWS\system32\dllcache\msftedit.dll - 2004-08-04 11:00:00 3,003,392 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll + 2007-06-15 08:14:14 3,085,312 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll - 2004-08-04 11:00:00 448,512 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll + 2007-06-15 08:14:14 449,024 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll - 2004-08-04 12:00:00 2,804,224 ----a-w C:\WINDOWS\system32\dllcache\msi.dll + 2007-04-18 16:14:32 2,854,400 ----a-w C:\WINDOWS\system32\dllcache\msi.dll - 2004-08-04 12:00:00 77,312 ----a-w C:\WINDOWS\system32\dllcache\msiexec.exe + 2005-05-04 12:45:36 78,848 ----a-w C:\WINDOWS\system32\dllcache\msiexec.exe - 2004-08-04 11:00:00 331,264 ----a-w C:\WINDOWS\system32\dllcache\msihnd.dll + 2005-05-04 12:45:36 271,360 ----a-w C:\WINDOWS\system32\dllcache\msihnd.dll - 2004-08-04 11:00:00 884,736 ----a-w C:\WINDOWS\system32\dllcache\msimsg.dll + 2005-05-04 12:45:36 884,736 ----a-w C:\WINDOWS\system32\dllcache\msimsg.dll - 2004-08-04 11:00:00 44,032 ----a-w C:\WINDOWS\system32\dllcache\msisip.dll + 2005-05-04 12:45:36 15,360 ----a-w C:\WINDOWS\system32\dllcache\msisip.dll - 2004-08-04 12:00:00 102,400 ----a-w C:\WINDOWS\system32\dllcache\msjro.dll + 2006-12-26 13:09:22 102,400 ----a-w C:\WINDOWS\system32\dllcache\msjro.dll - 2004-08-04 12:00:00 1,311,232 ----a-w C:\WINDOWS\system32\dllcache\msoe.dll + 2007-05-16 15:19:02 1,314,816 ----a-w C:\WINDOWS\system32\dllcache\msoe.dll - 2004-08-04 11:00:00 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll + 2007-06-15 08:14:14 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll - 2004-08-04 11:00:00 530,432 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll + 2007-06-15 08:14:14 532,480 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll - 2004-08-04 12:00:00 343,040 ----a-w C:\WINDOWS\system32\dllcache\msvcrt.dll + 2007-02-19 10:34:20 343,040 ----a-w C:\WINDOWS\system32\dllcache\msvcrt.dll - 2004-08-04 11:00:00 701,440 ----a-w C:\WINDOWS\system32\dllcache\msxml2.dll + 2004-10-14 17:35:06 701,440 ----a-w C:\WINDOWS\system32\dllcache\msxml2.dll - 2004-08-04 11:00:00 1,236,480 ----a-w C:\WINDOWS\system32\dllcache\msxml3.dll + 2007-06-26 06:10:36 1,104,896 ----a-w C:\WINDOWS\system32\dllcache\msxml3.dll - 2004-08-04 11:00:00 66,560 ----a-w C:\WINDOWS\system32\dllcache\mtxclu.dll + 2006-03-01 19:44:20 66,560 ----a-w C:\WINDOWS\system32\dllcache\mtxclu.dll - 2004-08-04 12:00:00 90,112 ----a-w C:\WINDOWS\system32\dllcache\mtxoci.dll + 2006-03-01 19:44:20 91,136 ----a-w C:\WINDOWS\system32\dllcache\mtxoci.dll - 2004-08-04 11:00:00 107,904 ----a-w C:\WINDOWS\system32\dllcache\mup.sys + 2005-09-09 02:24:20 104,704 ----a-w C:\WINDOWS\system32\dllcache\mup.sys - 2004-08-04 11:00:00 55,296 ----a-w C:\WINDOWS\system32\dllcache\narrator.exe + 2006-10-04 13:34:50 55,296 ----a-w C:\WINDOWS\system32\dllcache\narrator.exe + 2006-08-18 09:36:46 14,592 ------w C:\WINDOWS\system32\dllcache\ndisuio.sys - 2004-08-04 12:00:00 332,288 ----a-w C:\WINDOWS\system32\dllcache\netapi32.dll + 2006-08-17 12:43:18 337,408 ----a-w C:\WINDOWS\system32\dllcache\netapi32.dll - 2004-08-04 12:00:00 198,144 ----a-w C:\WINDOWS\system32\dllcache\netman.dll + 2005-08-22 18:36:16 197,632 ----a-w C:\WINDOWS\system32\dllcache\netman.dll - 2004-08-04 12:00:00 1,714,688 ----a-w C:\WINDOWS\system32\dllcache\netshell.dll + 2006-08-18 12:39:20 1,712,128 ----a-w C:\WINDOWS\system32\dllcache\netshell.dll - 2004-08-04 12:00:00 364,544 ----a-w C:\WINDOWS\system32\dllcache\npdsplay.dll + 2005-11-29 15:27:06 364,544 ----a-w C:\WINDOWS\system32\dllcache\npdsplay.dll - 2004-08-04 11:00:00 574,592 ----a-w C:\WINDOWS\system32\dllcache\ntfs.sys + 2007-02-09 11:10:36 574,464 ----a-w C:\WINDOWS\system32\dllcache\ntfs.sys + 2007-02-28 16:04:46 2,137,600 ------w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe + 2007-02-28 16:04:56 2,058,880 ------w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe + 2007-02-28 16:04:48 2,017,280 ------w C:\WINDOWS\system32\dllcache\ntkrpamp.exe + 2007-02-28 16:04:58 2,181,632 ------w C:\WINDOWS\system32\dllcache\ntoskrnl.exe - 2004-08-04 12:00:00 1,281,024 ----a-w C:\WINDOWS\system32\dllcache\ole32.dll + 2005-07-26 04:42:36 1,284,608 ----a-w C:\WINDOWS\system32\dllcache\ole32.dll - 2004-08-04 12:00:00 553,472 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll + 2007-05-17 11:30:18 549,376 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll - 2004-08-04 12:00:00 69,120 ----a-w C:\WINDOWS\system32\dllcache\olecli32.dll + 2005-07-26 04:42:36 75,264 ----a-w C:\WINDOWS\system32\dllcache\olecli32.dll - 2004-08-04 12:00:00 34,304 ----a-w C:\WINDOWS\system32\dllcache\olecnv32.dll + 2005-07-26 04:42:36 37,888 ----a-w C:\WINDOWS\system32\dllcache\olecnv32.dll - 2004-08-04 11:00:00 118,272 ----a-w C:\WINDOWS\system32\dllcache\oledlg.dll + 2006-10-16 16:16:22 123,392 ----a-w C:\WINDOWS\system32\dllcache\oledlg.dll - 2004-08-04 11:00:00 216,064 ----a-w C:\WINDOWS\system32\dllcache\osk.exe + 2006-10-04 13:34:52 216,064 ----a-w C:\WINDOWS\system32\dllcache\osk.exe - 2004-08-04 11:00:00 116,224 ----a-w C:\WINDOWS\system32\dllcache\p2p.dll + 2006-10-11 16:37:38 153,088 ----a-w C:\WINDOWS\system32\dllcache\p2p.dll - 2004-08-04 11:00:00 86,016 ----a-w C:\WINDOWS\system32\dllcache\p2pgasvc.dll + 2006-10-11 16:37:38 104,960 ----a-w C:\WINDOWS\system32\dllcache\p2pgasvc.dll - 2004-08-04 11:00:00 312,320 ----a-w C:\WINDOWS\system32\dllcache\p2pgraph.dll + 2006-10-11 16:37:38 313,344 ----a-w C:\WINDOWS\system32\dllcache\p2pgraph.dll - 2004-08-04 11:00:00 88,064 ----a-w C:\WINDOWS\system32\dllcache\p2pnetsh.dll + 2006-10-11 16:37:38 115,712 ----a-w C:\WINDOWS\system32\dllcache\p2pnetsh.dll - 2004-08-04 11:00:00 526,848 ----a-w C:\WINDOWS\system32\dllcache\p2psvc.dll + 2006-10-11 16:37:38 553,984 ----a-w C:\WINDOWS\system32\dllcache\p2psvc.dll - 2004-08-04 11:00:00 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-06-15 08:14:14 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll - 2004-08-04 11:00:00 48,640 ----a-w C:\WINDOWS\system32\dllcache\pnrpnsp.dll + 2006-10-11 16:37:38 58,880 ----a-w C:\WINDOWS\system32\dllcache\pnrpnsp.dll + 2006-10-14 15:44:44 671,744 ------w C:\WINDOWS\system32\dllcache\PrintFilterPipelineSvc.exe - 2004-08-04 11:00:00 1,291,264 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll + 2005-08-30 03:56:14 1,290,752 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll - 2004-08-04 11:00:00 1,439,744 ----a-w C:\WINDOWS\system32\dllcache\query.dll + 2006-06-22 05:18:14 1,439,744 ----a-w C:\WINDOWS\system32\dllcache\query.dll - 2004-08-04 11:00:00 8,192 ----a-w C:\WINDOWS\system32\dllcache\rasadhlp.dll + 2006-06-26 17:45:40 8,192 ----a-w C:\WINDOWS\system32\dllcache\rasadhlp.dll - 2004-08-04 11:00:00 174,080 ----a-w C:\WINDOWS\system32\dllcache\rasmans.dll + 2006-06-22 10:54:46 181,248 ----a-w C:\WINDOWS\system32\dllcache\rasmans.dll - 2004-08-04 11:00:00 176,512 ----a-w C:\WINDOWS\system32\dllcache\rdbss.sys + 2006-05-05 09:47:58 174,592 ----a-w C:\WINDOWS\system32\dllcache\rdbss.sys - 2004-08-04 12:00:00 139,400 ----a-w C:\WINDOWS\system32\dllcache\rdpwd.sys + 2005-06-10 04:11:36 139,528 ----a-w C:\WINDOWS\system32\dllcache\rdpwd.sys - 2004-08-04 12:00:00 431,616 ----a-w C:\WINDOWS\system32\dllcache\riched20.dll + 2006-11-27 14:55:46 433,152 ----a-w C:\WINDOWS\system32\dllcache\riched20.dll - 2004-08-04 11:00:00 200,064 ----a-w C:\WINDOWS\system32\dllcache\rmcast.sys + 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\dllcache\rmcast.sys - 2004-08-04 12:00:00 581,120 ----a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll + 2005-11-11 03:24:14 581,632 ----a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll - 2004-08-04 12:00:00 395,776 ----a-w C:\WINDOWS\system32\dllcache\rpcss.dll + 2005-07-26 04:42:36 397,824 ----a-w C:\WINDOWS\system32\dllcache\rpcss.dll - 2004-08-04 12:00:00 144,896 ----a-w C:\WINDOWS\system32\dllcache\schannel.dll + 2007-04-25 14:23:30 144,896 ----a-w C:\WINDOWS\system32\dllcache\schannel.dll - 2004-08-04 11:00:00 159,744 ----a-w C:\WINDOWS\system32\dllcache\scrobj.dll + 2007-07-31 19:45:28 163,840 ----a-w C:\WINDOWS\system32\dllcache\scrobj.dll - 2004-08-04 11:00:00 151,552 ----a-w C:\WINDOWS\system32\dllcache\scrrun.dll + 2007-07-31 19:45:28 155,648 ----a-w C:\WINDOWS\system32\dllcache\scrrun.dll - 2004-08-04 12:00:00 1,483,264 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll + 2007-06-15 08:14:14 1,498,112 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll - 2004-08-04 12:00:00 8,412,672 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll + 2006-12-19 21:51:04 8,482,304 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll - 2004-08-04 12:00:00 473,600 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll + 2007-06-15 08:14:14 474,112 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll - 2004-08-04 12:00:00 135,168 ----a-w C:\WINDOWS\system32\dllcache\shsvcs.dll + 2006-12-19 21:51:04 135,168 ----a-w C:\WINDOWS\system32\dllcache\shsvcs.dll - 2004-08-03 22:07:48 6,400 ----a-w C:\WINDOWS\system32\dllcache\splitter.sys + 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\dllcache\splitter.sys - 2004-08-04 11:00:00 57,856 ----a-w C:\WINDOWS\system32\dllcache\spoolsv.exe + 2005-06-10 23:53:32 57,856 ----a-w C:\WINDOWS\system32\dllcache\spoolsv.exe - 2004-08-04 11:00:00 336,256 ----a-w C:\WINDOWS\system32\dllcache\srv.sys + 2006-08-14 10:34:42 332,928 ----a-w C:\WINDOWS\system32\dllcache\srv.sys - 2004-08-04 11:00:00 246,302 ----a-w C:\WINDOWS\system32\dllcache\strmdll.dll + 2006-08-24 12:19:52 246,814 ----a-w C:\WINDOWS\system32\dllcache\strmdll.dll - 2004-08-04 12:00:00 714,240 ----a-w C:\WINDOWS\system32\dllcache\sxs.dll + 2006-10-20 01:41:08 714,240 ----a-w C:\WINDOWS\system32\dllcache\sxs.dll - 2004-08-04 11:00:00 210,432 ----a-w C:\WINDOWS\system32\dllcache\t2embed.dll + 2005-10-17 21:21:40 118,272 ----a-w C:\WINDOWS\system32\dllcache\t2embed.dll - 2004-08-04 12:00:00 246,272 ----a-w C:\WINDOWS\system32\dllcache\tapisrv.dll + 2005-07-08 16:29:18 249,344 ----a-w C:\WINDOWS\system32\dllcache\tapisrv.dll - 2004-08-04 11:00:00 359,040 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys + 2006-04-20 12:18:36 360,576 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys - 2004-08-04 11:00:00 223,616 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys + 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys - 2004-08-04 11:00:00 77,312 ----a-w C:\WINDOWS\system32\dllcache\telnet.exe + 2005-05-11 02:31:24 77,824 ----a-w C:\WINDOWS\system32\dllcache\telnet.exe - 2004-08-04 11:00:00 44,032 ----a-w C:\WINDOWS\system32\dllcache\twext.dll + 2005-07-19 02:51:36 55,808 ----a-w C:\WINDOWS\system32\dllcache\twext.dll - 2004-08-04 12:00:00 101,376 ----a-w C:\WINDOWS\system32\dllcache\txflog.dll + 2005-07-26 04:42:36 101,376 ----a-w C:\WINDOWS\system32\dllcache\txflog.dll - 2004-08-04 11:00:00 36,352 ----a-w C:\WINDOWS\system32\dllcache\umandlg.dll + 2006-10-04 13:39:40 36,352 ----a-w C:\WINDOWS\system32\dllcache\umandlg.dll - 2004-08-04 12:00:00 118,784 ----a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll + 2005-08-23 03:40:06 123,904 ----a-w C:\WINDOWS\system32\dllcache\umpnpmgr.dll - 2004-08-04 11:00:00 209,408 ----a-w C:\WINDOWS\system32\dllcache\update.sys + 2007-04-23 10:14:24 364,160 ----a-w C:\WINDOWS\system32\dllcache\update.sys - 2004-08-04 11:00:00 185,856 ----a-w C:\WINDOWS\system32\dllcache\upnphost.dll + 2007-02-05 20:19:48 185,856 ----a-w C:\WINDOWS\system32\dllcache\upnphost.dll - 2004-08-04 12:00:00 602,112 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2007-06-15 08:14:14 617,984 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2006-10-23 11:14:42 30,208 ------w C:\WINDOWS\system32\dllcache\usbehci.sys + 2006-10-23 11:14:42 59,264 ------w C:\WINDOWS\system32\dllcache\usbhub.sys + 2006-10-23 11:14:42 17,152 ------w C:\WINDOWS\system32\dllcache\usbohci.sys + 2006-10-23 11:14:42 143,488 ------w C:\WINDOWS\system32\dllcache\usbport.sys + 2006-10-23 11:14:42 20,608 ------w C:\WINDOWS\system32\dllcache\usbuhci.sys - 2004-08-04 12:00:00 578,560 ----a-w C:\WINDOWS\system32\dllcache\user32.dll + 2007-03-08 15:38:48 579,072 ----a-w C:\WINDOWS\system32\dllcache\user32.dll - 2004-08-04 11:00:00 50,176 ----a-w C:\WINDOWS\system32\dllcache\utilman.exe + 2006-10-04 13:34:52 50,176 ----a-w C:\WINDOWS\system32\dllcache\utilman.exe - 2004-08-04 12:00:00 219,648 ----a-w C:\WINDOWS\system32\dllcache\uxtheme.dll + 2004-09-23 17:18:04 219,648 ----a-w C:\WINDOWS\system32\dllcache\uxtheme.dll - 2004-08-04 11:00:00 417,792 ----a-w C:\WINDOWS\system32\dllcache\vbscript.dll + 2007-07-31 19:45:28 413,696 ----a-w C:\WINDOWS\system32\dllcache\vbscript.dll - 2004-08-04 12:00:00 848,384 ----a-w C:\WINDOWS\system32\dllcache\vgx.dll + 2007-06-26 13:57:30 851,968 ----a-w C:\WINDOWS\system32\dllcache\vgx.dll - 2004-08-04 12:00:00 504,832 ----a-w C:\WINDOWS\system32\dllcache\wab32.dll + 2007-05-16 15:19:02 510,976 ----a-w C:\WINDOWS\system32\dllcache\wab32.dll - 2004-08-04 12:00:00 84,992 ----a-w C:\WINDOWS\system32\dllcache\wabimp.dll + 2007-05-16 15:19:02 85,504 ----a-w C:\WINDOWS\system32\dllcache\wabimp.dll - 2004-08-04 12:00:00 530,944 ----a-w C:\WINDOWS\system32\dllcache\wbemcore.dll + 2006-01-17 03:36:30 530,944 ----a-w C:\WINDOWS\system32\dllcache\wbemcore.dll - 2004-08-04 12:00:00 49,152 ----a-w C:\WINDOWS\system32\dllcache\wdigest.dll + 2006-03-24 04:39:56 49,152 ----a-w C:\WINDOWS\system32\dllcache\wdigest.dll - 2004-08-03 22:15:06 82,944 ----a-w C:\WINDOWS\system32\dllcache\wdmaud.sys + 2006-06-14 09:00:46 82,944 ----a-w C:\WINDOWS\system32\dllcache\wdmaud.sys - 2004-08-04 11:00:00 67,584 ----a-w C:\WINDOWS\system32\dllcache\webclnt.dll + 2006-01-04 03:36:30 68,096 ----a-w C:\WINDOWS\system32\dllcache\webclnt.dll - 2004-08-04 12:00:00 333,824 ----a-w C:\WINDOWS\system32\dllcache\wiaservc.dll + 2006-12-19 18:18:26 334,336 ----a-w C:\WINDOWS\system32\dllcache\wiaservc.dll - 2004-08-04 12:00:00 1,836,160 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys + 2007-04-11 06:47:00 1,843,840 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys - 2004-08-04 12:00:00 658,944 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll + 2007-06-26 14:53:48 668,160 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll - 2004-08-04 12:00:00 291,328 ----a-w C:\WINDOWS\system32\dllcache\winsrv.dll + 2007-03-17 