2. WinPFind3U report second half
[Files/Folders - Created Within 30 days]
3b697f84bfb9385f72ae8ff8 -> %SystemDrive%\3b697f84bfb9385f72ae8ff8 -> [Folder | Created Date = 16/10/2007 21:19:45 | Attr = ]
49021bd2aa5099d7b904 -> %SystemDrive%\49021bd2aa5099d7b904 -> [Folder | Created Date = 16/10/2007 20:55:58 | Attr = ]
asdfk.exe -> %SystemDrive%\asdfk.exe -> [Ver = | Size = 46202 bytes | Created Date = 15/10/2007 19:49:17 | Attr = ]
$NtServicePackUninstall$ -> %SystemRoot%\$NtServicePackUninstall$ -> [Folder | Created Date = 17/10/2007 18:27:31 | Attr = H ]
$NtUninstallKB833407$ -> %SystemRoot%\$NtUninstallKB833407$ -> [Folder | Created Date = 17/10/2007 06:26:44 | Attr = H ]
$NtUninstallKB835409$ -> %SystemRoot%\$NtUninstallKB835409$ -> [Folder | Created Date = 17/10/2007 03:24:15 | Attr = H ]
$NtUninstallKB835732$ -> %SystemRoot%\$NtUninstallKB835732$ -> [Folder | Created Date = 17/10/2007 00:03:08 | Attr = H ]
$NtUninstallKB842773$ -> %SystemRoot%\$NtUninstallKB842773$ -> [Folder | Created Date = 16/10/2007 22:18:26 | Attr = H ]
$NtUninstallKB885835$ -> %SystemRoot%\$NtUninstallKB885835$ -> [Folder | Created Date = 17/10/2007 18:50:03 | Attr = H ]
$NtUninstallKB885835_0$ -> %SystemRoot%\$NtUninstallKB885835_0$ -> [Folder | Created Date = 17/10/2007 00:15:30 | Attr = H ]
$NtUninstallKB885836$ -> %SystemRoot%\$NtUninstallKB885836$ -> [Folder | Created Date = 17/10/2007 18:51:13 | Attr = H ]
$NtUninstallKB885836_0$ -> %SystemRoot%\$NtUninstallKB885836_0$ -> [Folder | Created Date = 16/10/2007 23:26:13 | Attr = H ]
$NtUninstallKB886185$ -> %SystemRoot%\$NtUninstallKB886185$ -> [Folder | Created Date = 17/10/2007 21:04:17 | Attr = H ]
$NtUninstallKB888302$ -> %SystemRoot%\$NtUninstallKB888302$ -> [Folder | Created Date = 17/10/2007 18:52:12 | Attr = H ]
$NtUninstallKB888302_0$ -> %SystemRoot%\$NtUninstallKB888302_0$ -> [Folder | Created Date = 16/10/2007 23:38:16 | Attr = H ]
$NtUninstallKB890046$ -> %SystemRoot%\$NtUninstallKB890046$ -> [Folder | Created Date = 17/10/2007 18:53:06 | Attr = H ]
$NtUninstallKB890859$ -> %SystemRoot%\$NtUninstallKB890859$ -> [Folder | Created Date = 17/10/2007 18:54:07 | Attr = H ]
$NtUninstallKB891781$ -> %SystemRoot%\$NtUninstallKB891781$ -> [Folder | Created Date = 17/10/2007 18:55:11 | Attr = H ]
$NtUninstallKB891781_0$ -> %SystemRoot%\$NtUninstallKB891781_0$ -> [Folder | Created Date = 16/10/2007 23:49:21 | Attr = H ]
$NtUninstallKB893756$ -> %SystemRoot%\$NtUninstallKB893756$ -> [Folder | Created Date = 17/10/2007 18:56:22 | Attr = H ]
$NtUninstallKB896344$ -> %SystemRoot%\$NtUninstallKB896344$ -> [Folder | Created Date = 17/10/2007 22:49:07 | Attr = H ]
$NtUninstallKB896358$ -> %SystemRoot%\$NtUninstallKB896358$ -> [Folder | Created Date = 17/10/2007 18:57:26 | Attr = H ]
$NtUninstallKB896423$ -> %SystemRoot%\$NtUninstallKB896423$ -> [Folder | Created Date = 17/10/2007 18:58:47 | Attr = H ]
$NtUninstallKB896424$ -> %SystemRoot%\$NtUninstallKB896424$ -> [Folder | Created Date = 17/10/2007 18:59:57 | Attr = H ]
$NtUninstallKB896428$ -> %SystemRoot%\$NtUninstallKB896428$ -> [Folder | Created Date = 17/10/2007 19:00:52 | Attr = H ]
$NtUninstallKB899587$ -> %SystemRoot%\$NtUninstallKB899587$ -> [Folder | Created Date = 17/10/2007 19:01:46 | Attr = H ]
$NtUninstallKB900725$ -> %SystemRoot%\$NtUninstallKB900725$ -> [Folder | Created Date = 17/10/2007 19:02:40 | Attr = H ]
$NtUninstallKB901017$ -> %SystemRoot%\$NtUninstallKB901017$ -> [Folder | Created Date = 17/10/2007 19:03:36 | Attr = H ]
$NtUninstallKB901190$ -> %SystemRoot%\$NtUninstallKB901190$ -> [Folder | Created Date = 17/10/2007 19:04:28 | Attr = H ]
$NtUninstallKB901214$ -> %SystemRoot%\$NtUninstallKB901214$ -> [Folder | Created Date = 17/10/2007 19:05:26 | Attr = H ]
$NtUninstallKB902400$ -> %SystemRoot%\$NtUninstallKB902400$ -> [Folder | Created Date = 17/10/2007 19:06:24 | Attr = H ]
$NtUninstallKB904706$ -> %SystemRoot%\$NtUninstallKB904706$ -> [Folder | Created Date = 17/10/2007 02:28:32 | Attr = H ]
$NtUninstallKB905414$ -> %SystemRoot%\$NtUninstallKB905414$ -> [Folder | Created Date = 17/10/2007 19:07:24 | Attr = H ]
$NtUninstallKB905495$ -> %SystemRoot%\$NtUninstallKB905495$ -> [Folder | Created Date = 17/10/2007 02:51:52 | Attr = H ]
$NtUninstallKB905749$ -> %SystemRoot%\$NtUninstallKB905749$ -> [Folder | Created Date = 17/10/2007 19:08:24 | Attr = H ]
$NtUninstallKB908519$ -> %SystemRoot%\$NtUninstallKB908519$ -> [Folder | Created Date = 17/10/2007 19:09:31 | Attr = H ]
$NtUninstallKB908531$ -> %SystemRoot%\$NtUninstallKB908531$ -> [Folder | Created Date = 17/10/2007 19:10:48 | Attr = H ]
$NtUninstallKB910437$ -> %SystemRoot%\$NtUninstallKB910437$ -> [Folder | Created Date = 17/10/2007 19:12:25 | Attr = H ]
$NtUninstallKB911280$ -> %SystemRoot%\$NtUninstallKB911280$ -> [Folder | Created Date = 17/10/2007 19:13:31 | Attr = H ]
$NtUninstallKB911562$ -> %SystemRoot%\$NtUninstallKB911562$ -> [Folder | Created Date = 17/10/2007 19:15:07 | Attr = H ]
$NtUninstallKB911567-OE6SP1-20060316.165634$ -> %SystemRoot%\$NtUninstallKB911567-OE6SP1-20060316.165634$ -> [Folder | Created Date = 17/10/2007 04:39:11 | Attr = H ]
$NtUninstallKB911927$ -> %SystemRoot%\$NtUninstallKB911927$ -> [Folder | Created Date = 17/10/2007 19:17:06 | Attr = H ]
$NtUninstallKB912919$ -> %SystemRoot%\$NtUninstallKB912919$ -> [Folder | Created Date = 17/10/2007 19:18:39 | Attr = H ]
$NtUninstallKB913580$ -> %SystemRoot%\$NtUninstallKB913580$ -> [Folder | Created Date = 17/10/2007 19:20:38 | Attr = H ]
$NtUninstallKB914388$ -> %SystemRoot%\$NtUninstallKB914388$ -> [Folder | Created Date = 17/10/2007 19:23:44 | Attr = H ]
$NtUninstallKB914389$ -> %SystemRoot%\$NtUninstallKB914389$ -> [Folder | Created Date = 17/10/2007 19:28:09 | Attr = H ]
$NtUninstallKB917344$ -> %SystemRoot%\$NtUninstallKB917344$ -> [Folder | Created Date = 17/10/2007 19:32:37 | Attr = H ]
$NtUninstallKB917422$ -> %SystemRoot%\$NtUninstallKB917422$ -> [Folder | Created Date = 17/10/2007 19:37:17 | Attr = H ]
