Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Hijackthis log file help

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Hijackthis log file help

Unread postby robcpfc79 » May 28th, 2008, 4:42 pm

Hi

A few days ago when I signed into my hotmail account I had an email from hotmail saying that an email I sent failed to send to one of my contacts. It was a group email sent to all my contacts avertising an electronics company (I didn't send the email). Therefore someone has accessed my computer and sent the spam email to all my contacts :x (I'm the only person who knows my hotmail password.)

Also when I go to the 'sent' emails in hotmail the group email isn't there however lots of my friends are now contacting me asking why I sent them an email about some dodgy electrical company! (The company website is called welecp.com btw)

I've scanned my pc with avg and it found a virus 'downloader.agent.ij'

Edit: I'm not sure if this is to do with my computer having a virus but I just tried to use the bbc iplayer but it wouldn't let me because it is only available in the UK (but I am in the UK!). And the same thing happened when I tried to sell my car on autotrader, it wouldn't accept my payment because It's for the UK only and it says I'm in another country! Considering the spam email sent from my account was advertising a company in india, is it possible someone is accessing my pc from abroad?

Can someone check my hijackthis log file please.

Logfile of HijackThis v1.99.1
Scan saved at 21:18:16, on 28/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kontiki\KService.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\NILaunch.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Zattoo\Zattoo2.exe
C:\Program Files\Zattoo\zattood.exe
C:\HJT\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Net-It Launcher] C:\WINDOWS\System32\NILaunch.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: VTAgentReboot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Fac ... oader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/com ... MediaX.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan ... stubie.cab
O16 - DPF: {3B5E9B23-7537-4601-A9E8-FA0D956DEA16} - http://www.couponreport.net/ftp/v3123/csauie1.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/re ... NPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Fac ... loader.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1120896609
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab
O16 - DPF: {BF6BBE9A-0656-4598-A0CD-32DAC03959B5} (Image Uploader 3.0 Control) - https://www.tescophoto.com/wpp/tesco/ap ... loader.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - https://ukplay.toontown.com/download/sv ... ttinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Fac ... der4_5.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by105fd.bay105.hotmail.msn.com/a ... Atchmt.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E1C9723-BDF6-4AD8-A923-BFE2317A4E6E}: NameServer = 194.168.4.100,194.168.8.100
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - http://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm
Advertisement
Register to Remove

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 1st, 2008, 11:53 am

Hi,

Welcome to Malware Removal.

Sorry for the delay in getting to you. The forums have been swamped with logs lately.

I can't see any signs of infections from your log.

Please do the following:

If you already have SDFix, please delete this copy and download it again as it's being updated regularly.

  1. Please download SDFix by AndyManchesta and save it to your desktop.
  2. Double click on SDFix.exe. By default, it will install to C:\.
  3. Click on Install.
  4. Navigate to C:\SDfix (if you installed it to the default location, otherwise, locate where you installed it)
  5. Double click on RunThis.bat
  6. Press A to create a system report. When done, Notepad will open. Do not close this Notepad file.
  7. Double click on RunThis.bat again. Press C to create a Catchme log. When done, Notepad will open.

Please post both logs in your next reply. 1 log per reply please.

Both logs can be found in the SDFix folder (by default, C:\SDFix if you installed it to the default location).

They are named SystemReport.txt and Catchme.log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 1st, 2008, 1:13 pm

Thanks for the reply.

Here's the 'SystemReport'

System Report
*************

Run on 01/06/2008 at 17:35

Microsoft Windows XP [Version 5.1.2600]

Current user is an administrator

Running Processes:

\SystemRoot\System32\smss.exe [796]
\??\C:\WINDOWS\system32\csrss.exe [856]
\??\C:\WINDOWS\system32\winlogon.exe [884]
C:\WINDOWS\system32\services.exe [956]
C:\WINDOWS\system32\lsass.exe [968]
C:\WINDOWS\system32\Ati2evxx.exe [1144]
C:\WINDOWS\system32\svchost.exe [1164]
C:\WINDOWS\system32\svchost.exe [1224]
C:\WINDOWS\System32\svchost.exe [1364]
C:\WINDOWS\system32\svchost.exe [1428]
C:\WINDOWS\System32\svchost.exe [1560]
C:\WINDOWS\System32\svchost.exe [1620]
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [1684]
C:\WINDOWS\system32\spoolsv.exe [1788]
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [520]
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [596]
C:\WINDOWS\system32\bgsvcgen.exe [612]
C:\Program Files\COMODO\Firewall\cmdagent.exe [700]
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [1524]
C:\WINDOWS\System32\svchost.exe [1840]
C:\Program Files\Kontiki\KService.exe [1940]
C:\WINDOWS\system32\libusbd-nt.exe [396]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [432]
C:\WINDOWS\System32\svchost.exe [2040]
C:\Program Files\Windows Media Player\WMPNetwk.exe [3532]
C:\PROGRA~1\AVG\AVG8\avgrsx.exe [2184]
C:\WINDOWS\System32\alg.exe [1512]
C:\WINDOWS\system32\Ati2evxx.exe [3112]
C:\WINDOWS\Explorer.EXE [3036]
C:\WINDOWS\System32\NILaunch.exe [1532]
C:\WINDOWS\system32\ezSP_Px.exe [3924]
C:\WINDOWS\SOUNDMAN.EXE [3448]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [760]
C:\Program Files\MessengerPlus! 3\MsgPlus.exe [736]
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [768]
C:\Program Files\Microsoft IntelliType Pro\type32.exe [784]
C:\Program Files\Microsoft IntelliPoint\point32.exe [1540]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2072]
C:\Program Files\Kontiki\KHost.exe [916]
C:\Program Files\iTunes\iTunesHelper.exe [2248]
C:\PROGRA~1\AVG\AVG8\avgtray.exe [2308]
C:\Program Files\COMODO\Firewall\cfp.exe [3936]
C:\Program Files\Messenger\msmsgs.exe [2356]
C:\WINDOWS\system32\ctfmon.exe [2460]
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe [3188]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2456]
C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2868]
C:\Program Files\iPod\bin\iPodService.exe [1956]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2320]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2840]
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe [2692]
C:\Program Files\Internet Explorer\iexplore.exe [5844]


Drivers - Running:

abp480n5
ACPI
ADM8511
adpu160m
AFD
agp440
agpCPQ
Aha154x
aic78u2
aic78xx
ALCXWDM
AliIde
alim1541
amdagp
amsint
Arp1394
asc
asc3350p
asc3550
Aspi32
atapi
ati2mtag
audstub
AvgLdx86
AvgMfx86
Beep
cbidf
cd20xrnt
Cdfs
Cdrom
cmdGuard
cmdHlp
CmdIde
Cpqarray
dac2w2k
dac960nt
Disk
dpti2o
ElbyCDFL
ElbyCDIO
Fastfat
Fdc
Fips
Flpydisk
FltMgr
Ftdisk
gameenum
GEARAspiWDM
giveio
Gpc
hpn
HTTP
i2omgmt
i2omp
i8042prt
Imapi
ini910u
Inspect
IntelIde
intelppm
IpNat
IPSec
isapnp
Kbdclass
kmixer
KSecDD
libusb0
mnmdd
Modem
MODEMCSA
Mouclass
MountMgr
mraid35x
MRxDAV
MRxSmb
Msfs
mssmbios
Mtlmnt5
Mup
NDIS
NdisTapi
Ndisuio
NdisWan
NDProxy
NetBIOS
NetBT
NIC1394
Npfs
Ntfs
Null
ohci1394
Parport
PartMgr
ParVdm
PCI
PCIIde
perc2
perc2hib
Point32
PptpMiniport
PSched
Ptilink
PxHelp20
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
RecAgent
redbook
ROOTMODEM
rtl8139
SCDEmu
Secdrv
Serenum
Serial
sisagp
Slntamr
SlWdmSup
Sparrow
speedfan
sptd
sr
Srv
swenum
symc810
symc8xx
sym_hi
sym_u3
sysaudio
Tcpip
TermDD
tmcomm
TosIde
Udfs
ultra
Update
usbehci
usbhub
USBSTOR
usbuhci
VgaSave
viaagp
ViaIde
VolSnap
Wanarp
wdmaud
WudfPf


Drivers - Stopped:

Abiosdsk
ACPIEC
aec
AmdK7
AsyncMac
Atdisk
Atmarpc
Bridge
BridgeMP
cbidf2k
Cdaudio
Changer
dmboot
dmio
dmload
DMusic
drmkaud
dtscsi
ENTECH
FileDisk
HidUsb
ip6fw
IpFilterDriver
IpInIp
IRENUM
kbdhid
lbrtfdc
mouhid
MSKSSRV
MSPCLOCK
MSPQM
Mtlstrm
NtMtlFax
NwlnkFlt
NwlnkFwd
PCIDump
Pcmcia
pcouffin
PDCOMP
PDFRAME
PDRELI
PDRFRAME
Processor
rdpdr
RDPWD
Sfloppy
Simbad
SlNtHal
splitter
swmidi
TDPIPE
TDTCP
usbaudio
usbccgp
usbscan
usbser
usbsermpt
vaxscsi
w810bus
w810mdfl
w810mdm
w810mgmt
w810obex
WDICA
WpdUsb
WudfRd


Services - Running:

aawservice
ALG
Apple
Ati
AudioSrv
avg8wd
bgsvcgen
BITS
Browser
cmdAgent
CryptSvc
DcomLaunch
Dhcp
Dnscache
ERSvc
Eventlog
EventSystem
FastUserSwitchingCompatibility
gusvc
helpsvc
HidServ
HTTPFilter
iPod
KService
lanmanserver
lanmanworkstation
libusbd
LmHosts
Nero
Netman
Nla
PlugPlay
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
Spooler
srservice
SSDPSRV
stisvc
TapiSrv
TermService
Themes
TrkWks
upnphost
W32Time
WebClient
winmgmt
WMPNetworkSvc
wscsvc
wuauserv
WudfSvc
WZCSVC


Services - Stopped:

Adobe
Alerter
AppMgmt
aspnet_state
ATI
Autodesk
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
COMSysApp
dmadmin
dmserver
Dot3svc
EapHost
hkmsvc
IDriverT
ImapiService
Messenger
Microsoft
mnmsrvc
MSCSPTISRV
MSDTC
MSIServer
napagent
NetDDE
NetDDEdsdm
Netlogon
NMIndexingService
NtLmSsp
NtmsSvc
odserv
ose
PACSPTISVR
RasAuto
RDSessMgr
RemoteAccess
RpcLocator
RSVP
SCardSvr
SLService
SPTISRV
SSScsiSV
SwPrv
SysmonLog
UPS
usnjsvc
VSS
WLSetupSvc
WmdmPmSN
WmiApSrv
xmlprov


Files Created/Modified - 60 Days:


C:\

28 May 2008 18:17:00 250,048 ..SHR "C:\ntldr"
1 Jun 2008 11:19:50 805,306,368 A.SH. "C:\pagefile.sys"
14 Apr 2008 13:12:14 268 A..H. "C:\sqmdata01.sqm"
23 May 2008 16:51:54 232 A..H. "C:\sqmdata02.sqm"
14 Apr 2008 13:12:14 244 A..H. "C:\sqmnoopt01.sqm"
23 May 2008 16:51:54 244 A..H. "C:\sqmnoopt02.sqm"