13:45:36 293,376 ----a-w C:\WINDOWS\system32\dllcache\winsrv.dll - 2004-08-04 11:00:00 132,096 ----a-w C:\WINDOWS\system32\dllcache\wkssvc.dll + 2006-08-17 12:43:18 132,096 ----a-w C:\WINDOWS\system32\dllcache\wkssvc.dll - 2004-08-04 11:00:00 114,688 ----a-w C:\WINDOWS\system32\dllcache\wscript.exe + 2007-07-31 19:45:22 135,168 ----a-w C:\WINDOWS\system32\dllcache\wscript.exe - 2004-08-04 11:00:00 65,536 ----a-w C:\WINDOWS\system32\dllcache\wshext.dll + 2007-07-31 19:45:30 69,632 ----a-w C:\WINDOWS\system32\dllcache\wshext.dll - 2004-08-04 12:00:00 431,616 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll + 2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll - 2004-08-04 12:00:00 112,128 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe + 2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe - 2004-08-04 12:00:00 1,134,592 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll + 2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll - 2004-08-04 12:00:00 113,664 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll + 2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll - 2004-08-04 12:00:00 36,864 ----a-w C:\WINDOWS\system32\dllcache\wups.dll + 2007-04-16 21:47:36 33,624 ----a-w C:\WINDOWS\system32\dllcache\wups.dll - 2004-08-04 12:00:00 120,320 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll + 2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll - 2004-08-04 11:00:00 378,880 ----a-w C:\WINDOWS\system32\dllcache\wzcdlg.dll + 2006-08-18 12:39:20 384,000 ----a-w C:\WINDOWS\system32\dllcache\wzcdlg.dll + 2006-08-18 12:39:20 52,736 ------w C:\WINDOWS\system32\dllcache\wzcsapi.dll + 2006-08-18 12:39:22 476,160 ------w C:\WINDOWS\system32\dllcache\wzcsvc.dll - 2004-08-04 12:00:00 11,776 ----a-w C:\WINDOWS\system32\dllcache\xolehlp.dll + 2006-03-01 19:44:20 11,776 ----a-w C:\WINDOWS\system32\dllcache\xolehlp.dll + 2006-10-14 19:21:58 580,352 ------w C:\WINDOWS\system32\dllcache\XPSSHHDR.dll + 2006-10-14 19:22:00 1,698,048 ------w C:\WINDOWS\system32\dllcache\XpsSvcs.dll - 2004-08-04 11:00:00 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll + 2006-06-26 17:45:40 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll - 2004-08-03 21:39:38 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys + 2006-02-15 00:22:26 142,464 ----a-w C:\WINDOWS\system32\drivers\aec.sys - 2004-08-04 12:00:00 124,800 ----a-w C:\WINDOWS\system32\drivers\fltMgr.sys + 2006-08-21 09:14:58 128,896 ----a-w C:\WINDOWS\system32\drivers\fltMgr.sys - 2004-08-04 11:00:00 36,224 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys + 2006-10-31 10:26:12 36,864 ----a-w C:\WINDOWS\system32\drivers\hidclass.sys - 2004-08-04 11:00:00 263,040 ----a-w C:\WINDOWS\system32\drivers\http.sys + 2006-03-17 00:33:10 262,784 ----a-w C:\WINDOWS\system32\drivers\http.sys - 2004-08-04 11:00:00 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys + 2005-01-31 21:28:02 134,912 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys - 2004-08-03 22:07:50 171,776 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys + 2006-06-14 08:47:46 172,416 ----a-w C:\WINDOWS\system32\drivers\kmixer.sys - 2004-08-04 11:00:00 451,456 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys + 2006-06-20 08:50:28 453,248 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys - 2004-08-04 11:00:00 107,904 ----a-w C:\WINDOWS\system32\drivers\mup.sys + 2005-09-09 02:24:20 104,704 ----a-w C:\WINDOWS\system32\drivers\mup.sys - 2004-08-04 11:00:00 12,928 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys + 2006-08-18 09:36:46 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys - 2004-08-04 11:00:00 574,592 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys + 2007-02-09 11:10:36 574,464 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys - 2004-08-04 11:00:00 176,512 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys + 2006-05-05 09:47:58 174,592 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys - 2004-08-04 12:00:00 139,400 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys + 2005-06-10 04:11:36 139,528 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys - 2004-08-04 11:00:00 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys + 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys + 2006-11-08 08:51:54 62,336 ------w C:\WINDOWS\system32\drivers\rspndr.sys - 2004-08-03 22:07:48 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys + 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\splitter.sys - 2004-08-04 11:00:00 336,256 ----a-w C:\WINDOWS\system32\drivers\srv.sys + 2006-08-14 10:34:42 332,928 ----a-w C:\WINDOWS\system32\drivers\srv.sys - 2004-08-04 11:00:00 359,040 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys + 2006-04-20 12:18:36 360,576 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys - 2004-08-04 11:00:00 223,616 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys + 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys - 2004-08-04 11:00:00 209,408 ----a-w C:\WINDOWS\system32\drivers\update.sys + 2007-04-23 10:14:24 364,160 ----a-w C:\WINDOWS\system32\drivers\update.sys - 2004-08-04 11:00:00 26,624 ----a-w C:\WINDOWS\system32\drivers\usbehci.sys + 2006-10-23 11:14:42 30,208 ----a-w C:\WINDOWS\system32\drivers\usbehci.sys - 2004-08-04 11:00:00 57,600 ----a-w C:\WINDOWS\system32\drivers\usbhub.sys + 2006-10-23 11:14:42 59,264 ----a-w C:\WINDOWS\system32\drivers\usbhub.sys - 2004-08-04 11:00:00 17,024 ----a-w C:\WINDOWS\system32\drivers\usbohci.sys + 2006-10-23 11:14:42 17,152 ----a-w C:\WINDOWS\system32\drivers\usbohci.sys - 2004-08-04 11:00:00 142,976 ----a-w C:\WINDOWS\system32\drivers\usbport.sys + 2006-10-23 11:14:42 143,488 ----a-w C:\WINDOWS\system32\drivers\usbport.sys - 2004-08-03 22:15:06 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys + 2006-06-14 09:00:46 82,944 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys - 2004-08-04 11:00:00 499,229 ----a-w C:\WINDOWS\system32\dxmasf.dll + 2006-08-24 12:18:20 499,766 ----a-w C:\WINDOWS\system32\dxmasf.dll - 2004-08-04 11:00:00 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll + 2007-06-15 08:14:14 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll - 2004-08-04 11:00:00 201,728 ----a-w C:\WINDOWS\system32\dxtrans.dll + 2007-06-15 08:14:14 205,824 ----a-w C:\WINDOWS\system32\dxtrans.dll + 2006-10-20 20:29:46 69,408 ----a-w C:\WINDOWS\system32\dxva2.dll - 2004-08-04 11:00:00 243,200 ----a-w C:\WINDOWS\system32\es.dll + 2005-07-26 04:42:34 243,200 ----a-w C:\WINDOWS\system32\es.dll - 2004-08-04 11:00:00 1,092,608 ----a-w C:\WINDOWS\system32\esent.dll + 2005-10-20 22:30:54 1,092,608 ----a-w C:\WINDOWS\system32\esent.dll + 2006-10-20 20:30:00 478,496 ----a-w C:\WINDOWS\system32\evr.dll - 2004-08-04 11:00:00 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll + 2007-06-15 08:14:14 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll - 2004-08-04 12:00:00 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll + 2006-08-21 12:28:22 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll - 2004-08-04 12:00:00 22,528 ----a-w C:\WINDOWS\system32\fltMc.exe + 2006-08-21 09:14:58 23,040 ----a-w C:\WINDOWS\system32\fltMc.exe - 2007-11-06 