$NtUninstallKB917953$ -> %SystemRoot%\$NtUninstallKB917953$ -> [Folder | Created Date = 17/10/2007 19:40:13 | Attr = H ]
$NtUninstallKB918439-IE6SP1-20060530.145346$ -> %SystemRoot%\$NtUninstallKB918439-IE6SP1-20060530.145346$ -> [Folder | Created Date = 17/10/2007 05:32:59 | Attr = H ]
$NtUninstallKB918899-IE6SP1-20060725.123917$ -> %SystemRoot%\$NtUninstallKB918899-IE6SP1-20060725.123917$ -> [Folder | Created Date = 17/10/2007 08:26:06 | Attr = H ]
$NtUninstallKB919007$ -> %SystemRoot%\$NtUninstallKB919007$ -> [Folder | Created Date = 17/10/2007 19:42:07 | Attr = H ]
$NtUninstallKB920342$ -> %SystemRoot%\$NtUninstallKB920342$ -> [Folder | Created Date = 17/10/2007 22:49:25 | Attr = H ]
$NtUninstallKB920670$ -> %SystemRoot%\$NtUninstallKB920670$ -> [Folder | Created Date = 17/10/2007 19:43:10 | Attr = H ]
$NtUninstallKB920683$ -> %SystemRoot%\$NtUninstallKB920683$ -> [Folder | Created Date = 17/10/2007 19:44:17 | Attr = H ]
$NtUninstallKB920685$ -> %SystemRoot%\$NtUninstallKB920685$ -> [Folder | Created Date = 17/10/2007 19:45:24 | Attr = H ]
$NtUninstallKB921398$ -> %SystemRoot%\$NtUninstallKB921398$ -> [Folder | Created Date = 17/10/2007 19:46:29 | Attr = H ]
$NtUninstallKB921883$ -> %SystemRoot%\$NtUninstallKB921883$ -> [Folder | Created Date = 17/10/2007 19:47:41 | Attr = H ]
$NtUninstallKB922616$ -> %SystemRoot%\$NtUninstallKB922616$ -> [Folder | Created Date = 17/10/2007 19:48:44 | Attr = H ]
$NtUninstallKB922819$ -> %SystemRoot%\$NtUninstallKB922819$ -> [Folder | Created Date = 17/10/2007 19:49:45 | Attr = H ]
$NtUninstallKB923191$ -> %SystemRoot%\$NtUninstallKB923191$ -> [Folder | Created Date = 17/10/2007 19:50:51 | Attr = H ]
$NtUninstallKB923414$ -> %SystemRoot%\$NtUninstallKB923414$ -> [Folder | Created Date = 17/10/2007 19:52:16 | Attr = H ]
$NtUninstallKB924191$ -> %SystemRoot%\$NtUninstallKB924191$ -> [Folder | Created Date = 17/10/2007 19:53:18 | Attr = H ]
$NtUninstallKB924496$ -> %SystemRoot%\$NtUninstallKB924496$ -> [Folder | Created Date = 17/10/2007 19:54:18 | Attr = H ]
$NtUninstallKB925486-IE6SP1-20060918.120000$ -> %SystemRoot%\$NtUninstallKB925486-IE6SP1-20060918.120000$ -> [Folder | Created Date = 17/10/2007 08:36:44 | Attr = H ]
$NtUninstallKB925720$ -> %SystemRoot%\$NtUninstallKB925720$ -> [Folder | Created Date = 18/10/2007 10:10:56 | Attr = H ]
$NtUninstallKB936782_WMP10$ -> %SystemRoot%\$NtUninstallKB936782_WMP10$ -> [Folder | Created Date = 17/10/2007 21:12:08 | Attr = H ]
$NtUninstallKB938127$ -> %SystemRoot%\$NtUninstallKB938127$ -> [Folder | Created Date = 17/10/2007 21:12:31 | Attr = H ]
$NtUninstallKB939653$ -> %SystemRoot%\$NtUninstallKB939653$ -> [Folder | Created Date = 17/10/2007 21:14:04 | Attr = H ]
$NtUninstallWIC$ -> %SystemRoot%\$NtUninstallWIC$ -> [Folder | Created Date = 17/10/2007 22:53:05 | Attr = H ]
002430_.tmp -> %SystemRoot%\002430_.tmp -> [Ver = | Size = 19528 bytes | Created Date = 17/10/2007 18:30:25 | Attr = ]
MegaManager.INI -> %SystemRoot%\MegaManager.INI -> [Ver = | Size = 50 bytes | Created Date = 26/09/2007 18:40:55 | Attr = ]
picts-0223.zip -> %SystemRoot%\picts-0223.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 20:45:05 | Attr = ]
picts-0401.zip -> %SystemRoot%\picts-0401.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:21:25 | Attr = ]
picts-0556.zip -> %SystemRoot%\picts-0556.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 10:59:08 | Attr = ]
picts-0603.zip -> %SystemRoot%\picts-0603.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 10:21:29 | Attr = ]
picts-0840.zip -> %SystemRoot%\picts-0840.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 22:24:59 | Attr = ]
picts-1758.zip -> %SystemRoot%\picts-1758.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 20:45:10 | Attr = ]
picts-2809.zip -> %SystemRoot%\picts-2809.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:59:15 | Attr = ]
picts-3984.zip -> %SystemRoot%\picts-3984.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 21:05:30 | Attr = ]
picts-6014.zip -> %SystemRoot%\picts-6014.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 13:04:24 | Attr = ]
picts-6041.zip -> %SystemRoot%\picts-6041.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:57:34 | Attr = ]
picts-6058.zip -> %SystemRoot%\picts-6058.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 22:37:38 | Attr = ]
picts-6248.zip -> %SystemRoot%\picts-6248.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 22:37:36 | Attr = ]
picts-6326.zip -> %SystemRoot%\picts-6326.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:54:30 | Attr = ]
picts-6403.zip -> %SystemRoot%\picts-6403.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 20:03:03 | Attr = ]
picts-6699.zip -> %SystemRoot%\picts-6699.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 10:43:16 | Attr = ]
picts-7316.zip -> %SystemRoot%\picts-7316.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 13:04:23 | Attr = ]
picts-7593.zip -> %SystemRoot%\picts-7593.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 20:13:09 | Attr = ]
picts-7857.zip -> %SystemRoot%\picts-7857.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 14:20:59 | Attr = ]
picts-7871.zip -> %SystemRoot%\picts-7871.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 11:19:08 | Attr = ]
picts-8049.zip -> %SystemRoot%\picts-8049.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 14:15:58 | Attr = ]
picts-8144.zip -> %SystemRoot%\picts-8144.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 11:19:06 | Attr = ]
picts-8268.zip -> %SystemRoot%\picts-8268.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 13:53:20 | Attr = ]
picts-8317.zip -> %SystemRoot%\picts-8317.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 22:25:04 | Attr = ]
picts-8814.zip -> %SystemRoot%\picts-8814.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 10:43:11 | Attr = ]
picts-8904.zip -> %SystemRoot%\picts-8904.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:59:14 | Attr = ]