C:\WINDOWS\

1 Jun 2008 11:20:54 0 A.... "C:\WINDOWS\0.log"
1 Jun 2008 11:19:54 2,048 A.S.. "C:\WINDOWS\bootstat.dat"
28 May 2008 18:24:38 173 A.... "C:\WINDOWS\cmsetacl.log"
28 May 2008 18:27:32 94,033 A.... "C:\WINDOWS\comsetup.log"
28 May 2008 19:00:26 754,118 A.... "C:\WINDOWS\DPINST.LOG"
28 May 2008 18:34:44 226 A.... "C:\WINDOWS\DtcInstall.log"
14 Apr 2008 1:12:20 1,033,728 A.... "C:\WINDOWS\explorer.exe"
28 May 2008 18:27:22 284,409 A.... "C:\WINDOWS\FaxSetup.log"
14 Apr 2008 1:12:22 10,752 A.... "C:\WINDOWS\hh.exe"
28 May 2008 18:27:32 45,020 A.... "C:\WINDOWS\iis6.log"
28 May 2008 9:42:28 1,374 A.... "C:\WINDOWS\imsins.BAK"
28 May 2008 18:27:32 2,675 A.... "C:\WINDOWS\imsins.log"
28 May 2008 17:07:46 10,109 A.... "C:\WINDOWS\KB892130.log"
28 May 2008 9:42:28 11,048 A.... "C:\WINDOWS\KB932823-v3.log"
9 Apr 2008 23:44:52 19,492 A.... "C:\WINDOWS\KB941693.log"
9 Apr 2008 23:41:46 13,637 A.... "C:\WINDOWS\KB945553.log"
9 Apr 2008 23:44:46 20,237 A.... "C:\WINDOWS\KB947864-IE7.log"
9 Apr 2008 23:44:18 13,533 A.... "C:\WINDOWS\KB948590.log"
9 Apr 2008 23:45:44 14,676 A.... "C:\WINDOWS\KB948881.log"
14 May 2008 17:33:44 14,081 A.... "C:\WINDOWS\KB950749.log"
28 May 2008 18:27:22 14,058 A.... "C:\WINDOWS\msgsocm.log"
27 May 2008 18:11:24 69 A.... "C:\WINDOWS\NeroDigital.ini"
14 Apr 2008 1:12:30 69,120 A.... "C:\WINDOWS\notepad.exe"
28 May 2008 18:27:32 56,837 A.... "C:\WINDOWS\ntdtcsetup.log"
28 May 2008 18:27:22 134,125 A.... "C:\WINDOWS\ocgen.log"
28 May 2008 18:27:32 15,551 A.... "C:\WINDOWS\ocmsn.log"
29 May 2008 22:10:50 1,035 A.... "C:\WINDOWS\OEWABLog.txt"
26 May 2008 20:49:36 1,409 A.... "C:\WINDOWS\QTFont.for"
1 Jun 2008 11:34:38 54,156 A..H. "C:\WINDOWS\QTFont.qfn"
14 Apr 2008 1:12:32 146,432 ..... "C:\WINDOWS\regedit.exe"
31 May 2008 23:01:38 32,650 A.... "C:\WINDOWS\SchedLgU.Txt"
28 May 2008 18:24:28 259 A.... "C:\WINDOWS\sessmgr.setup.log"
29 May 2008 11:59:24 515,927 A.... "C:\WINDOWS\setupapi.log"
28 May 2008 18:33:34 9,785 A.... "C:\WINDOWS\setuplog.txt"
14 Apr 2008 1:12:36 32,866 ..... "C:\WINDOWS\slrundll.exe"
28 May 2008 18:34:54 37,717 A.... "C:\WINDOWS\spupdsvc.log"
28 May 2008 18:34:14 187 A.... "C:\WINDOWS\spupdsvc.log.1.log"
28 May 2008 18:27:32 472,983 A.... "C:\WINDOWS\svcpack.log"
28 May 2008 18:27:32 107,571 A.... "C:\WINDOWS\tsoc.log"
14 Apr 2008 1:12:08 50,688 A.... "C:\WINDOWS\twain_32.dll"
28 May 2008 18:23:40 157,764 A.... "C:\WINDOWS\updspapi.log"
1 Jun 2008 11:20:18 159 A.... "C:\WINDOWS\wiadebug.log"
1 Jun 2008 11:20:14 50 A.... "C:\WINDOWS\wiaservc.log"
28 May 2008 19:16:28 734 A.... "C:\WINDOWS\win.ini"
1 Jun 2008 11:21:58 1,278,090 A.... "C:\WINDOWS\WindowsUpdate.log"
14 Apr 2008 1:12:40 283,648 A.... "C:\WINDOWS\winhlp32.exe"
28 May 2008 18:34:42 21,860 A.... "C:\WINDOWS\wmsetup.log"
9 Apr 2008 23:45:42 94,208 A.... "C:\WINDOWS\$NtUninstallKB948881$\reg00001"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb873339.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb885250.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb885835.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb885836.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb886185.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb887472.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb887742.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb888113.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb888302.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb890046.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb890859.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb891781.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb893756.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb896358.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb896422.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb896423.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb896424.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb896428.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb898461.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb899587.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb899591.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb900485.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb900725.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb901017.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb901190.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb901214.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb902400.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb904706.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb904942.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb905414.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb905749.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb908519.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb908531.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb910437.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb911280.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb911562.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb911567.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb911927.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb912812.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb912919.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb913446.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb913580.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb914388.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb914389.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb914440.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb916281.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb916595.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb917159.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb917344.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb917422.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb917953.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb918118.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb918439.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb918899.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb919007.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920213.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920214.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920670.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920683.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920685.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb920872.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb921398.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb921503.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb921883.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb922582.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb922616.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb922760.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb922819.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb923191.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb923414.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb923694.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb923980.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb924191.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb924270.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb924496.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb924667.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb925454.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb925486.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb925902.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb926239.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb926255.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb926436.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb927779.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb927802.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb927891.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb928090.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb928255.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb928843.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb929123.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb929338.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb930178.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb930916.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb931261.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb931784.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb931836.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb932168.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb932823-v3.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb933360.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb933729.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb935839.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb935840.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb936021.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb936357.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb938828.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb938829.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb941202.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb941568.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb941644.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb941693.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb942763.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb943055.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb943460.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb943485.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb944653.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb945553.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb946026.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb948590.cat"
14 Apr 2008 7:34:36 9,550 ..... "C:\WINDOWS\$NtServicePackUninstall$\kb948881.cat"
14 May 2008 6:34:16 2,536 ..... "C:\WINDOWS\$NtServicePackUninstall$\lcldocs.xml"
28 May 2008 18:14:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00003"
28 May 2008 18:14:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00004"
28 May 2008 18:14:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00006"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00007"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00008"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00009"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00016"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00017"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00018"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00019"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00020"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00021"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00022"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00023"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00024"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00025"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00026"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00027"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00028"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00029"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00030"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00031"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00032"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00033"
28 May 2008 18:14:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00034"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00035"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00036"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00037"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00038"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00039"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00040"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00041"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00042"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00043"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00044"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00045"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00046"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00047"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00048"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00049"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00050"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00051"
28 May 2008 18:14:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00052"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00053"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00054"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00055"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00056"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00057"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00058"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00059"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00060"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00061"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00062"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00063"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00064"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00065"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00066"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00067"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00068"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00069"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00070"
28 May 2008 18:14:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00071"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00072"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00073"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00074"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00075"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00076"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00077"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00078"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00079"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00080"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00081"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00082"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00083"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00084"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00085"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00086"
28 May 2008 18:14:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00087"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00088"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00089"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00090"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00091"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00092"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00093"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00094"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00095"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00096"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00097"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00098"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00099"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00100"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00101"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00102"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00103"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00104"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00105"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00106"
28 May 2008 18:14:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00107"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00108"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00109"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00110"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00111"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00112"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00113"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00114"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00115"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00116"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00117"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00118"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00119"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00120"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00121"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00122"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00123"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00124"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00125"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00126"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00127"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00128"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00129"
28 May 2008 18:14:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00130"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00131"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00132"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00150"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00151"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00152"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00153"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00154"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00155"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00156"
28 May 2008 18:14:50 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00160"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00161"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00163"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00164"
28 May 2008 18:14:50 36,864 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00165"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00166"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00167"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00168"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00169"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00170"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00173"
28 May 2008 18:14:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00174"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00175"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00176"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00177"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00178"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00179"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00180"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00181"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00182"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00183"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00184"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00185"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00186"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00187"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00188"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00189"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00190"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00191"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00192"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00193"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00194"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00195"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00196"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00197"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00198"
28 May 2008 18:14:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00199"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00200"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00201"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00202"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00203"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00204"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00205"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00228"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00229"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00230"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00231"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00232"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00233"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00234"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00235"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00236"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00237"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00238"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00239"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00240"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00241"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00262"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00263"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00264"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00265"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00266"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00267"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00268"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00269"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00270"
28 May 2008 18:14:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00271"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00272"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00273"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00274"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00275"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00276"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00277"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00278"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00279"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00280"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00281"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00282"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00283"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00284"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00285"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00290"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00291"
28 May 2008 18:14:56 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00292"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00293"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00294"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00295"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00296"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00297"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00298"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00299"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00300"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00301"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00302"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00303"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00304"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00305"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00407"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00408"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00409"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00410"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00411"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00412"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00413"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00414"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00415"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00416"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00417"
28 May 2008 18:14:58 122,880 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00501"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00503"
28 May 2008 18:14:58 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00507"
28 May 2008 18:15:00 16,384 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00508"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00516"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00520"
28 May 2008 18:15:00 16,384 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00521"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00522"
28 May 2008 18:15:00 57,344 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00523"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00524"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00540"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00541"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00542"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00543"
28 May 2008 18:15:00 16,384 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00575"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00576"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00577"
28 May 2008 18:15:00 45,056 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00578"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00644"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00645"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00671"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00672"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00673"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00674"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00675"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00676"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00677"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00678"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00679"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00680"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00681"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00682"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00683"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00684"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00685"
28 May 2008 18:15:00 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00686"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00687"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00688"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00689"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00690"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00691"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00692"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00693"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00694"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00695"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00696"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00697"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00698"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00699"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00700"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00701"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00702"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00703"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00704"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00705"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00706"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00707"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00708"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00709"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00710"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00711"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00712"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00713"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00714"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00715"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00716"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00720"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00721"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00722"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00723"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00724"
28 May 2008 18:15:02 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00725"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00726"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00727"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00728"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00729"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00730"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00731"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00732"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00733"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00734"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00735"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00736"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00737"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00738"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00739"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00740"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00741"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00742"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00743"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00744"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00745"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00746"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00747"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00748"
28 May 2008 18:15:04 1,028,096 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00749"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00750"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00751"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00752"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00753"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00754"
28 May 2008 18:15:04 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00755"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00756"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00757"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00758"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00759"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00760"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00761"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00762"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00763"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00764"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00765"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00766"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00767"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00768"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00769"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00770"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00771"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00772"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00773"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00774"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00775"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00776"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00777"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00778"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00779"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00780"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00781"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00782"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00783"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00784"
28 May 2008 18:15:06 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00785"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00786"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00787"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00788"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00789"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00790"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00791"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00792"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00793"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00794"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00795"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00796"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00797"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00798"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00799"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00800"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00801"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00802"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00803"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00804"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00805"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00806"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00807"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00808"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00809"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00810"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00811"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00812"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00813"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00814"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00815"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00816"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00817"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00818"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00819"