21:14:18 93,480 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2007-11-10 08:30:30 96,664 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT - 2004-08-04 11:00:00 79,360 ----a-w C:\WINDOWS\system32\fontsub.dll + 2005-10-17 21:21:40 80,896 ----a-w C:\WINDOWS\system32\fontsub.dll - 2004-08-04 11:00:00 278,016 ----a-w C:\WINDOWS\system32\gdi32.dll + 2007-06-19 13:32:56 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll - 2004-08-04 11:00:00 38,912 ----a-w C:\WINDOWS\system32\hhsetup.dll + 2005-05-27 02:08:16 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dll - 2004-08-04 11:00:00 77,850 ----a-w C:\WINDOWS\system32\hlink.dll + 2006-07-21 08:29:02 72,704 ----a-w C:\WINDOWS\system32\hlink.dll - 2004-08-04 12:00:00 349,696 ----a-w C:\WINDOWS\system32\hypertrm.dll + 2004-11-17 17:43:30 351,744 ----a-w C:\WINDOWS\system32\hypertrm.dll + 2006-10-30 02:33:58 556,296 ----a-w C:\WINDOWS\system32\icardagt.exe + 2006-10-30 02:33:58 9,480 ----a-w C:\WINDOWS\system32\icardres.dll - 2004-08-04 11:00:00 253,952 ----a-w C:\WINDOWS\system32\icm32.dll + 2005-06-29 01:52:58 254,976 ----a-w C:\WINDOWS\system32\icm32.dll - 2004-08-04 11:00:00 249,344 ----a-w C:\WINDOWS\system32\iepeers.dll + 2007-06-15 08:14:14 251,904 ----a-w C:\WINDOWS\system32\iepeers.dll + 2005-10-28 23:25:12 151,552 ------w C:\WINDOWS\system32\ifxcardm.dll - 2004-08-04 12:00:00 678,400 ----a-w C:\WINDOWS\system32\inetcomm.dll + 2007-05-16 15:18:58 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll + 2006-10-30 02:33:58 83,968 ----a-w C:\WINDOWS\system32\infocardapi.dll - 2004-08-04 11:00:00 96,768 ----a-w C:\WINDOWS\system32\inseng.dll + 2007-06-15 08:14:14 96,768 ----a-w C:\WINDOWS\system32\inseng.dll - 2004-08-04 11:00:00 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.dll + 2006-05-19 13:26:54 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.dll - 2004-08-04 11:00:00 183,296 ----a-w C:\WINDOWS\system32\ipsecsvc.dll + 2005-09-15 04:07:16 184,320 ----a-w C:\WINDOWS\system32\ipsecsvc.dll - 2004-08-04 11:00:00 143,872 ----a-w C:\WINDOWS\system32\itircl.dll + 2005-05-27 02:08:16 155,136 ----a-w C:\WINDOWS\system32\itircl.dll - 2004-08-04 11:00:00 134,144 ----a-w C:\WINDOWS\system32\itss.dll + 2005-05-27 02:08:16 137,216 ----a-w C:\WINDOWS\system32\itss.dll + 2007-06-14 14:51:50 135,168 ----a-w C:\WINDOWS\system32\java.exe + 2007-06-14 14:51:54 135,168 ----a-w C:\WINDOWS\system32\javaw.exe + 2007-06-14 15:53:24 139,264 ----a-w C:\WINDOWS\system32\javaws.exe - 2004-08-04 11:00:00 144,896 ----a-w C:\WINDOWS\system32\jgdw400.dll + 2006-06-01 18:49:32 163,840 ----a-w C:\WINDOWS\system32\jgdw400.dll - 2004-08-04 11:00:00 42,496 ----a-w C:\WINDOWS\system32\jgpl400.dll + 2006-06-01 18:49:32 27,648 ----a-w C:\WINDOWS\system32\jgpl400.dll - 2004-08-04 11:00:00 450,560 ----a-w C:\WINDOWS\system32\jscript.dll + 2007-07-31 19:45:24 491,520 ----a-w C:\WINDOWS\system32\jscript.dll - 2004-08-04 11:00:00 15,872 ----a-w C:\WINDOWS\system32\jsproxy.dll + 2007-06-15 08:14:14 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\system32\kbdbhc.dll + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\system32\kbdiultn.dll + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\system32\kbdnepr.dll + 2006-05-12 04:03:46 6,144 ------w C:\WINDOWS\system32\kbdpash.dll - 2004-08-04 11:00:00 294,400 ----a-w C:\WINDOWS\system32\kerberos.dll + 2005-06-15 17:51:00 295,936 ----a-w C:\WINDOWS\system32\kerberos.dll - 2004-08-04 11:00:00 1,012,224 ----a-w C:\WINDOWS\system32\kernel32.dll + 2007-04-16 16:11:16 1,014,784 ----a-w C:\WINDOWS\system32\kernel32.dll + 2007-11-10 07:57:08 11,842 ----a-w C:\WINDOWS\system32\Lang\Arabic.bin + 2007-11-10 07:57:08 13,831 ----a-w C:\WINDOWS\system32\Lang\Danish.bin + 2007-11-10 07:57:08 14,470 ----a-w C:\WINDOWS\system32\Lang\Dutch.bin + 2007-11-10 07:57:08 12,032 ----a-w C:\WINDOWS\system32\Lang\English.bin + 2007-11-10 07:57:08 15,325 ----a-w C:\WINDOWS\system32\Lang\French.bin + 2007-11-10 07:57:08 14,873 ----a-w C:\WINDOWS\system32\Lang\German.bin + 2007-11-10 07:57:08 13,966 ----a-w C:\WINDOWS\system32\Lang\Greek.bin + 2007-11-10 07:57:08 15,718 ----a-w C:\WINDOWS\system32\Lang\Italian.bin + 2007-11-10 07:57:08 13,345 ----a-w C:\WINDOWS\system32\Lang\Japanese.bin + 2007-11-10 07:57:08 11,498 ----a-w C:\WINDOWS\system32\Lang\Korean.bin + 2007-11-10 07:57:08 13,431 ----a-w C:\WINDOWS\system32\Lang\Polish.bin + 2007-11-10 07:57:08 13,746 ----a-w C:\WINDOWS\system32\Lang\Portuguese_Brazilian.bin + 2007-11-10 07:57:08 14,634 ----a-w C:\WINDOWS\system32\Lang\Portuguese_Default.bin + 2007-11-10 07:57:08 15,050 ----a-w C:\WINDOWS\system32\Lang\Russian.bin + 2007-11-10 07:57:08 9,484 ----a-w C:\WINDOWS\system32\Lang\SimChin.bin + 2007-11-10 07:57:08 15,409 ----a-w C:\WINDOWS\system32\Lang\Spanish.bin + 2007-11-10 07:57:08 13,560 ----a-w C:\WINDOWS\system32\Lang\SWEDISH.bin + 2007-11-10 07:57:08 12,247 ----a-w C:\WINDOWS\system32\Lang\Thai.bin + 2007-11-10 07:57:08 10,111 ----a-w C:\WINDOWS\system32\Lang\TradChin.bin - 2004-08-04 11:00:00 18,944 ----a-w C:\WINDOWS\system32\linkinfo.dll + 2005-09-01 02:28:38 19,968 ----a-w C:\WINDOWS\system32\linkinfo.dll - 2004-08-04 11:00:00 723,968 ----a-w C:\WINDOWS\system32\lsasrv.dll + 2006-08-17 12:43:18 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll + 2007-06-11 20:04:36 190,696 ----a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9d.exe + 2007-06-11 20:34:34 2,115,816 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll + 2007-06-11 20:34:40 190,696 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2007-11-10 08:18:38 48,749 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe + 2007-11-10 08:18:46 45,218 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe - 2004-08-04 11:00:00 73,216 ----a-w C:\WINDOWS\system32\magnify.exe + 2006-10-04 13:34:54 73,216 ----a-w C:\WINDOWS\system32\magnify.exe - 2004-08-04 11:00:00 39,936 ----a-w C:\WINDOWS\system32\mf3216.dll + 2007-03-08 15:38:48 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll - 2004-08-04 11:00:00 924,432 ----a-w C:\WINDOWS\system32\mfc40u.dll + 2006-11-01 19:19:04 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll - 2004-08-04 11:00:00 1,024,000 ----a-w C:\WINDOWS\system32\mfc42u.dll + 2006-12-14 13:45:54 981,760 ----a-w C:\WINDOWS\system32\mfc42u.dll + 2006-10-20 20:30:06 1,980,704 ----a-w C:\WINDOWS\system32\milcore.dll - 2004-08-04 11:00:00 586,240 ----a-w C:\WINDOWS\system32\mlang.dll + 2004-10-15 20:54:44 586,240 ----a-w C:\WINDOWS\system32\mlang.dll + 2007-08-02 20:34:12 16,789,464 ----a-w C:\WINDOWS\system32\MRT.exe - 2004-08-04 11:00:00 73,728 ----a-w C:\WINDOWS\system32\mscms.dll + 2005-06-29 01:52:58 74,240 ----a-w C:\WINDOWS\system32\mscms.dll + 2007-04-13 02:21:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dll + 2005-09-23 06:28:52 150,016 ----a-w C:\WINDOWS\system32\mscorier.dll + 2005-09-23 06:28:52 74,240 ----a-w C:\WINDOWS\system32\mscories.dll - 2004-08-04 11:00:00 294,400 ----a-w C:\WINDOWS\system32\MSCTF.dll + 2004-12-06 22:55:12 297,472 ----a-w C:\WINDOWS\system32\msctf.dll + 2006-11-06 10:35:32 323,696 ----a-w C:\WINDOWS\system32\msdrm.dll - 2004-08-04 12:00:00 425,472 ----a-w C:\WINDOWS\system32\msdtcprx.dll + 2006-03-01 19:44:20 426,496 ----a-w C:\WINDOWS\system32\msdtcprx.dll - 2004-08-04 12:00:00 949,248 ----a-w C:\WINDOWS\system32\msdtctm.dll + 2006-03-01 19:44:20 956,416 ----a-w C:\WINDOWS\system32\msdtctm.dll - 2004-08-04 12:00:00 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll + 2006-03-01 19:44:20 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.dll - 2004-08-04 11:00:00 537,088 ----a-w C:\WINDOWS\system32\msftedit.dll + 2006-11-27 14:55:46 539,136 ----a-w C:\WINDOWS\system32\msftedit.dll - 2004-08-04 11:00:00 3,003,392 ----a-w C:\WINDOWS\system32\mshtml.dll + 2007-06-15 08:14:14 3,085,312 ----a-w C:\WINDOWS\system32\mshtml.dll - 2004-08-04 11:00:00 448,512 ----a-w C:\WINDOWS\system32\mshtmled.dll + 2007-06-15 08:14:14 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll - 2004-08-04 11:00:00 2,804,224 ----a-w C:\WINDOWS\system32\msi.dll + 2007-04-18 16:14:32 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll - 2004-08-04 11:00:00 77,312 ----a-w C:\WINDOWS\system32\msiexec.exe + 2005-05-04 12:45:36 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe - 2004-08-04 11:00:00 331,264 ----a-w C:\WINDOWS\system32\msihnd.dll + 2005-05-04 12:45:36 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll - 2004-08-04 11:00:00 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll + 2005-05-04 12:45:36 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll - 2004-08-04 11:00:00 44,032 ----a-w C:\WINDOWS\system32\msisip.dll + 2005-05-04 12:45:36 15,360 ----a-w C:\WINDOWS\system32\msisip.dll - 2004-08-04 11:00:00 146,432 ----a-w C:\WINDOWS\system32\msrating.dll + 2007-06-15 08:14:14 146,432 ----a-w C:\WINDOWS\system32\msrating.dll - 2004-08-04 11:00:00 530,432 ----a-w C:\WINDOWS\system32\mstime.dll + 2007-06-15 08:14:14 532,480 ----a-w C:\WINDOWS\system32\mstime.dll - 2004-08-04 12:00:00 408,576 ----a-w C:\WINDOWS\system32\mstsc.exe + 2006-11-07 08:06:48 600,576 ----a-w C:\WINDOWS\system32\mstsc.exe - 2004-08-04 12:00:00 655,360 ----a-w C:\WINDOWS\system32\mstscax.dll + 2006-12-21 13:16:24 1,866,240 ----a-w C:\WINDOWS\system32\mstscax.dll - 2004-08-04 11:00:00 343,040 ----a-w C:\WINDOWS\system32\msvcrt.dll + 2007-02-19 10:34:20 343,040 ----a-w C:\WINDOWS\system32\msvcrt.dll - 2004-08-04 11:00:00 701,440 ----a-w C:\WINDOWS\system32\msxml2.dll + 2004-10-14 17:35:06 701,440 ----a-w C:\WINDOWS\system32\msxml2.dll - 2004-08-04 11:00:00 1,236,480 ----a-w C:\WINDOWS\system32\msxml3.dll + 2007-06-26 06:10:36 1,104,896 ----a-w C:\WINDOWS\system32\msxml3.dll + 2007-05-08 14:03:04 1,275,392 ----a-w C:\WINDOWS\system32\msxml4.dll + 2007-05-08 14:00:28 82,432 ----a-w C:\WINDOWS\system32\msxml4r.dll + 2007-05-15 14:43:10 1,320,800 ----a-w C:\WINDOWS\system32\msxml6.dll + 2006-07-19 09:55:18 86,728 ----a-w C:\WINDOWS\system32\msxml6r.dll - 2004-08-04 11:00:00 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll + 2006-03-01 19:44:20 66,560 ----a-w C:\WINDOWS\system32\mtxclu.dll - 2004-08-04 12:00:00 90,112 ----a-w C:\WINDOWS\system32\mtxoci.dll + 2006-03-01 19:44:20 91,136 ----a-w C:\WINDOWS\system32\mtxoci.dll + 2003-02-20 16:43:36 4,096 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]409\mscoreer.dll + 2005-09-23 06:29:00 6,144 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]409\mscorees.dll + 2003-04-07 17:08:40 4,608 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]415\mscoreer.dll - 2004-08-04 11:00:00 55,296 ----a-w C:\WINDOWS\system32\narrator.exe + 2006-10-04 13:34:50 55,296 ----a-w C:\WINDOWS\system32\narrator.exe - 2004-08-04 11:00:00 332,288 ----a-w C:\WINDOWS\system32\netapi32.dll + 2006-08-17 12:43:18 337,408 ----a-w C:\WINDOWS\system32\netapi32.dll + 2003-02-20 17:16:34 32,768 ----a-w C:\WINDOWS\system32\netfxperf.dll - 2004-08-04 11:00:00 198,144 ----a-w C:\WINDOWS\system32\netman.dll + 2005-08-22 18:36:16 197,632 ----a-w C:\WINDOWS\system32\netman.dll - 2004-08-04 11:00:00 1,714,688 ----a-w C:\WINDOWS\system32\netshell.dll + 2006-08-18 12:39:20 1,712,128 ----a-w C:\WINDOWS\system32\netshell.dll - 2004-08-04 11:00:00 2,058,112 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe + 2007-02-28 16:04:56 2,058,880 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe - 2004-08-04 11:00:00 2,182,272 ----a-w C:\WINDOWS\system32\ntoskrnl.exe + 2007-02-28 16:04:58 2,181,632 ----a-w C:\WINDOWS\system32\ntoskrnl.exe - 2004-08-04 11:00:00 1,281,024 ----a-w C:\WINDOWS\system32\ole32.dll + 2005-07-26 04:42:36 1,284,608 ----a-w C:\WINDOWS\system32\ole32.dll - 2004-08-04 11:00:00 553,472 ----a-w C:\WINDOWS\system32\oleaut32.dll + 2007-05-17 11:30:18 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll - 2004-08-04 11:00:00 69,120 ----a-w C:\WINDOWS\system32\olecli32.dll + 2005-07-26 04:42:36 75,264 ----a-w C:\WINDOWS\system32\olecli32.dll - 2004-08-04 11:00:00 34,304 ----a-w C:\WINDOWS\system32\olecnv32.dll + 2005-07-26 04:42:36 37,888 ----a-w C:\WINDOWS\system32\olecnv32.dll - 2004-08-04 11:00:00 118,272 ----a-w C:\WINDOWS\system32\oledlg.dll + 2006-10-16 16:16:22 123,392 ----a-w C:\WINDOWS\system32\oledlg.dll - 2004-08-04 11:00:00 216,064 ----a-w C:\WINDOWS\system32\osk.exe + 2006-10-04 13:34:52 216,064 ----a-w C:\WINDOWS\system32\osk.exe - 2004-08-04 11:00:00 116,224 ----a-w C:\WINDOWS\system32\p2p.dll + 2006-10-11 16:37:38 153,088 ----a-w C:\WINDOWS\system32\p2p.dll - 2004-08-04 11:00:00 86,016 ----a-w C:\WINDOWS\system32\p2pgasvc.dll + 2006-10-11 16:37:38 104,960 ----a-w C:\WINDOWS\system32\p2pgasvc.dll - 2004-08-04 11:00:00 312,320 ----a-w C:\WINDOWS\system32\p2pgraph.dll + 2006-10-11 16:37:38 313,344 ----a-w C:\WINDOWS\system32\p2pgraph.dll - 2004-08-04 11:00:00 88,064 ----a-w C:\WINDOWS\system32\p2pnetsh.dll + 2006-10-11 16:37:38 115,712 ----a-w C:\WINDOWS\system32\p2pnetsh.dll - 2004-08-04 11:00:00 526,848 ----a-w C:\WINDOWS\system32\p2psvc.dll + 2006-10-11 16:37:38 553,984 ----a-w C:\WINDOWS\system32\p2psvc.dll - 2007-11-07 21:01:58 40,128 ----a-w C:\WINDOWS\system32\perfc009.dat + 2007-11-10 08:32:04 70,260 ----a-w C:\WINDOWS\system32\perfc009.dat - 2007-11-07 21:01:58 49,712 ----a-w C:\WINDOWS\system32\perfc015.dat + 2007-11-10 08:32:04 87,188 ----a-w C:\WINDOWS\system32\perfc015.dat - 2007-11-07 21:01:58 311,740 ----a-w C:\WINDOWS\system32\perfh009.dat + 2007-11-10 08:32:04 436,496 ----a-w C:\WINDOWS\system32\perfh009.dat - 2007-11-07 21:01:58 355,830 ----a-w C:\WINDOWS\system32\perfh015.dat + 2007-11-10 08:32:04 494,652 ----a-w C:\WINDOWS\system32\perfh015.dat + 2006-10-24 11:30:20 412,160 ------w C:\WINDOWS\system32\photometadatahandler.dll + 2005-10-28 23:25:32 85,504 ------w C:\WINDOWS\system32\pintool.exe - 2004-08-04 11:00:00 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll + 2007-06-15 08:14:14 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll - 2004-08-04 11:00:00 48,640 ----a-w C:\WINDOWS\system32\pnrpnsp.dll + 2006-10-11 16:37:38 58,880 ----a-w C:\WINDOWS\system32\pnrpnsp.dll + 2006-10-20 20:29:52 104,224 ----a-w C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll + 2006-10-20 20:29:58 344,352 ----a-w C:\WINDOWS\system32\PresentationHost.exe + 2006-10-20 20:29:46 20,768 ----a-w C:\WINDOWS\system32\PresentationHostProxy.dll + 2006-10-20 20:30:02 769,312 ----a-w