picts-8993.zip -> %SystemRoot%\picts-8993.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:49:10 | Attr = ]
picts-9011.zip -> %SystemRoot%\picts-9011.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 10:21:29 | Attr = ]
picts-9275.zip -> %SystemRoot%\picts-9275.zip -> [Ver = | Size = 22 bytes | Created Date = 16/10/2007 14:20:59 | Attr = ]
picts-9326.zip -> %SystemRoot%\picts-9326.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 20:13:07 | Attr = ]
picts-9330.zip -> %SystemRoot%\picts-9330.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:20:05 | Attr = ]
picts-9380.zip -> %SystemRoot%\picts-9380.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 19:54:27 | Attr = ]
picts-9667.zip -> %SystemRoot%\picts-9667.zip -> [Ver = | Size = 22 bytes | Created Date = 15/10/2007 21:05:33 | Attr = ]
Prefetch -> %SystemRoot%\Prefetch -> [Folder | Created Date = 17/10/2007 20:51:18 | Attr = ]
SET191.tmp -> %SystemRoot%\SET191.tmp -> [Ver = | Size = 1086182 bytes | Created Date = 16/10/2007 16:35:31 | Attr = R ]
SET19D.tmp -> %SystemRoot%\SET19D.tmp -> [Ver = | Size = 13608 bytes | Created Date = 16/10/2007 16:35:34 | Attr = R ]
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Created Date = 16/10/2007 16:59:44 | Attr = RH ]
wininit.ini -> %SystemRoot%\wininit.ini -> [Ver = | Size = 93 bytes | Created Date = 21/10/2007 19:46:21 | Attr = ]
bits -> %System32%\bits -> [Folder | Created Date = 16/10/2007 22:28:40 | Attr = ]
coh.cache -> %System32%\coh.cache -> [Ver = | Size = 16 bytes | Created Date = 16/10/2007 23:27:53 | Attr = ]
dumphive.exe -> %System32%\dumphive.exe -> [Ver = | Size = 51200 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
logonui.exe.manifest -> %System32%\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Created Date = 16/10/2007 16:59:51 | Attr = RH ]
ncpa.cpl.manifest -> %System32%\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/10/2007 16:59:44 | Attr = RH ]
Process.exe -> %System32%\Process.exe ->
http://www.beyondlogic.org [Ver = 2, 0, 0, 0 | Size = 53248 bytes | Created Date = 23/10/2007 21:07:22 | Attr = ]
S32EVNT1.DLL -> %System32%\S32EVNT1.DLL -> Symantec Corporation [Ver = 12.5.2.2 | Size = 60800 bytes | Created Date = 17/10/2007 21:09:49 | Attr = ]
sapi.cpl.manifest -> %System32%\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/10/2007 16:59:44 | Attr = RH ]
spxcoins.dll -> %System32%\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 16/10/2007 16:35:51 | Attr = ]
SrchSTS.exe -> %System32%\SrchSTS.exe -> S!Ri [Ver = | Size = 288417 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
swreg.exe -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Created Date = 23/10/2007 21:07:22 | Attr = ]
swsc.exe -> %System32%\swsc.exe -> [Ver = | Size = 40960 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
swxcacls.exe -> %System32%\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
tmp.reg -> %System32%\tmp.reg -> [Ver = | Size = 3922 bytes | Created Date = 23/10/2007 21:07:58 | Attr = ]
VCCLSID.exe -> %System32%\VCCLSID.exe -> S!Ri [Ver = | Size = 289144 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
WS2Fix.exe -> %System32%\WS2Fix.exe -> [Ver = | Size = 25600 bytes | Created Date = 23/10/2007 21:07:23 | Attr = ]
wuaucpl.cpl.manifest -> %System32%\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Created Date = 16/10/2007 16:59:44 | Attr = RH ]
XPSViewer -> %System32%\XPSViewer -> [Folder | Created Date = 17/10/2007 22:56:07 | Attr = ]
apphelp.sdb -> %System32%\dllcache\apphelp.sdb -> [Ver = | Size = 217118 bytes | Created Date = 17/10/2007 22:52:31 | Attr = ]
apph_sp.sdb -> %System32%\dllcache\apph_sp.sdb -> [Ver = | Size = 764868 bytes | Created Date = 17/10/2007 22:52:31 | Attr = ]
cap7146.sys -> %System32%\dllcache\cap7146.sys -> Philips Semiconductors GmbH [Ver = 1.00 (XPClient.010817-1148) | Size = 54528 bytes | Created Date = 16/10/2007 17:02:10 | Attr = ]
chtskf.dll -> %System32%\dllcache\chtskf.dll -> [Ver = | Size = 173568 bytes | Created Date = 16/10/2007 17:02:15 | Attr = ]
esucmd.dll -> %System32%\dllcache\esucmd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 31744 bytes | Created Date = 16/10/2007 17:02:33 | Attr = ]
esuimgd.dll -> %System32%\dllcache\esuimgd.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 57856 bytes | Created Date = 16/10/2007 17:02:33 | Attr = ]
esunid.dll -> %System32%\dllcache\esunid.dll -> SEIKO EPSON CORP. [Ver = 1.00 | Size = 45056 bytes | Created Date = 16/10/2007 17:02:34 | Attr = ]
hanja.lex -> %System32%\dllcache\hanja.lex -> [Ver = | Size = 108827 bytes | Created Date = 16/10/2007 17:02:41 | Attr = ]
HPCRDP.CAT -> %System32%\dllcache\HPCRDP.CAT -> [Ver = | Size = 13472 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
hwxjpn.dll -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Created Date = 16/10/2007 17:02:50 | Attr = ]
IASNT4.CAT -> %System32%\dllcache\IASNT4.CAT -> [Ver = | Size = 8574 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
imekr.lex -> %System32%\dllcache\imekr.lex -> [Ver = | Size = 134339 bytes | Created Date = 16/10/2007 17:03:04 | Attr = ]
imscinst.exe -> %System32%\dllcache\imscinst.exe -> [Ver = | Size = 59392 bytes | Created Date = 16/10/2007 17:03:10 | Attr = ]
korwbrkr.lex -> %System32%\dllcache\korwbrkr.lex -> [Ver = | Size = 1158818 bytes | Created Date = 16/10/2007 17:03:24 | Attr = ]
MAPIMIG.CAT -> %System32%\dllcache\MAPIMIG.CAT -> [Ver = | Size = 399645 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
MW770.CAT -> %System32%\dllcache\MW770.CAT -> [Ver = | Size = 37484 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
NT5IIS.CAT -> %System32%\dllcache\NT5IIS.CAT -> [Ver = | Size = 797189 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
OEMBIOS.CAT -> %System32%\dllcache\OEMBIOS.CAT -> [Ver = | Size = 7382 bytes | Created Date = 16/10/2007 16:35:43 | Attr = ]
rw330ext.dll -> %System32%\dllcache\rw330ext.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 26624 bytes | Created Date = 16/10/2007 17:04:20 | Attr = ]