28 May 2008 18:15:08 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00820"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00821"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00822"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00823"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00824"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00825"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00826"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00827"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00828"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00829"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00832"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00833"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00834"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00835"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00837"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00841"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00842"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00844"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00845"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00846"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00847"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00849"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00850"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00851"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00852"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00854"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00855"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00856"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00857"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00858"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00859"
28 May 2008 18:15:10 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00860"
28 May 2008 18:15:10 1,028,096 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00861"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00862"
28 May 2008 18:15:12 131,072 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00863"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00864"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00865"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00866"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00868"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00869"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00870"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00871"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00872"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00873"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00876"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00877"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00878"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00879"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00880"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00881"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00882"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00883"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00884"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00885"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00886"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00887"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00888"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00889"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00890"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00891"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00892"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00893"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00894"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00895"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00896"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00897"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00898"
28 May 2008 18:15:12 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00899"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00900"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00901"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00902"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00903"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00904"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00905"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00906"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00907"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00908"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00909"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00910"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00911"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00912"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00913"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00914"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00915"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00916"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00917"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00918"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00919"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00920"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00921"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00922"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00924"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00925"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00926"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00927"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00928"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00929"
28 May 2008 18:15:14 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00930"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00931"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00932"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00933"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00934"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00935"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00936"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00937"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00938"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00939"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00940"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00941"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00942"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00943"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00944"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00945"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00946"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00947"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00948"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00949"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00950"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00951"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00952"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00953"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00954"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00955"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00956"
28 May 2008 18:15:16 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00957"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00958"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00959"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00960"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00961"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00962"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00987"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00988"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00989"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00990"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00991"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00992"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00993"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00994"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00995"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00996"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00997"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00998"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg00999"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01000"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01001"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01079"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01080"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01081"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01109"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01110"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01111"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01113"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01159"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01160"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01161"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01162"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01163"
28 May 2008 18:15:18 28,672 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01164"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01166"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01167"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01168"
28 May 2008 18:15:18 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01186"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01187"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01188"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01189"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01190"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01191"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01192"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01193"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01194"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01195"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01196"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01197"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01199"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01200"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01201"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01202"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01203"
28 May 2008 18:15:20 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01204"
28 May 2008 18:15:20 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01232"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01233"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01234"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01235"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01236"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01237"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01238"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01239"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01240"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01241"
28 May 2008 18:15:20 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01242"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01243"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01244"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01245"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01246"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01247"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01248"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01249"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01250"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01251"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01252"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01253"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01254"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01255"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01256"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01257"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01258"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01259"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01260"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01261"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01262"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01263"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01264"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01265"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01266"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01267"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01268"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01269"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01270"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01271"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01272"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01273"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01274"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01275"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01276"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01277"
28 May 2008 18:15:22 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01278"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01279"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01280"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01281"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01282"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01283"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01284"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01285"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01286"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01287"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01288"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01289"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01290"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01291"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01292"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01293"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01294"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01295"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01296"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01297"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01298"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01299"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01300"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01301"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01302"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01303"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01304"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01305"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01306"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01307"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01308"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01309"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01310"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01311"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01312"
28 May 2008 18:15:24 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01313"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01314"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01315"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01316"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01317"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01318"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01319"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01320"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01321"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01322"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01323"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01324"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01325"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01326"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01327"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01328"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01329"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01330"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01331"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01332"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01333"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01334"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01335"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01336"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01337"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01338"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01339"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01340"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01341"
28 May 2008 18:15:26 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01342"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01343"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01344"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01345"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01346"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01347"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01348"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01349"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01350"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01351"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01352"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01353"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01354"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01355"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01356"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01357"
28 May 2008 18:15:28 16,384 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01358"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01359"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01360"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01361"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01362"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01363"
28 May 2008 18:15:28 274,432 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01364"
28 May 2008 18:15:28 335,872 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01365"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01366"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01367"
28 May 2008 18:15:28 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01368"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01369"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01371"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01372"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01373"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01374"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01375"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01376"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01377"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01378"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01379"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01380"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01381"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01382"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01383"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01384"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01385"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01386"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01387"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01388"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01389"
28 May 2008 18:15:30 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01390"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01391"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01392"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01393"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01394"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01395"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01396"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01397"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01398"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01399"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01400"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01401"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01402"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01403"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01404"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01405"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01406"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01407"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01408"
28 May 2008 18:15:32 28,672 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01409"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01410"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01411"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01412"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01413"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01427"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01428"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01429"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01431"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01432"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01433"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01434"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01435"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01436"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01437"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01438"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01439"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01440"
28 May 2008 18:15:32 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01441"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01442"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01443"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01445"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01446"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01447"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01448"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01449"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01450"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01451"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01452"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01453"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01454"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01455"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01456"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01457"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01458"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01459"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01460"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01461"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01462"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01463"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01464"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01465"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01466"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01467"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01468"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01470"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01471"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01472"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01473"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01476"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01477"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01478"
28 May 2008 18:15:34 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01479"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01482"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01483"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01730"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01733"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01735"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01739"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01740"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01742"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01743"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01896"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01901"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01902"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01903"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01905"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01906"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01907"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01908"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01910"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01911"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01912"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01913"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01915"
28 May 2008 18:15:36 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01916"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01917"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01918"
28 May 2008 18:15:36 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01919"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01921"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01922"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01933"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01934"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01935"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01936"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01937"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01938"
28 May 2008 18:15:36 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01939"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01940"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01941"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01950"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01951"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01952"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01953"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01954"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01955"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01956"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01957"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01958"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01959"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01960"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01961"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01962"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01963"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01964"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01965"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01966"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01967"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01968"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01969"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01970"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01971"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01972"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01973"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01974"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01975"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01976"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01977"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01978"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01979"
28 May 2008 18:15:38 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01980"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01981"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01982"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01983"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01984"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01985"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01986"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01987"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01988"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01989"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01990"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01991"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01992"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01993"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01994"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01995"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01998"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg01999"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02000"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02001"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02002"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02003"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02004"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02005"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02006"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02007"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02008"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02009"
28 May 2008 18:15:40 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02010"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02011"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02012"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02013"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02014"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02015"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02016"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02017"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02018"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02019"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02020"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02021"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02022"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02023"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02024"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02025"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02026"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02027"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02028"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02029"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02030"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02031"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02032"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02033"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02034"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02035"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02036"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02037"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02038"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02039"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02040"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02041"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02042"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02043"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02044"
28 May 2008 18:15:42 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02045"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02046"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02047"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02048"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02049"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02050"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02051"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02052"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02053"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02054"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02055"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02056"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02057"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02058"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02059"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02060"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02061"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02062"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02063"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02064"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02065"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02066"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02067"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02068"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02069"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02070"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02071"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02072"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02073"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02074"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02075"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02080"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02081"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02082"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02083"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02084"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02085"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02086"