C:\WINDOWS\system32\PresentationNative_v0300.dll + 2006-10-14 15:43:38 124,416 ------w C:\WINDOWS\system32\prntvpt.dll - 2004-08-04 11:00:00 1,291,264 ----a-w C:\WINDOWS\system32\quartz.dll + 2005-08-30 03:56:14 1,290,752 ----a-w C:\WINDOWS\system32\quartz.dll - 2004-08-04 11:00:00 1,439,744 ----a-w C:\WINDOWS\system32\query.dll + 2006-06-22 05:18:14 1,439,744 ----a-w C:\WINDOWS\system32\query.dll - 2004-08-04 11:00:00 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll + 2006-06-26 17:45:40 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.dll - 2004-08-04 11:00:00 174,080 ----a-w C:\WINDOWS\system32\rasmans.dll + 2006-06-22 10:54:46 181,248 ----a-w C:\WINDOWS\system32\rasmans.dll + 2006-07-31 10:27:30 217,088 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\Alcrmv.exe + 2007-08-07 17:33:12 4,108,992 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\ALCXWDM.SYS + 2004-08-03 22:08:00 60,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\i386\drmk.sys + 2004-08-03 22:15:22 140,928 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\i386\ks.sys + 2004-08-03 23:44:02 4,096 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\i386\ksuser.dll + 2004-08-03 22:15:50 145,792 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\i386\portcls.sys + 2004-08-03 22:08:04 48,640 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\i386\stream.sys + 2006-10-18 01:53:26 147,456 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\RTLCPAPI.dll + 2006-12-08 14:20:14 10,528,768 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\RTLCPL.EXE + 2007-04-16 14:28:22 577,536 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]001\DriverFiles\SOUNDMAN.EXE + 2006-08-24 15:15:06 150,808 ----a-w C:\WINDOWS\system32\rgb9rast_2.dll + 2006-12-21 13:16:24 288,768 ------w C:\WINDOWS\system32\rhttpaa.dll - 2004-08-04 11:00:00 431,616 ----a-w C:\WINDOWS\system32\riched20.dll + 2006-11-27 14:55:46 433,152 ----a-w C:\WINDOWS\system32\riched20.dll + 2006-11-06 10:35:44 523,376 ----a-w C:\WINDOWS\system32\RmActivate.exe + 2006-11-06 10:35:46 531,568 ----a-w C:\WINDOWS\system32\RmActivate_isv.exe + 2006-11-06 10:35:38 358,000 ----a-w C:\WINDOWS\system32\RmActivate_ssp.exe + 2006-11-06 10:35:36 354,416 ----a-w C:\WINDOWS\system32\RmActivate_ssp_isv.exe - 2004-08-04 11:00:00 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll + 2005-11-11 03:24:14 581,632 ----a-w C:\WINDOWS\system32\rpcrt4.dll - 2004-08-04 11:00:00 395,776 ----a-w C:\WINDOWS\system32\rpcss.dll + 2005-07-26 04:42:36 397,824 ----a-w C:\WINDOWS\system32\rpcss.dll + 2006-11-08 08:51:54 10,752 ------w C:\WINDOWS\system32\rspndr.exe - 2004-08-04 11:00:00 144,896 ----a-w C:\WINDOWS\system32\schannel.dll + 2007-04-25 14:23:30 144,896 ----a-w C:\WINDOWS\system32\schannel.dll - 2004-08-04 11:00:00 159,744 ----a-w C:\WINDOWS\system32\scrobj.dll + 2007-07-31 19:45:28 163,840 ----a-w C:\WINDOWS\system32\scrobj.dll - 2004-08-04 11:00:00 151,552 ----a-w C:\WINDOWS\system32\scrrun.dll + 2007-07-31 19:45:28 155,648 ----a-w C:\WINDOWS\system32\scrrun.dll + 2006-11-06 10:35:42 518,768 ----a-w C:\WINDOWS\system32\SecProc.dll + 2006-11-06 10:35:42 519,280 ----a-w C:\WINDOWS\system32\SecProc_isv.dll + 2006-11-06 10:35:30 192,624 ----a-w C:\WINDOWS\system32\SecProc_ssp.dll + 2006-11-06 10:35:32 192,624 ----a-w C:\WINDOWS\system32\SecProc_ssp_isv.dll - 2004-08-04 11:00:00 1,483,264 ----a-w C:\WINDOWS\system32\shdocvw.dll + 2007-06-15 08:14:14 1,498,112 ----a-w C:\WINDOWS\system32\shdocvw.dll - 2004-08-04 11:00:00 8,412,672 ----a-w C:\WINDOWS\system32\shell32.dll + 2006-12-19 21:51:04 8,482,304 ----a-w C:\WINDOWS\system32\shell32.dll - 2004-08-04 11:00:00 473,600 ----a-w C:\WINDOWS\system32\shlwapi.dll + 2007-06-15 08:14:14 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll - 2004-08-04 11:00:00 135,168 ----a-w C:\WINDOWS\system32\shsvcs.dll + 2006-12-19 21:51:04 135,168 ----a-w C:\WINDOWS\system32\shsvcs.dll + 2007-04-16 21:47:36 33,624 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.374\wups.dll + 2006-10-16 15:10:58 14,640 ------w C:\WINDOWS\system32\spmsg.dll + 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdrv.dll + 2006-10-14 15:42:40 131,584 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.dll + 2006-10-14 15:42:18 376,320 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll + 2006-10-14 15:42:28 510,464 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll + 2006-10-14 15:40:36 619,008 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\unires.dll + 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\XpsSvcs.dll + 2006-10-14 15:43:18 27,648 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll + 2006-10-14 15:44:44 671,744 ------w C:\WINDOWS\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe + 2006-10-14 16:13:02 34,304 ----a-w C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll + 2006-10-14 16:12:14 737,792 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll + 2006-10-14 19:09:04 2,946,304 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll + 2006-10-14 16:12:14 737,792 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\mxdwdrv.dll + 2006-10-14 19:09:04 2,946,304 ----a-w C:\WINDOWS\system32\spool\XPSEP\amd64\xpssvcs.dll + 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\mxdwdrv.dll + 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\i386\xpssvcs.dll + 2006-10-14 15:43:18 751,104 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\mxdwdrv.dll + 2006-10-14 19:22:00 1,698,048 ----a-w C:\WINDOWS\system32\spool\XPSEP\i386\xpssvcs.dll - 2004-08-04 11:00:00 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe + 2005-06-10 23:53:32 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe + 2006-10-16 15:10:58 23,856 ----a-w C:\WINDOWS\system32\spupdsvc.exe - 2004-08-04 11:00:00 246,302 ----a-w C:\WINDOWS\system32\strmdll.dll + 2006-08-24 12:19:52 246,814 ----a-w C:\WINDOWS\system32\strmdll.dll - 2004-08-04 11:00:00 714,240 ----a-w C:\WINDOWS\system32\sxs.dll + 2006-10-20 01:41:08 714,240 ----a-w C:\WINDOWS\system32\sxs.dll - 2004-08-04 11:00:00 210,432 ----a-w C:\WINDOWS\system32\t2embed.dll + 2005-10-17 21:21:40 118,272 ----a-w C:\WINDOWS\system32\t2embed.dll - 2004-08-04 11:00:00 246,272 ----a-w C:\WINDOWS\system32\tapisrv.dll + 2005-07-08 16:29:18 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dll - 2004-08-04 11:00:00 77,312 ----a-w C:\WINDOWS\system32\telnet.exe + 2005-05-11 02:31:24 77,824 ----a-w C:\WINDOWS\system32\telnet.exe + 2006-12-21 13:16:24 36,352 ------w C:\WINDOWS\system32\tsgqec.dll - 2004-08-04 11:00:00 44,032 ----a-w C:\WINDOWS\system32\twext.dll + 2005-07-19 02:51:36 55,808 ----a-w C:\WINDOWS\system32\twext.dll - 2004-08-04 11:00:00 101,376 ----a-w C:\WINDOWS\system32\txflog.dll + 2005-07-26 04:42:36 101,376 ----a-w C:\WINDOWS\system32\txflog.dll + 2007-01-29 08:58:06 60,416 ------w C:\WINDOWS\system32\tzchange.exe + 2006-10-20 20:29:54 159,008 ----a-w C:\WINDOWS\system32\UIAutomationCore.dll - 2004-08-04 11:00:00 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll + 2006-10-04 13:39:40 36,352 ----a-w C:\WINDOWS\system32\umandlg.dll - 2004-08-04 11:00:00 118,784 ----a-w C:\WINDOWS\system32\umpnpmgr.dll + 2005-08-23 03:40:06 123,904 ----a-w