rwia001.dll -> %System32%\dllcache\rwia001.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 16/10/2007 17:04:21 | Attr = ]
rwia330.dll -> %System32%\dllcache\rwia330.dll -> Ricoh Co., Ltd. [Ver = 5, 0, 2419, 1 | Size = 79872 bytes | Created Date = 16/10/2007 17:04:21 | Attr = ]
spxcoins.dll -> %System32%\dllcache\spxcoins.dll -> Perle Systems Ltd. [Ver = 1.0.0.0007 | Size = 24661 bytes | Created Date = 16/10/2007 16:35:51 | Attr = ]
sysmain.sdb -> %System32%\dllcache\sysmain.sdb -> [Ver = | Size = 1197294 bytes | Created Date = 17/10/2007 22:52:31 | Attr = ]
COH_Mon.cat -> %System32%\drivers\COH_Mon.cat -> [Ver = | Size = 10592 bytes | Created Date = 18/10/2007 14:00:23 | Attr = R ]
COH_Mon.inf -> %System32%\drivers\COH_Mon.inf -> [Ver = | Size = 705 bytes | Created Date = 18/10/2007 14:00:23 | Attr = R ]
COH_Mon.sys -> %System32%\drivers\COH_Mon.sys -> Symantec Corporation [Ver = 6,1,2,3 | Size = 22112 bytes | Created Date = 18/10/2007 14:00:23 | Attr = R ]
CO_Mon.sys -> %System32%\drivers\CO_Mon.sys -> [Ver = | Size = 28672 bytes | Created Date = 21/10/2007 13:40:43 | Attr = ]
SYMEVENT.SYS -> %System32%\drivers\SYMEVENT.SYS -> Symantec Corporation [Ver = 12.5.2.1 | Size = 123952 bytes | Created Date = 17/10/2007 21:09:47 | Attr = ]
[Files/Folders - Modified Within 30 days]
3b697f84bfb9385f72ae8ff8 -> %SystemDrive%\3b697f84bfb9385f72ae8ff8 -> [Folder | Modified Date = 16/10/2007 22:19:48 | Attr = ]
49021bd2aa5099d7b904 -> %SystemDrive%\49021bd2aa5099d7b904 -> [Folder | Modified Date = 16/10/2007 21:56:00 | Attr = ]
asdfk.exe -> %SystemDrive%\asdfk.exe -> [Ver = | Size = 46202 bytes | Modified Date = 15/10/2007 21:03:04 | Attr = ]
boot.ini -> %SystemDrive%\boot.ini -> [Ver = | Size = 211 bytes | Modified Date = 17/10/2007 19:47:50 | Attr = RHS]
Config.Msi -> %SystemDrive%\Config.Msi -> [Folder | Modified Date = 21/10/2007 22:41:26 | Attr = HS]
downloads -> %SystemDrive%\downloads -> [Folder | Modified Date = 25/10/2007 14:59:56 | Attr = ]
hidownload -> %SystemDrive%\hidownload -> [Folder | Modified Date = 26/09/2007 08:04:18 | Attr = ]
NTDETECT.COM -> %SystemDrive%\NTDETECT.COM -> [Ver = | Size = 47564 bytes | Modified Date = 17/10/2007 19:42:18 | Attr = RHS]
Program Files -> %ProgramFiles% -> [Folder | Modified Date = 23/10/2007 13:13:56 | Attr = R ]
sqmdata00.sqm -> %SystemDrive%\sqmdata00.sqm -> [Ver = | Size = 232 bytes | Modified Date = 17/10/2007 20:41:44 | Attr = H ]
sqmdata01.sqm -> %SystemDrive%\sqmdata01.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 16:35:18 | Attr = H ]
sqmdata02.sqm -> %SystemDrive%\sqmdata02.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 07:57:48 | Attr = H ]
sqmdata03.sqm -> %SystemDrive%\sqmdata03.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 08:47:48 | Attr = H ]
sqmdata04.sqm -> %SystemDrive%\sqmdata04.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 09:37:50 | Attr = H ]
sqmdata05.sqm -> %SystemDrive%\sqmdata05.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 10:27:50 | Attr = H ]
sqmdata06.sqm -> %SystemDrive%\sqmdata06.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 11:17:54 | Attr = H ]
sqmdata07.sqm -> %SystemDrive%\sqmdata07.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 11:21:32 | Attr = H ]
sqmdata08.sqm -> %SystemDrive%\sqmdata08.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 11:44:00 | Attr = H ]
sqmdata09.sqm -> %SystemDrive%\sqmdata09.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 11:59:42 | Attr = H ]
sqmdata10.sqm -> %SystemDrive%\sqmdata10.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 12:19:46 | Attr = H ]
sqmdata11.sqm -> %SystemDrive%\sqmdata11.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 14:05:12 | Attr = H ]
sqmdata12.sqm -> %SystemDrive%\sqmdata12.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 14:54:06 | Attr = H ]
sqmdata13.sqm -> %SystemDrive%\sqmdata13.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 14:55:12 | Attr = H ]
sqmdata14.sqm -> %SystemDrive%\sqmdata14.sqm -> [Ver = | Size = 268 bytes | Modified Date = 16/10/2007 15:16:36 | Attr = H ]
sqmdata15.sqm -> %SystemDrive%\sqmdata15.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 15:45:18 | Attr = H ]
sqmdata16.sqm -> %SystemDrive%\sqmdata16.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 15:21:02 | Attr = H ]
sqmdata17.sqm -> %SystemDrive%\sqmdata17.sqm -> [Ver = | Size = 232 bytes | Modified Date = 16/10/2007 17:02:00 | Attr = H ]
sqmdata18.sqm -> %SystemDrive%\sqmdata18.sqm -> [Ver = | Size = 232 bytes | Modified Date = 18/10/2007 16:44:20 | Attr = H ]
sqmdata19.sqm -> %SystemDrive%\sqmdata19.sqm -> [Ver = | Size = 232 bytes | Modified Date = 17/10/2007 00:00:58 | Attr = H ]
sqmnoopt00.sqm -> %SystemDrive%\sqmnoopt00.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 16:35:18 | Attr = H ]
sqmnoopt01.sqm -> %SystemDrive%\sqmnoopt01.sqm -> [Ver = | Size = 244 bytes | Modified Date = 17/10/2007 00:00:58 | Attr = H ]
sqmnoopt02.sqm -> %SystemDrive%\sqmnoopt02.sqm -> [Ver = | Size = 244 bytes | Modified Date = 18/10/2007 16:44:20 | Attr = H ]
sqmnoopt03.sqm -> %SystemDrive%\sqmnoopt03.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 07:57:48 | Attr = H ]
sqmnoopt04.sqm -> %SystemDrive%\sqmnoopt04.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 10:27:50 | Attr = H ]
sqmnoopt05.sqm -> %SystemDrive%\sqmnoopt05.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 11:17:54 | Attr = H ]
sqmnoopt06.sqm -> %SystemDrive%\sqmnoopt06.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 11:21:32 | Attr = H ]
sqmnoopt07.sqm -> %SystemDrive%\sqmnoopt07.sqm -> [Ver = | Size = 244 bytes | Modified Date = 17/10/2007 20:41:42 | Attr = H ]
sqmnoopt08.sqm -> %SystemDrive%\sqmnoopt08.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 08:47:48 | Attr = H ]
sqmnoopt09.sqm -> %SystemDrive%\sqmnoopt09.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 09:37:50 | Attr = H ]
sqmnoopt10.sqm -> %SystemDrive%\sqmnoopt10.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 11:43:58 | Attr = H ]