28 May 2008 18:15:44 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02087"
28 May 2008 18:15:44 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02088"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02089"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02090"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02091"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02092"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02093"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02094"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02095"
28 May 2008 18:15:46 12,288 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02097"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02098"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02099"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02100"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02101"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02102"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02103"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02104"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02105"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02106"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02107"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02108"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02109"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02114"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02115"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02122"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02123"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02124"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02125"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02127"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02313"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02314"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02315"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02316"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02317"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02318"
28 May 2008 18:15:46 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02319"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02320"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02321"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02322"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02323"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02324"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02325"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02326"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02327"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02328"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02329"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02330"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02331"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02332"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02333"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02334"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02335"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02336"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02337"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02338"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02339"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02340"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02341"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02342"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02343"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02344"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02345"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02346"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02347"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02348"
28 May 2008 18:15:48 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02349"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02350"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02351"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02352"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02353"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02354"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02355"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02356"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02357"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02358"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02359"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02360"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02361"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02362"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02363"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02364"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02365"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02366"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02367"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02368"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02369"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02370"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02371"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02372"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02373"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02374"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02375"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02376"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02377"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02378"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02379"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02380"
28 May 2008 18:15:50 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02381"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02382"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02383"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02384"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02385"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02386"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02387"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02388"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02389"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02390"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02391"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02392"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02393"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02394"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02395"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02396"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02397"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02398"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02399"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02400"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02401"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02402"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02403"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02404"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02405"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02406"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02407"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02408"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02409"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02410"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02411"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02412"
28 May 2008 18:15:52 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02413"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02414"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02415"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02416"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02417"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02418"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02419"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02420"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02421"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02422"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02423"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02424"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02425"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02426"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02427"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02428"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02429"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02430"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02431"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02432"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02433"
28 May 2008 18:15:54 8,192 A.... "C:\WINDOWS\$NtServicePackUninstall$\reg02434"
14 Apr 2008 7:34:48 6,259,467 ..... "C:\WINDOWS\$NtServicePackUninstall$\sp3_uber.cat"
14 Apr 2008 1:11:48 39,424 A.... "C:\WINDOWS\AppPatch\acadproc.dll"
14 Apr 2008 1:11:48 1,852,928 A.... "C:\WINDOWS\AppPatch\acgenral.dll"
14 Apr 2008 1:11:48 451,072 A.... "C:\WINDOWS\AppPatch\aclayers.dll"
14 Apr 2008 1:11:48 141,312 A.... "C:\WINDOWS\AppPatch\aclua.dll"
14 Apr 2008 1:11:48 245,248 A.... "C:\WINDOWS\AppPatch\acspecfc.dll"
14 Apr 2008 1:11:48 116,224 A.... "C:\WINDOWS\AppPatch\acxtrnal.dll"
14 Apr 2008 1:15:22 218,134 A.... "C:\WINDOWS\AppPatch\apphelp.sdb"
14 Apr 2008 1:15:28 785,972 A.... "C:\WINDOWS\AppPatch\apph_sp.sdb"
14 Apr 2008 1:15:28 9,424 ..... "C:\WINDOWS\AppPatch\drvmain.sdb"
14 Apr 2008 1:15:28 204,396 A.... "C:\WINDOWS\AppPatch\msimain.sdb"
14 Apr 2008 1:15:28 1,202,774 A.... "C:\WINDOWS\AppPatch\sysmain.sdb"
28 May 2008 18:34:52 287 A.... "C:\WINDOWS\Debug\blastcln.log"
17 May 2008 12:50:06 17,364 A.... "C:\WINDOWS\Debug\mrt.log"
17 May 2008 12:50:06 7,540 A.... "C:\WINDOWS\Debug\mrteng.log"
1 Jun 2008 11:19:54 0 A.... "C:\WINDOWS\Debug\PASSWD.LOG"
21 May 2008 12:56:08 124,208 A.... "C:\WINDOWS\Downloaded Program Files\as2stubie.dll"
22 May 2008 16:04:24 395 A.... "C:\WINDOWS\Downloaded Program Files\as2stubie.inf"
9 Apr 2008 15:27:42 3,175,136 A.... "C:\WINDOWS\Downloaded Program Files\ImageUploader5.ocx"
28 May 2008 18:10:06 0 A.... "C:\WINDOWS\EHome\medctrro.cmd"
14 Apr 2008 1:16:10 80,546 A.... "C:\WINDOWS\Help\apps.chm"
14 Apr 2008 1:16:20 306,716 A.... "C:\WINDOWS\Help\apps_sp.chm"
14 Apr 2008 1:12:06 34,816 A.... "C:\WINDOWS\Help\sniffpol.dll"
14 Apr 2008 1:12:08 33,280 A.... "C:\WINDOWS\Help\sstub.dll"
14 Apr 2008 1:12:08 279,040 A.... "C:\WINDOWS\Help\tshoot.dll"
14 Apr 2008 1:11:58 220,160 A.... "C:\WINDOWS\ime\mscandui.dll"
14 Apr 2008 1:12:06 130,048 A.... "C:\WINDOWS\ime\softkbd.dll"
13 Apr 2008 17:43:18 62,976 A.... "C:\WINDOWS\ime\spgrmr.dll"
14 Apr 2008 1:12:06 250,368 A.... "C:\WINDOWS\ime\sptip.dll"
9 Apr 2008 14:36:20 12,500 A.... "C:\WINDOWS\inf\AEILAB.PNF"
14 Apr 2008 5:55:50 761 ..... "C:\WINDOWS\inf\branches.inf"
28 May 2008 18:16:02 4,256 A.... "C:\WINDOWS\inf\branches.PNF"
13 Apr 2008 16:44:36 11,681 A.... "C:\WINDOWS\inf\bth.inf"
28 May 2008 18:26:10 25,780 A.... "C:\WINDOWS\inf\bth.PNF"
13 Apr 2008 16:44:36 1,997 A.... "C:\WINDOWS\inf\bthprint.inf"
13 Apr 2008 16:44:36 1,943 A.... "C:\WINDOWS\inf\bthspp.inf"
28 May 2008 18:27:20 134,788 A.... "C:\WINDOWS\inf\comnt5.PNF"
13 Apr 2008 17:28:12 67,899 A.... "C:\WINDOWS\inf\drvindex.inf"
28 May 2008 18:26:12 222,468 A.... "C:\WINDOWS\inf\drvindex.PNF"
28 May 2008 18:27:20 10,240 A.... "C:\WINDOWS\inf\dtcnt5.PNF"
13 Apr 2008 17:28:12 19,364 A.... "C:\WINDOWS\inf\dwup.inf"
9 Apr 2008 14:36:20 4,684 A.... "C:\WINDOWS\inf\Erma.PNF"
13 Apr 2008 17:28:24 1,224 A.... "C:\WINDOWS\inf\fltmgr.inf"
28 May 2008 18:27:22 17,568 A.... "C:\WINDOWS\inf\fp40ext.PNF"
28 May 2008 18:16:02 5,900 A.... "C:\WINDOWS\inf\GEARAspiWDM.PNF"
13 Apr 2008 18:11:02 2,464 ..... "C:\WINDOWS\inf\hdaudbus.inf"
13 Apr 2008 16:44:36 1,995 A.... "C:\WINDOWS\inf\hidbth.inf"
13 Apr 2008 17:28:28 3,751 A.... "C:\WINDOWS\inf\hiddigi.inf"
13 Apr 2008 17:28:28 4,433 A.... "C:\WINDOWS\inf\hidserv.inf"
13 Apr 2008 17:29:36 54,131 A.... "C:\WINDOWS\inf\ie.inf"
13 Apr 2008 17:29:38 815 A.... "C:\WINDOWS\inf\ieaccess.inf"
28 May 2008 18:27:22 4,464 A.... "C:\WINDOWS\inf\ieaccess.PNF"
14 Apr 2008 1:19:20 48,853 A.... "C:\WINDOWS\inf\ims.inf"
28 May 2008 18:27:20 105,040 A.... "C:\WINDOWS\inf\ims.PNF"
28 May 2008 18:16:04 1,545,216 A.... "C:\WINDOWS\inf\INFCACHE.1"
13 Apr 2008 17:29:40 69,990 A.... "C:\WINDOWS\inf\input.inf"
13 Apr 2008 17:29:40 868,116 A.... "C:\WINDOWS\inf\intl.inf"
13 Apr 2008 17:29:42 43,203 A.... "C:\WINDOWS\inf\keyboard.inf"
28 May 2008 17:47:46 278 ..... "C:\WINDOWS\inf\koc.inf"
28 May 2008 18:27:20 2,916 A.... "C:\WINDOWS\inf\koc.PNF"
13 Apr 2008 17:29:44 36,992 A.... "C:\WINDOWS\inf\ks.inf"
13 Apr 2008 17:29:44 23,978 A.... "C:\WINDOWS\inf\kscaptur.inf"
13 Apr 2008 17:29:44 9,904 A.... "C:\WINDOWS\inf\ksfilter.inf"
14 Apr 2008 3:04:30 391,859 A.... "C:\WINDOWS\inf\layout.inf"
28 May 2008 18:26:12 1,008,556 A.... "C:\WINDOWS\inf\LAYOUT.PNF"
13 Apr 2008 17:29:46 85,547 A.... "C:\WINDOWS\inf\machine.inf"
28 May 2008 18:26:16 187,380 A.... "C:\WINDOWS\inf\machine.PNF"
13 Apr 2008 17:29:46 16,322 A.... "C:\WINDOWS\inf\mchgr.inf"
13 Apr 2008 17:29:46 11,790 A.... "C:\WINDOWS\inf\mdac.inf"
13 Apr 2008 16:44:36 26,756 A.... "C:\WINDOWS\inf\mdmbtmdm.inf"
13 Apr 2008 16:55:20 80,087 A.... "C:\WINDOWS\inf\mdmirmdm.inf"
13 Apr 2008 17:29:50 3,353 A.... "C:\WINDOWS\inf\mpe.inf"
13 Apr 2008 17:29:52 27,604 A.... "C:\WINDOWS\inf\mshdc.inf"
13 Apr 2008 17:29:54 18,400 A.... "C:\WINDOWS\inf\msoe50.inf"
28 May 2008 18:34:44 35,964 A.... "C:\WINDOWS\inf\msoe50.PNF"
13 Apr 2008 17:29:56 16,957 A.... "C:\WINDOWS\inf\mstape.inf"
13 Apr 2008 17:29:58 4,097 A.... "C:\WINDOWS\inf\nabtsfec.inf"
13 Apr 2008 17:29:58 6,742 A.... "C:\WINDOWS\inf\ndisip.inf"
13 Apr 2008 17:30:02 787 A.... "C:\WINDOWS\inf\netbeac.inf"
28 May 2008 18:27:22 3,652 A.... "C:\WINDOWS\inf\netbeac.PNF"
13 Apr 2008 17:30:00 696 A.... "C:\WINDOWS\inf\netfw.inf"
28 May 2008 18:34:28 3,704 A.... "C:\WINDOWS\inf\netfw.PNF"
13 Apr 2008 17:30:02 6,151 A.... "C:\WINDOWS\inf\netip6.inf"
9 Apr 2008 14:36:20 10,464 A.... "C:\WINDOWS\inf\NetMotCM.PNF"
13 Apr 2008 17:30:04 11,747 A.... "C:\WINDOWS\inf\netmscli.inf"
13 Apr 2008 17:30:06 9,074 A.... "C:\WINDOWS\inf\netoc.inf"
28 May 2008 18:27:20 16,448 A.... "C:\WINDOWS\inf\netoc.PNF"
13 Apr 2008 17:30:06 39,025 A.... "C:\WINDOWS\inf\netrass.inf"
13 Apr 2008 19:21:26 2,938 A.... "C:\WINDOWS\inf\netrndis.inf"
13 Apr 2008 17:30:10 24,362 A.... "C:\WINDOWS\inf\nettcpip.inf"
13 Apr 2008 17:30:12 1,997 A.... "C:\WINDOWS\inf\nettun.inf"
13 Apr 2008 17:30:10 3,243 A.... "C:\WINDOWS\inf\netupnph.inf"
13 Apr 2008 17:30:12 3,998 A.... "C:\WINDOWS\inf\netwzc.inf"
13 Apr 2008 17:30:14 1,498,946 A.... "C:\WINDOWS\inf\ntprint.inf"
13 Apr 2008 17:30:18 771 A.... "C:\WINDOWS\inf\oeaccess.inf"
28 May 2008 18:27:22 4,384 A.... "C:\WINDOWS\inf\oeaccess.PNF"
26 May 2008 20:43:32 7,720 A.... "C:\WINDOWS\inf\oem239.PNF"
13 Apr 2008 17:30:16 6,344 A.... "C:\WINDOWS\inf\oobe.inf"
13 Apr 2008 17:30:18 6,786 A.... "C:\WINDOWS\inf\p2p.inf"
28 May 2008 18:27:22 14,492 A.... "C:\WINDOWS\inf\p2p.PNF"
13 Apr 2008 17:30:20 53,259 A.... "C:\WINDOWS\inf\pnpscsi.inf"
13 Apr 2008 17:30:26 1,894 A.... "C:\WINDOWS\inf\ramdisk.inf"
13 Apr 2008 17:30:28 17,708 A.... "C:\WINDOWS\inf\sceregvl.inf"
28 May 2008 18:34:54 39,428 A.... "C:\WINDOWS\inf\sceregvl.PNF"
13 Apr 2008 17:30:28 10,822 A.... "C:\WINDOWS\inf\scsi.inf"
13 Apr 2008 17:30:28 3,669 A.... "C:\WINDOWS\inf\sdbus.inf"
28 May 2008 18:26:12 10,732 A.... "C:\WINDOWS\inf\sdbus.PNF"
13 Apr 2008 17:30:30 8,339 A.... "C:\WINDOWS\inf\secrecs.inf"
13 Apr 2008 17:30:32 4,433 A.... "C:\WINDOWS\inf\sffdisk.inf"
13 Apr 2008 17:30:32 26,407 A.... "C:\WINDOWS\inf\shell.inf"
13 Apr 2008 17:30:32 6,540 A.... "C:\WINDOWS\inf\shl_img.inf"
13 Apr 2008 17:30:32 3,599 A.... "C:\WINDOWS\inf\slip.inf"
13 Apr 2008 17:30:34 23,714 A.... "C:\WINDOWS\inf\smartcrd.inf"
9 Apr 2008 14:36:20 14,004 A.... "C:\WINDOWS\inf\SMCUSB.PNF"
13 Apr 2008 17:30:36 5,884 A.... "C:\WINDOWS\inf\streamip.inf"
13 Apr 2008 17:30:36 1,863 A.... "C:\WINDOWS\inf\swflash.inf"
13 Apr 2008 17:30:38 1,686 A.... "C:\WINDOWS\inf\sysoc.inf"
28 May 2008 18:27:18 6,700 A.... "C:\WINDOWS\inf\SYSOC.PNF"
13 Apr 2008 17:30:40 34,908 A.... "C:\WINDOWS\inf\syssetup.inf"
13 Apr 2008 17:30:40 33,550 A.... "C:\WINDOWS\inf\tape.inf"
9 Apr 2008 14:36:20 10,792 A.... "C:\WINDOWS\inf\tbntndis.PNF"
9 Apr 2008 14:36:20 7,580 A.... "C:\WINDOWS\inf\tbntunic.PNF"
13 Apr 2008 16:44:36 4,473 A.... "C:\WINDOWS\inf\tdibth.inf"
14 Apr 2008 1:25:24 119,840 A.... "C:\WINDOWS\inf\tsoc.inf"
28 May 2008 18:27:20 131,156 A.... "C:\WINDOWS\inf\tsoc.PNF"
9 Apr 2008 14:36:20 8,572 A.... "C:\WINDOWS\inf\Usbcm.PNF"
13 Apr 2008 17:31:42 23,708 A.... "C:\WINDOWS\inf\usbport.inf"
13 Apr 2008 17:31:44 9,026 A.... "C:\WINDOWS\inf\usbvideo.inf"
13 Apr 2008 17:31:48 5,353 ..... "C:\WINDOWS\inf\wbemoc.inf"
28 May 2008 18:27:20 12,508 A.... "C:\WINDOWS\inf\wbemoc.PNF"
13 Apr 2008 18:11:04 63,292 ..... "C:\WINDOWS\inf\wdma_ali.inf"
13 Apr 2008 18:11:08 18,734 ..... "C:\WINDOWS\inf\wdma_via.inf"
13 Apr 2008 18:23:24 29,070 A.... "C:\WINDOWS\inf\wmp.inf"
13 Apr 2008 17:31:50 3,612 A.... "C:\WINDOWS\inf\wstcodec.inf"
28 May 2008 19:33:04 24 A.... "C:\WINDOWS\.jagex_cache_32\random.dat"
14 Apr 2008 1:11:48 24,064 A.... "C:\WINDOWS\msagent\agentanm.dll"
14 Apr 2008 1:11:48 214,016 A.... "C:\WINDOWS\msagent\agentctl.dll"
14 Apr 2008 1:11:48 42,496 A.... "C:\WINDOWS\msagent\agentdp2.dll"
14 Apr 2008 1:11:48 57,344 A.... "C:\WINDOWS\msagent\agentdpv.dll"
14 Apr 2008 1:11:48 49,152 A.... "C:\WINDOWS\msagent\agentmpx.dll"
14 Apr 2008 1:11:48 24,064 A.... "C:\WINDOWS\msagent\agentpsh.dll"
14 Apr 2008 1:11:48 44,032 A.... "C:\WINDOWS\msagent\agentsr.dll"
14 Apr 2008 1:12:12 256,512 A.... "C:\WINDOWS\msagent\agentsvr.exe"
13 Apr 2008 18:32:28 18,432 A.... "C:\WINDOWS\msagent\agtctl15.tlb"
14 Apr 2008 1:11:50 24,064 A.... "C:\WINDOWS\msagent\agtintl.dll"
14 Apr 2008 1:12:00 39,936 A.... "C:\WINDOWS\msagent\mslwvtts.dll"
14 Apr 2008 1:11:52 33,792 ..... "C:\WINDOWS\network diagnostic\custsat.dll"
13 Apr 2008 19:53:32 558,080 ..... "C:\WINDOWS\network diagnostic\xpnetdiag.exe"
14 Apr 2008 1:12:06 151,552 ..... "C:\WINDOWS\peernet\sqldb20.dll"
14 Apr 2008 1:12:06 462,848 ..... "C:\WINDOWS\peernet\sqlqp20.dll"
14 Apr 2008 1:12:06 110,592 ..... "C:\WINDOWS\peernet\sqlse20.dll"
28 May 2008 18:27:54 8,192 A.... "C:\WINDOWS\security\edb.chk"
28 May 2008 18:27:24 1,048,576 A.... "C:\WINDOWS\security\edb.log"
28 May 2008 18:16:18 1,048,576 A.... "C:\WINDOWS\security\res1.log"
28 May 2008 18:16:18 1,048,576 A.... "C:\WINDOWS\security\res2.log"
28 May 2008 18:27:24 1,056,768 A.... "C:\WINDOWS\security\tmp.edb"
14 Apr 2008 1:12:00 3,166,208 A.... "C:\WINDOWS\srchasst\msgr3en.dll"
14 Apr 2008 1:12:06 58,434 A.... "C:\WINDOWS\srchasst\srchctls.dll"
14 Apr 2008 1:12:08 726,078 A.... "C:\WINDOWS\srchasst\srchui.dll"
14 Apr 2008 1:12:46 146,432 A.... "C:\WINDOWS\system\winspool.drv"
14 Apr 2008 1:11:48 100,352 A.... "C:\WINDOWS\system32\6to4svc.dll"
14 Apr 2008 1:11:48 136,192 ..... "C:\WINDOWS\system32\aaclient.dll"
14 Apr 2008 1:12:42 68,608 A.... "C:\WINDOWS\system32\access.cpl"
14 Apr 2008 1:12:12 184,320 A.... "C:\WINDOWS\system32\accwiz.exe"
14 Apr 2008 1:11:48 115,712 A.... "C:\WINDOWS\system32\aclui.dll"
14 Apr 2008 1:11:48 193,536 A.... "C:\WINDOWS\system32\activeds.dll"
14 Apr 2008 1:12:12 4,096 A.... "C:\WINDOWS\system32\actmovie.exe"
14 Apr 2008 1:11:48 98,304 A.... "C:\WINDOWS\system32\actxprxy.dll"
14 Apr 2008 1:11:48 175,616 A.... "C:\WINDOWS\system32\adsldp.dll"
14 Apr 2008 1:11:48 143,360 A.... "C:\WINDOWS\system32\adsldpc.dll"
14 Apr 2008 1:11:48 68,096 A.... "C:\WINDOWS\system32\adsmsext.dll"
14 Apr 2008 1:11:48 263,680 A.... "C:\WINDOWS\system32\adsnt.dll"
14 Apr 2008 1:11:48 617,472 A.... "C:\WINDOWS\system32\advapi32.dll"
14 Apr 2008 1:12:12 98,304 A.... "C:\WINDOWS\system32\ahui.exe"
14 Apr 2008 1:12:12 44,544 A.... "C:\WINDOWS\system32\alg.exe"
14 Apr 2008 1:11:50 17,408 A.... "C:\WINDOWS\system32\alrsvc.dll"
14 Apr 2008 1:11:50 70,656 A.... "C:\WINDOWS\system32\amstream.dll"
14 Apr 2008 1:11:50 125,952 A.... "C:\WINDOWS\system32\apphelp.dll"
14 Apr 2008 1:12:42 549,888 A.... "C:\WINDOWS\system32\appwiz.cpl"
14 Apr 2008 1:08:58 114,688 A.... "C:\WINDOWS\system32\asctrls.ocx"
14 Apr 2008 1:11:50 65,024 A.... "C:\WINDOWS\system32\asycfilt.dll"
14 Apr 2008 1:12:12 25,088 A.... "C:\WINDOWS\system32\at.exe"
14 Apr 2008 1:11:50 377,984 A.... "C:\WINDOWS\system32\ati2dvaa.dll"
14 Apr 2008 1:11:50 870,784 A.... "C:\WINDOWS\system32\ati3d1ag.dll"
14 Apr 2008 1:12:42 9,728 A.... "C:\WINDOWS\system32\ativdaxx.ax"
14 Apr 2008 1:12:42 23,040 A.... "C:\WINDOWS\system32\ativmvxx.ax"
14 Apr 2008 1:11:50 32,768 A.... "C:\WINDOWS\system32\ativtmxx.dll"
14 Apr 2008 1:11:50 58,880 A.... "C:\WINDOWS\system32\atl.dll"
14 Apr 2008 1:12:12 11,264 A.... "C:\WINDOWS\system32\atmadm.exe"
14 Apr 2008 1:09:02 285,696 A.... "C:\WINDOWS\system32\atmfd.dll"
14 Apr 2008 1:11:50 30,208 A.... "C:\WINDOWS\system32\atmlib.dll"
14 Apr 2008 1:12:12 12,288 A.... "C:\WINDOWS\system32\attrib.exe"
14 Apr 2008 1:11:50 42,496 A.... "C:\WINDOWS\system32\audiosrv.dll"
14 Apr 2008 1:12:12 14,336 A.... "C:\WINDOWS\system32\auditusr.exe"
14 Apr 2008 1:11:50 62,464 A.... "C:\WINDOWS\system32\authz.dll"
14 Apr 2008 1:12:12 588,800 A.... "C:\WINDOWS\system32\autochk.exe"
14 Apr 2008 1:12:12 602,624 A.... "C:\WINDOWS\system32\autoconv.exe"
14 Apr 2008 1:12:14 580,608 A.... "C:\WINDOWS\system32\autofmt.exe"
14 Apr 2008 1:12:14 11,264 A.... "C:\WINDOWS\system32\autolfn.exe"
28 May 2008 15:28:30 10,520 A.... "C:\WINDOWS\system32\avgrsstx.dll"
14 Apr 2008 1:11:50 84,992 A.... "C:\WINDOWS\system32\avifil32.dll"
14 Apr 2008 1:11:50 233,472 ..... "C:\WINDOWS\system32\azroles.dll"
14 Apr 2008 1:11:50 52,736 A.... "C:\WINDOWS\system32\basesrv.dll"
14 Apr 2008 1:11:50 29,184 A.... "C:\WINDOWS\system32\batmeter.dll"
14 Apr 2008 1:11:50 8,704 A.... "C:\WINDOWS\system32\batt.dll"
14 Apr 2008 1:11:50 17,408 A.... "C:\WINDOWS\system32\bidispl.dll"
14 Apr 2008 1:11:50 8,192 A.... "C:\WINDOWS\system32\bitsprx2.dll"
14 Apr 2008 1:11:50 7,168 A.... "C:\WINDOWS\system32\bitsprx3.dll"
14 Apr 2008 1:11:50 7,168 ..... "C:\WINDOWS\system32\bitsprx4.dll"
14 Apr 2008 1:12:14 71,680 A.... "C:\WINDOWS\system32\blastcln.exe"
13 Apr 2008 18:03:24 63,488 A.... "C:\WINDOWS\system32\browselc.dll"
14 Apr 2008 1:11:50 77,824 A.... "C:\WINDOWS\system32\browser.dll"
14 Apr 2008 1:11:50 1,025,024 A.... "C:\WINDOWS\system32\browseui.dll"
14 Apr 2008 1:11:50 78,336 A.... "C:\WINDOWS\system32\browsewm.dll"
14 Apr 2008 1:11:50 20,992 A.... "C:\WINDOWS\system32\bthci.dll"
14 Apr 2008 1:12:42 110,592 A.... "C:\WINDOWS\system32\bthprops.cpl"
14 Apr 2008 1:11:50 30,208 A.... "C:\WINDOWS\system32\bthserv.dll"
14 Apr 2008 1:11:50 50,688 A.... "C:\WINDOWS\system32\btpanui.dll"
14 Apr 2008 1:11:50 60,416 A.... "C:\WINDOWS\system32\cabinet.dll"
14 Apr 2008 1:11:50 84,480 A.... "C:\WINDOWS\system32\cabview.dll"
14 Apr 2008 1:12:14 19,968 A.... "C:\WINDOWS\system32\cacls.exe"
14 Apr 2008 1:11:50 50,688 A.... "C:\WINDOWS\system32\camocx.dll"
14 Apr 2008 1:11:50 150,016 A.... "C:\WINDOWS\system32\capesnpn.dll"
14 Apr 2008 1:11:50 226,304 A.... "C:\WINDOWS\system32\catsrv.dll"
14 Apr 2008 1:11:50 85,504 A.... "C:\WINDOWS\system32\catsrvps.dll"
14 Apr 2008 1:11:50 625,664 A.... "C:\WINDOWS\system32\catsrvut.dll"
14 Apr 2008 1:11:50 151,040 A.... "C:\WINDOWS\system32\cdfview.dll"
14 Apr 2008 1:11:50 2,091,520 A.... "C:\WINDOWS\system32\cdosys.dll"
14 Apr 2008 1:11:50 194,560 A.... "C:\WINDOWS\system32\certcli.dll"
14 Apr 2008 1:11:50 457,728 A.... "C:\WINDOWS\system32\certmgr.dll"
14 Apr 2008 1:11:50 38,912 A.... "C:\WINDOWS\system32\cfgbkend.dll"
14 Apr 2008 1:09:06 16,896 A.... "C:\WINDOWS\system32\cfgmgr32.dll"
14 Apr 2008 1:11:30 78,336 A.... "C:\WINDOWS\system32\chajei.ime"
14 Apr 2008 1:11:50 148,480 A.... "C:\WINDOWS\system32\cic.dll"
14 Apr 2008 1:11:32 21,504 A.... "C:\WINDOWS\system32\cintlgnt.ime"
14 Apr 2008 1:11:50 69,120 A.... "C:\WINDOWS\system32\ciodm.dll"
14 Apr 2008 1:12:14 5,632 A.... "C:\WINDOWS\system32\cisvc.exe"
14 Apr 2008 1:11:50 110,592 A.... "C:\WINDOWS\system32\clbcatex.dll"
14 Apr 2008 1:11:50 498,688 A.... "C:\WINDOWS\system32\clbcatq.dll"
14 Apr 2008 1:12:14 64,000 A.... "C:\WINDOWS\system32\cleanmgr.exe"
14 Apr 2008 1:11:50 77,824 A.... "C:\WINDOWS\system32\cliconfg.dll"
14 Apr 2008 1:12:14 20,480 A.... "C:\WINDOWS\system32\cliconfg.exe"
13 Apr 2008 18:26:28 24,576 A.... "C:\WINDOWS\system32\cliconfg.rll"
14 Apr 2008 1:12:14 102,912 A.... "C:\WINDOWS\system32\clipbrd.exe"
14 Apr 2008 1:12:14 33,280 A.... "C:\WINDOWS\system32\clipsrv.exe"
14 Apr 2008 1:11:50 58,368 A.... "C:\WINDOWS\system32\clusapi.dll"
14 Apr 2008 1:11:50 15,872 A.... "C:\WINDOWS\system32\cmcfg32.dll"
14 Apr 2008 1:12:14 389,120 A.... "C:\WINDOWS\system32\cmd.exe"
14 Apr 2008 1:11:50 344,064 A.... "C:\WINDOWS\system32\cmdial32.dll"
14 Apr 2008 1:12:14 25,600 A.... "C:\WINDOWS\system32\cmdl32.exe"
14 Apr 2008 1:12:16 39,936 A.... "C:\WINDOWS\system32\cmmon32.exe"
14 Apr 2008 1:11:50 185,344 A.... "C:\WINDOWS\system32\cmprops.dll"
14 Apr 2008 1:11:50 13,312 A.... "C:\WINDOWS\system32\cmsetacl.dll"
14 Apr 2008 1:12:16 63,488 A.... "C:\WINDOWS\system32\cmstp.exe"
14 Apr 2008 1:11:50 39,424 A.... "C:\WINDOWS\system32\cmutil.dll"
14 Apr 2008 1:11:50 47,104 A.... "C:\WINDOWS\system32\cnbjmon.dll"
14 Apr 2008 1:11:52 60,416 A.... "C:\WINDOWS\system32\colbact.dll"
14 Apr 2008 1:11:52 28,160 A.... "C:\WINDOWS\system32\comaddin.dll"
14 Apr 2008 1:11:52 617,472 A.... "C:\WINDOWS\system32\comctl32.dll"
14 Apr 2008 1:11:52 276,992 A.... "C:\WINDOWS\system32\comdlg32.dll"
14 Apr 2008 1:11:52 252,928 A.... "C:\WINDOWS\system32\compatui.dll"
14 Apr 2008 1:11:52 229,376 A.... "C:\WINDOWS\system32\compstui.dll"
14 Apr 2008 1:11:52 97,792 A.... "C:\WINDOWS\system32\comrepl.dll"
14 Apr 2008 1:11:52 792,064 A.... "C:\WINDOWS\system32\comres.dll"
14 Apr 2008 1:11:52 167,424 A.... "C:\WINDOWS\system32\comsnap.dll"
14 Apr 2008 1:11:52 1,267,200 A.... "C:\WINDOWS\system32\comsvcs.dll"
14 Apr 2008 1:11:52 539,648 A.... "C:\WINDOWS\system32\comuid.dll"
14 Apr 2008 1:11:52 357,888 A.... "C:\WINDOWS\system32\confmsp.dll"
14 Apr 2008 1:12:16 27,648 A.... "C:\WINDOWS\system32\conime.exe"
14 Apr 2008 1:11:52 35,328 A.... "C:\WINDOWS\system32\corpol.dll"
3 Apr 2008 17:07:18 193,880 A..HR "C:\WINDOWS\system32\cpnprt2.cid"
3 Apr 2008 17:07:34 197,976 A..HR "C:\WINDOWS\system32\cpnprtuk.cid"
14 Apr 2008 1:11:52 12,800 ..... "C:\WINDOWS\system32\credssp.dll"
14 Apr 2008 1:11:52 163,840 A.... "C:\WINDOWS\system32\credui.dll"
14 Apr 2008 1:11:52 599,040 A.... "C:\WINDOWS\system32\crypt32.dll"
14 Apr 2008 1:11:52 74,752 A.... "C:\WINDOWS\system32\cryptdlg.dll"
14 Apr 2008 1:11:52 33,280 A.... "C:\WINDOWS\system32\cryptdll.dll"
14 Apr 2008 1:11:52 53,760 A.... "C:\WINDOWS\system32\cryptext.dll"
14 Apr 2008 1:11:52 64,512 A.... "C:\WINDOWS\system32\cryptnet.dll"
14 Apr 2008 1:11:52 62,464 A.... "C:\WINDOWS\system32\cryptsvc.dll"
14 Apr 2008 1:11:52 512,512 A.... "C:\WINDOWS\system32\cryptui.dll"
14 Apr 2008 1:11:52 101,888 A.... "C:\WINDOWS\system32\cscdll.dll"
14 Apr 2008 1:12:16 139,264 A.... "C:\WINDOWS\system32\cscript.exe"
14 Apr 2008 1:11:52 326,656 A.... "C:\WINDOWS\system32\cscui.dll"
14 Apr 2008 1:11:52 32,256 A.... "C:\WINDOWS\system32\csrsrv.dll"
14 Apr 2008 1:12:16 6,144 A.... "C:\WINDOWS\system32\csrss.exe"
14 Apr 2008 1:12:16 15,360 A.... "C:\WINDOWS\system32\ctfmon.exe"
14 Apr 2008 1:11:50 218,112 A.... "C:\WINDOWS\system32\c_g18030.dll"
14 Apr 2008 1:11:52 1,179,648 A.... "C:\WINDOWS\system32\d3d8.dll"
14 Apr 2008 1:11:52 8,192 A.... "C:\WINDOWS\system32\d3d8thk.dll"
14 Apr 2008 1:11:52 1,689,088 A.... "C:\WINDOWS\system32\d3d9.dll"
14 Apr 2008 1:11:52 824,320 A.... "C:\WINDOWS\system32\d3dim700.dll"
14 Apr 2008 1:11:52 1,054,208 A.... "C:\WINDOWS\system32\danim.dll"
14 Apr 2008 1:11:52 54,272 A.... "C:\WINDOWS\system32\dataclen.dll"
14 Apr 2008 1:11:52 165,376 A.... "C:\WINDOWS\system32\datime.dll"
14 Apr 2008 1:11:52 25,088 A.... "C:\WINDOWS\system32\davclnt.dll"
14 Apr 2008 1:09:14 153,088 A.... "C:\WINDOWS\system32\daxctle.ocx"
14 Apr 2008 1:11:34 78,848 A.... "C:\WINDOWS\system32\dayi.ime"
14 Apr 2008 1:11:52 640,000 A.... "C:\WINDOWS\system32\dbghelp.dll"
14 Apr 2008 1:11:52 24,576 A.... "C:\WINDOWS\system32\dbmsrpcn.dll"
14 Apr 2008 1:11:52 110,592 A.... "C:\WINDOWS\system32\dbnetlib.dll"
14 Apr 2008 1:11:52 28,672 A.... "C:\WINDOWS\system32\dbnmpntw.dll"
14 Apr 2008 1:25:26 1,804 A.... "C:\WINDOWS\system32\dcache.bin"
14 Apr 2008 1:11:52 8,704 A.... "C:\WINDOWS\system32\dciman32.dll"
14 Apr 2008 1:12:16 6,144 A.... "C:\WINDOWS\system32\dcomcnfg.exe"
14 Apr 2008 1:12:16 30,208 A.... "C:\WINDOWS\system32\ddeshare.exe"
14 Apr 2008 1:11:52 279,552 A.... "C:\WINDOWS\system32\ddraw.dll"
14 Apr 2008 1:11:52 27,136 A.... "C:\WINDOWS\system32\ddrawex.dll"
14 Apr 2008 1:12:16 25,088 A.... "C:\WINDOWS\system32\defrag.exe"
14 Apr 2008 1:12:42 135,168 A.... "C:\WINDOWS\system32\desk.cpl"
14 Apr 2008 1:11:52 59,904 A.... "C:\WINDOWS\system32\devenum.dll"
14 Apr 2008 1:11:52 282,624 A.... "C:\WINDOWS\system32\devmgr.dll"
14 Apr 2008 1:12:16 82,944 A.... "C:\WINDOWS\system32\dfrgfat.exe"
14 Apr 2008 1:12:16 105,472 A.... "C:\WINDOWS\system32\dfrgntfs.exe"
14 Apr 2008 1:11:52 39,424 A.... "C:\WINDOWS\system32\dfrgsnap.dll"
14 Apr 2008 1:11:52 124,416 A.... "C:\WINDOWS\system32\dfrgui.dll"
14 Apr 2008 1:11:52 28,672 A.... "C:\WINDOWS\system32\dfsshlex.dll"
14 Apr 2008 1:11:52 111,104 A.... "C:\WINDOWS\system32\dgnet.dll"
14 Apr 2008 1:11:52 126,976 A.... "C:\WINDOWS\system32\dhcpcsvc.dll"
14 Apr 2008 1:11:52 379,904 A.... "C:\WINDOWS\system32\dhcpmon.dll"
14 Apr 2008 1:11:52 48,640 ..... "C:\WINDOWS\system32\dhcpqec.dll"
14 Apr 2008 1:12:18 87,040 A.... "C:\WINDOWS\system32\diantz.exe"
14 Apr 2008 1:11:52 68,608 A.... "C:\WINDOWS\system32\digest.dll"
14 Apr 2008 1:11:52 19,456 ..... "C:\WINDOWS\system32\dimsntfy.dll"
14 Apr 2008 1:11:52 39,936 ..... "C:\WINDOWS\system32\dimsroam.dll"
14 Apr 2008 1:11:52 158,720 A.... "C:\WINDOWS\system32\dinput.dll"
14 Apr 2008 1:11:52 181,760 A.... "C:\WINDOWS\system32\dinput8.dll"
14 Apr 2008 1:11:52 1,504,256 A.... "C:\WINDOWS\system32\diskcopy.dll"
14 Apr 2008 1:12:18 163,840 A.... "C:\WINDOWS\system32\diskpart.exe"
14 Apr 2008 1:11:52 32,768 A.... "C:\WINDOWS\system32\dispex.dll"
14 Apr 2008 1:12:18 5,120 A.... "C:\WINDOWS\system32\dllhost.exe"
14 Apr 2008 1:12:18 224,768 A.... "C:\WINDOWS\system32\dmadmin.exe"
14 Apr 2008 1:11:52 28,672 A.... "C:\WINDOWS\system32\dmband.dll"
14 Apr 2008 1:11:52 61,440 A.... "C:\WINDOWS\system32\dmcompos.dll"
14 Apr 2008 1:11:52 285,184 A.... "C:\WINDOWS\system32\dmdlgs.dll"
14 Apr 2008 1:11:52 200,704 A.... "C:\WINDOWS\system32\dmdskmgr.dll"
14 Apr 2008 1:11:52 181,248 A.... "C:\WINDOWS\system32\dmime.dll"
14 Apr 2008 1:11:52 35,840 A.... "C:\WINDOWS\system32\dmloader.dll"
14 Apr 2008 1:12:18 15,872 A.... "C:\WINDOWS\system32\dmremote.exe"
14 Apr 2008 1:11:52 82,432 A.... "C:\WINDOWS\system32\dmscript.dll"
14 Apr 2008 1:11:52 23,552 A.... "C:\WINDOWS\system32\dmserver.dll"
14 Apr 2008 1:11:52 105,984 A.... "C:\WINDOWS\system32\dmstyle.dll"
14 Apr 2008 1:11:52 103,424 A.... "C:\WINDOWS\system32\dmsynth.dll"
14 Apr 2008 1:11:52 104,448 A.... "C:\WINDOWS\system32\dmusic.dll"
14 Apr 2008 1:11:52 52,224 A.... "C:\WINDOWS\system32\dmutil.dll"
14 Apr 2008 1:11:52 147,968 A.... "C:\WINDOWS\system32\dnsapi.dll"
14 Apr 2008 1:11:52 45,568 A.... "C:\WINDOWS\system32\dnsrslvr.dll"
14 Apr 2008 1:11:52 48,128 A.... "C:\WINDOWS\system32\docprop2.dll"
14 Apr 2008 1:11:52 26,112 ..... "C:\WINDOWS\system32\dot3api.dll"
14 Apr 2008 1:11:52 57,856 ..... "C:\WINDOWS\system32\dot3cfg.dll"
14 Apr 2008 1:11:52 9,216 ..... "C:\WINDOWS\system32\dot3dlg.dll"
14 Apr 2008 1:11:52 39,936 ..... "C:\WINDOWS\system32\dot3gpclnt.dll"
14 Apr 2008 1:11:52 56,320 ..... "C:\WINDOWS\system32\dot3msm.dll"
14 Apr 2008 1:11:52 132,096 ..... "C:\WINDOWS\system32\dot3svc.dll"
14 Apr 2008 1:11:52 650,752 ..... "C:\WINDOWS\system32\dot3ui.dll"
13 Apr 2008 22:00:50 103,424 A.... "C:\WINDOWS\system32\dpcdll.dll"
14 Apr 2008 1:12:18 29,696 A.... "C:\WINDOWS\system32\dplaysvr.exe"
14 Apr 2008 1:11:52 229,888 A.... "C:\WINDOWS\system32\dplayx.dll"
14 Apr 2008 1:11:52 23,552 A.... "C:\WINDOWS\system32\dpmodemx.dll"
14 Apr 2008 1:09:20 3,072 A.... "C:\WINDOWS\system32\dpnaddr.dll"
14 Apr 2008 1:11:52 375,296 A.... "C:\WINDOWS\system32\dpnet.dll"
14 Apr 2008 1:11:52 35,328 A.... "C:\WINDOWS\system32\dpnhpast.dll"
14 Apr 2008 1:11:52 60,928 A.... "C:\WINDOWS\system32\dpnhupnp.dll"
14 Apr 2008 1:09:20 3,072 A.... "C:\WINDOWS\system32\dpnlobby.dll"