C:\WINDOWS\system32\umpnpmgr.dll - 2004-08-04 11:00:00 185,856 ----a-w C:\WINDOWS\system32\upnphost.dll + 2007-02-05 20:19:48 185,856 ----a-w C:\WINDOWS\system32\upnphost.dll - 2004-08-04 11:00:00 602,112 ----a-w C:\WINDOWS\system32\urlmon.dll + 2007-06-15 08:14:14 617,984 ----a-w C:\WINDOWS\system32\urlmon.dll + 2003-02-20 18:06:20 282,624 ----a-w C:\WINDOWS\system32\URTTemp\fusion.dll + 2003-02-20 18:06:24 155,648 ----a-w C:\WINDOWS\system32\URTTemp\mscoree.dll + 2003-02-20 18:09:18 77,824 ----a-w C:\WINDOWS\system32\URTTemp\mscorsn.dll + 2003-02-20 18:08:32 2,482,176 ----a-w C:\WINDOWS\system32\URTTemp\mscorwks.dll + 2003-02-21 03:42:22 348,160 ----a-w C:\WINDOWS\system32\URTTemp\msvcr71.dll + 2003-02-21 03:16:08 49,152 ----a-w C:\WINDOWS\system32\URTTemp\regtlib.exe - 2004-08-04 11:00:00 578,560 ----a-w C:\WINDOWS\system32\user32.dll + 2007-03-08 15:38:48 579,072 ----a-w C:\WINDOWS\system32\user32.dll - 2004-08-04 11:00:00 50,176 ----a-w C:\WINDOWS\system32\utilman.exe + 2006-10-04 13:34:52 50,176 ----a-w C:\WINDOWS\system32\utilman.exe - 2004-08-04 11:00:00 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll + 2004-09-23 17:18:04 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll - 2004-08-04 11:00:00 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll + 2007-07-31 19:45:28 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll + 2006-03-17 00:38:02 28,672 ------w C:\WINDOWS\system32\verclsid.exe - 2004-08-04 12:00:00 530,944 ----a-w C:\WINDOWS\system32\wbem\wbemcore.dll + 2006-01-17 03:36:30 530,944 ----a-w C:\WINDOWS\system32\wbem\wbemcore.dll - 2004-08-04 11:00:00 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll + 2006-03-24 04:39:56 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll - 2004-08-04 11:00:00 67,584 ----a-w C:\WINDOWS\system32\webclnt.dll + 2006-01-04 03:36:30 68,096 ----a-w C:\WINDOWS\system32\webclnt.dll - 2004-08-04 11:00:00 333,824 ----a-w C:\WINDOWS\system32\wiaservc.dll + 2006-12-19 18:18:26 334,336 ----a-w C:\WINDOWS\system32\wiaservc.dll - 2004-08-04 11:00:00 1,836,160 ----a-w C:\WINDOWS\system32\win32k.sys + 2007-04-11 06:47:00 1,843,840 ----a-w C:\WINDOWS\system32\win32k.sys + 2006-10-24 11:30:06 716,288 ------w C:\WINDOWS\system32\WindowsCodecs.dll + 2006-10-24 11:29:50 352,256 ------w C:\WINDOWS\system32\WindowsCodecsExt.dll - 2004-08-04 11:00:00 658,944 ----a-w C:\WINDOWS\system32\wininet.dll + 2007-06-26 14:53:48 668,160 ----a-w C:\WINDOWS\system32\wininet.dll - 2004-08-04 11:00:00 291,328 ----a-w C:\WINDOWS\system32\winsrv.dll + 2007-03-17 13:45:36 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll - 2004-08-04 11:00:00 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll + 2006-08-17 12:43:18 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll + 2006-11-01 07:17:54 69,120 ------w C:\WINDOWS\system32\wlanapi.dll + 2006-10-24 11:30:00 276,992 ------w C:\WINDOWS\system32\WMPhoto.dll - 2004-08-04 11:00:00 114,688 ----a-w C:\WINDOWS\system32\wscript.exe + 2007-07-31 19:45:22 135,168 ----a-w C:\WINDOWS\system32\wscript.exe - 2004-08-04 11:00:00 28,672 ----a-w C:\WINDOWS\system32\wshcon.dll + 2007-07-31 19:45:30 36,864 ----a-w C:\WINDOWS\system32\wshcon.dll - 2004-08-04 11:00:00 65,536 ----a-w C:\WINDOWS\system32\wshext.dll + 2007-07-31 19:45:30 69,632 ----a-w C:\WINDOWS\system32\wshext.dll - 2004-08-04 12:00:00 431,616 ----a-w C:\WINDOWS\system32\wuapi.dll + 2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll - 2004-08-04 12:00:00 112,128 ----a-w C:\WINDOWS\system32\wuauclt.exe + 2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe - 2004-08-04 12:00:00 1,134,592 ----a-w C:\WINDOWS\system32\wuaueng.dll + 2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll - 2004-08-04 12:00:00 113,664 ----a-w C:\WINDOWS\system32\wucltui.dll + 2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll - 2004-08-04 12:00:00 36,864 ----a-w C:\WINDOWS\system32\wups.dll + 2007-04-16 21:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll + 2007-04-16 21:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll - 2004-08-04 12:00:00 120,320 ----a-w C:\WINDOWS\system32\wuweb.dll + 2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll - 2004-08-04 11:00:00 378,880 ----a-w C:\WINDOWS\system32\wzcdlg.dll + 2006-08-18 12:39:20 384,000 ----a-w C:\WINDOWS\system32\wzcdlg.dll - 2004-08-04 11:00:00 51,712 ----a-w C:\WINDOWS\system32\wzcsapi.dll + 2006-08-18 12:39:20 52,736 ----a-w C:\WINDOWS\system32\wzcsapi.dll - 2004-08-04 11:00:00 359,936 ----a-w C:\WINDOWS\system32\wzcsvc.dll + 2006-08-18 12:39:22 476,160 ----a-w C:\WINDOWS\system32\wzcsvc.dll - 2004-08-04 12:00:00 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll + 2006-03-01 19:44:20 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dll + 2007-06-14 02:57:00 368,640 ----a-w C:\WINDOWS\system32\xpsp3res.dll + 2006-10-14 19:21:58 580,352 ------w C:\WINDOWS\system32\XPSSHHDR.dll + 2006-10-14 19:22:00 1,698,048 ------w C:\WINDOWS\system32\XpsSvcs.dll + 2006-10-20 20:29:54 304,928 ----a-w C:\WINDOWS\system32\XPSViewer\XPSViewer.exe + 2007-05-08 14:06:44 1,275,392 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll + 2007-04-18 09:36:40 82,432 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll + 2007-01-19 12:52:04 74,802 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll + 2007-01-19 12:52:04 995,383 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll + 2007-01-19 12:52:04 1,011,774 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll + 2007-01-19 12:52:04 401,462 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll + 2005-09-23 06:29:16 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll + 2005-09-23 06:29:16 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll + 2005-09-23 06:29:16 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll + 2006-08-25 07:51:14 1,054,208 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll + 2007-02-19 10:34:18 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.3085_x-ww_e059201c\msvcirt.dll + 2007-02-19 10:34:18 343,040 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.3085_x-ww_e059201c\msvcrt.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 01:07] "nwiz"="nwiz.exe" [2007-09-17 01:07 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 01:07] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-10-02 16:27] "SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 11:38] "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-06-28 12:51] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 15:28 C:\WINDOWS\soundman.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-06-14 18:32] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55] "eMuleAutoStart"="F:\Program Files\eMule\emule.exe" [2007-05-13 15:57] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice" R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS *Newly Created Service* - BITS . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-10 09:35:38 Windows 5.1.2600 Dodatek Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-10 9:36:31 . --- E O F ---
Pan_Kakenholz
Dodano
09.11.2007 14:54:51
Log jest ucięty - po pierwsze. Po drugie - system sobie zaktualizuj - łata KB921883 do zainstalowania.