sqmnoopt11.sqm -> %SystemDrive%\sqmnoopt11.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 11:59:42 | Attr = H ]
sqmnoopt12.sqm -> %SystemDrive%\sqmnoopt12.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 12:19:46 | Attr = H ]
sqmnoopt13.sqm -> %SystemDrive%\sqmnoopt13.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 14:05:12 | Attr = H ]
sqmnoopt14.sqm -> %SystemDrive%\sqmnoopt14.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 14:54:06 | Attr = H ]
sqmnoopt15.sqm -> %SystemDrive%\sqmnoopt15.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 14:55:12 | Attr = H ]
sqmnoopt16.sqm -> %SystemDrive%\sqmnoopt16.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 15:21:02 | Attr = H ]
sqmnoopt17.sqm -> %SystemDrive%\sqmnoopt17.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 15:16:36 | Attr = H ]
sqmnoopt18.sqm -> %SystemDrive%\sqmnoopt18.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 17:02:00 | Attr = H ]
sqmnoopt19.sqm -> %SystemDrive%\sqmnoopt19.sqm -> [Ver = | Size = 244 bytes | Modified Date = 16/10/2007 15:45:18 | Attr = H ]
System Volume Information -> %SystemDrive%\System Volume Information -> [Folder | Modified Date = 20/10/2007 19:13:42 | Attr = HS]
WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 25/10/2007 12:29:54 | Attr = ]
$hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 18/10/2007 11:06:20 | Attr = H ]
$NtServicePackUninstall$ -> %SystemRoot%\$NtServicePackUninstall$ -> [Folder | Modified Date = 17/10/2007 19:30:14 | Attr = H ]
$NtUninstallKB833407$ -> %SystemRoot%\$NtUninstallKB833407$ -> [Folder | Modified Date = 17/10/2007 07:26:46 | Attr = H ]
$NtUninstallKB835409$ -> %SystemRoot%\$NtUninstallKB835409$ -> [Folder | Modified Date = 17/10/2007 04:24:18 | Attr = H ]
$NtUninstallKB835732$ -> %SystemRoot%\$NtUninstallKB835732$ -> [Folder | Modified Date = 17/10/2007 01:03:10 | Attr = H ]
$NtUninstallKB842773$ -> %SystemRoot%\$NtUninstallKB842773$ -> [Folder | Modified Date = 16/10/2007 23:18:28 | Attr = H ]
$NtUninstallKB885835$ -> %SystemRoot%\$NtUninstallKB885835$ -> [Folder | Modified Date = 17/10/2007 19:50:04 | Attr = H ]
$NtUninstallKB885835_0$ -> %SystemRoot%\$NtUninstallKB885835_0$ -> [Folder | Modified Date = 17/10/2007 01:15:38 | Attr = H ]
$NtUninstallKB885836$ -> %SystemRoot%\$NtUninstallKB885836$ -> [Folder | Modified Date = 17/10/2007 19:51:14 | Attr = H ]
$NtUninstallKB885836_0$ -> %SystemRoot%\$NtUninstallKB885836_0$ -> [Folder | Modified Date = 17/10/2007 00:26:14 | Attr = H ]
$NtUninstallKB886185$ -> %SystemRoot%\$NtUninstallKB886185$ -> [Folder | Modified Date = 17/10/2007 22:04:20 | Attr = H ]
$NtUninstallKB888302$ -> %SystemRoot%\$NtUninstallKB888302$ -> [Folder | Modified Date = 17/10/2007 19:52:14 | Attr = H ]
$NtUninstallKB888302_0$ -> %SystemRoot%\$NtUninstallKB888302_0$ -> [Folder | Modified Date = 17/10/2007 00:38:18 | Attr = H ]
$NtUninstallKB890046$ -> %SystemRoot%\$NtUninstallKB890046$ -> [Folder | Modified Date = 17/10/2007 19:53:08 | Attr = H ]
$NtUninstallKB890859$ -> %SystemRoot%\$NtUninstallKB890859$ -> [Folder | Modified Date = 17/10/2007 19:54:10 | Attr = H ]
$NtUninstallKB891781$ -> %SystemRoot%\$NtUninstallKB891781$ -> [Folder | Modified Date = 17/10/2007 19:55:12 | Attr = H ]
$NtUninstallKB891781_0$ -> %SystemRoot%\$NtUninstallKB891781_0$ -> [Folder | Modified Date = 17/10/2007 00:49:24 | Attr = H ]
$NtUninstallKB893756$ -> %SystemRoot%\$NtUninstallKB893756$ -> [Folder | Modified Date = 17/10/2007 19:56:26 | Attr = H ]
$NtUninstallKB896344$ -> %SystemRoot%\$NtUninstallKB896344$ -> [Folder | Modified Date = 17/10/2007 23:49:10 | Attr = H ]
$NtUninstallKB896358$ -> %SystemRoot%\$NtUninstallKB896358$ -> [Folder | Modified Date = 17/10/2007 19:57:28 | Attr = H ]
$NtUninstallKB896423$ -> %SystemRoot%\$NtUninstallKB896423$ -> [Folder | Modified Date = 17/10/2007 19:58:50 | Attr = H ]
$NtUninstallKB896424$ -> %SystemRoot%\$NtUninstallKB896424$ -> [Folder | Modified Date = 17/10/2007 20:00:00 | Attr = H ]
$NtUninstallKB896428$ -> %SystemRoot%\$NtUninstallKB896428$ -> [Folder | Modified Date = 17/10/2007 20:00:54 | Attr = H ]
$NtUninstallKB899587$ -> %SystemRoot%\$NtUninstallKB899587$ -> [Folder | Modified Date = 17/10/2007 20:01:48 | Attr = H ]
$NtUninstallKB900725$ -> %SystemRoot%\$NtUninstallKB900725$ -> [Folder | Modified Date = 17/10/2007 20:02:42 | Attr = H ]
$NtUninstallKB901017$ -> %SystemRoot%\$NtUninstallKB901017$ -> [Folder | Modified Date = 17/10/2007 20:03:38 | Attr = H ]
$NtUninstallKB901190$ -> %SystemRoot%\$NtUninstallKB901190$ -> [Folder | Modified Date = 17/10/2007 20:04:30 | Attr = H ]
$NtUninstallKB901214$ -> %SystemRoot%\$NtUninstallKB901214$ -> [Folder | Modified Date = 17/10/2007 20:05:28 | Attr = H ]
$NtUninstallKB902400$ -> %SystemRoot%\$NtUninstallKB902400$ -> [Folder | Modified Date = 17/10/2007 20:06:28 | Attr = H ]
$NtUninstallKB904706$ -> %SystemRoot%\$NtUninstallKB904706$ -> [Folder | Modified Date = 17/10/2007 03:28:36 | Attr = H ]
$NtUninstallKB905414$ -> %SystemRoot%\$NtUninstallKB905414$ -> [Folder | Modified Date = 17/10/2007 20:07:26 | Attr = H ]
$NtUninstallKB905495$ -> %SystemRoot%\$NtUninstallKB905495$ -> [Folder | Modified Date = 17/10/2007 03:51:54 | Attr = H ]
$NtUninstallKB905749$ -> %SystemRoot%\$NtUninstallKB905749$ -> [Folder | Modified Date = 17/10/2007 20:08:26 | Attr = H ]
$NtUninstallKB908519$ -> %SystemRoot%\$NtUninstallKB908519$ -> [Folder | Modified Date = 17/10/2007 20:09:34 | Attr = H ]
$NtUninstallKB908531$ -> %SystemRoot%\$NtUninstallKB908531$ -> [Folder | Modified Date = 17/10/2007 20:10:52 | Attr = H ]
$NtUninstallKB910437$ -> %SystemRoot%\$NtUninstallKB910437$ -> [Folder | Modified Date = 17/10/2007 20:12:28 | Attr = H ]
$NtUninstallKB911280$ -> %SystemRoot%\$NtUninstallKB911280$ -> [Folder | Modified Date = 17/10/2007 20:13:34 | Attr = H ]
$NtUninstallKB911562$ -> %SystemRoot%\$NtUninstallKB911562$ -> [Folder | Modified Date = 17/10/2007 20:15:10 | Attr = H ]