14 Apr 2008 1:12:18 17,920 A.... "C:\WINDOWS\system32\dpnsvr.exe"
14 Apr 2008 1:11:52 21,504 A.... "C:\WINDOWS\system32\dpvacm.dll"
14 Apr 2008 1:11:52 212,480 A.... "C:\WINDOWS\system32\dpvoice.dll"
14 Apr 2008 1:12:18 83,456 A.... "C:\WINDOWS\system32\dpvsetup.exe"
14 Apr 2008 1:11:52 116,736 A.... "C:\WINDOWS\system32\dpvvox.dll"
14 Apr 2008 1:11:52 57,344 A.... "C:\WINDOWS\system32\dpwsockx.dll"
14 Apr 2008 1:13:00 299,520 A.... "C:\WINDOWS\system32\drmclien.dll"
14 Apr 2008 1:11:52 87,040 A.... "C:\WINDOWS\system32\drmstor.dll"
14 Apr 2008 1:11:52 14,336 A.... "C:\WINDOWS\system32\drprov.dll"
14 Apr 2008 1:11:52 16,384 A.... "C:\WINDOWS\system32\ds32gt.dll"
14 Apr 2008 1:11:52 181,248 A.... "C:\WINDOWS\system32\dsdmo.dll"
14 Apr 2008 1:11:52 71,680 A.... "C:\WINDOWS\system32\dsdmoprp.dll"
14 Apr 2008 1:11:52 92,672 A.... "C:\WINDOWS\system32\dskquota.dll"
14 Apr 2008 1:11:52 155,648 A.... "C:\WINDOWS\system32\dskquoui.dll"
14 Apr 2008 1:11:52 367,616 A.... "C:\WINDOWS\system32\dsound.dll"
14 Apr 2008 1:11:52 1,293,824 A.... "C:\WINDOWS\system32\dsound3d.dll"
14 Apr 2008 1:11:52 142,848 A.... "C:\WINDOWS\system32\dsprop.dll"
13 Apr 2008 18:09:30 4,096 A.... "C:\WINDOWS\system32\dsprpres.dll"
14 Apr 2008 1:11:52 239,104 A.... "C:\WINDOWS\system32\dsquery.dll"
14 Apr 2008 1:11:52 51,200 A.... "C:\WINDOWS\system32\dssec.dll"
13 Apr 2008 18:37:58 138,752 A.... "C:\WINDOWS\system32\dssenh.dll"
14 Apr 2008 1:11:52 113,152 A.... "C:\WINDOWS\system32\dsuiext.dll"
14 Apr 2008 1:11:52 19,456 A.... "C:\WINDOWS\system32\dswave.dll"
14 Apr 2008 1:12:18 10,752 A.... "C:\WINDOWS\system32\dumprep.exe"
14 Apr 2008 1:11:52 304,128 A.... "C:\WINDOWS\system32\duser.dll"
14 Apr 2008 1:12:18 17,920 A.... "C:\WINDOWS\system32\dvdupgrd.exe"
14 Apr 2008 1:12:18 180,224 A.... "C:\WINDOWS\system32\dwwin.exe"
14 Apr 2008 1:11:52 619,008 A.... "C:\WINDOWS\system32\dx7vb.dll"
14 Apr 2008 1:11:52 1,227,264 A.... "C:\WINDOWS\system32\dx8vb.dll"
14 Apr 2008 1:12:18 1,298,432 A.... "C:\WINDOWS\system32\dxdiag.exe"
14 Apr 2008 1:11:52 2,113,536 A.... "C:\WINDOWS\system32\dxdiagn.dll"
14 Apr 2008 1:11:52 498,742 A.... "C:\WINDOWS\system32\dxmasf.dll"
14 Apr 2008 1:11:52 30,720 ..... "C:\WINDOWS\system32\eapolqec.dll"
14 Apr 2008 1:11:52 184,832 ..... "C:\WINDOWS\system32\eapp3hst.dll"
14 Apr 2008 1:11:52 126,976 ..... "C:\WINDOWS\system32\eappcfg.dll"
14 Apr 2008 1:11:52 94,208 ..... "C:\WINDOWS\system32\eappgnui.dll"
14 Apr 2008 1:11:52 180,224 ..... "C:\WINDOWS\system32\eapphost.dll"
14 Apr 2008 1:11:52 40,960 ..... "C:\WINDOWS\system32\eappprxy.dll"
14 Apr 2008 1:11:52 59,392 ..... "C:\WINDOWS\system32\eapqec.dll"
14 Apr 2008 1:11:52 33,792 ..... "C:\WINDOWS\system32\eapsvc.dll"
14 Apr 2008 1:11:54 183,296 A.... "C:\WINDOWS\system32\els.dll"
14 Apr 2008 1:11:54 20,480 A.... "C:\WINDOWS\system32\encapi.dll"
14 Apr 2008 1:11:54 186,880 A.... "C:\WINDOWS\system32\encdec.dll"
14 Apr 2008 1:11:54 23,040 A.... "C:\WINDOWS\system32\ersvc.dll"
14 Apr 2008 1:11:54 246,272 A.... "C:\WINDOWS\system32\es.dll"
14 Apr 2008 1:11:54 1,082,368 A.... "C:\WINDOWS\system32\esent.dll"
14 Apr 2008 1:12:20 193,024 A.... "C:\WINDOWS\system32\eudcedit.exe"
14 Apr 2008 1:11:54 56,320 A.... "C:\WINDOWS\system32\eventlog.dll"
14 Apr 2008 1:11:54 380,445 A.... "C:\WINDOWS\system32\expsrv.dll"
14 Apr 2008 1:12:20 24,064 A.... "C:\WINDOWS\system32\extrac32.exe"
14 Apr 2008 1:11:54 125,952 A.... "C:\WINDOWS\system32\exts.dll"
14 Apr 2008 1:09:30 7,168 A.... "C:\WINDOWS\system32\f3ahvoas.dll"
14 Apr 2008 1:11:54 80,384 A.... "C:\WINDOWS\system32\faultrep.dll"
14 Apr 2008 1:12:20 20,992 A.... "C:\WINDOWS\system32\faxpatch.exe"
14 Apr 2008 1:11:54 21,504 A.... "C:\WINDOWS\system32\feclient.dll"
14 Apr 2008 1:11:54 337,920 A.... "C:\WINDOWS\system32\filemgmt.dll"
14 Apr 2008 1:12:20 27,136 A.... "C:\WINDOWS\system32\findstr.exe"
14 Apr 2008 1:12:42 80,896 A.... "C:\WINDOWS\system32\firewall.cpl"
14 Apr 2008 1:11:54 87,552 A.... "C:\WINDOWS\system32\fldrclnr.dll"
14 Apr 2008 1:11:54 16,896 A.... "C:\WINDOWS\system32\fltlib.dll"
14 Apr 2008 1:12:20 23,040 A.... "C:\WINDOWS\system32\fltmc.exe"
28 May 2008 18:33:00 408,696 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
14 Apr 2008 1:11:54 382,976 A.... "C:\WINDOWS\system32\fontext.dll"
14 Apr 2008 1:11:54 80,896 A.... "C:\WINDOWS\system32\fontsub.dll"
14 Apr 2008 1:12:20 20,992 A.... "C:\WINDOWS\system32\fontview.exe"
14 Apr 2008 1:12:20 7,680 A.... "C:\WINDOWS\system32\forcedos.exe"
14 Apr 2008 1:12:42 29,696 A.... "C:\WINDOWS\system32\format.com"
14 Apr 2008 1:09:34 9,344 A.... "C:\WINDOWS\system32\framebuf.dll"
14 Apr 2008 1:12:20 193,024 A.... "C:\WINDOWS\system32\fsquirt.exe"
14 Apr 2008 1:12:20 42,496 A.... "C:\WINDOWS\system32\ftp.exe"
14 Apr 2008 1:11:54 60,416 A.... "C:\WINDOWS\system32\fwcfg.dll"
14 Apr 2008 1:11:54 285,184 A.... "C:\WINDOWS\system32\gdi32.dll"
14 Apr 2008 1:11:54 122,880 A.... "C:\WINDOWS\system32\glu32.dll"
14 Apr 2008 1:12:22 39,424 A.... "C:\WINDOWS\system32\grpconv.exe"
29 May 2008 10:02:26 143,104 A.... "C:\WINDOWS\system32\guard32.dll"
14 Apr 2008 1:12:46 265,728 A.... "C:\WINDOWS\system32\h323.tsp"
14 Apr 2008 1:11:54 614,912 A.... "C:\WINDOWS\system32\h323msp.dll"
13 Apr 2008 19:31:28 134,400 A.... "C:\WINDOWS\system32\HAL.DLL"
14 Apr 2008 1:11:54 7,168 A.... "C:\WINDOWS\system32\hccoin.dll"
14 Apr 2008 1:12:42 155,136 A.... "C:\WINDOWS\system32\hdwwiz.cpl"
14 Apr 2008 1:12:22 15,872 A.... "C:\WINDOWS\system32\help.exe"
14 Apr 2008 1:09:36 545,280 A.... "C:\WINDOWS\system32\hhctrl.ocx"
14 Apr 2008 1:11:54 41,472 A.... "C:\WINDOWS\system32\hhsetup.dll"
14 Apr 2008 1:11:54 20,992 A.... "C:\WINDOWS\system32\hid.dll"
14 Apr 2008 1:12:46 29,696 A.... "C:\WINDOWS\system32\hidphone.tsp"
14 Apr 2008 1:11:54 21,504 A.... "C:\WINDOWS\system32\hidserv.dll"
14 Apr 2008 1:11:54 72,704 A.... "C:\WINDOWS\system32\hlink.dll"
14 Apr 2008 1:11:54 344,064 A.... "C:\WINDOWS\system32\hnetcfg.dll"
14 Apr 2008 1:11:54 330,752 A.... "C:\WINDOWS\system32\hnetwiz.dll"
14 Apr 2008 1:11:54 144,896 A.... "C:\WINDOWS\system32\hotplug.dll"
14 Apr 2008 1:11:54 32,285 A.... "C:\WINDOWS\system32\hsfcisp2.dll"
13 Apr 2008 19:37:10 369,664 A.... "C:\WINDOWS\system32\html.iec"
14 Apr 2008 1:11:54 24,576 A.... "C:\WINDOWS\system32\httpapi.dll"
14 Apr 2008 1:11:54 41,984 A.... "C:\WINDOWS\system32\htui.dll"
14 Apr 2008 1:11:54 347,136 A.... "C:\WINDOWS\system32\hypertrm.dll"
14 Apr 2008 1:12:42 199,680 A.... "C:\WINDOWS\system32\iac25_32.ax"
14 Apr 2008 1:11:54 119,808 A.... "C:\WINDOWS\system32\iasrad.dll"
14 Apr 2008 1:11:54 11,264 A.... "C:\WINDOWS\system32\icaapi.dll"
14 Apr 2008 1:11:54 80,384 A.... "C:\WINDOWS\system32\iccvid.dll"
14 Apr 2008 1:11:54 254,976 A.... "C:\WINDOWS\system32\icm32.dll"
14 Apr 2008 1:09:40 3,584 A.... "C:\WINDOWS\system32\icmp.dll"
14 Apr 2008 1:11:54 73,728 A.... "C:\WINDOWS\system32\icwdial.dll"
14 Apr 2008 1:11:54 65,536 A.... "C:\WINDOWS\system32\icwphbk.dll"
14 Apr 2008 1:11:54 120,832 A.... "C:\WINDOWS\system32\idq.dll"
14 Apr 2008 1:11:54 81,920 A.... "C:\WINDOWS\system32\ieencode.dll"
14 Apr 2008 1:12:22 114,688 A.... "C:\WINDOWS\system32\iexpress.exe"
14 Apr 2008 1:11:54 135,680 A.... "C:\WINDOWS\system32\ifmon.dll"
14 Apr 2008 1:11:54 8,192 A.... "C:\WINDOWS\system32\igmpagnt.dll"
14 Apr 2008 1:11:54 81,920 A.... "C:\WINDOWS\system32\ils.dll"
14 Apr 2008 1:09:44 16,384 A.... "C:\WINDOWS\system32\imaadp32.acm"
14 Apr 2008 1:11:54 144,384 A.... "C:\WINDOWS\system32\imagehlp.dll"
14 Apr 2008 1:12:22 150,528 A.... "C:\WINDOWS\system32\imapi.exe"
14 Apr 2008 1:09:44 94,720 A.... "C:\WINDOWS\system32\imekr61.ime"
14 Apr 2008 1:11:54 36,921 A.... "C:\WINDOWS\system32\imeshare.dll"
14 Apr 2008 1:09:44 340,023 A.... "C:\WINDOWS\system32\imjp81.ime"
14 Apr 2008 1:09:44 811,064 A.... "C:\WINDOWS\system32\imjp81k.dll"
14 Apr 2008 1:11:54 110,080 A.... "C:\WINDOWS\system32\imm32.dll"
14 Apr 2008 1:11:54 274,432 A.... "C:\WINDOWS\system32\inetcfg.dll"
14 Apr 2008 1:11:54 691,712 A.... "C:\WINDOWS\system32\inetcomm.dll"
14 Apr 2008 1:11:56 32,768 A.... "C:\WINDOWS\system32\inetmib1.dll"
14 Apr 2008 1:11:56 75,264 A.... "C:\WINDOWS\system32\inetpp.dll"
14 Apr 2008 1:11:56 15,872 A.... "C:\WINDOWS\system32\inetppui.dll"
13 Apr 2008 17:22:12 48,128 A.... "C:\WINDOWS\system32\inetres.dll"
14 Apr 2008 1:11:56 147,456 A.... "C:\WINDOWS\system32\initpki.dll"
14 Apr 2008 1:11:56 123,392 A.... "C:\WINDOWS\system32\input.dll"
14 Apr 2008 1:12:42 129,536 A.... "C:\WINDOWS\system32\intl.cpl"
14 Apr 2008 1:12:46 17,408 A.... "C:\WINDOWS\system32\ipconf.tsp"
14 Apr 2008 1:12:22 55,808 A.... "C:\WINDOWS\system32\ipconfig.exe"
14 Apr 2008 1:11:56 94,720 A.... "C:\WINDOWS\system32\iphlpapi.dll"
14 Apr 2008 1:11:56 161,280 A.... "C:\WINDOWS\system32\ipmontr.dll"
14 Apr 2008 1:11:56 331,264 A.... "C:\WINDOWS\system32\ipnathlp.dll"
14 Apr 2008 1:11:56 330,752 A.... "C:\WINDOWS\system32\ippromon.dll"
14 Apr 2008 1:11:56 177,152 A.... "C:\WINDOWS\system32\iprtrmgr.dll"
14 Apr 2008 1:11:56 349,696 A.... "C:\WINDOWS\system32\ipsecsnp.dll"
14 Apr 2008 1:11:56 183,808 A.... "C:\WINDOWS\system32\ipsecsvc.dll"
14 Apr 2008 1:11:56 384,000 A.... "C:\WINDOWS\system32\ipsmsnap.dll"
14 Apr 2008 1:12:24 53,248 A.... "C:\WINDOWS\system32\ipv6.exe"
14 Apr 2008 1:11:56 59,904 A.... "C:\WINDOWS\system32\ipv6mon.dll"
14 Apr 2008 1:12:24 23,552 A.... "C:\WINDOWS\system32\ipxroute.exe"
14 Apr 2008 1:11:56 22,016 A.... "C:\WINDOWS\system32\ipxwan.dll"
14 Apr 2008 1:12:42 848,384 A.... "C:\WINDOWS\system32\ir41_32.ax"
14 Apr 2008 1:11:56 120,320 A.... "C:\WINDOWS\system32\ir41_qc.dll"
14 Apr 2008 1:11:56 338,432 A.... "C:\WINDOWS\system32\ir41_qcx.dll"
14 Apr 2008 1:11:56 755,200 A.... "C:\WINDOWS\system32\ir50_32.dll"
14 Apr 2008 1:11:56 200,192 A.... "C:\WINDOWS\system32\ir50_qc.dll"
14 Apr 2008 1:11:56 183,808 A.... "C:\WINDOWS\system32\ir50_qcx.dll"
14 Apr 2008 1:12:42 380,416 A.... "C:\WINDOWS\system32\irprops.cpl"
14 Apr 2008 1:11:56 81,920 A.... "C:\WINDOWS\system32\isign32.dll"
14 Apr 2008 1:11:56 32,768 A.... "C:\WINDOWS\system32\isrdbg32.dll"
14 Apr 2008 1:11:56 155,136 A.... "C:\WINDOWS\system32\itircl.dll"
14 Apr 2008 1:11:56 138,240 A.... "C:\WINDOWS\system32\itss.dll"
14 Apr 2008 1:12:42 154,624 A.... "C:\WINDOWS\system32\ivfsrc.ax"
14 Apr 2008 1:11:56 54,272 A.... "C:\WINDOWS\system32\ixsso.dll"
14 Apr 2008 1:11:56 47,616 A.... "C:\WINDOWS\system32\iyuv_32.dll"
14 Apr 2008 1:11:56 163,840 A.... "C:\WINDOWS\system32\jgdw400.dll"
14 Apr 2008 1:11:56 27,648 A.... "C:\WINDOWS\system32\jgpl400.dll"
14 Apr 2008 1:12:42 68,608 A.... "C:\WINDOWS\system32\joy.cpl"
14 Apr 2008 1:11:56 512,000 A.... "C:\WINDOWS\system32\jscript.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbd101.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbd106.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbd106n.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdax2.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\system32\kbdbhc.dll"
14 Apr 2008 1:09:56 7,168 A.... "C:\WINDOWS\system32\kbdfi1.dll"
14 Apr 2008 1:09:56 7,168 A.... "C:\WINDOWS\system32\kbdibm02.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdinbe1.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdinben.dll"
14 Apr 2008 1:09:56 6,656 A.... "C:\WINDOWS\system32\kbdinmal.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\system32\kbdiultn.dll"
14 Apr 2008 1:09:56 6,656 A.... "C:\WINDOWS\system32\kbdlk41a.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdlk41j.dll"
14 Apr 2008 1:09:56 5,632 A.... "C:\WINDOWS\system32\kbdmaori.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdmlt47.dll"
14 Apr 2008 1:09:56 6,144 A.... "C:\WINDOWS\system32\kbdmlt48.dll"
14 Apr 2008 1:09:56 7,168 A...R "C:\WINDOWS\system32\kbdnec.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\system32\kbdnepr.dll"
14 Apr 2008 1:09:56 7,168 A.... "C:\WINDOWS\system32\kbdno1.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\system32\kbdpash.dll"
14 Apr 2008 1:09:56 7,680 A.... "C:\WINDOWS\system32\kbdsmsfi.dll"
14 Apr 2008 1:09:56 7,680 A.... "C:\WINDOWS\system32\kbdsmsno.dll"
14 Apr 2008 1:09:56 7,168 A.... "C:\WINDOWS\system32\kbdukx.dll"
13 Apr 2008 19:31:36 7,424 A.... "C:\WINDOWS\system32\kd1394.dll"
14 Apr 2008 1:11:56 299,520 A.... "C:\WINDOWS\system32\kerberos.dll"
14 Apr 2008 1:11:56 989,696 A.... "C:\WINDOWS\system32\kernel32.dll"
14 Apr 2008 1:11:56 150,528 A.... "C:\WINDOWS\system32\keymgr.dll"
14 Apr 2008 1:12:46 33,280 A.... "C:\WINDOWS\system32\kmddsp.tsp"
14 Apr 2008 1:11:56 61,440 ..... "C:\WINDOWS\system32\kmsvc.dll"
14 Apr 2008 1:12:42 129,536 A.... "C:\WINDOWS\system32\ksproxy.ax"
14 Apr 2008 1:11:56 4,096 A.... "C:\WINDOWS\system32\ksuser.dll"
14 Apr 2008 1:11:56 37,376 ..... "C:\WINDOWS\system32\l2gpstore.dll"
14 Apr 2008 1:09:58 290,816 A.... "C:\WINDOWS\system32\l3codeca.acm"
14 Apr 2008 5:41:58 423,936 A.... "C:\WINDOWS\system32\licdll.dll"
14 Apr 2008 1:11:56 58,880 A.... "C:\WINDOWS\system32\licwmi.dll"
14 Apr 2008 1:11:56 19,968 A.... "C:\WINDOWS\system32\linkinfo.dll"
14 Apr 2008 1:11:56 13,824 A.... "C:\WINDOWS\system32\lmhsvc.dll"
14 Apr 2008 1:11:56 399,872 A.... "C:\WINDOWS\system32\lmrt.dll"
14 Apr 2008 1:11:56 97,280 A.... "C:\WINDOWS\system32\loadperf.dll"
14 Apr 2008 1:11:56 221,696 A.... "C:\WINDOWS\system32\localsec.dll"
14 Apr 2008 1:11:56 343,040 A.... "C:\WINDOWS\system32\localspl.dll"
14 Apr 2008 1:11:56 11,776 A.... "C:\WINDOWS\system32\localui.dll"
14 Apr 2008 1:12:24 75,264 A.... "C:\WINDOWS\system32\locator.exe"
14 Apr 2008 1:12:24 59,392 ..... "C:\WINDOWS\system32\logman.exe"
14 Apr 2008 1:12:44 220,672 A.... "C:\WINDOWS\system32\logon.scr"
14 Apr 2008 1:12:24 514,560 A.... "C:\WINDOWS\system32\logonui.exe"
14 Apr 2008 1:11:56 22,016 A.... "C:\WINDOWS\system32\lpk.dll"
14 Apr 2008 1:11:56 10,240 A.... "C:\WINDOWS\system32\lprhelp.dll"
14 Apr 2008 1:11:56 728,064 A.... "C:\WINDOWS\system32\lsasrv.dll"
14 Apr 2008 1:12:24 13,312 A.... "C:\WINDOWS\system32\lsass.exe"
16 May 2008 11:58:04 12,632 A.... "C:\WINDOWS\system32\lsdelete.exe"
14 Apr 2008 1:12:24 72,704 A.... "C:\WINDOWS\system32\magnify.exe"
14 Apr 2008 1:12:26 57,344 A.... "C:\WINDOWS\system32\makecab.exe"
14 Apr 2008 1:11:56 14,336 A.... "C:\WINDOWS\system32\mcastmib.dll"
14 Apr 2008 1:11:56 84,480 A.... "C:\WINDOWS\system32\mciavi32.dll"
14 Apr 2008 1:11:56 35,328 A.... "C:\WINDOWS\system32\mciqtz32.dll"
14 Apr 2008 1:11:56 23,040 A.... "C:\WINDOWS\system32\mciseq.dll"
14 Apr 2008 1:11:56 23,552 A.... "C:\WINDOWS\system32\mciwave.dll"
14 Apr 2008 1:11:56 118,272 A.... "C:\WINDOWS\system32\mdminst.dll"
14 Apr 2008 1:11:56 86,016 ..... "C:\WINDOWS\system32\mdmxsdk.dll"
14 Apr 2008 1:11:56 40,960 A.... "C:\WINDOWS\system32\mf3216.dll"
14 Apr 2008 1:11:56 927,504 A.... "C:\WINDOWS\system32\mfc40u.dll"
14 Apr 2008 1:11:56 1,028,096 A.... "C:\WINDOWS\system32\mfc42.dll"
14 Apr 2008 1:11:56 22,528 A.... "C:\WINDOWS\system32\mfcsubs.dll"
14 Apr 2008 1:11:56 14,848 A.... "C:\WINDOWS\system32\mgmtapi.dll"
14 Apr 2008 1:11:58 184,320 ..... "C:\WINDOWS\system32\microsoft.managementconsole.dll"
14 Apr 2008 1:11:58 18,944 A.... "C:\WINDOWS\system32\midimap.dll"
14 Apr 2008 1:11:58 60,928 A.... "C:\WINDOWS\system32\miglibnt.dll"
14 Apr 2008 1:11:58 29,696 A.... "C:\WINDOWS\system32\mimefilt.dll"
13 Apr 2008 19:40:04 11,776 A.... "C:\WINDOWS\system32\miniime.tpl"
14 Apr 2008 1:11:58 586,240 A.... "C:\WINDOWS\system32\mlang.dll"
14 Apr 2008 1:12:26 1,414,656 A.... "C:\WINDOWS\system32\mmc.exe"
14 Apr 2008 1:11:58 163,328 A.... "C:\WINDOWS\system32\mmcbase.dll"
14 Apr 2008 1:11:58 397,312 ..... "C:\WINDOWS\system32\mmcex.dll"
14 Apr 2008 1:11:58 106,496 ..... "C:\WINDOWS\system32\mmcfxcommon.dll"
14 Apr 2008 1:11:58 1,872,896 A.... "C:\WINDOWS\system32\mmcndmgr.dll"
14 Apr 2008 1:12:26 33,792 ..... "C:\WINDOWS\system32\mmcperf.exe"
14 Apr 2008 1:11:58 61,440 A.... "C:\WINDOWS\system32\mmcshext.dll"
14 Apr 2008 1:11:58 17,408 A.... "C:\WINDOWS\system32\mmfutil.dll"
14 Apr 2008 1:12:42 618,496 A.... "C:\WINDOWS\system32\mmsys.cpl"
14 Apr 2008 1:11:58 34,560 A.... "C:\WINDOWS\system32\mnmdd.dll"
14 Apr 2008 1:12:26 32,768 A.... "C:\WINDOWS\system32\mnmsrvc.exe"
14 Apr 2008 1:11:58 207,360 A.... "C:\WINDOWS\system32\mobsync.dll"
14 Apr 2008 1:12:26 143,360 A.... "C:\WINDOWS\system32\mobsync.exe"
14 Apr 2008 1:11:58 153,600 A.... "C:\WINDOWS\system32\modemui.dll"
14 Apr 2008 1:12:42 16,896 A.... "C:\WINDOWS\system32\more.com"
13 Apr 2008 17:45:30 216,064 A.... "C:\WINDOWS\system32\moricons.dll"
14 Apr 2008 1:12:42 118,272 ..... "C:\WINDOWS\system32\mpeg2data.ax"
14 Apr 2008 1:12:42 148,992 ..... "C:\WINDOWS\system32\mpg2splt.ax"
14 Apr 2008 1:12:42 262,144 ..... "C:\WINDOWS\system32\mpg4ds32.ax"
14 Apr 2008 1:12:28 123,392 A.... "C:\WINDOWS\system32\mplay32.exe"
14 Apr 2008 1:11:58 59,904 A.... "C:\WINDOWS\system32\mpr.dll"
14 Apr 2008 1:11:58 87,040 A.... "C:\WINDOWS\system32\mprapi.dll"
14 Apr 2008 1:11:58 53,248 A.... "C:\WINDOWS\system32\mprdim.dll"
9 May 2008 22:35:04 16,863,864 A.... "C:\WINDOWS\system32\MRT.exe"
14 Apr 2008 1:11:58 71,680 A.... "C:\WINDOWS\system32\msacm32.dll"
14 Apr 2008 1:12:42 221,184 ..... "C:\WINDOWS\system32\msadds32.ax"
14 Apr 2008 1:10:06 14,848 A.... "C:\WINDOWS\system32\msadp32.acm"
14 Apr 2008 1:10:06 3,584 A.... "C:\WINDOWS\system32\msafd.dll"
14 Apr 2008 1:11:58 86,016 A.... "C:\WINDOWS\system32\msapsspc.dll"
14 Apr 2008 1:11:58 57,344 A.... "C:\WINDOWS\system32\msasn1.dll"
14 Apr 2008 1:10:06 294,912 A.... "C:\WINDOWS\system32\msaud32.acm"
14 Apr 2008 1:11:58 73,728 A.... "C:\WINDOWS\system32\mscms.dll"
14 Apr 2008 1:11:58 69,632 A.... "C:\WINDOWS\system32\msconf.dll"
13 Apr 2008 18:26:08 12,288 A.... "C:\WINDOWS\system32\mscpx32r.dll"
14 Apr 2008 1:11:58 36,864 A.... "C:\WINDOWS\system32\mscpxl32.dll"
14 Apr 2008 1:11:58 297,984 A.... "C:\WINDOWS\system32\msctf.dll"
14 Apr 2008 1:10:06 177,152 A.... "C:\WINDOWS\system32\msctfime.ime"
14 Apr 2008 1:11:58 68,608 A.... "C:\WINDOWS\system32\msctfp.dll"
14 Apr 2008 1:11:58 118,784 ..... "C:\WINDOWS\system32\msdadiag.dll"
14 Apr 2008 1:12:00 151,552 A.... "C:\WINDOWS\system32\msdart.dll"
13 Apr 2008 18:24:00 12,288 A.... "C:\WINDOWS\system32\msdatsrc.tlb"
14 Apr 2008 1:12:00 14,336 A.... "C:\WINDOWS\system32\msdmo.dll"
14 Apr 2008 1:12:28 6,144 A.... "C:\WINDOWS\system32\msdtc.exe"
14 Apr 2008 1:12:00 58,880 A.... "C:\WINDOWS\system32\msdtclog.dll"
14 Apr 2008 1:12:00 427,008 A.... "C:\WINDOWS\system32\msdtcprx.dll"
14 Apr 2008 1:12:00 956,928 A.... "C:\WINDOWS\system32\msdtctm.dll"
14 Apr 2008 1:12:00 161,792 A.... "C:\WINDOWS\system32\msdtcuiu.dll"
14 Apr 2008 1:10:08 844,314 A.... "C:\WINDOWS\system32\msdxm.ocx"
14 Apr 2008 1:10:08 4,126 A.... "C:\WINDOWS\system32\msdxmlc.dll"
14 Apr 2008 1:12:00 539,136 A.... "C:\WINDOWS\system32\msftedit.dll"
14 Apr 2008 1:12:00 997,376 A.... "C:\WINDOWS\system32\msgina.dll"
14 Apr 2008 1:12:00 33,792 A.... "C:\WINDOWS\system32\msgsvc.dll"
14 Apr 2008 1:12:46 188,416 A.... "C:\WINDOWS\system32\msh261.drv"
14 Apr 2008 1:12:46 294,912 ..... "C:\WINDOWS\system32\msh263.drv"
14 Apr 2008 1:12:00 2,843,136 A.... "C:\WINDOWS\system32\msi.dll"
14 Apr 2008 1:12:00 51,712 A.... "C:\WINDOWS\system32\msident.dll"
14 Apr 2008 1:12:00 6,656 A.... "C:\WINDOWS\system32\msidle.dll"
14 Apr 2008 1:12:00 248,832 A.... "C:\WINDOWS\system32\msieftp.dll"
14 Apr 2008 1:12:28 78,848 A.... "C:\WINDOWS\system32\msiexec.exe"
14 Apr 2008 1:12:00 271,360 A.... "C:\WINDOWS\system32\msihnd.dll"
14 Apr 2008 1:12:00 4,608 A.... "C:\WINDOWS\system32\msimg32.dll"
13 Apr 2008 16:39:44 884,736 A.... "C:\WINDOWS\system32\msimsg.dll"
14 Apr 2008 1:12:00 159,232 A.... "C:\WINDOWS\system32\msimtf.dll"
14 Apr 2008 1:12:00 15,360 A.... "C:\WINDOWS\system32\msisip.dll"
14 Apr 2008 1:12:00 151,583 A.... "C:\WINDOWS\system32\msjint40.dll"
14 Apr 2008 1:12:00 25,088 A.... "C:\WINDOWS\system32\mslbui.dll"
14 Apr 2008 1:12:00 290,816 A.... "C:\WINDOWS\system32\msnsspc.dll"
14 Apr 2008 1:12:00 252,928 A.... "C:\WINDOWS\system32\msoeacct.dll"
14 Apr 2008 1:12:00 105,984 A.... "C:\WINDOWS\system32\msoert2.dll"
13 Apr 2008 18:24:14 20,480 A.... "C:\WINDOWS\system32\msorc32r.dll"
14 Apr 2008 1:12:00 143,360 A.... "C:\WINDOWS\system32\msorcl32.dll"
14 Apr 2008 1:12:28 343,040 A.... "C:\WINDOWS\system32\mspaint.exe"
14 Apr 2008 1:12:00 29,696 A.... "C:\WINDOWS\system32\mspatcha.dll"
13 Apr 2008 17:23:32 48,128 A.... "C:\WINDOWS\system32\msprivs.dll"
14 Apr 2008 1:12:00 11,264 A.... "C:\WINDOWS\system32\msrle32.dll"
14 Apr 2008 1:12:00 134,656 A.... "C:\WINDOWS\system32\mssap.dll"
14 Apr 2008 1:12:42 69,632 ..... "C:\WINDOWS\system32\msscds32.ax"
14 Apr 2008 1:10:20 110,592 A.... "C:\WINDOWS\system32\msscript.ocx"
14 Apr 2008 1:12:00 155,136 ..... "C:\WINDOWS\system32\mssha.dll"
13 Apr 2008 19:14:58 76,800 ..... "C:\WINDOWS\system32\msshavmsg.dll"
14 Apr 2008 1:12:00 274,944 A.... "C:\WINDOWS\system32\mstask.dll"
14 Apr 2008 1:12:30 12,288 A.... "C:\WINDOWS\system32\mstinit.exe"
14 Apr 2008 1:12:00 116,224 A.... "C:\WINDOWS\system32\mstlsapi.dll"
14 Apr 2008 1:12:24 677,888 A.... "C:\WINDOWS\system32\mstsc.exe"
14 Apr 2008 1:11:56 2,061,824 A.... "C:\WINDOWS\system32\mstscax.dll"
14 Apr 2008 1:12:00 195,072 A.... "C:\WINDOWS\system32\msutb.dll"
14 Apr 2008 1:12:00 132,608 A.... "C:\WINDOWS\system32\msv1_0.dll"
14 Apr 2008 1:12:00 1,384,479 A.... "C:\WINDOWS\system32\msvbvm60.dll"
14 Apr 2008 1:12:02 57,344 A.... "C:\WINDOWS\system32\msvcirt.dll"
14 Apr 2008 1:12:02 413,696 A.... "C:\WINDOWS\system32\msvcp60.dll"
14 Apr 2008 1:12:02 343,040 A.... "C:\WINDOWS\system32\msvcrt.dll"
13 Apr 2008 19:30:46 61,440 A.... "C:\WINDOWS\system32\msvcrt40.dll"
14 Apr 2008 1:12:02 121,344 A.... "C:\WINDOWS\system32\msvfw32.dll"
14 Apr 2008 1:12:02 1,428,992 A.... "C:\WINDOWS\system32\msvidctl.dll"
14 Apr 2008 1:12:02 72,704 A.... "C:\WINDOWS\system32\msw3prt.dll"
14 Apr 2008 1:12:02 203,776 A.... "C:\WINDOWS\system32\mswebdvd.dll"
14 Apr 2008 1:12:02 245,248 A.... "C:\WINDOWS\system32\mswsock.dll"
14 Apr 2008 1:12:02 506,368 A.... "C:\WINDOWS\system32\msxml.dll"
14 Apr 2008 1:12:02 701,440 A.... "C:\WINDOWS\system32\msxml2.dll"
14 Apr 2008 1:12:02 1,104,896 A.... "C:\WINDOWS\system32\msxml3.dll"
14 Apr 2008 1:12:02 1,306,624 A.... "C:\WINDOWS\system32\msxml6.dll"
13 Apr 2008 18:27:18 79,872 A.... "C:\WINDOWS\system32\msxml6r.dll"
14 Apr 2008 1:12:02 16,896 ..... "C:\WINDOWS\system32\msyuv.dll"
14 Apr 2008 1:12:02 66,560 A.... "C:\WINDOWS\system32\mtxclu.dll"
14 Apr 2008 1:12:02 30,720 A.... "C:\WINDOWS\system32\mtxdm.dll"
14 Apr 2008 1:12:02 4,096 A.... "C:\WINDOWS\system32\mtxex.dll"
14 Apr 2008 1:12:02 34,304 A.... "C:\WINDOWS\system32\mtxlegih.dll"
14 Apr 2008 1:12:02 91,648 A.... "C:\WINDOWS\system32\mtxoci.dll"
14 Apr 2008 1:12:02 1,737,856 ..... "C:\WINDOWS\system32\mtxparhd.dll"
14 Apr 2008 1:12:02 90,624 A.... "C:\WINDOWS\system32\mydocs.dll"
14 Apr 2008 1:12:02 30,208 ..... "C:\WINDOWS\system32\napipsec.dll"
14 Apr 2008 1:12:02 193,024 ..... "C:\WINDOWS\system32\napmontr.dll"
14 Apr 2008 1:12:30 176,640 ..... "C:\WINDOWS\system32\napstat.exe"
14 Apr 2008 1:12:30 53,760 A.... "C:\WINDOWS\system32\narrator.exe"
14 Apr 2008 1:12:02 36,352 A.... "C:\WINDOWS\system32\ncobjapi.dll"
14 Apr 2008 1:12:02 17,920 A.... "C:\WINDOWS\system32\nddeapi.dll"
14 Apr 2008 1:12:30 4,096 A.... "C:\WINDOWS\system32\nddeapir.exe"
14 Apr 2008 1:12:02 18,944 A.... "C:\WINDOWS\system32\nddenb32.dll"
14 Apr 2008 1:12:46 56,832 A.... "C:\WINDOWS\system32\ndptsp.tsp"
14 Apr 2008 1:12:30 42,496 A.... "C:\WINDOWS\system32\net.exe"
14 Apr 2008 1:12:30 124,928 A.... "C:\WINDOWS\system32\net1.exe"
14 Apr 2008 1:12:02 337,408 A.... "C:\WINDOWS\system32\netapi32.dll"
14 Apr 2008 1:12:02 622,592 A.... "C:\WINDOWS\system32\netcfgx.dll"
14 Apr 2008 1:12:30 111,104 A.... "C:\WINDOWS\system32\netdde.exe"
14 Apr 2008 1:12:02 139,264 A.... "C:\WINDOWS\system32\netid.dll"
14 Apr 2008 1:12:02 407,040 A.... "C:\WINDOWS\system32\netlogon.dll"
14 Apr 2008 1:12:02 198,144 A.... "C:\WINDOWS\system32\netman.dll"
14 Apr 2008 1:12:02 875,008 A.... "C:\WINDOWS\system32\netplwiz.dll"
14 Apr 2008 1:12:02 11,776 A.... "C:\WINDOWS\system32\netrap.dll"
14 Apr 2008 1:12:42 25,600 ..... "C:\WINDOWS\system32\netsetup.cpl"
14 Apr 2008 1:16:52 329,728 ..... "C:\WINDOWS\system32\netsetup.exe"
14 Apr 2008 1:12:30 86,016 A.... "C:\WINDOWS\system32\netsh.exe"
14 Apr 2008 1:12:02 1,703,936 A.... "C:\WINDOWS\system32\netshell.dll"
14 Apr 2008 1:12:30 36,864 A.... "C:\WINDOWS\system32\netstat.exe"
14 Apr 2008 1:12:02 80,896 A.... "C:\WINDOWS\system32\netui0.dll"
14 Apr 2008 1:12:02 245,760 A.... "C:\WINDOWS\system32\netui1.dll"
14 Apr 2008 1:12:02 247,808 A.... "C:\WINDOWS\system32\newdev.dll"
14 Apr 2008 1:12:02 98,304 A.... "C:\WINDOWS\system32\nlhtml.dll"
14 Apr 2008 1:12:02 28,672 A.... "C:\WINDOWS\system32\nmmkcert.dll"
14 Apr 2008 1:12:30 69,120 A.... "C:\WINDOWS\system32\notepad.exe"
14 Apr 2008 1:12:02 54,784 A.... "C:\WINDOWS\system32\npptools.dll"
14 Apr 2008 1:12:30 76,800 A.... "C:\WINDOWS\system32\nslookup.exe"
14 Apr 2008 1:11:24 706,048 A.... "C:\WINDOWS\system32\ntdll.dll"
14 Apr 2008 1:12:02 67,072 A.... "C:\WINDOWS\system32\ntdsapi.dll"
13 Apr 2008 19:31:22 2,023,936 A.... "C:\WINDOWS\system32\ntkrnlpa.exe"
14 Apr 2008 1:12:02 44,032 A.... "C:\WINDOWS\system32\ntlanman.dll"
14 Apr 2008 1:12:02 8,192 A.... "C:\WINDOWS\system32\ntlsapi.dll"
14 Apr 2008 1:12:02 118,784 A.... "C:\WINDOWS\system32\ntmarta.dll"
14 Apr 2008 1:12:02 40,960 A.... "C:\WINDOWS\system32\ntmsapi.dll"
14 Apr 2008 1:12:02 179,200 A.... "C:\WINDOWS\system32\ntmsdba.dll"
14 Apr 2008 1:12:02 488,448 A.... "C:\WINDOWS\system32\ntmsmgr.dll"
14 Apr 2008 1:12:02 435,200 A.... "C:\WINDOWS\system32\ntmssvc.dll"
13 Apr 2008 20:24:38 2,145,280 A.... "C:\WINDOWS\system32\ntoskrnl.exe"
14 Apr 2008 1:12:02 91,136 A.... "C:\WINDOWS\system32\ntprint.dll"
14 Apr 2008 1:12:02 143,360 A.... "C:\WINDOWS\system32\ntshrui.dll"
14 Apr 2008 1:12:30 420,864 A.... "C:\WINDOWS\system32\ntvdm.exe"
14 Apr 2008 1:12:02 15,360 A.... "C:\WINDOWS\system32\ntvdmd.dll"
14 Apr 2008 1:12:42 257,024 A.... "C:\WINDOWS\system32\nusrmgr.cpl"
14 Apr 2008 1:12:02 4,274,816 ..... "C:\WINDOWS\system32\nv4_disp.dll"
14 Apr 2008 1:12:02 142,336 A.... "C:\WINDOWS\system32\nwprovau.dll"
14 Apr 2008 1:12:02 270,336 A.... "C:\WINDOWS\system32\oakley.dll"
14 Apr 2008 1:12:02 286,208 A.... "C:\WINDOWS\system32\objsel.dll"
14 Apr 2008 1:12:02 67,584 A.... "C:\WINDOWS\system32\ocmanage.dll"
14 Apr 2008 1:12:02 249,856 A.... "C:\WINDOWS\system32\odbc32.dll"
14 Apr 2008 1:12:02 16,384 A.... "C:\WINDOWS\system32\odbc32gt.dll"
14 Apr 2008 1:12:30 32,768 A.... "C:\WINDOWS\system32\odbcad32.exe"
14 Apr 2008 1:12:02 24,576 A.... "C:\WINDOWS\system32\odbcbcp.dll"
14 Apr 2008 1:12:02 135,168 A.... "C:\WINDOWS\system32\odbcconf.dll"
14 Apr 2008 1:12:30 69,632 A.... "C:\WINDOWS\system32\odbcconf.exe"
13 Apr 2008 18:26:10 4,310 A.... "C:\WINDOWS\system32\odbcconf.rsp"
14 Apr 2008 1:12:42 32,768 A.... "C:\WINDOWS\system32\odbccp32.cpl"
14 Apr 2008 1:12:02 106,496 A.... "C:\WINDOWS\system32\odbccp32.dll"
14 Apr 2008 1:12:02 65,536 A.... "C:\WINDOWS\system32\odbccr32.dll"
14 Apr 2008 1:12:02 65,536 A.... "C:\WINDOWS\system32\odbccu32.dll"
13 Apr 2008 18:26:06 94,208 A.... "C:\WINDOWS\system32\odbcint.dll"
14 Apr 2008 1:10:32 53,279 A.... "C:\WINDOWS\system32\odbcji32.dll"
14 Apr 2008 1:12:02 278,559 A.... "C:\WINDOWS\system32\odbcjt32.dll"
13 Apr 2008 18:26:06 12,288 A.... "C:\WINDOWS\system32\odbcp32r.dll"
14 Apr 2008 1:12:02 147,456 A.... "C:\WINDOWS\system32\odbctrac.dll"
14 Apr 2008 1:12:02 20,511 A.... "C:\WINDOWS\system32\oddbse32.dll"
14 Apr 2008 1:12:02 20,510 A.... "C:\WINDOWS\system32\odexl32.dll"
14 Apr 2008 1:12:02 20,510 A.... "C:\WINDOWS\system32\odfox32.dll"
14 Apr 2008 1:12:02 20,510 A.... "C:\WINDOWS\system32\odpdx32.dll"
14 Apr 2008 1:12:02 20,511 A.... "C:\WINDOWS\system32\odtext32.dll"
14 Apr 2008 1:12:02 192,000 A.... "C:\WINDOWS\system32\offfilt.dll"
14 Apr 2008 1:12:02 1,287,168 A.... "C:\WINDOWS\system32\ole32.dll"
14 Apr 2008 1:12:02 551,936 A.... "C:\WINDOWS\system32\oleaut32.dll"
14 Apr 2008 1:12:02 74,752 A.... "C:\WINDOWS\system32\olecli32.dll"
14 Apr 2008 1:12:02 37,376 A.... "C:\WINDOWS\system32\olecnv32.dll"
14 Apr 2008 1:12:02 122,880 A.... "C:\WINDOWS\system32\oledlg.dll"
14 Apr 2008 1:12:02 107,008 A.... "C:\WINDOWS\system32\oleprn.dll"
14 Apr 2008 1:12:02 84,992 A.... "C:\WINDOWS\system32\olepro32.dll"
14 Apr 2008 1:12:02 144,384 ..... "C:\WINDOWS\system32\onex.dll"
14 Apr 2008 1:12:02 713,728 A.... "C:\WINDOWS\system32\opengl32.dll"
14 Apr 2008 1:12:32 215,552 A.... "C:\WINDOWS\system32\osk.exe"
14 Apr 2008 1:12:02 67,584 A.... "C:\WINDOWS\system32\osuninst.dll"
14 Apr 2008 1:12:02 153,600 ..... "C:\WINDOWS\system32\p2p.dll"
14 Apr 2008 1:12:02 105,472 ..... "C:\WINDOWS\system32\p2pgasvc.dll"
14 Apr 2008 1:12:02 313,856 ..... "C:\WINDOWS\system32\p2pgraph.dll"
14 Apr 2008 1:12:02 115,712 ..... "C:\WINDOWS\system32\p2pnetsh.dll"
14 Apr 2008 1:12:02 554,496 ..... "C:\WINDOWS\system32\p2psvc.dll"
14 Apr 2008 1:12:32 58,368 A.... "C:\WINDOWS\system32\packager.exe"
14 Apr 2008 1:12:02 67,584 A.... "C:\WINDOWS\system32\pautoenr.dll"
14 Apr 2008 1:12:02 284,160 A.... "C:\WINDOWS\system32\pdh.dll"
28 May 2008 18:38:14 64,488 A.... "C:\WINDOWS\system32\perfc009.dat"
14 Apr 2008 1:12:02 39,936 A.... "C:\WINDOWS\system32\perfctrs.dll"
14 Apr 2008 1:12:02 26,624 A.... "C:\WINDOWS\system32\perfdisk.dll"
28 May 2008 18:38:14 409,540 A.... "C:\WINDOWS\system32\perfh009.dat"
14 Apr 2008 1:12:32 15,872 A.... "C:\WINDOWS\system32\perfmon.exe"
14 Apr 2008 1:12:02 17,920 A.... "C:\WINDOWS\system32\perfnet.dll"
14 Apr 2008 1:12:02 25,088 A.... "C:\WINDOWS\system32\perfos.dll"
14 Apr 2008 1:12:02 34,816 A.... "C:\WINDOWS\system32\perfproc.dll"
28 May 2008 18:38:14 481,674 A.... "C:\WINDOWS\system32\PerfStringBackup.INI"
14 Apr 2008 1:11:34 79,360 A.... "C:\WINDOWS\system32\phon.ime"
14 Apr 2008 1:12:02 412,160 ..... "C:\WINDOWS\system32\photometadatahandler.dll"
14 Apr 2008 1:12:02 176,128 A.... "C:\WINDOWS\system32\photowiz.dll"
14 Apr 2008 1:12:02 35,328 ..... "C:\WINDOWS\system32\pid.dll"
13 Apr 2008 19:35:22 24,064 ..... "C:\WINDOWS\system32\pidgen.dll"
14 Apr 2008 1:12:32 17,920 A.... "C:\WINDOWS\system32\ping.exe"
14 Apr 2008 1:11:32 482,304 A.... "C:\WINDOWS\system32\pintlgnt.ime"
14 Apr 2008 1:12:02 15,360 A.... "C:\WINDOWS\system32\pjlmon.dll"
14 Apr 2008 1:12:02 58,880 ..... "C:\WINDOWS\system32\pnrpnsp.dll"
14 Apr 2008 1:12:02 105,472 A.... "C:\WINDOWS\system32\polstore.dll"
14 Apr 2008 1:12:42 114,688 A.... "C:\WINDOWS\system32\powercfg.cpl"
14 Apr 2008 1:12:32 49,152 ..... "C:\WINDOWS\system32\powercfg.exe"
14 Apr 2008 1:12:04 17,408 A.... "C:\WINDOWS\system32\powrprof.dll"
14 Apr 2008 1:12:04 560,640 A.... "C:\WINDOWS\system32\printui.dll"
14 Apr 2008 1:10:36 81,920 A.... "C:\WINDOWS\system32\proctexe.ocx"
14 Apr 2008 1:12:04 27,648 A.... "C:\WINDOWS\system32\profmap.dll"
14 Apr 2008 1:12:32 109,568 A.... "C:\WINDOWS\system32\progman.exe"
14 Apr 2008 1:12:32 50,176 A.... "C:\WINDOWS\system32\proquota.exe"
14 Apr 2008 1:12:32 9,216 ..... "C:\WINDOWS\system32\proxycfg.exe"
14 Apr 2008 1:12:04 23,040 A.... "C:\WINDOWS\system32\psapi.dll"
14 Apr 2008 1:12:04 96,768 A.... "C:\WINDOWS\system32\psbase.dll"
14 Apr 2008 1:12:04 43,520 A.... "C:\WINDOWS\system32\pstorec.dll"
14 Apr 2008 1:12:04 34,304 A.... "C:\WINDOWS\system32\pstorsvc.dll"
14 Apr 2008 1:12:04 150,528 ..... "C:\WINDOWS\system32\qagent.dll"
14 Apr 2008 1:12:04 291,328 ..... "C:\WINDOWS\system32\qagentrt.dll"
14 Apr 2008 1:12:04 192,512 A.... "C:\WINDOWS\system32\qcap.dll"
14 Apr 2008 1:12:04 62,464 ..... "C:\WINDOWS\system32\qcliprov.dll"
14 Apr 2008 1:12:04 279,040 A.... "C:\WINDOWS\system32\qdv.dll"
14 Apr 2008 1:12:04 386,048 A.... "C:\WINDOWS\system32\qdvd.dll"
14 Apr 2008 1:12:04 562,176 A.... "C:\WINDOWS\system32\qedit.dll"
13 Apr 2008 18:21:32 733,696 A.... "C:\WINDOWS\system32\qedwipes.dll"
14 Apr 2008 1:12:04 409,088 A.... "C:\WINDOWS\system32\qmgr.dll"
14 Apr 2008 1:12:04 18,944 A.... "C:\WINDOWS\system32\qmgrprxy.dll"
14 Apr 2008 1:12:32 19,968 A.... "C:\WINDOWS\system32\qprocess.exe"
14 Apr 2008 1:12:04 1,288,192 A.... "C:\WINDOWS\system32\quartz.dll"
14 Apr 2008 1:12:04 1,435,648 A.... "C:\WINDOWS\system32\query.dll"
14 Apr 2008 1:11:30 77,824 A.... "C:\WINDOWS\system32\quick.ime"
14 Apr 2008 1:12:04 76,800 ..... "C:\WINDOWS\system32\qutil.dll"
14 Apr 2008 1:12:04 43,520 A.... "C:\WINDOWS\system32\racpldlg.dll"
14 Apr 2008 1:12:04 7,680 A.... "C:\WINDOWS\system32\rasadhlp.dll"
14 Apr 2008 1:12:04 237,056 A.... "C:\WINDOWS\system32\rasapi32.dll"
14 Apr 2008 1:12:04 88,576 A.... "C:\WINDOWS\system32\rasauto.dll"
14 Apr 2008 1:12:04 79,872 A.... "C:\WINDOWS\system32\raschap.dll"
14 Apr 2008 1:12:04 658,432 A.... "C:\WINDOWS\system32\rasdlg.dll"
14 Apr 2008 1:12:04 61,440 A.... "C:\WINDOWS\system32\rasman.dll"
14 Apr 2008 1:12:04 186,368 A.... "C:\WINDOWS\system32\rasmans.dll"
14 Apr 2008 1:12:32 56,832 A.... "C:\WINDOWS\system32\rasphone.exe"
14 Apr 2008 1:12:04 210,944 A.... "C:\WINDOWS\system32\rasppp.dll"
14 Apr 2008 1:12:04 61,952 ..... "C:\WINDOWS\system32\rasqec.dll"
14 Apr 2008 1:12:04 16,384 A.... "C:\WINDOWS\system32\rassapi.dll"
14 Apr 2008 1:12:04 58,368 A.... "C:\WINDOWS\system32\rastapi.dll"
14 Apr 2008 1:12:04 150,016 A.... "C:\WINDOWS\system32\rastls.dll"
14 Apr 2008 1:12:04 102,400 A.... "C:\WINDOWS\system32\rcbdyctl.dll"
14 Apr 2008 1:12:32 35,840 A.... "C:\WINDOWS\system32\rcimlby.exe"
14 Apr 2008 1:12:32 21,504 A.... "C:\WINDOWS\system32\rcp.exe"
14 Apr 2008 1:12:04 147,968 A.... "C:\WINDOWS\system32\rdchost.dll"
14 Apr 2008 1:12:32 62,976 A.... "C:\WINDOWS\system32\rdpclip.exe"
14 Apr 2008 1:13:22 92,424 A.... "C:\WINDOWS\system32\rdpdd.dll"
14 Apr 2008 1:12:04 19,968 A.... "C:\WINDOWS\system32\rdpsnd.dll"
14 Apr 2008 1:13:22 87,176 A.... "C:\WINDOWS\system32\rdpwsx.dll"
14 Apr 2008 1:12:32 13,824 A.... "C:\WINDOWS\system32\rdsaddin.exe"
14 Apr 2008 1:12:32 67,072 A.... "C:\WINDOWS\system32\rdshost.exe"
14 Apr 2008 1:12:32 50,176 A.... "C:\WINDOWS\system32\reg.exe"
14 Apr 2008 1:12:04 49,664 A.... "C:\WINDOWS\system32\regapi.dll"
14 Apr 2008 1:12:04 59,904 A.... "C:\WINDOWS\system32\regsvc.dll"