Żółty
Dodano
09.11.2007 00:04:01
firewalla mam windosowskiego + ochrona kasperskyego i spyware doctor ogolnie sciaganie z neta jest z max predkoscia, ale przegladanie stron jest fatalne co mam z tym zrobic? skanowalem jeszcze anti trojan elite , wykryl trojany ale nie usunal bo nie zarejestrowany program i mks virus online pozatym kazdy ze skanerow znajduje innego wirusa albo trojana ;/ a teraz jeszcze wystepuje co chwile problem z GENERIC HOST PROCESS for WIN32 i restart musze zrobic bo z netem nie laczy ;/ sygnatura bledu generic host process EventType : BEX P1 : svchost.exe P2 : 5.1.2600.2180 P3 : 41107ed6 P4 : netapi32.dll P5 : 5.1.2600.2180 P6 : 41109395 P7 : 0000a3c0 P8 : c0000409 P9 : 00000000 a teraz juz obojetnie co nie klikne to wyskakuje np: uruchomiony proces c:/windows/explorer.exe wykryto modyfikacje riskware invader i zaraz po tym zamkniecie generic host proces.... nie zdazam nawet uruchomic centrumxp.pl bo dupa rozlacza nie mam juz sily na to ComboFix 07-11-08.1 - Pan_Kakenholz 2007-11-09 16:15:48.3 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1045.18.1571 [GMT 1:00] Running from: C:\Documents and Settings\Pan_Kakenholz\Pulpit\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2007-10-09 to 2007-11-09 ))))))))))))))))))))))))))))))) . 2007-11-09 12:03 d-------- C:\Program Files\SkanerOnline 2007-11-09 11:40 d-------- C:\Program Files\NoAdware5.0 2007-11-09 11:02 d-------- C:\Documents and Settings\Pan_Kakenholz\Dane aplikacji\DivX 2007-11-09 11:01 d-------- C:\Program Files\ffdshow 2007-11-09 11:01 d-------- C:\Program Files\DivX 2007-11-09 11:01 60,273 --a------ C:\WINDOWS\system32\pthreadGC2.dll 2007-11-09 11:01 7,680 --a------ C:\WINDOWS\system32\ff_vfw.dll 2007-11-07 23:06 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-07 22:42 d-------- C:\Program Files\Trend Micro 2007-11-07 22:22 d-------- C:\Program Files\Kaspersky Lab 2007-11-07 22:22 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2007-11-07 22:22 1,302,816 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-11-07 22:22 82,061 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-11-07 22:22 81,549 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-11-07 22:22 2,592 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-11-07 22:21 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2007-11-07 22:19 d-------- C:\Program Files\Winamp 2007-11-07 22:00 d-------- C:\Program Files\Thomson 2007-11-07 22:00 70,688 --a------ C:\WINDOWS\system32\drivers\alcaudsl.sys 2007-11-07 22:00 53,600 --a------ C:\WINDOWS\system32\drivers\alcan5wn.sys 2007-11-07 22:00 5,606 --a------ C:\WINDOWS\system32\stci.dll 2007-11-07 22:00 5,280 --a------ C:\WINDOWS\system32\drivers\alcawh.sys 2007-11-07 22:00 3,968 --a------ C:\WINDOWS\system32\drivers\alcacr.sys 2007-11-07 21:59 d-------- C:\Program Files\Spyware Doctor 2007-11-07 21:59 d-------- C:\Documents and Settings\Pan_Kakenholz\Dane aplikacji\PC Tools 2007-11-07 21:59 d-------- C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2007-11-07 21:59 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-11-07 21:59 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-11-07 21:59 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-11-07 21:59 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-11-07 21:58 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-11-07 21:58 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2007-11-07 21:58 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2007-11-07 21:56 d-------- C:\Program Files\Realtek AC97 2007-11-07 21:56 d--h----- C:\Program Files\InstallShield Installation Information 2007-11-07 21:55 466,944 --a------ C:\WINDOWS\system32\CapabilityTable.exe 2007-11-07 21:55 208,896 --a------ C:\WINDOWS\system32\nvusmb.exe 2007-11-07 21:55 208,896 --a------ C:\WINDOWS\system32\nvunrm.exe 2007-11-07 21:55 208,896 --------- C:\WINDOWS\system32\nvuide.exe 2007-11-07 21:55 101,888 --a------ C:\WINDOWS\system32\drivers\nvtcp.sys 2007-11-07 21:54 d-------- C:\WINDOWS\nview 2007-11-07 21:54 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-11-07 21:53 d-------- C:\Program Files\Common Files\InstallShield 2007-11-07 21:53 d-------- C:\NVIDIA 2007-11-07 21:53 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2007-11-06 23:13 26,496 --a------ C:\WINDOWS\system32\dllcache\usbstor.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-07 21:29 32 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx 2007-11-07 21:29 32 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2007-11-06 21:10 --------- d-----w C:\Program Files\microsoft frontpage 2007-11-06 21:09 --------- d-----w C:\Program Files\Usługi online 2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll 2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll 2007-09-17 00:07 8,491,008 ----a-w C:\WINDOWS\system32\nvcpl.dll 2007-09-17 00:07 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe 2007-09-17 00:07 6,853,088 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-09-17 00:07 6,853,088 ----a-w C:\WINDOWS\system32\dllcache\nv4_mini.sys 2007-09-17 00:07 6,746,112 ----a-w C:\WINDOWS\system32\nvoglnt.dll 2007-09-17 00:07 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll 2007-09-17 00:07 5,783,040 ----a-w C:\WINDOWS\system32\nv4_disp.dll 2007-09-17 00:07 5,783,040 ----a-w C:\WINDOWS\system32\dllcache\nv4_disp.dll 2007-09-17 00:07 5,509,120 ----a-w C:\WINDOWS\system32\nvdispsr.dll 2007-09-17 00:07 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll 2007-09-17 00:07 458,752 ----a-w C:\WINDOWS\system32\nvmccssr.dll 2007-09-17 00:07 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll 2007-09-17 00:07 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe 2007-09-17 00:07 425,984 ----a-w C:\WINDOWS\system32\keystone.exe 2007-09-17 00:07 364,544 ----a-w C:\WINDOWS\system32\nvapi.dll 2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcodins.dll 2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcod.dll 2007-09-17 00:07 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll 2007-09-17 00:07 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvrshe.dll 2007-09-17 00:07 327,680 ----a-w C:\WINDOWS\system32\nvrsar.dll 2007-09-17 00:07 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll 2007-09-17 00:07 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll 2007-09-17 00:07 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll 2007-09-17 00:07 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll 2007-09-17 00:07 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll 2007-09-17 00:07 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll 2007-09-17 00:07 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll 2007-09-17 00:07 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll 2007-09-17 00:07 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll 2007-09-17 00:07 3,629,056 ----a-w C:\WINDOWS\system32\nvvitvsr.dll 2007-09-17 00:07 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll 2007-09-17 00:07 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll 2007-09-17 00:07 3,166,208 ----a-w C:\WINDOWS\system32\nvgamesr.dll 2007-09-17 00:07 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll 2007-09-17 00:07 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll 2007-09-17 00:07 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll 2007-09-17 00:07 290,816 ----a-w C:\WINDOWS\system32\nvwrsth.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll 2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrsfr.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrses.dll 2007-09-17 00:07 282,624 ----a-w C:\WINDOWS\system32\nvrsel.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvrsit.dll 2007-09-17 00:07 278,528 ----a-w C:\WINDOWS\system32\nvrsde.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrspt.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrsnl.dll 2007-09-17 00:07 274,432 ----a-w C:\WINDOWS\system32\nvrsesm.dll 2007-09-17 00:07 270,336 ----a-w C:\WINDOWS\system32\nvrsru.dll 2007-09-17 00:07 266,240 ----a-w C:\WINDOWS\system32\nvrsptb.dll 2007-09-17 00:07 266,240 ----a-w C:\WINDOWS\system32\nvrsja.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrstr.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrssl.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrssk.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrsko.dll 2007-09-17 00:07 258,048 ----a-w C:\WINDOWS\system32\nvrshu.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsth.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrssv.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrspl.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsno.dll 2007-09-17 00:07 253,952 ----a-w C:\WINDOWS\system32\nvrsda.dll 2007-09-17 00:07 249,856 ----a-w C:\WINDOWS\system32\nvrsfi.dll 2007-09-17 00:07 249,856 ----a-w C:\WINDOWS\system32\nvrscs.dll 2007-09-17 00:07 245,760 ----a-w C:\WINDOWS\system32\nvrseng.dll 2007-09-17 00:07 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll 2007-09-17 00:07 225,280 ----a-w C:\WINDOWS\system32\nvrszhc.dll 2007-09-17 00:07 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll 2007-09-17 00:07 2,854,912 ----a-w C:\WINDOWS\system32\nvmoblsr.dll 2007-09-17 00:07 2,441,216 ----a-w C:\WINDOWS\system32\nvwssr.dll 2007-09-17 00:07 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll 2007-09-17 00:07 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll 2007-09-17 00:07 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll 2007-09-17 00:07 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll 2007-09-17 00:07 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll 2007-09-17 00:07 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe 2007-09-17 00:07 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe 2007-09-17 00:07 126,976 ----a-w C:\WINDOWS\system32\nvrszht.dll 2007-09-17 00:07 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll 2007-09-17 00:07 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe 2007-09-17 00:07 1,478,656 ----a-w C:\WINDOWS\system32\nview.dll 2007-09-17 00:07 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe 2007-09-17 00:07 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll 2007-09-17 00:07 1,073,152 ----a-w C:\WINDOWS\system32\nvcpluir.dll 2007-09-17 00:07 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 01:07] "nwiz"="nwiz.exe" [2007-09-17 01:07 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 01:07] "SoundMan"="SOUNDMAN.EXE" [2007-04-16 15:28 C:\WINDOWS\soundman.exe] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-10-02 16:27] "SpeedTouch USB Diagnostics"="C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 11:38] "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-06-28 12:51] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 00:55] "eMuleAutoStart"="F:\Program Files\eMule\emule.exe" [2007-05-13 15:57] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice" R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys . ************************************************************************** catchme 0.3.1250 W2K/XP/Vi NIECH KTOS MI POMOZE !!!!!!!!!!!!!!!!!
Pan_Kakenholz
Dodano
08.11.2007 23:39:42
Nic tu nie widać. Pokaż jeszcze loga ComboFix Masz firewalla łączonego i skonfigurowanego ??
Żółty
Dodano
08.11.2007 12:08:16
Pan_Kakenholz
Dodano:
08.11.2007 11:59:52
Komentarzy:
5
Strona 1 / 1