$NtUninstallKB911567-OE6SP1-20060316.165634$ -> %SystemRoot%\$NtUninstallKB911567-OE6SP1-20060316.165634$ -> [Folder | Modified Date = 17/10/2007 05:39:14 | Attr = H ]
$NtUninstallKB911927$ -> %SystemRoot%\$NtUninstallKB911927$ -> [Folder | Modified Date = 17/10/2007 20:17:08 | Attr = H ]
$NtUninstallKB912919$ -> %SystemRoot%\$NtUninstallKB912919$ -> [Folder | Modified Date = 17/10/2007 20:18:42 | Attr = H ]
$NtUninstallKB913580$ -> %SystemRoot%\$NtUninstallKB913580$ -> [Folder | Modified Date = 17/10/2007 20:20:42 | Attr = H ]
$NtUninstallKB914388$ -> %SystemRoot%\$NtUninstallKB914388$ -> [Folder | Modified Date = 17/10/2007 20:23:46 | Attr = H ]
$NtUninstallKB914389$ -> %SystemRoot%\$NtUninstallKB914389$ -> [Folder | Modified Date = 17/10/2007 20:28:12 | Attr = H ]
$NtUninstallKB917344$ -> %SystemRoot%\$NtUninstallKB917344$ -> [Folder | Modified Date = 17/10/2007 20:32:40 | Attr = H ]
$NtUninstallKB917422$ -> %SystemRoot%\$NtUninstallKB917422$ -> [Folder | Modified Date = 17/10/2007 20:37:20 | Attr = H ]
$NtUninstallKB917953$ -> %SystemRoot%\$NtUninstallKB917953$ -> [Folder | Modified Date = 17/10/2007 20:40:16 | Attr = H ]
$NtUninstallKB918439-IE6SP1-20060530.145346$ -> %SystemRoot%\$NtUninstallKB918439-IE6SP1-20060530.145346$ -> [Folder | Modified Date = 17/10/2007 06:33:02 | Attr = H ]
$NtUninstallKB918899-IE6SP1-20060725.123917$ -> %SystemRoot%\$NtUninstallKB918899-IE6SP1-20060725.123917$ -> [Folder | Modified Date = 17/10/2007 09:26:10 | Attr = H ]
$NtUninstallKB919007$ -> %SystemRoot%\$NtUninstallKB919007$ -> [Folder | Modified Date = 17/10/2007 20:42:10 | Attr = H ]
$NtUninstallKB920342$ -> %SystemRoot%\$NtUninstallKB920342$ -> [Folder | Modified Date = 17/10/2007 23:49:28 | Attr = H ]
$NtUninstallKB920670$ -> %SystemRoot%\$NtUninstallKB920670$ -> [Folder | Modified Date = 17/10/2007 20:43:12 | Attr = H ]
$NtUninstallKB920683$ -> %SystemRoot%\$NtUninstallKB920683$ -> [Folder | Modified Date = 17/10/2007 20:44:20 | Attr = H ]
$NtUninstallKB920685$ -> %SystemRoot%\$NtUninstallKB920685$ -> [Folder | Modified Date = 17/10/2007 20:45:26 | Attr = H ]
$NtUninstallKB921398$ -> %SystemRoot%\$NtUninstallKB921398$ -> [Folder | Modified Date = 17/10/2007 20:46:32 | Attr = H ]
$NtUninstallKB921883$ -> %SystemRoot%\$NtUninstallKB921883$ -> [Folder | Modified Date = 17/10/2007 20:47:44 | Attr = H ]
$NtUninstallKB922616$ -> %SystemRoot%\$NtUninstallKB922616$ -> [Folder | Modified Date = 17/10/2007 20:48:46 | Attr = H ]
$NtUninstallKB922819$ -> %SystemRoot%\$NtUninstallKB922819$ -> [Folder | Modified Date = 17/10/2007 20:49:48 | Attr = H ]
$NtUninstallKB923191$ -> %SystemRoot%\$NtUninstallKB923191$ -> [Folder | Modified Date = 17/10/2007 20:50:54 | Attr = H ]
$NtUninstallKB923414$ -> %SystemRoot%\$NtUninstallKB923414$ -> [Folder | Modified Date = 17/10/2007 20:52:20 | Attr = H ]
$NtUninstallKB924191$ -> %SystemRoot%\$NtUninstallKB924191$ -> [Folder | Modified Date = 17/10/2007 20:53:20 | Attr = H ]
$NtUninstallKB924496$ -> %SystemRoot%\$NtUninstallKB924496$ -> [Folder | Modified Date = 17/10/2007 20:54:20 | Attr = H ]
$NtUninstallKB925486-IE6SP1-20060918.120000$ -> %SystemRoot%\$NtUninstallKB925486-IE6SP1-20060918.120000$ -> [Folder | Modified Date = 17/10/2007 09:36:46 | Attr = H ]
$NtUninstallKB925720$ -> %SystemRoot%\$NtUninstallKB925720$ -> [Folder | Modified Date = 18/10/2007 11:10:58 | Attr = H ]
$NtUninstallKB936782_WMP10$ -> %SystemRoot%\$NtUninstallKB936782_WMP10$ -> [Folder | Modified Date = 17/10/2007 22:12:12 | Attr = H ]
$NtUninstallKB938127$ -> %SystemRoot%\$NtUninstallKB938127$ -> [Folder | Modified Date = 17/10/2007 22:12:34 | Attr = H ]
$NtUninstallKB939653$ -> %SystemRoot%\$NtUninstallKB939653$ -> [Folder | Modified Date = 17/10/2007 22:14:14 | Attr = H ]
$NtUninstallWIC$ -> %SystemRoot%\$NtUninstallWIC$ -> [Folder | Modified Date = 17/10/2007 23:53:06 | Attr = H ]
AppPatch -> %SystemRoot%\AppPatch -> [Folder | Modified Date = 18/10/2007 10:53:16 | Attr = ]
assembly -> %SystemRoot%\assembly -> [Folder | Modified Date = 18/10/2007 11:58:36 | Attr = R S]
bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 25/10/2007 18:39:14 | Attr = S]
Cursors -> %SystemRoot%\Cursors -> [Folder | Modified Date = 16/10/2007 10:52:18 | Attr = ]
Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 17/10/2007 21:51:36 | Attr = ]
Downloaded Program Files -> %SystemRoot%\Downloaded Program Files -> [Folder | Modified Date = 23/10/2007 12:49:36 | Attr = S]
Driver Cache -> %SystemRoot%\Driver Cache -> [Folder | Modified Date = 16/10/2007 18:25:26 | Attr = ]
EHome -> %SystemRoot%\EHome -> [Folder | Modified Date = 17/10/2007 19:27:22 | Attr = ]
Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 17/10/2007 23:56:02 | Attr = R S]
Help -> %SystemRoot%\Help -> [Folder | Modified Date = 17/10/2007 23:26:06 | Attr = ]
ie7 -> %SystemRoot%\ie7 -> [Folder | Modified Date = 18/10/2007 16:34:44 | Attr = H ]
ime -> %SystemRoot%\ime -> [Folder | Modified Date = 17/10/2007 19:47:08 | Attr = ]
imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1393 bytes | Modified Date = 17/10/2007 23:53:26 | Attr = ]
inf -> %SystemRoot%\inf -> [Folder | Modified Date = 24/10/2007 10:51:52 | Attr = H ]
Installer -> %SystemRoot%\Installer -> [Folder | Modified Date = 21/10/2007 22:41:28 | Attr = HS]
Media -> %SystemRoot%\Media -> [Folder | Modified Date = 16/10/2007 18:27:58 | Attr = ]
MegaManager.INI -> %SystemRoot%\MegaManager.INI -> [Ver = | Size = 50 bytes | Modified Date = 03/10/2007 13:39:36 | Attr = ]
Microsoft.NET -> %SystemRoot%\Microsoft.NET -> [Folder | Modified Date = 18/10/2007 11:58:38 | Attr = ]
msagent -> %SystemRoot%\msagent -> [Folder | Modified Date = 17/10/2007 23:26:04 | Attr = ]
NeroDigital.ini -> %SystemRoot%\NeroDigital.ini -> [Ver = | Size = 229 bytes | Modified Date = 25/10/2007 13:15:52 | Attr = ]
network diagnostic -> %SystemRoot%\network diagnostic -> [Folder | Modified Date = 15/10/2007 21:14:54 | Attr = ]
OCCACHE -> %SystemRoot%\OCCACHE -> [Folder | Modified Date = 16/10/2007 17:59:52 | Attr = S]