14 Apr 2008 1:12:32 11,776 A.... "C:\WINDOWS\system32\regsvr32.exe"
14 Apr 2008 1:12:04 397,824 A.... "C:\WINDOWS\system32\regwizc.dll"
14 Apr 2008 1:12:04 60,416 A.... "C:\WINDOWS\system32\remotepg.dll"
14 Apr 2008 1:12:46 76,800 A.... "C:\WINDOWS\system32\remotesp.tsp"
14 Apr 2008 1:12:04 58,880 A.... "C:\WINDOWS\system32\resutils.dll"
14 Apr 2008 1:12:34 13,824 A.... "C:\WINDOWS\system32\rexec.exe"
14 Apr 2008 1:12:04 290,304 ..... "C:\WINDOWS\system32\rhttpaa.dll"
14 Apr 2008 1:12:04 433,664 A.... "C:\WINDOWS\system32\riched20.dll"
14 Apr 2008 1:11:34 26,112 A.... "C:\WINDOWS\system32\romanime.ime"
14 Apr 2008 1:12:04 584,704 A.... "C:\WINDOWS\system32\rpcrt4.dll"
14 Apr 2008 1:12:04 399,360 A.... "C:\WINDOWS\system32\rpcss.dll"
13 Apr 2008 18:37:58 208,384 A.... "C:\WINDOWS\system32\rsaenh.dll"
14 Apr 2008 1:12:34 14,848 A.... "C:\WINDOWS\system32\rsh.exe"
14 Apr 2008 1:12:04 39,936 A.... "C:\WINDOWS\system32\rshx32.dll"
14 Apr 2008 1:12:04 18,944 A.... "C:\WINDOWS\system32\rsmps.dll"
14 Apr 2008 1:12:04 92,672 A.... "C:\WINDOWS\system32\rsvpsp.dll"
14 Apr 2008 1:12:34 77,312 A.... "C:\WINDOWS\system32\rtcshare.exe"
14 Apr 2008 1:12:04 31,744 A.... "C:\WINDOWS\system32\rtipxmib.dll"
14 Apr 2008 1:12:04 44,032 A.... "C:\WINDOWS\system32\rtutils.dll"
14 Apr 2008 1:12:34 33,280 A.... "C:\WINDOWS\system32\rundll32.exe"
14 Apr 2008 1:12:34 14,336 A.... "C:\WINDOWS\system32\runonce.exe"
14 Apr 2008 1:12:04 397,056 ..... "C:\WINDOWS\system32\s3gnb.dll"
14 Apr 2008 1:12:04 43,520 A.... "C:\WINDOWS\system32\safrcdlg.dll"
14 Apr 2008 1:12:04 29,696 A.... "C:\WINDOWS\system32\safrdm.dll"
14 Apr 2008 1:12:04 45,568 A.... "C:\WINDOWS\system32\safrslv.dll"
14 Apr 2008 1:12:04 64,000 A.... "C:\WINDOWS\system32\samlib.dll"
14 Apr 2008 1:12:04 415,744 A.... "C:\WINDOWS\system32\samsrv.dll"
14 Apr 2008 1:12:34 13,312 A.... "C:\WINDOWS\system32\savedump.exe"
14 Apr 2008 1:12:04 270,848 A.... "C:\WINDOWS\system32\sbe.dll"
14 Apr 2008 1:12:04 159,232 A.... "C:\WINDOWS\system32\sbeio.dll"
14 Apr 2008 1:12:04 69,632 A.... "C:\WINDOWS\system32\scarddlg.dll"
14 Apr 2008 1:12:34 95,744 A.... "C:\WINDOWS\system32\scardsvr.exe"
14 Apr 2008 1:12:06 171,008 A.... "C:\WINDOWS\system32\sccsccp.dll"
14 Apr 2008 1:12:06 181,248 A.... "C:\WINDOWS\system32\scecli.dll"
14 Apr 2008 1:12:06 314,880 A.... "C:\WINDOWS\system32\scesrv.dll"
14 Apr 2008 1:12:06 144,384 A.... "C:\WINDOWS\system32\schannel.dll"
14 Apr 2008 1:12:06 192,512 A.... "C:\WINDOWS\system32\schedsvc.dll"
14 Apr 2008 1:12:06 20,480 A.... "C:\WINDOWS\system32\sclgntfy.dll"
14 Apr 2008 1:12:44 9,216 A.... "C:\WINDOWS\system32\scrnsave.scr"
14 Apr 2008 1:12:06 180,224 A.... "C:\WINDOWS\system32\scrobj.dll"
14 Apr 2008 1:12:06 172,032 A.... "C:\WINDOWS\system32\scrrun.dll"
14 Apr 2008 1:12:34 77,312 A.... "C:\WINDOWS\system32\sdbinst.exe"
14 Apr 2008 1:12:06 29,184 ..... "C:\WINDOWS\system32\sdhcinst.dll"
14 Apr 2008 1:12:06 18,944 A.... "C:\WINDOWS\system32\seclogon.dll"
14 Apr 2008 1:12:06 56,320 A.... "C:\WINDOWS\system32\secur32.dll"
14 Apr 2008 1:12:06 5,632 A.... "C:\WINDOWS\system32\security.dll"
14 Apr 2008 1:12:06 29,184 A.... "C:\WINDOWS\system32\sendcmsg.dll"
14 Apr 2008 1:12:06 54,784 A.... "C:\WINDOWS\system32\sendmail.dll"
14 Apr 2008 1:12:06 39,424 A.... "C:\WINDOWS\system32\sens.dll"
14 Apr 2008 1:12:06 7,168 A.... "C:\WINDOWS\system32\sensapi.dll"
14 Apr 2008 1:12:06 56,320 A.... "C:\WINDOWS\system32\servdeps.dll"
14 Apr 2008 1:12:34 108,544 A.... "C:\WINDOWS\system32\services.exe"
14 Apr 2008 1:12:34 141,312 A.... "C:\WINDOWS\system32\sessmgr.exe"
14 Apr 2008 1:12:34 31,232 A.... "C:\WINDOWS\system32\sethc.exe"
14 Apr 2008 1:12:34 23,040 A.... "C:\WINDOWS\system32\setup.exe"
14 Apr 2008 5:42:06 985,088 A.... "C:\WINDOWS\system32\setupapi.dll"
14 Apr 2008 1:12:36 32,768 ..... "C:\WINDOWS\system32\setupn.exe"
14 Apr 2008 1:12:06 5,120 A.... "C:\WINDOWS\system32\sfc.dll"
14 Apr 2008 1:12:06 1,614,848 A.... "C:\WINDOWS\system32\sfcfiles.dll"
14 Apr 2008 1:12:06 140,288 A.... "C:\WINDOWS\system32\sfc_os.dll"
13 Apr 2008 18:03:20 549,376 A.... "C:\WINDOWS\system32\shdoclc.dll"
14 Apr 2008 1:12:06 1,499,136 A.... "C:\WINDOWS\system32\shdocvw.dll"
14 Apr 2008 1:12:06 8,461,312 A.... "C:\WINDOWS\system32\shell32.dll"
14 Apr 2008 1:12:06 25,088 A.... "C:\WINDOWS\system32\shfolder.dll"
14 Apr 2008 1:12:06 68,096 A.... "C:\WINDOWS\system32\shgina.dll"
14 Apr 2008 1:12:06 65,024 A.... "C:\WINDOWS\system32\shimeng.dll"
14 Apr 2008 1:12:06 438,272 A.... "C:\WINDOWS\system32\shimgvw.dll"
14 Apr 2008 1:12:06 474,112 A.... "C:\WINDOWS\system32\shlwapi.dll"
14 Apr 2008 1:12:06 152,064 A.... "C:\WINDOWS\system32\shmedia.dll"
14 Apr 2008 1:12:36 45,056 A.... "C:\WINDOWS\system32\shmgrate.exe"
14 Apr 2008 1:12:36 77,824 A.... "C:\WINDOWS\system32\shrpubw.exe"
14 Apr 2008 1:12:06 27,648 A.... "C:\WINDOWS\system32\shscrap.dll"
14 Apr 2008 1:12:06 135,168 A.... "C:\WINDOWS\system32\shsvcs.dll"
14 Apr 2008 1:12:36 19,456 A.... "C:\WINDOWS\system32\shutdown.exe"
14 Apr 2008 1:12:06 13,312 A.... "C:\WINDOWS\system32\sigtab.dll"
14 Apr 2008 1:12:36 70,144 A.... "C:\WINDOWS\system32\sigverif.exe"
13 Apr 2008 18:24:16 16,384 A.... "C:\WINDOWS\system32\simpdata.tlb"
14 Apr 2008 1:12:36 26,112 A.... "C:\WINDOWS\system32\skeys.exe"
14 Apr 2008 1:12:06 25,088 A.... "C:\WINDOWS\system32\slayerxp.dll"
14 Apr 2008 1:12:06 98,304 A.... "C:\WINDOWS\system32\slbiop.dll"
14 Apr 2008 1:12:06 73,832 ..... "C:\WINDOWS\system32\slcoinst.dll"
14 Apr 2008 1:12:06 286,792 ..... "C:\WINDOWS\system32\slextspk.dll"
14 Apr 2008 1:12:06 188,508 ..... "C:\WINDOWS\system32\slgen.dll"
14 Apr 2008 1:12:36 32,866 ..... "C:\WINDOWS\system32\slrundll.exe"
14 Apr 2008 1:12:36 73,796 ..... "C:\WINDOWS\system32\slserv.exe"
14 Apr 2008 1:10:50 86,016 A.... "C:\WINDOWS\system32\sl_anet.acm"
14 Apr 2008 1:12:36 8,192 ..... "C:\WINDOWS\system32\smbinst.exe"
14 Apr 2008 1:12:06 362,496 A.... "C:\WINDOWS\system32\smlogcfg.dll"
14 Apr 2008 1:12:36 89,600 A.... "C:\WINDOWS\system32\smlogsvc.exe"
14 Apr 2008 1:12:36 50,688 A.... "C:\WINDOWS\system32\smss.exe"
14 Apr 2008 1:12:36 131,584 A.... "C:\WINDOWS\system32\sndrec32.exe"
14 Apr 2008 1:12:06 18,944 A.... "C:\WINDOWS\system32\snmpapi.dll"
14 Apr 2008 1:12:06 182,272 A.... "C:\WINDOWS\system32\snmpsnap.dll"
14 Apr 2008 1:12:36 24,576 A.... "C:\WINDOWS\system32\sort.exe"
14 Apr 2008 1:12:36 7,680 A.... "C:\WINDOWS\system32\spdwnwxp.exe"
14 Apr 2008 1:12:36 538,624 A.... "C:\WINDOWS\system32\spider.exe"
14 Apr 2008 5:42:38 11,264 ..... "C:\WINDOWS\system32\spnpinst.exe"
14 Apr 2008 1:12:06 75,264 A.... "C:\WINDOWS\system32\spoolss.dll"
14 Apr 2008 1:12:36 57,856 A.... "C:\WINDOWS\system32\spoolsv.exe"
14 Apr 2008 1:12:36 20,992 ..... "C:\WINDOWS\system32\spupdwxp.exe"
28 May 2008 18:34:14 90 A.... "C:\WINDOWS\system32\spupdwxp.log"
14 Apr 2008 1:12:06 442,368 A.... "C:\WINDOWS\system32\sqlsrv32.dll"
13 Apr 2008 18:26:18 90,112 A.... "C:\WINDOWS\system32\sqlsrv32.rll"
14 Apr 2008 1:12:06 180,800 A.... "C:\WINDOWS\system32\sqlunirl.dll"
14 Apr 2008 1:12:08 67,584 A.... "C:\WINDOWS\system32\srclient.dll"
14 Apr 2008 1:12:08 239,104 A.... "C:\WINDOWS\system32\srrstr.dll"
14 Apr 2008 1:12:08 171,008 A.... "C:\WINDOWS\system32\srsvc.dll"
14 Apr 2008 1:12:08 96,768 A.... "C:\WINDOWS\system32\srvsvc.dll"
14 Apr 2008 1:12:44 704,512 A.... "C:\WINDOWS\system32\ss3dfo.scr"
14 Apr 2008 1:12:44 19,968 A.... "C:\WINDOWS\system32\ssbezier.scr"
14 Apr 2008 1:12:08 34,816 A.... "C:\WINDOWS\system32\ssdpapi.dll"
14 Apr 2008 1:12:08 71,680 A.... "C:\WINDOWS\system32\ssdpsrv.dll"
14 Apr 2008 1:12:44 393,216 A.... "C:\WINDOWS\system32\ssflwbox.scr"
14 Apr 2008 1:12:44 20,992 A.... "C:\WINDOWS\system32\ssmarque.scr"
14 Apr 2008 1:12:44 47,104 A.... "C:\WINDOWS\system32\ssmypics.scr"
14 Apr 2008 1:12:44 18,944 A.... "C:\WINDOWS\system32\ssmyst.scr"
14 Apr 2008 1:12:44 610,304 A.... "C:\WINDOWS\system32\sspipes.scr"
14 Apr 2008 1:12:44 14,336 A.... "C:\WINDOWS\system32\ssstars.scr"
14 Apr 2008 1:12:44 679,936 A.... "C:\WINDOWS\system32\sstext3d.scr"
14 Apr 2008 1:12:08 59,392 A.... "C:\WINDOWS\system32\stclient.dll"
13 Apr 2008 16:42:06 16,896 A.... "C:\WINDOWS\system32\stdole2.tlb"
14 Apr 2008 1:12:08 68,096 A.... "C:\WINDOWS\system32\sti.dll"
14 Apr 2008 1:12:36 14,848 A.... "C:\WINDOWS\system32\stimon.exe"
14 Apr 2008 1:12:08 136,704 A.... "C:\WINDOWS\system32\sti_ci.dll"
14 Apr 2008 1:12:08 121,856 A.... "C:\WINDOWS\system32\stobject.dll"
14 Apr 2008 1:12:08 74,752 ..... "C:\WINDOWS\system32\storprop.dll"
14 Apr 2008 1:12:08 246,814 A.... "C:\WINDOWS\system32\strmdll.dll"
14 Apr 2008 1:12:08 75,776 A.... "C:\WINDOWS\system32\strmfilt.dll"
14 Apr 2008 1:12:36 14,336 A.... "C:\WINDOWS\system32\svchost.exe"
14 Apr 2008 1:12:08 713,216 A.... "C:\WINDOWS\system32\sxs.dll"
14 Apr 2008 1:12:08 57,856 A.... "C:\WINDOWS\system32\synceng.dll"
14 Apr 2008 1:12:08 191,488 A.... "C:\WINDOWS\system32\syncui.dll"
14 Apr 2008 1:12:42 300,544 A.... "C:\WINDOWS\system32\sysdm.cpl"
14 Apr 2008 1:10:56 218,624 A.... "C:\WINDOWS\system32\sysmon.ocx"
14 Apr 2008 1:12:38 106,496 A.... "C:\WINDOWS\system32\sysocmgr.exe"
14 Apr 2008 1:12:08 990,208 A.... "C:\WINDOWS\system32\syssetup.dll"
14 Apr 2008 1:12:08 117,760 A.... "C:\WINDOWS\system32\t2embed.dll"
14 Apr 2008 1:12:08 858,624 A.... "C:\WINDOWS\system32\tapi3.dll"
14 Apr 2008 1:12:08 181,760 A.... "C:\WINDOWS\system32\tapi32.dll"
14 Apr 2008 1:12:08 249,856 A.... "C:\WINDOWS\system32\tapisrv.dll"
14 Apr 2008 1:12:38 135,680 A.... "C:\WINDOWS\system32\taskmgr.exe"
14 Apr 2008 1:12:08 14,848 A.... "C:\WINDOWS\system32\tcpmib.dll"
14 Apr 2008 1:12:08 45,568 A.... "C:\WINDOWS\system32\tcpmon.dll"
14 Apr 2008 1:12:08 45,568 A.... "C:\WINDOWS\system32\tcpmonui.dll"
14 Apr 2008 1:12:38 75,776 ..... "C:\WINDOWS\system32\telnet.exe"
14 Apr 2008 1:12:08 358,400 A.... "C:\WINDOWS\system32\termmgr.dll"
14 Apr 2008 1:12:08 295,424 A.... "C:\WINDOWS\system32\termsrv.dll"
14 Apr 2008 1:12:08 385,536 A.... "C:\WINDOWS\system32\themeui.dll"
14 Apr 2008 1:12:42 94,208 A.... "C:\WINDOWS\system32\timedate.cpl"
14 Apr 2008 1:11:32 571,392 A.... "C:\WINDOWS\system32\tintlgnt.ime"
14 Apr 2008 1:12:38 347,136 ..... "C:\WINDOWS\system32\tourstart.exe"
14 Apr 2008 1:12:38 12,288 A.... "C:\WINDOWS\system32\tracert.exe"
14 Apr 2008 1:12:42 12,800 A.... "C:\WINDOWS\system32\tree.com"
14 Apr 2008 1:12:08 90,112 A.... "C:\WINDOWS\system32\trkwks.dll"
14 Apr 2008 1:12:08 93,696 A.... "C:\WINDOWS\system32\tscfgwmi.dll"
14 Apr 2008 1:13:22 12,168 A.... "C:\WINDOWS\system32\tsddd.dll"
14 Apr 2008 1:12:08 53,248 ..... "C:\WINDOWS\system32\tsgqec.dll"
14 Apr 2008 1:12:08 50,688 ..... "C:\WINDOWS\system32\tspkg.dll"
14 Apr 2008 1:12:08 57,856 ..... "C:\WINDOWS\system32\twext.dll"
14 Apr 2008 1:12:08 101,376 A.... "C:\WINDOWS\system32\txflog.dll"
14 Apr 2008 1:12:38 60,416 ..... "C:\WINDOWS\system32\tzchange.exe"
14 Apr 2008 1:12:08 26,624 A.... "C:\WINDOWS\system32\udhisapi.dll"
14 Apr 2008 1:12:08 275,456 A.... "C:\WINDOWS\system32\ulib.dll"
14 Apr 2008 1:12:08 35,840 A.... "C:\WINDOWS\system32\umandlg.dll"
14 Apr 2008 1:12:08 123,392 A.... "C:\WINDOWS\system32\umpnpmgr.dll"
14 Apr 2008 1:11:38 65,024 A.... "C:\WINDOWS\system32\unicdime.ime"
14 Apr 2008 1:11:02 76,288 A.... "C:\WINDOWS\system32\uniime.dll"
14 Apr 2008 1:12:46 206,848 A.... "C:\WINDOWS\system32\unimdm.tsp"
14 Apr 2008 1:12:08 74,240 A.... "C:\WINDOWS\system32\unimdmat.dll"
14 Apr 2008 1:12:08 13,824 A.... "C:\WINDOWS\system32\uniplat.dll"
14 Apr 2008 1:12:08 316,416 A.... "C:\WINDOWS\system32\untfs.dll"
14 Apr 2008 1:12:08 133,632 A.... "C:\WINDOWS\system32\upnp.dll"
14 Apr 2008 1:12:38 16,896 A.... "C:\WINDOWS\system32\upnpcont.exe"
14 Apr 2008 1:12:08 185,856 A.... "C:\WINDOWS\system32\upnphost.dll"
14 Apr 2008 1:12:08 239,616 A.... "C:\WINDOWS\system32\upnpui.dll"
14 Apr 2008 1:12:38 18,432 A.... "C:\WINDOWS\system32\ups.exe"
14 Apr 2008 1:12:08 16,896 A.... "C:\WINDOWS\system32\usbmon.dll"
14 Apr 2008 1:12:08 74,240 A.... "C:\WINDOWS\system32\usbui.dll"
14 Apr 2008 1:12:08 578,560 A.... "C:\WINDOWS\system32\user32.dll"
14 Apr 2008 1:12:08 727,040 A.... "C:\WINDOWS\system32\userenv.dll"
14 Apr 2008 1:12:38 26,112 A.... "C:\WINDOWS\system32\userinit.exe"
14 Apr 2008 1:12:08 406,016 A.... "C:\WINDOWS\system32\usp10.dll"
14 Apr 2008 1:12:38 50,176 A.... "C:\WINDOWS\system32\utilman.exe"
14 Apr 2008 1:12:08 218,624 A.... "C:\WINDOWS\system32\uxtheme.dll"
14 Apr 2008 1:12:08 30,749 A.... "C:\WINDOWS\system32\vbajet32.dll"
14 Apr 2008 1:12:42 30,208 ..... "C:\WINDOWS\system32\vbisurf.ax"
14 Apr 2008 1:12:08 434,176 A.... "C:\WINDOWS\system32\vbscript.dll"
14 Apr 2008 1:12:08 26,112 A.... "C:\WINDOWS\system32\vdmdbg.dll"
14 Apr 2008 1:12:08 51,712 A.... "C:\WINDOWS\system32\vdmredir.dll"
14 Apr 2008 1:12:38 28,672 A.... "C:\WINDOWS\system32\verclsid.exe"
14 Apr 2008 1:12:08 26,624 A.... "C:\WINDOWS\system32\verifier.dll"
14 Apr 2008 1:12:08 18,944 A.... "C:\WINDOWS\system32\version.dll"
14 Apr 2008 1:12:42 28,672 ..... "C:\WINDOWS\system32\vidcap.ax"
14 Apr 2008 1:12:08 430,592 A.... "C:\WINDOWS\system32\vssapi.dll"
14 Apr 2008 1:12:38 289,792 A.... "C:\WINDOWS\system32\vssvc.exe"
14 Apr 2008 1:12:08 175,104 A.... "C:\WINDOWS\system32\w32time.dll"
14 Apr 2008 1:12:08 15,872 A.... "C:\WINDOWS\system32\w3ssl.dll"
13 Apr 2008 19:45:00 17,664 A.... "C:\WINDOWS\system32\watchdog.sys"
14 Apr 2008 1:12:08 215,552 A.... "C:\WINDOWS\system32\wavemsp.dll"
14 Apr 2008 1:12:08 49,152 A.... "C:\WINDOWS\system32\wdigest.dll"
14 Apr 2008 1:12:46 23,552 A.... "C:\WINDOWS\system32\wdmaud.drv"
14 Apr 2008 1:12:08 68,096 A.... "C:\WINDOWS\system32\webclnt.dll"
14 Apr 2008 1:12:08 135,680 A.... "C:\WINDOWS\system32\webvw.dll"
14 Apr 2008 1:12:40 65,024 A.... "C:\WINDOWS\system32\wextract.exe"
14 Apr 2008 1:12:40 433,664 A.... "C:\WINDOWS\system32\wiaacmgr.exe"
14 Apr 2008 1:12:08 463,360 A.... "C:\WINDOWS\system32\wiadefui.dll"
14 Apr 2008 1:12:08 124,416 A.... "C:\WINDOWS\system32\wiadss.dll"
14 Apr 2008 1:12:08 75,776 A.... "C:\WINDOWS\system32\wiascr.dll"
14 Apr 2008 1:12:08 333,824 A.... "C:\WINDOWS\system32\wiaservc.dll"
14 Apr 2008 1:12:08 589,312 A.... "C:\WINDOWS\system32\wiashext.dll"
14 Apr 2008 1:12:08 111,104 A.... "C:\WINDOWS\system32\wiavideo.dll"
13 Apr 2008 20:30:10 1,845,632 A.... "C:\WINDOWS\system32\win32k.sys"
14 Apr 2008 1:12:08 102,400 A.... "C:\WINDOWS\system32\win32spl.dll"
14 Apr 2008 1:11:30 79,360 A.... "C:\WINDOWS\system32\winar30.ime"
13 Apr 2008 17:48:54 1,647,616 A.... "C:\WINDOWS\system32\winbrand.dll"
14 Apr 2008 1:12:08 346,112 ..... "C:\WINDOWS\system32\windowscodecsext.dll"
14 Apr 2008 1:12:08 712,704 ..... "C:\WINDOWS\system32\windowscodecs.dll"
14 Apr 2008 1:11:10 72,704 A.... "C:\WINDOWS\system32\wingb.ime"
14 Apr 2008 1:12:08 354,304 A.... "C:\WINDOWS\system32\winhttp.dll"
14 Apr 2008 1:11:34 65,536 A.... "C:\WINDOWS\system32\winime.ime"
14 Apr 2008 1:12:10 32,256 A.... "C:\WINDOWS\system32\winipsec.dll"
14 Apr 2008 1:12:40 507,904 A.... "C:\WINDOWS\system32\winlogon.exe"
14 Apr 2008 1:12:10 176,128 A.... "C:\WINDOWS\system32\winmm.dll"
14 Apr 2008 1:11:12 756,224 A.... "C:\WINDOWS\system32\winntbbu.dll"
14 Apr 2008 1:11:12 156,672 A.... "C:\WINDOWS\system32\winpy.ime"
14 Apr 2008 1:12:10 16,896 A.... "C:\WINDOWS\system32\winrnr.dll"
14 Apr 2008 1:12:10 99,328 A.... "C:\WINDOWS\system32\winscard.dll"
14 Apr 2008 1:12:10 17,408 ..... "C:\WINDOWS\system32\winshfhc.dll"
14 Apr 2008 1:11:14 156,672 A.... "C:\WINDOWS\system32\winsp.ime"
14 Apr 2008 1:12:46 146,432 A.... "C:\WINDOWS\system32\winspool.drv"
14 Apr 2008 1:12:10 293,376 A.... "C:\WINDOWS\system32\winsrv.dll"
14 Apr 2008 1:12:10 53,760 A.... "C:\WINDOWS\system32\winsta.dll"
14 Apr 2008 1:12:10 176,640 A.... "C:\WINDOWS\system32\wintrust.dll"
14 Apr 2008 1:12:40 5,632 A.... "C:\WINDOWS\system32\winver.exe"
14 Apr 2008 1:11:14 156,672 A.... "C:\WINDOWS\system32\winzm.ime"
14 Apr 2008 1:12:10 132,096 A.... "C:\WINDOWS\system32\wkssvc.dll"
14 Apr 2008 1:12:10 69,120 ..... "C:\WINDOWS\system32\wlanapi.dll"
14 Apr 2008 1:12:10 172,032 A.... "C:\WINDOWS\system32\wldap32.dll"
14 Apr 2008 1:12:10 92,672 A.... "C:\WINDOWS\system32\wlnotify.dll"
14 Apr 2008 1:11:16 5,632 A.... "C:\WINDOWS\system32\wmi.dll"
14 Apr 2008 1:11:20 20,480 ..... "C:\WINDOWS\system32\wmp.ocx"
14 Apr 2008 1:12:10 20,480 ..... "C:\WINDOWS\system32\wmpcd.dll"
14 Apr 2008 1:12:10 20,480 ..... "C:\WINDOWS\system32\wmpcore.dll"
14 Apr 2008 1:12:10 276,992 ..... "C:\WINDOWS\system32\wmphoto.dll"
14 Apr 2008 1:12:10 20,480 ..... "C:\WINDOWS\system32\wmpui.dll"
14 Apr 2008 1:12:10 115,200 A.... "C:\WINDOWS\system32\wmsdmoe.dll"
14 Apr 2008 1:12:10 303,616 A.... "C:\WINDOWS\system32\wmstream.dll"
14 Apr 2008 1:12:42 278,559 ..... "C:\WINDOWS\system32\wmv8ds32.ax"
14 Apr 2008 1:12:42 258,048 ..... "C:\WINDOWS\system32\wmvds32.ax"
14 Apr 2008 1:12:10 264,192 A.... "C:\WINDOWS\system32\wow32.dll"
1 Jun 2008 11:34:18 1,158 A.... "C:\WINDOWS\system32\wpa.dbl"
14 Apr 2008 1:12:40 32,256 A.... "C:\WINDOWS\system32\wpabaln.exe"
14 Apr 2008 1:12:42 11,264 A.... "C:\WINDOWS\system32\wpnpinst.exe"
14 Apr 2008 1:12:10 19,968 A.... "C:\WINDOWS\system32\ws2help.dll"
14 Apr 2008 1:12:10 82,432 A.... "C:\WINDOWS\system32\ws2_32.dll"
14 Apr 2008 1:12:42 13,824 ..... "C:\WINDOWS\system32\wscntfy.exe"
14 Apr 2008 1:12:42 155,648 A.... "C:\WINDOWS\system32\wscript.exe"
14 Apr 2008 1:12:10 80,896 A.... "C:\WINDOWS\system32\wscsvc.dll"
14 Apr 2008 1:12:42 148,480 ..... "C:\WINDOWS\system32\wscui.cpl"
14 Apr 2008 1:12:10 108,032 ..... "C:\WINDOWS\system32\wshbth.dll"
14 Apr 2008 1:12:10 36,864 A.... "C:\WINDOWS\system32\wshcon.dll"
14 Apr 2008 1:12:10 90,112 A.... "C:\WINDOWS\system32\wshext.dll"
14 Apr 2008 1:12:10 14,336 A.... "C:\WINDOWS\system32\wship6.dll"
14 Apr 2008 1:11:30 135,168 A.... "C:\WINDOWS\system32\wshom.ocx"
14 Apr 2008 1:12:10 11,264 A.... "C:\WINDOWS\system32\wshrm.dll"
14 Apr 2008 1:12:10 19,456 A.... "C:\WINDOWS\system32\wshtcpip.dll"
14 Apr 2008 1:12:10 41,984 A.... "C:\WINDOWS\system32\wsnmp32.dll"
14 Apr 2008 1:12:10 22,528 A.... "C:\WINDOWS\system32\wsock32.dll"
14 Apr 2008 1:12:10 50,688 A.... "C:\WINDOWS\system32\wstdecod.dll"
14 Apr 2008 1:12:10 18,432 A.... "C:\WINDOWS\system32\wtsapi32.dll"
14 Apr 2008 1:12:12 6,656 A.... "C:\WINDOWS\system32\wuauserv.dll"
14 Apr 2008 1:12:12 383,488 A.... "C:\WINDOWS\system32\wzcdlg.dll"
14 Apr 2008 1:12:12 52,736 A.... "C:\WINDOWS\system32\wzcsapi.dll"
14 Apr 2008 1:12:12 483,840 A.... "C:\WINDOWS\system32\wzcsvc.dll"
14 Apr 2008 1:12:12 91,648 A.... "C:\WINDOWS\system32\xactsrv.dll"
14 Apr 2008 1:12:42 30,720 A.... "C:\WINDOWS\system32\xcopy.exe"
14 Apr 2008 1:12:12 121,856 A.... "C:\WINDOWS\system32\xmllite.dll"
14 Apr 2008 1:12:12 129,024 ..... "C:\WINDOWS\system32\xmlprov.dll"
14 Apr 2008 1:12:12 50,176 ..... "C:\WINDOWS\system32\xmlprovi.dll"
14 Apr 2008 1:12:12 11,776 A.... "C:\WINDOWS\system32\xolehlp.dll"
13 Apr 2008 18:39:30 438,784 A.... "C:\WINDOWS\system32\xpob2res.dll"
13 Apr 2008 18:39:22 187,392 A.... "C:\WINDOWS\system32\xpsp1res.dll"
13 Apr 2008 18:39:24 2,897,920 A.... "C:\WINDOWS\system32\xpsp2res.dll"
13 Apr 2008 18:39:26 689,152 A.... "C:\WINDOWS\system32\xpsp3res.dll"
14 Apr 2008 1:12:12 338,432 A.... "C:\WINDOWS\system32\zipfldr.dll"
26 May 2008 20:45:14 284 A.... "C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
1 Jun 2008 11:20:04 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
12 Apr 2008 22:51:12 5,158 A.... "C:\WINDOWS\Temp\ASPNETSetup_00001.log"
28 May 2008 15:45:02 54 A.... "C:\WINDOWS\Temp\avg8info.id"
12 Apr 2008 22:49:28 21,280 A.... "C:\WINDOWS\Temp\dd_depcheck_NETFX20_EXP_35.txt"
12 Apr 2008 22:52:10 65,834 A.... "C:\WINDOWS\Temp\dd_dotnetfx20install.txt"
12 Apr 2008 22:49:22 2 A.... "C:\WINDOWS\Temp\dd_dotnetfx20error.txt"
12 Apr 2008 22:52:06 16,183,582 A.... "C:\WINDOWS\Temp\dd_NET_Framework20_Setup03B1.txt"
31 May 2008 21:06:46 1,082,176 A.... "C:\WINDOWS\Temp\reda02292"
1 Jun 2008 17:33:16 221,733 A.... "C:\WINDOWS\Temp\scs51.tmp"
20 May 2008 20:18:46 1,230 A.... "C:\WINDOWS\Temp\Silverlight0.log"
20 May 2008 20:18:46 221,644 A.... "C:\WINDOWS\Temp\SilverlightMSI.log"
12 Apr 2008 22:52:10 2,178 A.... "C:\WINDOWS\Temp\uxeventlog.txt"
1 Jun 2008 17:15:50 255 A.... "C:\WINDOWS\Temp\WGAErrLog.txt"
1 Jun 2008 11:34:22 409 A.... "C:\WINDOWS\Temp\WGANotify.settings"
28 May 2008 9:42:28 13,679 A.... "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.inf"
28 May 2008 9:42:24 320 A.... "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.txt"
9 Apr 2008 23:44:18 13,271 A.... "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.inf"
9 Apr 2008 23:44:16 355 A.... "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.txt"
9 Apr 2008 23:41:44 13,724 A.... "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.inf"
9 Apr 2008 23:41:40 558 A.... "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.txt"
9 Apr 2008 23:45:44 12,694 A.... "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.inf"
9 Apr 2008 23:45:42 122 A.... "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.txt"
9 Apr 2008 23:44:52 13,397 A.... "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.inf"
9 Apr 2008 23:44:50 360 A.... "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.txt"
14 May 2008 17:33:44 19,601 A.... "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.inf"
14 May 2008 17:33:36 3,515 A.... "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.txt"
28 May 2008 18:23:46 4,828 A.... "C:\WINDOWS\$NtServicePackUninstall$\spuninst\Service Pack 3.asms"
14 Apr 2008 5:42:08 438,272 ..... "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spcompat.dll"
28 May 2008 18:27:22 1,035,394 A.... "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.inf"
28 May 2008 18:15:54 396,680 A.... "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.txt"
28 May 2008 17:59:26 927,066 A.... "C:\WINDOWS\Debug\Setup\UpdSh.bak"
28 May 2008 18:27:32 925,654 A.... "C:\WINDOWS\Debug\Setup\UpdSh.log"
9 Apr 2008 15:09:54 345 A.... "C:\WINDOWS\Downloaded Program Files\CONFLICT.1\ImageUploader5.inf"
9 Apr 2008 15:27:42 3,175,136 A.... "C:\WINDOWS\Downloaded Program Files\CONFLICT.1\ImageUploader5.ocx"
28 May 2008 18:12:32 23,852,652 ..... "C:\WINDOWS\Driver Cache\i386\sp3.cab"
28 May 2008 19:33:04 6,510 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx12"
28 May 2008 19:33:04 4,920 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx13"
28 May 2008 19:33:04 3,504 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx14"
28 May 2008 19:33:04 1,560 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx15"
28 May 2008 19:33:04 738 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx16"
28 May 2008 19:33:04 42 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx17"
28 May 2008 19:33:04 366 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx18"
28 May 2008 19:33:04 312 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx19"
28 May 2008 19:33:04 12 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx10"
28 May 2008 19:33:04 1,944 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx11"
28 May 2008 19:33:04 30 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx22"
28 May 2008 19:33:04 6 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx23"
28 May 2008 19:33:04 12 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx24"
28 May 2008 19:33:04 12 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx25"
28 May 2008 19:33:04 444 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx20"
28 May 2008 19:33:04 42 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx21"
28 May 2008 19:33:04 29,166 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx4"
28 May 2008 19:33:04 12,624 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx5"
28 May 2008 19:33:04 156 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx255"
28 May 2008 19:33:04 3,678 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx6"
28 May 2008 19:33:04 206,310 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx7"
28 May 2008 19:33:04 7,464 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx8"
28 May 2008 19:33:04 6 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx9"
28 May 2008 19:33:04 55,668,571 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.dat2"
28 May 2008 19:33:04 13,800 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx0"
28 May 2008 19:33:04 12,414 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx1"
14 May 2008 20:35:16 334,238 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.dat0"
28 May 2008 19:33:04 162 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx2"
28 May 2008 19:33:04 4,452 A.... "C:\WINDOWS\.file_store_32\runescape\main_file_cache.idx3"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00002"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00003"
9 Apr 2008 23:44:32 94,208 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00004"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00005"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00006"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00007"
9 Apr 2008 23:44:32 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00008"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00009"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00010"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00011"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00012"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00013"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00014"
9 Apr 2008 23:44:34 8,192 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00015"
9 Apr 2008 23:44:34 20,480 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\reg00016"
14 Apr 2008 1:09:46 368,696 A.... "C:\WINDOWS\ime\imjp8_1\imjpcic.dll"
14 Apr 2008 1:09:46 716,856 A.... "C:\WINDOWS\ime\imjp8_1\imjpcus.dll"
14 Apr 2008 1:09:46 81,976 A.... "C:\WINDOWS\ime\imjp8_1\imjpdct.dll"
14 Apr 2008 1:09:46 274,489 A.... "C:\WINDOWS\ime\imjp8_1\imjputyc.dll"
14 Apr 2008 1:09:44 106,496 A.... "C:\WINDOWS\ime\imkr6_1\imekrcic.dll"
14 Apr 2008 1:09:46 102,456 A.... "C:\WINDOWS\ime\shared\imlang.dll"
13 Apr 2008 18:32:28 19,968 A.... "C:\WINDOWS\msagent\intl\agt0409.dll"
28 May 2008 18:27:24 1,056,768 A.... "C:\WINDOWS\security\Database\Service Pack 3.sdb"
28 May 2008 18:27:26 6,790 A.... "C:\WINDOWS\security\logs\update.log"
13 Apr 2008 19:46:18 53,376 ..... "C:\WINDOWS\ServicePackFiles\i386\1394bus.sys"
13 Apr 2008 19:40:50 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys"
13 Apr 2008 19:46:20 48,128 ..... "C:\WINDOWS\ServicePackFiles\i386\61883.sys"
14 Apr 2008 1:11:48 100,352 ..... "C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll"
14 Apr 2008 1:11:48 136,192 ..... "C:\WINDOWS\ServicePackFiles\i386\aaclient.dll"
14 Apr 2008 1:11:48 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\acadproc.dll"
14 Apr 2008 1:12:42 68,608 ..... "C:\WINDOWS\ServicePackFiles\i386\access.cpl"
14 Apr 2008 1:12:12 184,320 ..... "C:\WINDOWS\ServicePackFiles\i386\accwiz.exe"
14 Apr 2008 1:11:48 1,852,928 ..... "C:\WINDOWS\ServicePackFiles\i386\acgenral.dll"
14 Apr 2008 1:11:48 451,072 ..... "C:\WINDOWS\ServicePackFiles\i386\aclayers.dll"
14 Apr 2008 1:11:48 141,312 ..... "C:\WINDOWS\ServicePackFiles\i386\aclua.dll"
14 Apr 2008 1:11:48 115,712 ..... "C:\WINDOWS\ServicePackFiles\i386\aclui.dll"
13 Apr 2008 19:36:36 187,776 ..... "C:\WINDOWS\ServicePackFiles\i386\acpi.sys"
14 Apr 2008 1:11:48 245,248 ..... "C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll"
14 Apr 2008 1:11:48 193,536 ..... "C:\WINDOWS\ServicePackFiles\i386\activeds.dll"
14 Apr 2008 1:12:12 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\actmovie.exe"
13 Apr 2008 16:46:30 91,215 ..... "C:\WINDOWS\ServicePackFiles\i386\actshell.htm"
14 Apr 2008 1:11:48 98,304 ..... "C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll"
14 Apr 2008 1:11:48 116,224 ..... "C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll"
14 Apr 2008 1:11:48 20,540 ..... "C:\WINDOWS\ServicePackFiles\i386\admin.dll"
14 Apr 2008 1:12:12 16,439 ..... "C:\WINDOWS\ServicePackFiles\i386\admin.exe"
14 Apr 2008 1:11:48 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\admparse.dll"
14 Apr 2008 1:11:48 175,616 ..... "C:\WINDOWS\ServicePackFiles\i386\adsldp.dll"
14 Apr 2008 1:11:48 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll"
14 Apr 2008 1:11:48 68,096 ..... "C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll"
14 Apr 2008 1:11:48 263,680 ..... "C:\WINDOWS\ServicePackFiles\i386\adsnt.dll"
14 Apr 2008 1:11:48 4,255 ..... "C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll"
14 Apr 2008 1:11:48 3,967 ..... "C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll"
14 Apr 2008 1:11:48 3,615 ..... "C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll"
14 Apr 2008 1:11:48 3,647 ..... "C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll"
14 Apr 2008 1:11:48 3,135 ..... "C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll"
14 Apr 2008 1:11:48 3,711 ..... "C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll"
14 Apr 2008 1:11:48 3,775 ..... "C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll"
14 Apr 2008 1:11:48 617,472 ..... "C:\WINDOWS\ServicePackFiles\i386\advapi32.dll"
14 Apr 2008 1:11:48 99,840 ..... "C:\WINDOWS\ServicePackFiles\i386\advpack.dll"
13 Apr 2008 17:39:24 142,592 ..... "C:\WINDOWS\ServicePackFiles\i386\aec.sys"
13 Apr 2008 20:19:24 138,112 ..... "C:\WINDOWS\ServicePackFiles\i386\afd.sys"
14 Apr 2008 1:11:48 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\agentanm.dll"
14 Apr 2008 1:11:48 214,016 ..... "C:\WINDOWS\ServicePackFiles\i386\agentctl.dll"
14 Apr 2008 1:11:48 42,496 ..... "C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll"
14 Apr 2008 1:11:48 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll"
14 Apr 2008 1:11:48 49,152 ..... "C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll"
14 Apr 2008 1:11:48 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll"
14 Apr 2008 1:11:48 44,032 ..... "C:\WINDOWS\ServicePackFiles\i386\agentsr.dll"
14 Apr 2008 1:12:12 256,512 ..... "C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe"
13 Apr 2008 19:36:38 42,368 ..... "C:\WINDOWS\ServicePackFiles\i386\agp440.sys"
13 Apr 2008 19:36:40 44,928 ..... "C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys"
13 Apr 2008 18:32:28 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\agt0409.dll"
13 Apr 2008 18:32:28 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\agtctl15.tlb"
14 Apr 2008 1:11:50 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\agtintl.dll"
14 Apr 2008 1:12:12 98,304 ..... "C:\WINDOWS\ServicePackFiles\i386\ahui.exe"
14 Apr 2008 1:12:12 44,544 ..... "C:\WINDOWS\ServicePackFiles\i386\alg.exe"
13 Apr 2008 19:36:38 42,752 ..... "C:\WINDOWS\ServicePackFiles\i386\alim1541.sys"
14 Apr 2008 1:11:50 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll"
13 Apr 2008 19:36:40 43,008 ..... "C:\WINDOWS\ServicePackFiles\i386\amdagp.sys"
13 Apr 2008 19:31:32 37,376 ..... "C:\WINDOWS\ServicePackFiles\i386\amdk6.sys"
13 Apr 2008 19:31:34 37,760 ..... "C:\WINDOWS\ServicePackFiles\i386\amdk7.sys"
14 Apr 2008 1:11:50 70,656 ..... "C:\WINDOWS\ServicePackFiles\i386\amstream.dll"
13 Apr 2008 16:46:34 4,527 ..... "C:\WINDOWS\ServicePackFiles\i386\apolicy.htm"
14 Apr 2008 1:11:50 125,952 ..... "C:\WINDOWS\ServicePackFiles\i386\apphelp.dll"
14 Apr 2008 1:15:22 218,134 ..... "C:\WINDOWS\ServicePackFiles\i386\apphelp.sdb"
14 Apr 2008 1:15:28 785,972 ..... "C:\WINDOWS\ServicePackFiles\i386\apph_sp.sdb"
14 Apr 2008 1:16:10 80,546 ..... "C:\WINDOWS\ServicePackFiles\i386\apps.chm"
14 Apr 2008 1:16:20 306,716 ..... "C:\WINDOWS\ServicePackFiles\i386\apps_sp.chm"
14 Apr 2008 1:12:42 549,888 ..... "C:\WINDOWS\ServicePackFiles\i386\appwiz.cpl"
14 Apr 2008 1:11:50 331,264 ..... "C:\WINDOWS\ServicePackFiles\i386\aqueue.dll"
13 Apr 2008 16:43:52 72,387 ..... "C:\WINDOWS\ServicePackFiles\i386\archvapp.inf"
13 Apr 2008 19:51:26 60,800 ..... "C:\WINDOWS\ServicePackFiles\i386\arp1394.sys"
14 Apr 2008 1:08:58 114,688 ..... "C:\WINDOWS\ServicePackFiles\i386\asctrls.ocx"
14 Apr 2008 1:11:50 65,024 ..... "C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll"
13 Apr 2008 19:57:28 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys"
14 Apr 2008 1:12:12 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\at.exe"
13 Apr 2008 19:40:30 96,512 ..... "C:\WINDOWS\ServicePackFiles\i386\atapi.sys"
14 Apr 2008 1:11:50 229,376 ..... "C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll"
14 Apr 2008 1:11:50 377,984 ..... "C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll"
14 Apr 2008 1:11:50 201,728 ..... "C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll"
14 Apr 2008 1:11:50 870,784 ..... "C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll"
14 Apr 2008 1:11:50 1,057,760 ..... "C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll"
14 Apr 2008 1:11:50 1,888,992 ..... "C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll"
14 Apr 2008 1:12:42 9,728 ..... "C:\WINDOWS\ServicePackFiles\i386\ativdaxx.ax"
14 Apr 2008 1:12:42 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\ativmvxx.ax"
14 Apr 2008 1:11:50 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll"
14 Apr 2008 1:11:50 516,768 ..... "C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll"
14 Apr 2008 1:11:50 58,880 ..... "C:\WINDOWS\ServicePackFiles\i386\atl.dll"
14 Apr 2008 1:12:12 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\atmadm.exe"
13 Apr 2008 19:51:26 59,904 ..... "C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys"
14 Apr 2008 1:09:02 285,696 ..... "C:\WINDOWS\ServicePackFiles\i386\atmfd.dll"
13 Apr 2008 19:51:30 55,808 ..... "C:\WINDOWS\ServicePackFiles\i386\atmlane.sys"
14 Apr 2008 1:11:50 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\atmlib.dll"
14 Apr 2008 1:12:12 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\attrib.exe"
14 Apr 2008 1:11:50 21,183 ..... "C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll"
14 Apr 2008 1:11:50 11,359 ..... "C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll"
14 Apr 2008 1:11:50 25,471 ..... "C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll"