ODBCINST.INI -> %SystemRoot%\ODBCINST.INI -> [Ver = | Size = 4161 bytes | Modified Date = 16/10/2007 17:59:58 | Attr = ]
picts-0223.zip -> %SystemRoot%\picts-0223.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:24:30 | Attr = ]
picts-0401.zip -> %SystemRoot%\picts-0401.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:02 | Attr = ]
picts-0556.zip -> %SystemRoot%\picts-0556.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:02 | Attr = ]
picts-0603.zip -> %SystemRoot%\picts-0603.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:02 | Attr = ]
picts-0840.zip -> %SystemRoot%\picts-0840.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:02 | Attr = ]
picts-1758.zip -> %SystemRoot%\picts-1758.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:02 | Attr = ]
picts-2809.zip -> %SystemRoot%\picts-2809.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-3984.zip -> %SystemRoot%\picts-3984.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6014.zip -> %SystemRoot%\picts-6014.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6041.zip -> %SystemRoot%\picts-6041.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6058.zip -> %SystemRoot%\picts-6058.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6248.zip -> %SystemRoot%\picts-6248.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6326.zip -> %SystemRoot%\picts-6326.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6403.zip -> %SystemRoot%\picts-6403.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-6699.zip -> %SystemRoot%\picts-6699.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-7316.zip -> %SystemRoot%\picts-7316.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-7593.zip -> %SystemRoot%\picts-7593.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-7857.zip -> %SystemRoot%\picts-7857.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-7871.zip -> %SystemRoot%\picts-7871.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8049.zip -> %SystemRoot%\picts-8049.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8144.zip -> %SystemRoot%\picts-8144.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8268.zip -> %SystemRoot%\picts-8268.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8317.zip -> %SystemRoot%\picts-8317.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8814.zip -> %SystemRoot%\picts-8814.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8904.zip -> %SystemRoot%\picts-8904.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-8993.zip -> %SystemRoot%\picts-8993.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9011.zip -> %SystemRoot%\picts-9011.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9275.zip -> %SystemRoot%\picts-9275.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9326.zip -> %SystemRoot%\picts-9326.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9330.zip -> %SystemRoot%\picts-9330.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9380.zip -> %SystemRoot%\picts-9380.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:04 | Attr = ]
picts-9667.zip -> %SystemRoot%\picts-9667.zip -> [Ver = | Size = 22 bytes | Modified Date = 20/10/2007 20:33:06 | Attr = ]
Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 25/10/2007 18:44:24 | Attr = ]
security -> %SystemRoot%\security -> [Folder | Modified Date = 17/10/2007 23:25:36 | Attr = ]
setupapi.old -> %SystemRoot%\setupapi.old -> [Ver = | Size = 213389 bytes | Modified Date = 16/10/2007 17:16:52 | Attr = ]
srchasst -> %SystemRoot%\srchasst -> [Folder | Modified Date = 17/10/2007 19:44:44 | Attr = ]
system -> %SystemRoot%\system -> [Folder | Modified Date = 17/10/2007 19:44:10 | Attr = ]
system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 227 bytes | Modified Date = 16/10/2007 17:35:58 | Attr = ]
system32 -> %System32% -> [Folder | Modified Date = 25/10/2007 18:36:18 | Attr = ]
Tasks -> %SystemRoot%\Tasks -> [Folder | Modified Date = 16/10/2007 23:51:02 | Attr = S]
Temp -> %SystemRoot%\Temp -> [Folder | Modified Date = 25/10/2007 18:42:36 | Attr = ]
twain_32 -> %SystemRoot%\twain_32 -> [Folder | Modified Date = 16/10/2007 18:27:54 | Attr = ]
Web -> %SystemRoot%\Web -> [Folder | Modified Date = 17/10/2007 19:42:34 | Attr = R ]
win.ini -> %SystemRoot%\win.ini -> [Ver = | Size = 906 bytes | Modified Date = 20/10/2007 08:36:52 | Attr = ]
WindowsShell.Manifest -> %SystemRoot%\WindowsShell.Manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
wininit.ini -> %SystemRoot%\wininit.ini -> [Ver = | Size = 93 bytes | Modified Date = 21/10/2007 20:46:22 | Attr = ]
WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 21/10/2007 14:24:34 | Attr = ]
WMSysPr9.prx -> %SystemRoot%\WMSysPr9.prx -> [Ver = | Size = 316640 bytes | Modified Date = 17/10/2007 21:54:12 | Attr = ]
SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 25/10/2007 18:39:34 | Attr = H ]
$winnt$.inf -> %System32%\$winnt$.inf -> [Ver = | Size = 288 bytes | Modified Date = 16/10/2007 18:06:22 | Attr = ]
1033 -> %System32%\1033 -> [Folder | Modified Date = 16/10/2007 18:26:52 | Attr = ]
amcompat.tlb -> %System32%\amcompat.tlb -> [Ver = | Size = 16832 bytes | Modified Date = 17/10/2007 23:52:18 | Attr = ]
bits -> %System32%\bits -> [Folder | Modified Date = 16/10/2007 23:28:42 | Attr = ]
CatRoot -> %System32%\CatRoot -> [Folder | Modified Date = 18/10/2007 11:15:40 | Attr = ]
CatRoot2 -> %System32%\CatRoot2 -> [Folder | Modified Date = 25/10/2007 18:31:58 | Attr = ]
cdplayer.exe.manifest -> %System32%\cdplayer.exe.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
coh.cache -> %System32%\coh.cache -> [Ver = | Size = 16 bytes | Modified Date = 17/10/2007 22:54:20 | Attr = ]
Com -> %System32%\Com -> [Folder | Modified Date = 17/10/2007 22:04:50 | Attr = ]
config -> %System32%\config -> [Folder | Modified Date = 16/10/2007 18:07:30 | Attr = ]
dllcache -> %System32%\dllcache -> [Folder | Modified Date = 19/10/2007 16:31:36 | Attr = RHS]