14 Apr 2008 1:11:50 14,143 ..... "C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll"
14 Apr 2008 1:11:50 17,279 ..... "C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll"
14 Apr 2008 1:11:50 42,496 ..... "C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll"
14 Apr 2008 1:12:12 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\auditusr.exe"
14 Apr 2008 1:11:50 20,540 ..... "C:\WINDOWS\ServicePackFiles\i386\author.dll"
14 Apr 2008 1:12:12 16,439 ..... "C:\WINDOWS\ServicePackFiles\i386\author.exe"
14 Apr 2008 1:11:50 62,464 ..... "C:\WINDOWS\ServicePackFiles\i386\authz.dll"
14 Apr 2008 1:12:12 588,800 ..... "C:\WINDOWS\ServicePackFiles\i386\autochk.exe"
14 Apr 2008 1:12:12 602,624 ..... "C:\WINDOWS\ServicePackFiles\i386\autoconv.exe"
14 Apr 2008 1:12:14 580,608 ..... "C:\WINDOWS\ServicePackFiles\i386\autofmt.exe"
14 Apr 2008 1:12:14 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\autolfn.exe"
13 Apr 2008 19:46:20 38,912 ..... "C:\WINDOWS\ServicePackFiles\i386\avc.sys"
13 Apr 2008 19:46:08 13,696 ..... "C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys"
14 Apr 2008 1:11:50 84,992 ..... "C:\WINDOWS\ServicePackFiles\i386\avifil32.dll"
14 Apr 2008 1:11:50 233,472 ..... "C:\WINDOWS\ServicePackFiles\i386\azroles.dll"
14 Apr 2008 1:11:50 52,736 ..... "C:\WINDOWS\ServicePackFiles\i386\basesrv.dll"
14 Apr 2008 1:11:50 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\batmeter.dll"
14 Apr 2008 1:11:50 8,704 ..... "C:\WINDOWS\ServicePackFiles\i386\batt.dll"
13 Apr 2008 19:36:32 14,208 ..... "C:\WINDOWS\ServicePackFiles\i386\battc.sys"
14 Apr 2008 1:12:42 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\bdaplgin.ax"
13 Apr 2008 19:46:22 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\bdasup.sys"
14 Apr 2008 1:11:50 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\bidispl.dll"
14 Apr 2008 1:11:50 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll"
14 Apr 2008 1:11:50 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll"
14 Apr 2008 1:11:50 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\bitsprx4.dll"
14 Apr 2008 1:12:14 71,680 ..... "C:\WINDOWS\ServicePackFiles\i386\blastcln.exe"
13 Apr 2008 19:53:24 71,552 ..... "C:\WINDOWS\ServicePackFiles\i386\bridge.sys"
13 Apr 2008 18:03:24 63,488 ..... "C:\WINDOWS\ServicePackFiles\i386\browselc.dll"
14 Apr 2008 1:11:50 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\browser.dll"
14 Apr 2008 1:11:50 1,025,024 ..... "C:\WINDOWS\ServicePackFiles\i386\browseui.dll"
14 Apr 2008 1:11:50 78,336 ..... "C:\WINDOWS\ServicePackFiles\i386\browsewm.dll"
13 Apr 2008 16:44:36 11,681 A.... "C:\WINDOWS\ServicePackFiles\i386\bth.inf"
14 Apr 2008 1:11:50 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\bthci.dll"
13 Apr 2008 19:46:34 17,024 ..... "C:\WINDOWS\ServicePackFiles\i386\bthenum.sys"
13 Apr 2008 19:46:34 37,888 ..... "C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys"
13 Apr 2008 19:51:34 101,120 ..... "C:\WINDOWS\ServicePackFiles\i386\bthpan.sys"
13 Apr 2008 19:46:32 273,024 ..... "C:\WINDOWS\ServicePackFiles\i386\bthport.sys"
13 Apr 2008 16:44:36 1,997 A.... "C:\WINDOWS\ServicePackFiles\i386\bthprint.inf"
13 Apr 2008 19:46:32 36,480 ..... "C:\WINDOWS\ServicePackFiles\i386\bthprint.sys"
14 Apr 2008 1:12:42 110,592 ..... "C:\WINDOWS\ServicePackFiles\i386\bthprops.cpl"
14 Apr 2008 1:11:50 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\bthserv.dll"
13 Apr 2008 16:44:36 1,943 A.... "C:\WINDOWS\ServicePackFiles\i386\bthspp.inf"
13 Apr 2008 19:46:30 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\bthusb.sys"
14 Apr 2008 1:11:50 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\btpanui.dll"
14 Apr 2008 1:11:50 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\cabinet.dll"
14 Apr 2008 1:11:50 84,480 ..... "C:\WINDOWS\ServicePackFiles\i386\cabview.dll"
14 Apr 2008 1:12:14 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\cacls.exe"
14 Apr 2008 1:11:50 385,024 ..... "C:\WINDOWS\ServicePackFiles\i386\callcont.dll"
14 Apr 2008 1:11:50 121,856 ..... "C:\WINDOWS\ServicePackFiles\i386\camext30.dll"
14 Apr 2008 1:11:50 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\camocx.dll"
14 Apr 2008 1:11:50 150,016 ..... "C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll"
14 Apr 2008 1:11:50 226,304 ..... "C:\WINDOWS\ServicePackFiles\i386\catsrv.dll"
14 Apr 2008 1:11:50 85,504 ..... "C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll"
14 Apr 2008 1:11:50 625,664 ..... "C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll"
13 Apr 2008 19:46:24 17,024 ..... "C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys"
13 Apr 2008 20:14:22 63,744 ..... "C:\WINDOWS\ServicePackFiles\i386\cdfs.sys"
14 Apr 2008 1:11:50 151,040 ..... "C:\WINDOWS\ServicePackFiles\i386\cdfview.dll"
14 Apr 2008 1:11:50 66,560 ..... "C:\WINDOWS\ServicePackFiles\i386\cdm.dll"
14 Apr 2008 1:11:50 2,091,520 ..... "C:\WINDOWS\ServicePackFiles\i386\cdosys.dll"
13 Apr 2008 19:40:46 62,976 ..... "C:\WINDOWS\ServicePackFiles\i386\cdrom.sys"
14 Apr 2008 1:11:50 194,560 ..... "C:\WINDOWS\ServicePackFiles\i386\certcli.dll"
14 Apr 2008 1:11:50 457,728 ..... "C:\WINDOWS\ServicePackFiles\i386\certmgr.dll"
14 Apr 2008 1:11:50 38,912 ..... "C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll"
14 Apr 2008 1:09:06 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll"
14 Apr 2008 1:12:14 188,480 ..... "C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe"
14 Apr 2008 1:11:50 15,423 ..... "C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll"
13 Apr 2008 19:40:58 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\changer.sys"
14 Apr 2008 1:11:50 148,480 ..... "C:\WINDOWS\ServicePackFiles\i386\cic.dll"
14 Apr 2008 1:11:50 1,358,848 ..... "C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll"
13 Apr 2008 16:39:20 1,961,486 ..... "C:\WINDOWS\ServicePackFiles\i386\cimwin32.mfl"
13 Apr 2008 16:39:20 2,775,842 ..... "C:\WINDOWS\ServicePackFiles\i386\cimwin32.mof"
14 Apr 2008 1:11:50 69,120 ..... "C:\WINDOWS\ServicePackFiles\i386\ciodm.dll"
14 Apr 2008 1:12:14 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\cisvc.exe"
13 Apr 2008 20:16:22 49,536 ..... "C:\WINDOWS\ServicePackFiles\i386\classpnp.sys"
14 Apr 2008 1:11:50 110,592 ..... "C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll"
14 Apr 2008 1:11:50 498,688 ..... "C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll"
14 Apr 2008 1:12:14 64,000 ..... "C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe"
14 Apr 2008 1:11:50 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll"
14 Apr 2008 1:12:14 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe"
13 Apr 2008 18:26:28 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\cliconfg.rll"
14 Apr 2008 1:12:14 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe"
14 Apr 2008 1:12:14 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe"
14 Apr 2008 1:11:50 58,368 ..... "C:\WINDOWS\ServicePackFiles\i386\clusapi.dll"
13 Apr 2008 19:36:38 13,952 ..... "C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys"
14 Apr 2008 1:11:50 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll"
14 Apr 2008 1:12:14 389,120 ..... "C:\WINDOWS\ServicePackFiles\i386\cmd.exe"
14 Apr 2008 1:11:50 344,064 ..... "C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll"
14 Apr 2008 1:12:14 25,600 ..... "C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe"
14 Apr 2008 1:12:16 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe"
14 Apr 2008 1:11:50 185,344 ..... "C:\WINDOWS\ServicePackFiles\i386\cmprops.dll"
14 Apr 2008 1:11:50 13,312 ..... "C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll"
14 Apr 2008 1:12:16 63,488 ..... "C:\WINDOWS\ServicePackFiles\i386\cmstp.exe"
14 Apr 2008 1:11:50 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\cmutil.dll"
14 Apr 2008 1:11:50 47,104 ..... "C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll"
14 Apr 2008 1:11:50 79,360 ..... "C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll"
13 Apr 2008 17:44:16 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\cobramsg.dll"
14 Apr 2008 1:11:52 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\colbact.dll"
14 Apr 2008 1:11:52 28,160 ..... "C:\WINDOWS\ServicePackFiles\i386\comaddin.dll"
14 Apr 2008 1:11:52 195,072 ..... "C:\WINDOWS\ServicePackFiles\i386\comadmin.dll"
14 Apr 2008 1:11:52 617,472 ..... "C:\WINDOWS\ServicePackFiles\i386\comctl32.dll"
14 Apr 2008 1:11:52 276,992 ..... "C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll"
14 Apr 2008 1:11:52 252,928 ..... "C:\WINDOWS\ServicePackFiles\i386\compatui.dll"
13 Apr 2008 19:36:38 10,240 ..... "C:\WINDOWS\ServicePackFiles\i386\compbatt.sys"
14 Apr 2008 1:11:52 229,376 ..... "C:\WINDOWS\ServicePackFiles\i386\compstui.dll"
14 Apr 2008 1:11:52 97,792 ..... "C:\WINDOWS\ServicePackFiles\i386\comrepl.dll"
14 Apr 2008 1:12:16 9,728 ..... "C:\WINDOWS\ServicePackFiles\i386\comrepl.exe"
14 Apr 2008 1:12:16 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\comrereg.exe"
14 Apr 2008 1:11:52 792,064 ..... "C:\WINDOWS\ServicePackFiles\i386\comres.dll"
14 Apr 2008 1:11:52 274,944 ..... "C:\WINDOWS\ServicePackFiles\i386\comsetup.dll"
14 Apr 2008 1:11:52 167,424 ..... "C:\WINDOWS\ServicePackFiles\i386\comsnap.dll"
14 Apr 2008 1:11:52 1,267,200 ..... "C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll"
14 Apr 2008 1:11:52 539,648 ..... "C:\WINDOWS\ServicePackFiles\i386\comuid.dll"
14 Apr 2008 1:12:16 1,032,192 ..... "C:\WINDOWS\ServicePackFiles\i386\conf.exe"
14 Apr 2008 1:11:52 45,056 ..... "C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll"
14 Apr 2008 1:11:52 357,888 ..... "C:\WINDOWS\ServicePackFiles\i386\confmsp.dll"
14 Apr 2008 1:12:16 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\conime.exe"
14 Apr 2008 1:11:52 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\corpol.dll"
14 Apr 2008 1:11:52 12,800 ..... "C:\WINDOWS\ServicePackFiles\i386\credssp.dll"
14 Apr 2008 1:11:52 163,840 ..... "C:\WINDOWS\ServicePackFiles\i386\credui.dll"
13 Apr 2008 19:31:32 36,736 ..... "C:\WINDOWS\ServicePackFiles\i386\crusoe.sys"
14 Apr 2008 1:11:52 599,040 ..... "C:\WINDOWS\ServicePackFiles\i386\crypt32.dll"
14 Apr 2008 1:11:52 74,752 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll"
14 Apr 2008 1:11:52 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll"
14 Apr 2008 1:11:52 53,760 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptext.dll"
14 Apr 2008 1:11:52 64,512 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll"
14 Apr 2008 1:11:52 62,464 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll"
14 Apr 2008 1:11:52 512,512 ..... "C:\WINDOWS\ServicePackFiles\i386\cryptui.dll"
14 Apr 2008 1:11:52 101,888 ..... "C:\WINDOWS\ServicePackFiles\i386\cscdll.dll"
14 Apr 2008 1:12:16 139,264 ..... "C:\WINDOWS\ServicePackFiles\i386\cscript.exe"
14 Apr 2008 1:11:52 326,656 ..... "C:\WINDOWS\ServicePackFiles\i386\cscui.dll"
14 Apr 2008 1:11:52 32,256 ..... "C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll"
14 Apr 2008 1:12:16 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\csrss.exe"
14 Apr 2008 1:12:16 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe"
14 Apr 2008 1:11:52 249,856 ..... "C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll"
14 Apr 2008 1:11:52 33,792 ..... "C:\WINDOWS\ServicePackFiles\i386\custsat.dll"
14 Apr 2008 1:11:50 218,112 ..... "C:\WINDOWS\ServicePackFiles\i386\c_g18030.dll"
14 Apr 2008 1:11:52 1,179,648 ..... "C:\WINDOWS\ServicePackFiles\i386\d3d8.dll"
14 Apr 2008 1:11:52 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll"
14 Apr 2008 1:11:52 1,689,088 ..... "C:\WINDOWS\ServicePackFiles\i386\d3d9.dll"
14 Apr 2008 1:11:52 824,320 ..... "C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll"
14 Apr 2008 1:11:52 1,054,208 ..... "C:\WINDOWS\ServicePackFiles\i386\danim.dll"
14 Apr 2008 1:11:52 54,272 ..... "C:\WINDOWS\ServicePackFiles\i386\dataclen.dll"
14 Apr 2008 1:11:52 165,376 ..... "C:\WINDOWS\ServicePackFiles\i386\datime.dll"
14 Apr 2008 1:11:52 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\davclnt.dll"
14 Apr 2008 1:09:14 153,088 ..... "C:\WINDOWS\ServicePackFiles\i386\daxctle.ocx"
14 Apr 2008 1:11:52 640,000 ..... "C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll"
14 Apr 2008 1:11:52 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll"
14 Apr 2008 1:11:52 110,592 ..... "C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll"
14 Apr 2008 1:11:52 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll"
14 Apr 2008 1:25:26 1,804 ..... "C:\WINDOWS\ServicePackFiles\i386\dcache.bin"
14 Apr 2008 1:11:52 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\dcap32.dll"
14 Apr 2008 1:11:52 8,704 ..... "C:\WINDOWS\ServicePackFiles\i386\dciman32.dll"
14 Apr 2008 1:12:16 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\dcomcnfg.exe"
14 Apr 2008 1:12:16 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe"
14 Apr 2008 1:11:52 279,552 ..... "C:\WINDOWS\ServicePackFiles\i386\ddraw.dll"
14 Apr 2008 1:11:52 27,136 ..... "C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll"
14 Apr 2008 1:12:16 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\defrag.exe"
14 Apr 2008 1:12:42 135,168 ..... "C:\WINDOWS\ServicePackFiles\i386\desk.cpl"
14 Apr 2008 1:11:52 59,904 ..... "C:\WINDOWS\ServicePackFiles\i386\devenum.dll"
14 Apr 2008 1:11:52 282,624 ..... "C:\WINDOWS\ServicePackFiles\i386\devmgr.dll"
14 Apr 2008 1:12:16 82,944 ..... "C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe"
14 Apr 2008 1:12:16 105,472 ..... "C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe"
14 Apr 2008 1:11:52 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll"
14 Apr 2008 1:11:52 124,416 ..... "C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll"
14 Apr 2008 1:11:52 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll"
14 Apr 2008 1:11:52 111,104 ..... "C:\WINDOWS\ServicePackFiles\i386\dgnet.dll"
14 Apr 2008 1:11:52 126,976 ..... "C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll"
14 Apr 2008 1:11:52 379,904 ..... "C:\WINDOWS\ServicePackFiles\i386\dhcpmon.dll"
14 Apr 2008 1:11:52 48,640 ..... "C:\WINDOWS\ServicePackFiles\i386\dhcpqec.dll"
14 Apr 2008 1:09:18 128,512 ..... "C:\WINDOWS\ServicePackFiles\i386\dhtmled.ocx"
14 Apr 2008 1:12:18 539,136 ..... "C:\WINDOWS\ServicePackFiles\i386\dialer.exe"
14 Apr 2008 1:12:18 87,040 ..... "C:\WINDOWS\ServicePackFiles\i386\diantz.exe"
14 Apr 2008 1:11:52 68,608 ..... "C:\WINDOWS\ServicePackFiles\i386\digest.dll"
14 Apr 2008 1:11:52 19,456 ..... "C:\WINDOWS\ServicePackFiles\i386\dimsntfy.dll"
14 Apr 2008 1:11:52 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\dimsroam.dll"
14 Apr 2008 1:11:52 158,720 ..... "C:\WINDOWS\ServicePackFiles\i386\dinput.dll"
14 Apr 2008 1:11:52 181,760 ..... "C:\WINDOWS\ServicePackFiles\i386\dinput8.dll"
14 Apr 2008 1:11:52 86,528 ..... "C:\WINDOWS\ServicePackFiles\i386\directdb.dll"
13 Apr 2008 19:40:48 36,352 ..... "C:\WINDOWS\ServicePackFiles\i386\disk.sys"
14 Apr 2008 1:11:52 1,504,256 ..... "C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll"
13 Apr 2008 19:40:44 14,208 ..... "C:\WINDOWS\ServicePackFiles\i386\diskdump.sys"
14 Apr 2008 1:12:18 163,840 ..... "C:\WINDOWS\ServicePackFiles\i386\diskpart.exe"
14 Apr 2008 1:11:52 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\dispex.dll"
14 Apr 2008 1:12:18 5,120 ..... "C:\WINDOWS\ServicePackFiles\i386\dllhost.exe"
13 Apr 2008 19:40:52 8,320 ..... "C:\WINDOWS\ServicePackFiles\i386\dlttape.sys"
14 Apr 2008 1:12:18 224,768 ..... "C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe"
14 Apr 2008 1:11:52 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\dmband.dll"
13 Apr 2008 19:44:48 799,744 ..... "C:\WINDOWS\ServicePackFiles\i386\dmboot.sys"
14 Apr 2008 1:11:52 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll"
14 Apr 2008 1:11:52 285,184 ..... "C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll"
14 Apr 2008 1:11:52 200,704 ..... "C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll"
14 Apr 2008 1:11:52 181,248 ..... "C:\WINDOWS\ServicePackFiles\i386\dmime.dll"
13 Apr 2008 19:44:46 153,344 ..... "C:\WINDOWS\ServicePackFiles\i386\dmio.sys"
14 Apr 2008 1:11:52 35,840 ..... "C:\WINDOWS\ServicePackFiles\i386\dmloader.dll"
14 Apr 2008 1:12:18 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\dmremote.exe"
14 Apr 2008 1:11:52 82,432 ..... "C:\WINDOWS\ServicePackFiles\i386\dmscript.dll"
14 Apr 2008 1:11:52 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\dmserver.dll"
14 Apr 2008 1:11:52 105,984 ..... "C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll"
14 Apr 2008 1:11:52 103,424 ..... "C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll"
14 Apr 2008 1:11:52 104,448 ..... "C:\WINDOWS\ServicePackFiles\i386\dmusic.dll"
13 Apr 2008 19:45:02 52,864 ..... "C:\WINDOWS\ServicePackFiles\i386\dmusic.sys"
14 Apr 2008 1:11:52 52,224 ..... "C:\WINDOWS\ServicePackFiles\i386\dmutil.dll"
14 Apr 2008 1:11:52 147,968 ..... "C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll"
14 Apr 2008 1:11:52 45,568 ..... "C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll"
14 Apr 2008 1:11:52 48,128 ..... "C:\WINDOWS\ServicePackFiles\i386\docprop2.dll"
14 Apr 2008 1:11:52 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3api.dll"
14 Apr 2008 1:11:52 57,856 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3cfg.dll"
14 Apr 2008 1:11:52 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3clnt.dll"
14 Apr 2008 1:11:52 9,216 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3dlg.dll"
14 Apr 2008 1:11:52 56,320 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3msm.dll"
14 Apr 2008 1:11:52 132,096 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3svc.dll"
14 Apr 2008 1:11:52 650,752 ..... "C:\WINDOWS\ServicePackFiles\i386\dot3ui.dll"
13 Apr 2008 19:39:46 206,976 ..... "C:\WINDOWS\ServicePackFiles\i386\dot4.sys"
13 Apr 2008 22:00:50 103,424 ..... "C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll"
14 Apr 2008 1:12:18 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe"
14 Apr 2008 1:11:52 229,888 ..... "C:\WINDOWS\ServicePackFiles\i386\dplayx.dll"
14 Apr 2008 1:11:52 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll"
14 Apr 2008 1:09:20 3,072 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll"
14 Apr 2008 1:11:52 375,296 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnet.dll"
14 Apr 2008 1:11:52 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll"
14 Apr 2008 1:11:52 60,928 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll"
14 Apr 2008 1:09:20 3,072 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll"
14 Apr 2008 1:12:18 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe"
13 Apr 2008 17:28:12 19,364 A.... "C:\WINDOWS\ServicePackFiles\i386\dpup.inf"
14 Apr 2008 1:11:52 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll"
14 Apr 2008 1:11:52 212,480 ..... "C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll"
14 Apr 2008 1:12:18 83,456 ..... "C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe"
14 Apr 2008 1:11:52 116,736 ..... "C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll"
14 Apr 2008 1:11:52 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\dpwsockx.dll"
13 Apr 2008 19:45:14 60,160 ..... "C:\WINDOWS\ServicePackFiles\i386\drmk.sys"
13 Apr 2008 19:45:14 2,944 ..... "C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys"
14 Apr 2008 1:11:52 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\drprov.dll"
13 Apr 2008 17:28:12 67,899 A.... "C:\WINDOWS\ServicePackFiles\i386\drvindex.inf"
14 Apr 2008 1:15:28 9,424 ..... "C:\WINDOWS\ServicePackFiles\i386\drvmain.sdb"
14 Apr 2008 1:11:52 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\ds32gt.dll"
14 Apr 2008 1:11:52 181,248 ..... "C:\WINDOWS\ServicePackFiles\i386\dsdmo.dll"
14 Apr 2008 1:11:52 71,680 ..... "C:\WINDOWS\ServicePackFiles\i386\dsdmoprp.dll"
14 Apr 2008 1:12:42 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\dshowext.ax"
14 Apr 2008 1:11:52 92,672 ..... "C:\WINDOWS\ServicePackFiles\i386\dskquota.dll"
14 Apr 2008 1:11:52 155,648 ..... "C:\WINDOWS\ServicePackFiles\i386\dskquoui.dll"
14 Apr 2008 1:11:52 367,616 ..... "C:\WINDOWS\ServicePackFiles\i386\dsound.dll"
14 Apr 2008 1:11:52 1,293,824 ..... "C:\WINDOWS\ServicePackFiles\i386\dsound3d.dll"
14 Apr 2008 1:11:52 142,848 ..... "C:\WINDOWS\ServicePackFiles\i386\dsprop.dll"
13 Apr 2008 18:09:30 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\dsprpres.dll"
14 Apr 2008 1:11:52 239,104 ..... "C:\WINDOWS\ServicePackFiles\i386\dsquery.dll"
14 Apr 2008 1:11:52 51,200 ..... "C:\WINDOWS\ServicePackFiles\i386\dssec.dll"
13 Apr 2008 18:37:58 138,752 ..... "C:\WINDOWS\ServicePackFiles\i386\dssenh.dll"
14 Apr 2008 1:11:52 113,152 ..... "C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll"
14 Apr 2008 1:11:52 19,456 ..... "C:\WINDOWS\ServicePackFiles\i386\dswave.dll"
14 Apr 2008 1:12:18 10,752 ..... "C:\WINDOWS\ServicePackFiles\i386\dumprep.exe"
14 Apr 2008 1:11:52 304,128 ..... "C:\WINDOWS\ServicePackFiles\i386\duser.dll"
14 Apr 2008 1:12:18 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\dvdupgrd.exe"
14 Apr 2008 1:12:18 180,224 ..... "C:\WINDOWS\ServicePackFiles\i386\dwwin.exe"
14 Apr 2008 1:11:52 619,008 ..... "C:\WINDOWS\ServicePackFiles\i386\dx7vb.dll"
14 Apr 2008 1:11:52 1,227,264 ..... "C:\WINDOWS\ServicePackFiles\i386\dx8vb.dll"
14 Apr 2008 1:12:18 1,298,432 ..... "C:\WINDOWS\ServicePackFiles\i386\dxdiag.exe"
14 Apr 2008 1:11:52 2,113,536 ..... "C:\WINDOWS\ServicePackFiles\i386\dxdiagn.dll"
13 Apr 2008 19:38:30 71,168 ..... "C:\WINDOWS\ServicePackFiles\i386\dxg.sys"
14 Apr 2008 1:11:52 357,888 ..... "C:\WINDOWS\ServicePackFiles\i386\dxtmsft.dll"
14 Apr 2008 1:11:52 205,312 ..... "C:\WINDOWS\ServicePackFiles\i386\dxtrans.dll"
14 Apr 2008 1:11:52 30,720 ..... "C:\WINDOWS\ServicePackFiles\i386\eapolqec.dll"
14 Apr 2008 1:11:52 184,832 ..... "C:\WINDOWS\ServicePackFiles\i386\eapp3hst.dll"
14 Apr 2008 1:11:52 126,976 ..... "C:\WINDOWS\ServicePackFiles\i386\eappcfg.dll"
14 Apr 2008 1:11:52 94,208 ..... "C:\WINDOWS\ServicePackFiles\i386\eappgnui.dll"
14 Apr 2008 1:11:52 180,224 ..... "C:\WINDOWS\ServicePackFiles\i386\eapphost.dll"
14 Apr 2008 1:11:52 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\eappprxy.dll"
14 Apr 2008 1:11:52 59,392 ..... "C:\WINDOWS\ServicePackFiles\i386\eapqec.dll"
14 Apr 2008 1:11:52 33,792 ..... "C:\WINDOWS\ServicePackFiles\i386\eapsvc.dll"
14 Apr 2008 1:11:52 175,616 ..... "C:\WINDOWS\ServicePackFiles\i386\ediskeer.dll"
14 Apr 2008 1:11:54 183,296 ..... "C:\WINDOWS\ServicePackFiles\i386\els.dll"
14 Apr 2008 1:11:54 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\encapi.dll"
14 Apr 2008 1:11:54 186,880 ..... "C:\WINDOWS\ServicePackFiles\i386\encdec.dll"
13 Apr 2008 17:26:02 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\ep9res.dll"
13 Apr 2008 16:46:34 19,346 ..... "C:\WINDOWS\ServicePackFiles\i386\error.js"
14 Apr 2008 1:11:54 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\ersvc.dll"
14 Apr 2008 1:11:54 246,272 ..... "C:\WINDOWS\ServicePackFiles\i386\es.dll"
14 Apr 2008 1:11:54 1,082,368 ..... "C:\WINDOWS\ServicePackFiles\i386\esent.dll"
14 Apr 2008 1:11:54 247,808 ..... "C:\WINDOWS\ServicePackFiles\i386\esscli.dll"
14 Apr 2008 1:12:20 193,024 ..... "C:\WINDOWS\ServicePackFiles\i386\eudcedit.exe"
14 Apr 2008 1:11:54 56,320 ..... "C:\WINDOWS\ServicePackFiles\i386\eventlog.dll"
14 Apr 2008 1:11:54 101,888 ..... "C:\WINDOWS\ServicePackFiles\i386\evntagnt.dll"
14 Apr 2008 1:12:20 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\evntcmd.exe"
14 Apr 2008 1:11:54 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\evntrprv.dll"
14 Apr 2008 1:12:20 92,160 ..... "C:\WINDOWS\ServicePackFiles\i386\evntwin.exe"
14 Apr 2008 1:12:20 1,033,728 ..... "C:\WINDOWS\ServicePackFiles\i386\explorer.exe"
14 Apr 2008 1:11:54 380,445 ..... "C:\WINDOWS\ServicePackFiles\i386\expsrv.dll"
14 Apr 2008 1:11:54 55,808 ..... "C:\WINDOWS\ServicePackFiles\i386\extmgr.dll"
14 Apr 2008 1:12:20 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\extrac32.exe"
14 Apr 2008 1:11:54 125,952 ..... "C:\WINDOWS\ServicePackFiles\i386\exts.dll"
14 Apr 2008 1:09:30 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\f3ahvoas.dll"
13 Apr 2008 20:14:30 143,744 ..... "C:\WINDOWS\ServicePackFiles\i386\fastfat.sys"
14 Apr 2008 1:11:54 472,064 ..... "C:\WINDOWS\ServicePackFiles\i386\fastprox.dll"
14 Apr 2008 1:11:54 80,384 ..... "C:\WINDOWS\ServicePackFiles\i386\faultrep.dll"
14 Apr 2008 1:12:20 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\faxpatch.exe"
13 Apr 2008 19:40:26 27,392 ..... "C:\WINDOWS\ServicePackFiles\i386\fdc.sys"
14 Apr 2008 1:11:54 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\feclient.dll"
14 Apr 2008 1:11:54 337,920 ..... "C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll"
14 Apr 2008 1:12:20 27,136 ..... "C:\WINDOWS\ServicePackFiles\i386\findstr.exe"
13 Apr 2008 19:33:28 44,544 ..... "C:\WINDOWS\ServicePackFiles\i386\fips.sys"
14 Apr 2008 1:12:42 80,896 ..... "C:\WINDOWS\ServicePackFiles\i386\firewall.cpl"
14 Apr 2008 1:11:54 87,552 ..... "C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll"
13 Apr 2008 19:40:26 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys"
14 Apr 2008 1:11:54 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\fltlib.dll"
14 Apr 2008 1:12:20 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\fltmc.exe"
13 Apr 2008 17:28:24 1,224 A.... "C:\WINDOWS\ServicePackFiles\i386\fltmgr.inf"
13 Apr 2008 19:33:00 129,792 ..... "C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys"
14 Apr 2008 1:11:54 382,976 ..... "C:\WINDOWS\ServicePackFiles\i386\fontext.dll"
14 Apr 2008 1:11:54 80,896 ..... "C:\WINDOWS\ServicePackFiles\i386\fontsub.dll"
14 Apr 2008 1:12:20 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\fontview.exe"
14 Apr 2008 1:12:20 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\forcedos.exe"
14 Apr 2008 1:12:42 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\format.com"
14 Apr 2008 3:04:38 34,063 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4.cat"
14 Apr 2008 1:11:54 32,828 ..... "C:\WINDOWS\ServicePackFiles\i386\fp40ext.dll"
14 Apr 2008 1:11:54 184,435 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4amsft.dll"
14 Apr 2008 1:11:54 82,035 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4anscp.dll"
14 Apr 2008 1:11:54 147,513 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4apws.dll"
14 Apr 2008 1:11:54 49,210 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4areg.dll"
14 Apr 2008 1:11:54 102,509 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4atxt.dll"
14 Apr 2008 1:11:54 618,605 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4autl.dll"
14 Apr 2008 1:11:54 41,020 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4avnb.dll"
14 Apr 2008 1:11:54 32,826 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4avss.dll"
14 Apr 2008 1:11:54 49,212 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4awebs.dll"
14 Apr 2008 1:11:54 876,653 ..... "C:\WINDOWS\ServicePackFiles\i386\fp4awel.dll"
14 Apr 2008 1:12:20 15,120 ..... "C:\WINDOWS\ServicePackFiles\i386\fp98sadm.exe"
14 Apr 2008 1:12:20 109,840 ..... "C:\WINDOWS\ServicePackFiles\i386\fp98swin.exe"
14 Apr 2008 1:12:20 24,632 ..... "C:\WINDOWS\ServicePackFiles\i386\fpadmcgi.exe"
14 Apr 2008 1:11:54 20,541 ..... "C:\WINDOWS\ServicePackFiles\i386\fpadmdll.dll"
14 Apr 2008 1:12:20 188,494 ..... "C:\WINDOWS\ServicePackFiles\i386\fpcount.exe"
14 Apr 2008 1:11:54 94,208 ..... "C:\WINDOWS\ServicePackFiles\i386\fpencode.dll"
14 Apr 2008 1:11:54 20,541 ..... "C:\WINDOWS\ServicePackFiles\i386\fpexedll.dll"
14 Apr 2008 1:11:54 598,071 ..... "C:\WINDOWS\ServicePackFiles\i386\fpmmc.dll"
14 Apr 2008 1:12:20 20,538 ..... "C:\WINDOWS\ServicePackFiles\i386\fpremadm.exe"
14 Apr 2008 1:12:20 28,728 ..... "C:\WINDOWS\ServicePackFiles\i386\fpsrvadm.exe"
14 Apr 2008 1:09:34 9,344 ..... "C:\WINDOWS\ServicePackFiles\i386\framebuf.dll"
14 Apr 2008 1:11:54 185,344 ..... "C:\WINDOWS\ServicePackFiles\i386\framedyn.dll"
14 Apr 2008 1:12:20 193,024 ..... "C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe"
14 Apr 2008 1:12:20 42,496 ..... "C:\WINDOWS\ServicePackFiles\i386\ftp.exe"
14 Apr 2008 1:11:54 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\fwcfg.dll"
14 Apr 2008 1:11:54 451,584 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsapi.dll"
14 Apr 2008 1:12:22 142,848 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsclnt.exe"
14 Apr 2008 1:11:54 72,192 ..... "C:\WINDOWS\ServicePackFiles\i386\fxscom.dll"
14 Apr 2008 1:11:54 285,184 ..... "C:\WINDOWS\ServicePackFiles\i386\fxscomex.dll"
14 Apr 2008 1:12:22 229,376 ..... "C:\WINDOWS\ServicePackFiles\i386\fxscover.exe"
14 Apr 2008 1:11:54 26,624 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsdrv.dll"
14 Apr 2008 1:11:54 55,296 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsevent.dll"
14 Apr 2008 1:11:54 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsext32.dll"
14 Apr 2008 1:11:54 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsmon.dll"
14 Apr 2008 1:11:54 132,608 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsocm.dll"
14 Apr 2008 1:11:54 8,704 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsperf.dll"
14 Apr 2008 1:09:34 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsres.dll"
14 Apr 2008 1:11:54 562,176 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsst.dll"
14 Apr 2008 1:12:22 267,776 ..... "C:\WINDOWS\ServicePackFiles\i386\fxssvc.exe"
14 Apr 2008 1:11:54 246,272 ..... "C:\WINDOWS\ServicePackFiles\i386\fxst30.dll"
14 Apr 2008 1:11:54 397,312 ..... "C:\WINDOWS\ServicePackFiles\i386\fxstiff.dll"
14 Apr 2008 1:11:54 154,112 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsui.dll"
14 Apr 2008 1:11:54 192,512 ..... "C:\WINDOWS\ServicePackFiles\i386\fxswzrd.dll"
14 Apr 2008 1:11:54 400,384 ..... "C:\WINDOWS\ServicePackFiles\i386\fxsxp32.dll"
13 Apr 2008 19:36:40 46,464 ..... "C:\WINDOWS\ServicePackFiles\i386\gagp30kx.sys"
13 Apr 2008 19:45:30 10,624 ..... "C:\WINDOWS\ServicePackFiles\i386\gameenum.sys"
13 Apr 2008 19:45:32 59,136 ..... "C:\WINDOWS\ServicePackFiles\i386\gckernel.sys"
14 Apr 2008 1:11:54 285,184 ..... "C:\WINDOWS\ServicePackFiles\i386\gdi32.dll"
14 Apr 2008 1:11:54 122,880 ..... "C:\WINDOWS\ServicePackFiles\i386\glu32.dll"
14 Apr 2008 1:12:22 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\grpconv.exe"
13 Apr 2008 19:40:22 28,288 ..... "C:\WINDOWS\ServicePackFiles\i386\grserial.sys"
14 Apr 2008 1:11:54 133,120 ..... "C:\WINDOWS\ServicePackFiles\i386\guitrn.dll"
14 Apr 2008 1:11:54 115,200 ..... "C:\WINDOWS\ServicePackFiles\i386\guitrna.dll"
14 Apr 2008 1:12:46 265,728 ..... "C:\WINDOWS\ServicePackFiles\i386\h323.tsp"
14 Apr 2008 1:11:54 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\h323cc.dll"
14 Apr 2008 1:11:54 614,912 ..... "C:\WINDOWS\ServicePackFiles\i386\h323msp.dll"
13 Apr 2008 19:31:32 105,344 ..... "C:\WINDOWS\ServicePackFiles\i386\hal.dll"
13 Apr 2008 19:31:28 131,840 ..... "C:\WINDOWS\ServicePackFiles\i386\halaacpi.dll"
13 Apr 2008 19:31:28 81,152 ..... "C:\WINDOWS\ServicePackFiles\i386\halacpi.dll"
13 Apr 2008 19:31:28 150,528 ..... "C:\WINDOWS\ServicePackFiles\i386\halapic.dll"
13 Apr 2008 19:31:28 134,400 ..... "C:\WINDOWS\ServicePackFiles\i386\halmacpi.dll"
13 Apr 2008 19:31:32 152,576 ..... "C:\WINDOWS\ServicePackFiles\i386\halmps.dll"
13 Apr 2008 19:31:32 77,696 ..... "C:\WINDOWS\ServicePackFiles\i386\halsp.dll"
14 Apr 2008 1:11:54 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\hccoin.dll"
13 Apr 2008 18:11:02 2,464 ..... "C:\WINDOWS\ServicePackFiles\i386\hdaudbus.inf"
13 Apr 2008 17:36:06 144,384 ..... "C:\WINDOWS\ServicePackFiles\i386\hdaudbus.sys"
14 Apr 2008 1:12:42 155,136 ..... "C:\WINDOWS\ServicePackFiles\i386\hdwwiz.cpl"
14 Apr 2008 1:12:22 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\help.exe"
14 Apr 2008 1:12:22 769,024 ..... "C:\WINDOWS\ServicePackFiles\i386\helpctr.exe"
14 Apr 2008 1:12:22 744,448 ..... "C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe"
14 Apr 2008 1:12:22 10,752 ..... "C:\WINDOWS\ServicePackFiles\i386\hh.exe"
14 Apr 2008 1:09:36 545,280 ..... "C:\WINDOWS\ServicePackFiles\i386\hhctrl.ocx"
14 Apr 2008 1:11:54 41,472 ..... "C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll"
14 Apr 2008 1:11:54 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\hid.dll"
13 Apr 2008 19:36:38 20,352 ..... "C:\WINDOWS\ServicePackFiles\i386\hidbatt.sys"
13 Apr 2008 16:44:36 1,995 A.... "C:\WINDOWS\ServicePackFiles\i386\hidbth.inf"
13 Apr 2008 19:46:30 25,600 ..... "C:\WINDOWS\ServicePackFiles\i386\hidbth.sys"
13 Apr 2008 19:45:26 36,864 ..... "C:\WINDOWS\ServicePackFiles\i386\hidclass.sys"
13 Apr 2008 17:28:28 3,751 A.... "C:\WINDOWS\ServicePackFiles\i386\hiddigi.inf"
13 Apr 2008 19:45:26 19,200 ..... "C:\WINDOWS\ServicePackFiles\i386\hidir.sys"
13 Apr 2008 19:45:22 24,960 ..... "C:\WINDOWS\ServicePackFiles\i386\hidparse.sys"
14 Apr 2008 1:12:46 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\hidphone.tsp"
14 Apr 2008 1:11:54 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\hidserv.dll"
13 Apr 2008 17:28:28 4,433 A.... "C:\WINDOWS\ServicePackFiles\i386\hidserv.inf"
13 Apr 2008 19:45:28 10,368 ..... "C:\WINDOWS\ServicePackFiles\i386\hidusb.sys"
14 Apr 2008 1:11:54 72,704 ..... "C:\WINDOWS\ServicePackFiles\i386\hlink.dll"
14 Apr 2008 1:11:54 38,912 ..... "C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll"
14 Apr 2008 1:11:54 344,064 ..... "C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll"
14 Apr 2008 1:11:54 330,752 ..... "C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll"
14 Apr 2008 1:11:54 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\hostmib.dll"
14 Apr 2008 1:11:54 144,896 ..... "C:\WINDOWS\ServicePackFiles\i386\hotplug.dll"
14 Apr 2008 1:11:54 10,752 ..... "C:\WINDOWS\ServicePackFiles\i386\hpcjrr.dll"
14 Apr 2008 1:11:54 10,240 ..... "C:\WINDOWS\ServicePackFiles\i386\hpcjrrps.dll"
14 Apr 2008 1:11:54 87,552 ..... "C:\WINDOWS\ServicePackFiles\i386\hpfud50.dll"
14 Apr 2008 1:12:22 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\hscupd.exe"