drivers -> %System32%\drivers -> [Folder | Modified Date = 21/10/2007 22:40:26 | Attr = ]
en-US -> %System32%\en-US -> [Folder | Modified Date = 17/10/2007 23:56:08 | Attr = ]
FNTCACHE.DAT -> %System32%\FNTCACHE.DAT -> [Ver = | Size = 194568 bytes | Modified Date = 18/10/2007 10:53:18 | Attr = ]
ias -> %System32%\ias -> [Folder | Modified Date = 16/10/2007 18:26:58 | Attr = ]
icsxml -> %System32%\icsxml -> [Folder | Modified Date = 16/10/2007 18:27:36 | Attr = ]
logonui.exe.manifest -> %System32%\logonui.exe.manifest -> [Ver = | Size = 488 bytes | Modified Date = 16/10/2007 17:59:52 | Attr = RH ]
ncpa.cpl.manifest -> %System32%\ncpa.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
npp -> %System32%\npp -> [Folder | Modified Date = 17/10/2007 19:44:46 | Attr = ]
nscompat.tlb -> %System32%\nscompat.tlb -> [Ver = | Size = 23392 bytes | Modified Date = 17/10/2007 23:52:18 | Attr = ]
nwc.cpl.manifest -> %System32%\nwc.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
oobe -> %System32%\oobe -> [Folder | Modified Date = 17/10/2007 19:44:12 | Attr = ]
perfc009.dat -> %System32%\perfc009.dat -> [Ver = | Size = 70968 bytes | Modified Date = 18/10/2007 00:00:22 | Attr = ]
perfh009.dat -> %System32%\perfh009.dat -> [Ver = | Size = 439264 bytes | Modified Date = 18/10/2007 00:00:22 | Attr = ]
PerfStringBackup.INI -> %System32%\PerfStringBackup.INI -> [Ver = | Size = 517362 bytes | Modified Date = 18/10/2007 00:00:22 | Attr = ]
ReinstallBackups -> %System32%\ReinstallBackups -> [Folder | Modified Date = 17/10/2007 19:30:26 | Attr = ]
Restore -> %System32%\Restore -> [Folder | Modified Date = 20/10/2007 19:13:42 | Attr = ]
S32EVNT1.DLL -> %System32%\S32EVNT1.DLL -> Symantec Corporation [Ver = 12.5.2.2 | Size = 60800 bytes | Modified Date = 18/10/2007 11:09:50 | Attr = ]
sapi.cpl.manifest -> %System32%\sapi.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
Setup -> %System32%\Setup -> [Folder | Modified Date = 17/10/2007 19:44:18 | Attr = ]
spool -> %System32%\spool -> [Folder | Modified Date = 17/10/2007 23:53:40 | Attr = ]
tmp.reg -> %System32%\tmp.reg -> [Ver = | Size = 3922 bytes | Modified Date = 25/10/2007 18:36:18 | Attr = ]
usmt -> %System32%\usmt -> [Folder | Modified Date = 18/10/2007 10:53:16 | Attr = ]
wbem -> %System32%\wbem -> [Folder | Modified Date = 17/10/2007 21:50:46 | Attr = ]
WindowsLogon.manifest -> %System32%\WindowsLogon.manifest -> [Ver = | Size = 488 bytes | Modified Date = 16/10/2007 17:59:52 | Attr = RH ]
wpa.dbl -> %System32%\wpa.dbl -> [Ver = | Size = 13646 bytes | Modified Date = 25/10/2007 18:40:38 | Attr = ]
WS2Fix.exe -> %System32%\WS2Fix.exe -> [Ver = | Size = 25600 bytes | Modified Date = 04/10/2007 00:36:46 | Attr = ]
wuaucpl.cpl.manifest -> %System32%\wuaucpl.cpl.manifest -> [Ver = | Size = 749 bytes | Modified Date = 16/10/2007 17:59:46 | Attr = RH ]
XPSViewer -> %System32%\XPSViewer -> [Folder | Modified Date = 17/10/2007 23:56:08 | Attr = ]
CO_Mon.sys -> %System32%\drivers\CO_Mon.sys -> [Ver = | Size = 28672 bytes | Modified Date = 21/10/2007 14:40:44 | Attr = ]
etc -> %System32%\drivers\etc -> [Folder | Modified Date = 15/10/2007 23:14:56 | Attr = ]
SYMEVENT.CAT -> %System32%\drivers\SYMEVENT.CAT -> [Ver = | Size = 10740 bytes | Modified Date = 18/10/2007 11:09:50 | Attr = ]
SYMEVENT.INF -> %System32%\drivers\SYMEVENT.INF -> [Ver = | Size = 805 bytes | Modified Date = 18/10/2007 11:09:50 | Attr = ]
SYMEVENT.SYS -> %System32%\drivers\SYMEVENT.SYS -> Symantec Corporation [Ver = 12.5.2.1 | Size = 123952 bytes | Modified Date = 18/10/2007 11:09:50 | Attr = ]
[File String Scan - Non-Microsoft Only]
@Alternate Data Stream - 0 bytes -> %SystemRoot%\Thumbs.db:encryptable ->
PEC2 , -> %System32%\dfrg.msc -> [Ver = | Size = 41397 bytes | Modified Date = 31/03/2003 13:00:00 | Attr = ]
PEC2 , PECompact2 , -> %System32%\DivX.dll -> DivX, Inc. [Ver = 6.2.2.3 | Size = 619156 bytes | Modified Date = 19/04/2006 21:09:20 | Attr = ]
aspack , -> %System32%\HDBHO.dll -> [Ver = | Size = 208896 bytes | Modified Date = 27/03/2003 07:37:34 | Attr = ]
Thawte Consulting , -> %System32%\pxcpya64.exe -> Sonic Solutions [Ver = 1.00.35a | Size = 63144 bytes | Modified Date = 14/08/2006 17:43:22 | Attr = ]
Thawte Consulting , -> %System32%\pxcpyi64.exe -> Sonic Solutions [Ver = 1.00.35a | Size = 114856 bytes | Modified Date = 14/08/2006 17:43:22 | Attr = ]
Thawte Consulting , -> %System32%\pxhpinst.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 67240 bytes | Modified Date = 14/08/2006 17:43:24 | Attr = ]
Thawte Consulting , -> %System32%\pxinsa64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 62632 bytes | Modified Date = 14/08/2006 17:43:22 | Attr = ]
Thawte Consulting , -> %System32%\pxinsi64.exe -> Sonic Solutions [Ver = 3.00.33a | Size = 115880 bytes | Modified Date = 14/08/2006 17:43:22 | Attr = ]
UPX! , UPX0 , -> %System32%\SrchSTS.exe -> S!Ri [Ver = | Size = 288417 bytes | Modified Date = 27/04/2006 17:49:30 | Attr = ]
UPX! , UPX0 , -> %System32%\swreg.exe -> SteelWerX [Ver = 2.0.1.0 | Size = 135168 bytes | Modified Date = 29/08/2006 19:43:54 | Attr = ]
UPX! , UPX0 , -> %System32%\swsc.exe -> [Ver = | Size = 40960 bytes | Modified Date = 09/01/2006 10:36:06 | Attr = ]
UPX! , UPX0 , -> %System32%\swxcacls.exe -> SteelWerX [Ver = 1.0.1.1 | Size = 79360 bytes | Modified Date = 01/12/2006 06:20:34 | Attr = ]
UPX! , UPX0 , -> %System32%\VCCLSID.exe -> S!Ri [Ver = | Size = 289144 bytes | Modified Date = 06/09/2007 00:22:24 | Attr = ]
winsync , -> %System32%\wbdbase.deu -> [Ver = | Size = 1309184 bytes | Modified Date = 31/03/2003 13:00:00 | Attr = ]
UPX! , UPX0 , -> %System32%\WS2Fix.exe -> [Ver = | Size = 25600 bytes | Modified Date = 04/10/2007 00:36:46 | Attr = ]
WSUD , UPX0 , -> %System32%\dllcache\hwxjpn.dll -> [Ver = | Size = 13463552 bytes | Modified Date = 31/03/2003 13:00:00 | Attr = ]
PTech , -> %System32%\drivers\mtlstrm.sys -> Smart Link [Ver = 3.80.01MC15 | Size = 1309184 bytes | Modified Date = 03/08/2004 22:41:38 | Attr = ]
< End of report >