14 Apr 2008 1:11:54 32,285 ..... "C:\WINDOWS\ServicePackFiles\i386\hsfcisp2.dll"
13 Apr 2008 19:37:10 369,664 ..... "C:\WINDOWS\ServicePackFiles\i386\html.iec"
13 Apr 2008 19:53:54 264,832 ..... "C:\WINDOWS\ServicePackFiles\i386\http.sys"
14 Apr 2008 1:11:54 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\httpapi.dll"
14 Apr 2008 1:11:54 41,984 ..... "C:\WINDOWS\ServicePackFiles\i386\htui.dll"
14 Apr 2008 1:11:54 347,136 ..... "C:\WINDOWS\ServicePackFiles\i386\hypertrm.dll"
13 Apr 2008 19:41:22 8,576 ..... "C:\WINDOWS\ServicePackFiles\i386\i2omgmt.sys"
13 Apr 2008 19:41:22 18,560 ..... "C:\WINDOWS\ServicePackFiles\i386\i2omp.sys"
13 Apr 2008 20:18:00 52,480 ..... "C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys"
14 Apr 2008 1:11:54 702,845 ..... "C:\WINDOWS\ServicePackFiles\i386\i81xdnt5.dll"
14 Apr 2008 1:12:42 199,680 ..... "C:\WINDOWS\ServicePackFiles\i386\iac25_32.ax"
14 Apr 2008 1:11:54 119,808 ..... "C:\WINDOWS\ServicePackFiles\i386\iasrad.dll"
14 Apr 2008 1:11:54 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\icaapi.dll"
14 Apr 2008 1:11:54 80,384 ..... "C:\WINDOWS\ServicePackFiles\i386\iccvid.dll"
14 Apr 2008 1:11:54 254,976 ..... "C:\WINDOWS\ServicePackFiles\i386\icm32.dll"
14 Apr 2008 1:09:40 3,584 ..... "C:\WINDOWS\ServicePackFiles\i386\icmp.dll"
13 Apr 2008 17:44:30 2,560 ..... "C:\WINDOWS\ServicePackFiles\i386\iconlib.dll"
14 Apr 2008 1:11:54 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\icwconn.dll"
14 Apr 2008 1:12:22 214,528 ..... "C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe"
14 Apr 2008 1:12:22 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe"
14 Apr 2008 1:11:54 73,728 ..... "C:\WINDOWS\ServicePackFiles\i386\icwdial.dll"
14 Apr 2008 1:11:54 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\icwdl.dll"
14 Apr 2008 1:11:54 172,032 ..... "C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll"
14 Apr 2008 1:11:54 65,536 ..... "C:\WINDOWS\ServicePackFiles\i386\icwphbk.dll"
14 Apr 2008 1:12:22 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\icwrmind.exe"
14 Apr 2008 1:11:54 49,152 ..... "C:\WINDOWS\ServicePackFiles\i386\icwutil.dll"
14 Apr 2008 1:11:54 120,832 ..... "C:\WINDOWS\ServicePackFiles\i386\idq.dll"
13 Apr 2008 17:29:36 54,131 A.... "C:\WINDOWS\ServicePackFiles\i386\ie.inf"
14 Apr 2008 1:12:22 34,304 ..... "C:\WINDOWS\ServicePackFiles\i386\ie4uinit.exe"
13 Apr 2008 17:29:38 815 A.... "C:\WINDOWS\ServicePackFiles\i386\ieaccess.inf"
14 Apr 2008 1:11:54 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\ieakeng.dll"
14 Apr 2008 1:11:54 216,576 ..... "C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll"
14 Apr 2008 1:11:54 323,584 ..... "C:\WINDOWS\ServicePackFiles\i386\iedkcs32.dll"
14 Apr 2008 1:12:22 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\iedw.exe"
14 Apr 2008 1:11:54 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\ieencode.dll"
14 Apr 2008 1:11:54 251,904 ..... "C:\WINDOWS\ServicePackFiles\i386\iepeers.dll"
14 Apr 2008 1:11:54 48,640 ..... "C:\WINDOWS\ServicePackFiles\i386\iernonce.dll"
14 Apr 2008 1:11:54 62,976 ..... "C:\WINDOWS\ServicePackFiles\i386\iesetup.dll"
14 Apr 2008 1:12:22 93,184 ..... "C:\WINDOWS\ServicePackFiles\i386\iexplore.exe"
14 Apr 2008 1:12:22 114,688 ..... "C:\WINDOWS\ServicePackFiles\i386\iexpress.exe"
14 Apr 2008 1:11:54 135,680 ..... "C:\WINDOWS\ServicePackFiles\i386\ifmon.dll"
14 Apr 2008 1:11:54 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\igmpagnt.dll"
14 Apr 2008 1:11:54 505,344 ..... "C:\WINDOWS\ServicePackFiles\i386\iis.dll"
14 Apr 2008 1:11:54 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\ils.dll"
14 Apr 2008 1:09:44 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\imaadp32.acm"
14 Apr 2008 1:11:54 144,384 ..... "C:\WINDOWS\ServicePackFiles\i386\imagehlp.dll"
14 Apr 2008 1:12:22 150,528 ..... "C:\WINDOWS\ServicePackFiles\i386\imapi.exe"
13 Apr 2008 19:40:58 42,112 ..... "C:\WINDOWS\ServicePackFiles\i386\imapi.sys"
14 Apr 2008 1:11:54 36,921 ..... "C:\WINDOWS\ServicePackFiles\i386\imeshare.dll"
14 Apr 2008 1:11:54 35,840 ..... "C:\WINDOWS\ServicePackFiles\i386\imgutil.dll"
14 Apr 2008 1:11:54 110,080 ..... "C:\WINDOWS\ServicePackFiles\i386\imm32.dll"
14 Apr 2008 3:04:34 16,535 ..... "C:\WINDOWS\ServicePackFiles\i386\ims.cat"
14 Apr 2008 1:19:20 48,853 A.... "C:\WINDOWS\ServicePackFiles\i386\ims.inf"
14 Apr 2008 1:11:54 123,392 ..... "C:\WINDOWS\ServicePackFiles\i386\imsinsnt.dll"
14 Apr 2008 1:11:54 274,432 ..... "C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll"
14 Apr 2008 1:11:54 691,712 ..... "C:\WINDOWS\ServicePackFiles\i386\inetcomm.dll"
14 Apr 2008 1:12:42 360,960 ..... "C:\WINDOWS\ServicePackFiles\i386\inetcpl.cpl"
14 Apr 2008 1:11:56 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\inetmib1.dll"
14 Apr 2008 1:11:56 75,264 ..... "C:\WINDOWS\ServicePackFiles\i386\inetpp.dll"
14 Apr 2008 1:11:56 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\inetppui.dll"
13 Apr 2008 17:22:12 48,128 ..... "C:\WINDOWS\ServicePackFiles\i386\inetres.dll"
14 Apr 2008 1:12:22 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe"
14 Apr 2008 1:11:56 147,456 ..... "C:\WINDOWS\ServicePackFiles\i386\initpki.dll"
14 Apr 2008 1:11:56 123,392 ..... "C:\WINDOWS\ServicePackFiles\i386\input.dll"
13 Apr 2008 17:29:40 69,990 A.... "C:\WINDOWS\ServicePackFiles\i386\input.inf"
14 Apr 2008 1:11:56 96,256 ..... "C:\WINDOWS\ServicePackFiles\i386\inseng.dll"
13 Apr 2008 19:40:30 5,504 ..... "C:\WINDOWS\ServicePackFiles\i386\intelide.sys"
13 Apr 2008 19:31:32 36,352 ..... "C:\WINDOWS\ServicePackFiles\i386\intelppm.sys"
14 Apr 2008 1:12:42 129,536 ..... "C:\WINDOWS\ServicePackFiles\i386\intl.cpl"
13 Apr 2008 17:29:40 868,116 A.... "C:\WINDOWS\ServicePackFiles\i386\intl.inf"
13 Apr 2008 19:53:34 36,608 ..... "C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys"
14 Apr 2008 1:12:46 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\ipconf.tsp"
14 Apr 2008 1:12:22 55,808 ..... "C:\WINDOWS\ServicePackFiles\i386\ipconfig.exe"
14 Apr 2008 1:09:30 103,424 ..... "C:\WINDOWS\ServicePackFiles\i386\ipevldpc.dll"
14 Apr 2008 1:09:24 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\ipevlpid.dll"
14 Apr 2008 1:11:56 94,720 ..... "C:\WINDOWS\ServicePackFiles\i386\iphlpapi.dll"
13 Apr 2008 19:57:08 20,864 ..... "C:\WINDOWS\ServicePackFiles\i386\ipinip.sys"
14 Apr 2008 1:11:56 161,280 ..... "C:\WINDOWS\ServicePackFiles\i386\ipmontr.dll"
13 Apr 2008 19:57:16 152,832 ..... "C:\WINDOWS\ServicePackFiles\i386\ipnat.sys"
14 Apr 2008 1:11:56 331,264 ..... "C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll"
14 Apr 2008 1:11:56 330,752 ..... "C:\WINDOWS\ServicePackFiles\i386\ippromon.dll"
14 Apr 2008 1:11:56 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\iprip.dll"
14 Apr 2008 1:11:56 177,152 ..... "C:\WINDOWS\ServicePackFiles\i386\iprtrmgr.dll"
13 Apr 2008 20:19:42 75,264 ..... "C:\WINDOWS\ServicePackFiles\i386\ipsec.sys"
14 Apr 2008 1:11:56 349,696 ..... "C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll"
14 Apr 2008 1:11:56 183,808 ..... "C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll"
14 Apr 2008 1:10:46 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\ipseldpc.dll"
14 Apr 2008 1:09:24 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\ipselpid.dll"
14 Apr 2008 1:12:42 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\ipsink.ax"
14 Apr 2008 1:11:56 384,000 ..... "C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll"
14 Apr 2008 1:12:24 53,248 ..... "C:\WINDOWS\ServicePackFiles\i386\ipv6.exe"
14 Apr 2008 1:11:56 59,904 ..... "C:\WINDOWS\ServicePackFiles\i386\ipv6mon.dll"
14 Apr 2008 1:12:24 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\ipxroute.exe"
14 Apr 2008 1:11:56 22,016 ..... "C:\WINDOWS\ServicePackFiles\i386\ipxwan.dll"
14 Apr 2008 1:12:42 848,384 ..... "C:\WINDOWS\ServicePackFiles\i386\ir41_32.ax"
14 Apr 2008 1:11:56 120,320 ..... "C:\WINDOWS\ServicePackFiles\i386\ir41_qc.dll"
14 Apr 2008 1:11:56 338,432 ..... "C:\WINDOWS\ServicePackFiles\i386\ir41_qcx.dll"
14 Apr 2008 1:11:56 755,200 ..... "C:\WINDOWS\ServicePackFiles\i386\ir50_32.dll"
14 Apr 2008 1:11:56 200,192 ..... "C:\WINDOWS\ServicePackFiles\i386\ir50_qc.dll"
14 Apr 2008 1:11:56 183,808 ..... "C:\WINDOWS\ServicePackFiles\i386\ir50_qcx.dll"
13 Apr 2008 19:54:36 88,192 ..... "C:\WINDOWS\ServicePackFiles\i386\irda.sys"
13 Apr 2008 19:54:28 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\irenum.sys"
14 Apr 2008 1:12:24 151,552 ..... "C:\WINDOWS\ServicePackFiles\i386\irftp.exe"
14 Apr 2008 1:11:56 28,160 ..... "C:\WINDOWS\ServicePackFiles\i386\irmon.dll"
14 Apr 2008 1:12:42 380,416 ..... "C:\WINDOWS\ServicePackFiles\i386\irprops.cpl"
13 Apr 2008 19:36:42 37,248 ..... "C:\WINDOWS\ServicePackFiles\i386\isapnp.sys"
14 Apr 2008 1:10:32 105,984 ..... "C:\WINDOWS\ServicePackFiles\i386\isdpc.dll"
14 Apr 2008 1:10:56 105,984 ..... "C:\WINDOWS\ServicePackFiles\i386\isendpc.dll"
14 Apr 2008 1:10:56 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\isenpid.dll"
14 Apr 2008 1:11:56 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\isign32.dll"
14 Apr 2008 1:10:32 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\ispid.dll"
14 Apr 2008 1:11:56 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\isrdbg32.dll"
14 Apr 2008 1:11:56 155,136 ..... "C:\WINDOWS\ServicePackFiles\i386\itircl.dll"
14 Apr 2008 1:11:56 138,240 ..... "C:\WINDOWS\ServicePackFiles\i386\itss.dll"
14 Apr 2008 1:11:56 191,488 ..... "C:\WINDOWS\ServicePackFiles\i386\iuengine.dll"
14 Apr 2008 1:12:42 154,624 ..... "C:\WINDOWS\ServicePackFiles\i386\ivfsrc.ax"
14 Apr 2008 1:11:56 54,272 ..... "C:\WINDOWS\ServicePackFiles\i386\ixsso.dll"
14 Apr 2008 1:11:56 47,616 ..... "C:\WINDOWS\ServicePackFiles\i386\iyuv_32.dll"
14 Apr 2008 1:11:56 163,840 ..... "C:\WINDOWS\ServicePackFiles\i386\jgdw400.dll"
14 Apr 2008 1:11:56 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\jgpl400.dll"
14 Apr 2008 1:12:42 68,608 ..... "C:\WINDOWS\ServicePackFiles\i386\joy.cpl"
14 Apr 2008 1:11:56 512,000 ..... "C:\WINDOWS\ServicePackFiles\i386\jscript.dll"
14 Apr 2008 1:11:56 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\jsproxy.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbd101.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbd106.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbd106n.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdax2.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdbhc.dll"
13 Apr 2008 19:39:48 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys"
14 Apr 2008 1:09:56 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdfi1.dll"
13 Apr 2008 19:39:48 14,592 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdhid.sys"
14 Apr 2008 1:09:56 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdibm02.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdinbe1.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdinben.dll"
14 Apr 2008 1:09:56 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdinmal.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdiultn.dll"
14 Apr 2008 1:09:56 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdlk41a.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdlk41j.dll"
14 Apr 2008 1:09:56 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdmaori.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdmlt47.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdmlt48.dll"
14 Apr 2008 1:09:56 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdnec.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdnepr.dll"
14 Apr 2008 1:09:56 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdno1.dll"
14 Apr 2008 1:09:56 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdpash.dll"
14 Apr 2008 1:09:56 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdsmsfi.dll"
14 Apr 2008 1:09:56 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdsmsno.dll"
14 Apr 2008 1:09:56 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\kbdukx.dll"
13 Apr 2008 19:31:36 7,424 ..... "C:\WINDOWS\ServicePackFiles\i386\kd1394.dll"
14 Apr 2008 1:11:56 184,832 ..... "C:\WINDOWS\ServicePackFiles\i386\kdcsvc.dll"
14 Apr 2008 1:11:56 48,640 ..... "C:\WINDOWS\ServicePackFiles\i386\kdsui.dll"
14 Apr 2008 1:11:56 253,952 ..... "C:\WINDOWS\ServicePackFiles\i386\kdsusd.dll"
14 Apr 2008 1:11:56 299,520 ..... "C:\WINDOWS\ServicePackFiles\i386\kerberos.dll"
14 Apr 2008 1:11:56 989,696 ..... "C:\WINDOWS\ServicePackFiles\i386\kernel32.dll"
13 Apr 2008 17:29:42 43,203 A.... "C:\WINDOWS\ServicePackFiles\i386\keyboard.inf"
14 Apr 2008 1:11:56 150,528 ..... "C:\WINDOWS\ServicePackFiles\i386\keymgr.dll"
14 Apr 2008 1:12:46 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\kmddsp.tsp"
13 Apr 2008 19:45:10 172,416 ..... "C:\WINDOWS\ServicePackFiles\i386\kmixer.sys"
14 Apr 2008 1:11:56 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\kmsvc.dll"
14 Apr 2008 1:09:56 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\knperdpc.dll"
14 Apr 2008 1:09:56 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\knperpid.dll"
14 Apr 2008 1:09:56 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\knprodpc.dll"
14 Apr 2008 1:09:56 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\knpropid.dll"
14 Apr 2008 1:11:56 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\koc.dll"
28 May 2008 17:47:46 278 ..... "C:\WINDOWS\ServicePackFiles\i386\koc.inf"
14 Apr 2008 1:09:56 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\kperdpc.dll"
14 Apr 2008 1:09:56 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\kperpid.dll"
14 Apr 2008 1:09:56 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\kprodpc.dll"
14 Apr 2008 1:09:56 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\kpropid.dll"
14 Apr 2008 1:11:56 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\krnlprov.dll"
13 Apr 2008 17:29:44 36,992 A.... "C:\WINDOWS\ServicePackFiles\i386\ks.inf"
13 Apr 2008 20:16:36 141,056 ..... "C:\WINDOWS\ServicePackFiles\i386\ks.sys"
13 Apr 2008 17:29:44 23,978 A.... "C:\WINDOWS\ServicePackFiles\i386\kscaptur.inf"
13 Apr 2008 19:31:44 92,288 ..... "C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys"
13 Apr 2008 17:29:44 9,904 A.... "C:\WINDOWS\ServicePackFiles\i386\ksfilter.inf"
14 Apr 2008 1:12:42 129,536 ..... "C:\WINDOWS\ServicePackFiles\i386\ksproxy.ax"
14 Apr 2008 1:12:42 61,952 ..... "C:\WINDOWS\ServicePackFiles\i386\kstvtune.ax"
14 Apr 2008 1:11:56 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\ksuser.dll"
14 Apr 2008 1:12:42 91,136 ..... "C:\WINDOWS\ServicePackFiles\i386\kswdmcap.ax"
14 Apr 2008 1:12:42 43,008 ..... "C:\WINDOWS\ServicePackFiles\i386\ksxbar.ax"
14 Apr 2008 1:11:56 37,376 ..... "C:\WINDOWS\ServicePackFiles\i386\l2store.dll"
14 Apr 2008 3:04:30 391,859 A.... "C:\WINDOWS\ServicePackFiles\i386\layout.inf"
13 Apr 2008 19:40:26 34,688 ..... "C:\WINDOWS\ServicePackFiles\i386\lbrtfdc.sys"
14 Apr 2008 1:12:24 677,888 ..... "C:\WINDOWS\ServicePackFiles\i386\lhmstsc.exe"
14 Apr 2008 1:11:56 2,061,824 ..... "C:\WINDOWS\ServicePackFiles\i386\lhmstscx.dll"
14 Apr 2008 5:41:58 423,936 ..... "C:\WINDOWS\ServicePackFiles\i386\licdll.dll"
14 Apr 2008 1:11:56 22,016 ..... "C:\WINDOWS\ServicePackFiles\i386\licmgr10.dll"
14 Apr 2008 1:11:56 58,880 ..... "C:\WINDOWS\ServicePackFiles\i386\licwmi.dll"
14 Apr 2008 1:11:56 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll"
14 Apr 2008 1:11:56 13,824 ..... "C:\WINDOWS\ServicePackFiles\i386\lmhsvc.dll"
14 Apr 2008 1:11:56 33,792 ..... "C:\WINDOWS\ServicePackFiles\i386\lmmib2.dll"
14 Apr 2008 1:11:56 399,872 ..... "C:\WINDOWS\ServicePackFiles\i386\lmrt.dll"
14 Apr 2008 1:11:56 97,280 ..... "C:\WINDOWS\ServicePackFiles\i386\loadperf.dll"
14 Apr 2008 1:11:56 221,696 ..... "C:\WINDOWS\ServicePackFiles\i386\localsec.dll"
14 Apr 2008 1:11:56 343,040 ..... "C:\WINDOWS\ServicePackFiles\i386\localspl.dll"
14 Apr 2008 1:11:56 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\localui.dll"
14 Apr 2008 1:12:24 75,264 ..... "C:\WINDOWS\ServicePackFiles\i386\locator.exe"
14 Apr 2008 1:11:56 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\log.dll"
14 Apr 2008 1:12:24 59,392 ..... "C:\WINDOWS\ServicePackFiles\i386\logman.exe"
14 Apr 2008 1:12:44 220,672 ..... "C:\WINDOWS\ServicePackFiles\i386\logon.scr"
14 Apr 2008 1:12:24 514,560 ..... "C:\WINDOWS\ServicePackFiles\i386\logonui.exe"
14 Apr 2008 1:11:56 22,528 ..... "C:\WINDOWS\ServicePackFiles\i386\lpdsvc.dll"
14 Apr 2008 1:11:56 22,016 ..... "C:\WINDOWS\ServicePackFiles\i386\lpk.dll"
14 Apr 2008 1:11:56 10,240 ..... "C:\WINDOWS\ServicePackFiles\i386\lprhelp.dll"
14 Apr 2008 1:11:56 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\lprmon.dll"
14 Apr 2008 1:11:56 728,064 ..... "C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll"
14 Apr 2008 1:12:24 13,312 ..... "C:\WINDOWS\ServicePackFiles\i386\lsass.exe"
13 Apr 2008 19:40:52 7,040 ..... "C:\WINDOWS\ServicePackFiles\i386\ltotape.sys"
13 Apr 2008 18:02:26 4,190,352 ..... "C:\WINDOWS\ServicePackFiles\i386\luna.mst"
13 Apr 2008 17:29:46 85,547 A.... "C:\WINDOWS\ServicePackFiles\i386\machine.inf"
14 Apr 2008 1:12:24 72,704 ..... "C:\WINDOWS\ServicePackFiles\i386\magnify.exe"
14 Apr 2008 1:12:26 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\makecab.exe"
14 Apr 2008 1:11:56 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\mcastmib.dll"
13 Apr 2008 17:29:46 16,322 A.... "C:\WINDOWS\ServicePackFiles\i386\mchgr.inf"
14 Apr 2008 1:11:56 84,480 ..... "C:\WINDOWS\ServicePackFiles\i386\mciavi32.dll"
14 Apr 2008 1:11:56 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\mciqtz32.dll"
14 Apr 2008 1:11:56 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\mciseq.dll"
14 Apr 2008 1:11:56 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\mciwave.dll"
13 Apr 2008 17:29:46 11,790 A.... "C:\WINDOWS\ServicePackFiles\i386\mdac.inf"
13 Apr 2008 16:44:36 26,756 A.... "C:\WINDOWS\ServicePackFiles\i386\mdmbtmdm.inf"
14 Apr 2008 1:11:56 118,272 ..... "C:\WINDOWS\ServicePackFiles\i386\mdminst.dll"
13 Apr 2008 16:55:20 80,087 A.... "C:\WINDOWS\ServicePackFiles\i386\mdmirmdm.inf"
14 Apr 2008 1:11:56 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.dll"
13 Apr 2008 19:41:22 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\memstpci.sys"
13 Apr 2008 19:36:42 63,744 ..... "C:\WINDOWS\ServicePackFiles\i386\mf.sys"
14 Apr 2008 1:11:56 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\mf3216.dll"
14 Apr 2008 1:11:56 927,504 ..... "C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll"
14 Apr 2008 1:11:56 1,028,096 ..... "C:\WINDOWS\ServicePackFiles\i386\mfc42.dll"
14 Apr 2008 1:11:56 22,528 ..... "C:\WINDOWS\ServicePackFiles\i386\mfcsubs.dll"
14 Apr 2008 1:11:56 14,848 ..... "C:\WINDOWS\ServicePackFiles\i386\mgmtapi.dll"
14 Apr 2008 1:11:58 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\midimap.dll"
13 Apr 2008 16:43:52 282,296 A.... "C:\WINDOWS\ServicePackFiles\i386\migapp.inf"
14 Apr 2008 1:11:58 274,432 ..... "C:\WINDOWS\ServicePackFiles\i386\migism.dll"
13 Apr 2008 16:43:10 2,978 A.... "C:\WINDOWS\ServicePackFiles\i386\migism.inf"
14 Apr 2008 1:11:58 261,120 ..... "C:\WINDOWS\ServicePackFiles\i386\migisma.dll"
14 Apr 2008 1:11:58 60,928 ..... "C:\WINDOWS\ServicePackFiles\i386\miglibnt.dll"
14 Apr 2008 1:12:26 103,936 ..... "C:\WINDOWS\ServicePackFiles\i386\migload.exe"
14 Apr 2008 1:12:26 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\migregdb.exe"
13 Apr 2008 16:43:52 66,509 A.... "C:\WINDOWS\ServicePackFiles\i386\migsys.inf"
13 Apr 2008 16:43:52 4,060 A.... "C:\WINDOWS\ServicePackFiles\i386\miguser.inf"
14 Apr 2008 1:12:26 245,248 ..... "C:\WINDOWS\ServicePackFiles\i386\migwiz.exe"
13 Apr 2008 16:43:52 4,638 A.... "C:\WINDOWS\ServicePackFiles\i386\migwiz.inf"
14 Apr 2008 1:12:26 241,152 ..... "C:\WINDOWS\ServicePackFiles\i386\migwiza.exe"
14 Apr 2008 1:11:58 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\mimefilt.dll"
14 Apr 2008 1:11:58 586,240 ..... "C:\WINDOWS\ServicePackFiles\i386\mlang.dll"
14 Apr 2008 1:12:26 1,414,656 ..... "C:\WINDOWS\ServicePackFiles\i386\mmc.exe"
14 Apr 2008 1:11:58 184,320 ..... "C:\WINDOWS\ServicePackFiles\i386\mmc30.dll"
14 Apr 2008 1:11:58 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\mmc30r.dll"
14 Apr 2008 1:11:58 163,328 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll"
14 Apr 2008 1:11:58 397,312 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcex.dll"
14 Apr 2008 1:11:58 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcexr.dll"
14 Apr 2008 1:11:58 106,496 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcfxc.dll"
14 Apr 2008 1:11:58 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcfxcr.dll"
14 Apr 2008 1:11:58 1,872,896 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll"
14 Apr 2008 1:12:26 33,792 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcperf.exe"
14 Apr 2008 1:11:58 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll"
14 Apr 2008 1:11:58 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\mmfutil.dll"
14 Apr 2008 1:12:42 618,496 ..... "C:\WINDOWS\ServicePackFiles\i386\mmsys.cpl"
14 Apr 2008 1:11:58 34,560 ..... "C:\WINDOWS\ServicePackFiles\i386\mnmdd.dll"
14 Apr 2008 1:12:26 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe"
14 Apr 2008 1:11:58 207,360 ..... "C:\WINDOWS\ServicePackFiles\i386\mobsync.dll"
14 Apr 2008 1:12:26 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\mobsync.exe"
13 Apr 2008 20:00:20 30,080 ..... "C:\WINDOWS\ServicePackFiles\i386\modem.sys"
14 Apr 2008 1:11:58 153,600 ..... "C:\WINDOWS\ServicePackFiles\i386\modemui.dll"
14 Apr 2008 1:12:26 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\mofcomp.exe"
14 Apr 2008 1:11:58 123,904 ..... "C:\WINDOWS\ServicePackFiles\i386\mofd.dll"
14 Apr 2008 1:12:42 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\more.com"
13 Apr 2008 17:45:30 216,064 ..... "C:\WINDOWS\ServicePackFiles\i386\moricons.dll"
13 Apr 2008 19:39:48 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\mouclass.sys"
13 Apr 2008 19:39:46 42,368 ..... "C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys"
14 Apr 2008 1:12:28 3,558,912 ..... "C:\WINDOWS\ServicePackFiles\i386\moviemk.exe"
13 Apr 2008 17:29:50 3,353 A.... "C:\WINDOWS\ServicePackFiles\i386\mpe.inf"
13 Apr 2008 19:46:22 15,232 ..... "C:\WINDOWS\ServicePackFiles\i386\mpe.sys"
14 Apr 2008 1:12:42 118,272 ..... "C:\WINDOWS\ServicePackFiles\i386\mpg2data.ax"
14 Apr 2008 1:12:42 148,992 ..... "C:\WINDOWS\ServicePackFiles\i386\mpg2splt.ax"
14 Apr 2008 1:12:28 123,392 ..... "C:\WINDOWS\ServicePackFiles\i386\mplay32.exe"
14 Apr 2008 1:11:58 59,904 ..... "C:\WINDOWS\ServicePackFiles\i386\mpr.dll"
14 Apr 2008 1:11:58 87,040 ..... "C:\WINDOWS\ServicePackFiles\i386\mprapi.dll"
14 Apr 2008 1:11:58 53,248 ..... "C:\WINDOWS\ServicePackFiles\i386\mprdim.dll"
13 Apr 2008 19:32:44 180,608 ..... "C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys"
13 Apr 2008 20:17:02 456,576 ..... "C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys"
14 Apr 2008 1:11:58 71,680 ..... "C:\WINDOWS\ServicePackFiles\i386\msacm32.dll"
14 Apr 2008 1:11:58 331,776 ..... "C:\WINDOWS\ServicePackFiles\i386\msadce.dll"
13 Apr 2008 18:25:58 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\msadcer.dll"
14 Apr 2008 1:11:58 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\msadcf.dll"
13 Apr 2008 18:25:58 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msadcfr.dll"
14 Apr 2008 1:11:58 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\msadco.dll"
13 Apr 2008 18:25:58 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msadcor.dll"
14 Apr 2008 1:11:58 53,248 ..... "C:\WINDOWS\ServicePackFiles\i386\msadcs.dll"
14 Apr 2008 1:11:58 155,648 ..... "C:\WINDOWS\ServicePackFiles\i386\msadds.dll"
13 Apr 2008 18:25:58 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\msaddsr.dll"
13 Apr 2008 18:26:18 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\msader15.dll"
14 Apr 2008 1:11:58 536,576 ..... "C:\WINDOWS\ServicePackFiles\i386\msado15.dll"
13 Apr 2008 18:26:08 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\msado20.tlb"
13 Apr 2008 18:26:10 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\msado21.tlb"
13 Apr 2008 18:26:10 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\msado25.tlb"
13 Apr 2008 18:26:10 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\msado26.tlb"
13 Apr 2008 18:26:10 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\msado27.tlb"
14 Apr 2008 1:11:58 180,224 ..... "C:\WINDOWS\ServicePackFiles\i386\msadomd.dll"
14 Apr 2008 1:11:58 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\msador15.dll"
14 Apr 2008 1:11:58 200,704 ..... "C:\WINDOWS\ServicePackFiles\i386\msadox.dll"
14 Apr 2008 1:10:06 14,848 ..... "C:\WINDOWS\ServicePackFiles\i386\msadp32.acm"
14 Apr 2008 1:11:58 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\msadrh15.dll"
14 Apr 2008 1:10:06 3,584 ..... "C:\WINDOWS\ServicePackFiles\i386\msafd.dll"
14 Apr 2008 1:11:58 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\msapsspc.dll"
14 Apr 2008 1:11:58 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\msasn1.dll"
14 Apr 2008 1:11:58 220,160 ..... "C:\WINDOWS\ServicePackFiles\i386\mscandui.dll"
14 Apr 2008 1:11:58 73,728 ..... "C:\WINDOWS\ServicePackFiles\i386\mscms.dll"
14 Apr 2008 1:11:58 69,632 ..... "C:\WINDOWS\ServicePackFiles\i386\msconf.dll"
14 Apr 2008 1:12:28 169,984 ..... "C:\WINDOWS\ServicePackFiles\i386\msconfig.exe"
13 Apr 2008 18:26:08 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\mscpx32r.dll"
14 Apr 2008 1:11:58 36,864 ..... "C:\WINDOWS\ServicePackFiles\i386\mscpxl32.dll"
14 Apr 2008 1:11:58 297,984 ..... "C:\WINDOWS\ServicePackFiles\i386\msctf.dll"
14 Apr 2008 1:10:06 177,152 ..... "C:\WINDOWS\ServicePackFiles\i386\msctfime.ime"
14 Apr 2008 1:11:58 68,608 ..... "C:\WINDOWS\ServicePackFiles\i386\msctfp.dll"
14 Apr 2008 1:11:58 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\msdadc.dll"
14 Apr 2008 1:11:58 118,784 ..... "C:\WINDOWS\ServicePackFiles\i386\msdadiag.dll"
14 Apr 2008 1:11:58 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaenum.dll"
14 Apr 2008 1:11:58 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaer.dll"
14 Apr 2008 1:11:58 532,480 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaipp.dll"
14 Apr 2008 1:11:58 233,472 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaora.dll"
13 Apr 2008 18:24:14 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaorar.dll"
14 Apr 2008 1:11:58 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaosp.dll"
13 Apr 2008 18:25:58 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaprsr.dll"
14 Apr 2008 1:11:58 200,704 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaprst.dll"
14 Apr 2008 1:12:00 204,800 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaps.dll"
14 Apr 2008 1:12:00 118,784 ..... "C:\WINDOWS\ServicePackFiles\i386\msdarem.dll"
13 Apr 2008 18:25:58 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaremr.dll"
14 Apr 2008 1:12:00 151,552 ..... "C:\WINDOWS\ServicePackFiles\i386\msdart.dll"
14 Apr 2008 1:12:00 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\msdasc.dll"
14 Apr 2008 1:12:00 315,392 ..... "C:\WINDOWS\ServicePackFiles\i386\msdasql.dll"
13 Apr 2008 18:26:08 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msdasqlr.dll"
14 Apr 2008 1:12:00 94,208 ..... "C:\WINDOWS\ServicePackFiles\i386\msdatl3.dll"
13 Apr 2008 18:24:00 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\msdatsrc.tlb"
14 Apr 2008 1:12:00 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\msdatt.dll"
14 Apr 2008 1:12:00 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\msdaurl.dll"
14 Apr 2008 1:12:00 36,864 ..... "C:\WINDOWS\ServicePackFiles\i386\msdfmap.dll"
14 Apr 2008 1:12:00 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\msdmo.dll"
14 Apr 2008 1:12:28 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtc.exe"
14 Apr 2008 1:12:00 58,880 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtclog.dll"
14 Apr 2008 1:12:00 427,008 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll"
14 Apr 2008 1:12:00 90,112 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtcstp.dll"
14 Apr 2008 1:12:00 956,928 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll"
14 Apr 2008 1:12:00 161,792 ..... "C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll"
13 Apr 2008 19:46:10 51,200 ..... "C:\WINDOWS\ServicePackFiles\i386\msdv.sys"
14 Apr 2008 1:12:42 56,832 ..... "C:\WINDOWS\ServicePackFiles\i386\msdvbnp.ax"
13 Apr 2008 19:32:40 19,072 ..... "C:\WINDOWS\ServicePackFiles\i386\msfs.sys"
14 Apr 2008 1:12:00 539,136 ..... "C:\WINDOWS\ServicePackFiles\i386\msftedit.dll"
14 Apr 2008 1:12:00 997,376 ..... "C:\WINDOWS\ServicePackFiles\i386\msgina.dll"
13 Apr 2008 19:56:32 35,072 ..... "C:\WINDOWS\ServicePackFiles\i386\msgpc.sys"
14 Apr 2008 1:12:00 3,166,208 ..... "C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll"
14 Apr 2008 1:12:00 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\msgrocm.dll"
14 Apr 2008 1:12:00 82,944 ..... "C:\WINDOWS\ServicePackFiles\i386\msgsc.dll"
13 Apr 2008 18:30:28 180,224 ..... "C:\WINDOWS\ServicePackFiles\i386\msgslang.dll"
14 Apr 2008 1:12:00 33,792 ..... "C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll"
14 Apr 2008 1:12:46 188,416 ..... "C:\WINDOWS\ServicePackFiles\i386\msh261.drv"
14 Apr 2008 1:12:46 294,912 ..... "C:\WINDOWS\ServicePackFiles\i386\msh263.drv"
13 Apr 2008 17:29:52 27,604 A.... "C:\WINDOWS\ServicePackFiles\i386\mshdc.inf"
14 Apr 2008 1:12:28 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\mshta.exe"
14 Apr 2008 1:12:00 3,066,880 ..... "C:\WINDOWS\ServicePackFiles\i386\mshtml.dll"
13 Apr 2008 17:26:26 1,351,168 ..... "C:\WINDOWS\ServicePackFiles\i386\mshtml.tlb"
14 Apr 2008 1:12:00 449,024 ..... "C:\WINDOWS\ServicePackFiles\i386\mshtmled.dll"
13 Apr 2008 17:26:26 56,832 ..... "C:\WINDOWS\ServicePackFiles\i386\mshtmler.dll"
14 Apr 2008 1:12:00 2,843,136 ..... "C:\WINDOWS\ServicePackFiles\i386\msi.dll"
14 Apr 2008 1:12:00 51,712 ..... "C:\WINDOWS\ServicePackFiles\i386\msident.dll"
14 Apr 2008 1:12:00 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\msidle.dll"
14 Apr 2008 1:12:00 248,832 ..... "C:\WINDOWS\ServicePackFiles\i386\msieftp.dll"
14 Apr 2008 1:12:28 78,848 ..... "C:\WINDOWS\ServicePackFiles\i386\msiexec.exe"
14 Apr 2008 1:12:00 271,360 ..... "C:\WINDOWS\ServicePackFiles\i386\msihnd.dll"
14 Apr 2008 1:15:28 204,396 ..... "C:\WINDOWS\ServicePackFiles\i386\msimain.sdb"
14 Apr 2008 1:12:00 4,608 ..... "C:\WINDOWS\ServicePackFiles\i386\msimg32.dll"
14 Apr 2008 1:12:28 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\msimn.exe"
13 Apr 2008 16:39:44 884,736 ..... "C:\WINDOWS\ServicePackFiles\i386\msimsg.dll"
14 Apr 2008 1:12:00 159,232 ..... "C:\WINDOWS\ServicePackFiles\i386\msimtf.dll"
14 Apr 2008 1:12:00 376,832 ..... "C:\WINDOWS\ServicePackFiles\i386\msinfo.dll"
13 Apr 2008 19:54:28 22,016 ..... "C:\WINDOWS\ServicePackFiles\i386\msircomm.sys"
14 Apr 2008 1:12:28 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\msiregmv.exe"
14 Apr 2008 1:12:00 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\msisip.dll"
14 Apr 2008 1:12:00 151,583 ..... "C:\WINDOWS\ServicePackFiles\i386\msjint40.dll"
14 Apr 2008 1:12:00 102,400 ..... "C:\WINDOWS\ServicePackFiles\i386\msjro.dll"
13 Apr 2008 19:39:52 7,552 ..... "C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys"
14 Apr 2008 1:12:00 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\mslbui.dll"
14 Apr 2008 1:12:00 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\mslwvtts.dll"
14 Apr 2008 3:04:36 12,363 ..... "C:\WINDOWS\ServicePackFiles\i386\msmsgs.cat"
14 Apr 2008 1:12:28 1,695,232 ..... "C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe"
14 Apr 2008 3:04:36 26,991 ..... "C:\WINDOWS\ServicePackFiles\i386\msn7.cat"
14 Apr 2008 3:04:36 14,433 ..... "C:\WINDOWS\ServicePackFiles\i386\msn9.cat"
14 Apr 2008 1:12:00 290,816 ..... "C:\WINDOWS\ServicePackFiles\i386\msnsspc.dll"
14 Apr 2008 1:12:00 122,368 ..... "C:\WINDOWS\ServicePackFiles\i386\msobcomm.dll"
14 Apr 2008 1:12:00 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\msobdl.dll"
14 Apr 2008 1:12:00 565,248 ..... "C:\WINDOWS\ServicePackFiles\i386\msobmain.dll"
14 Apr 2008 1:12:00 30,720 ..... "C:\WINDOWS\ServicePackFiles\i386\msobshel.dll"
14 Apr 2008 1:12:00 19,456 ..... "C:\WINDOWS\ServicePackFiles\i386\msobweb.dll"
14 Apr 2008 1:12:00 1,314,816 ..... "C:\WINDOWS\ServicePackFiles\i386\msoe.dll"
13 Apr 2008 17:29:54 18,400 A.... "C:\WINDOWS\ServicePackFiles\i386\msoe50.inf"
14 Apr 2008 1:12:00 252,928 ..... "C:\WINDOWS\ServicePackFiles\i386\msoeacct.dll"
13 Apr 2008 17:23:54 2,479,616 ..... "C:\WINDOWS\ServicePackFiles\i386\msoeres.dll"
14 Apr 2008 1:12:00 105,984 ..... "C:\WINDOWS\ServicePackFiles\i386\msoert2.dll"
14 Apr 2008 1:12:28 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\msoobe.exe"
13 Apr 2008 18:24:14 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\msorc32r.dll"
14 Apr 2008 1:12:00 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\msorcl32.dll"
14 Apr 2008 1:12:28 343,040 ..... "C:\WINDOWS\ServicePackFiles\i386\mspaint.exe"
14 Apr 2008 1:12:00 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\mspatcha.dll"
13 Apr 2008 19:39:50 5,376 ..... "C:\WINDOWS\ServicePackFiles\i386\mspclock.sys"
13 Apr 2008 19:39:52 4,992 ..... "C:\WINDOWS\ServicePackFiles\i386\mspqm.sys"
13 Apr 2008 17:23:32 48,128 ..... "C:\WINDOWS\ServicePackFiles\i386\msprivs.dll"
14 Apr 2008 1:12:00 146,432 ..... "C:\WINDOWS\ServicePackFiles\i386\msrating.dll"
14 Apr 2008 1:12:00 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\msrle32.dll"
14 Apr 2008 1:12:00 134,656 ..... "C:\WINDOWS\ServicePackFiles\i386\mssap.dll"
14 Apr 2008 1:10:20 110,592 ..... "C:\WINDOWS\ServicePackFiles\i386\msscript.ocx"
14 Apr 2008 1:12:00 155,136 ..... "C:\WINDOWS\ServicePackFiles\i386\mssha.dll"
13 Apr 2008 19:14:58 76,800 ..... "C:\WINDOWS\ServicePackFiles\i386\msshamsg.dll"
13 Apr 2008 19:36:46 15,488 ..... "C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys"
14 Apr 2008 1:12:00 274,432 ..... "C:\WINDOWS\ServicePackFiles\i386\mst120.dll"
14 Apr 2008 1:12:00 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\mst123.dll"
13 Apr 2008 17:29:56 16,957 A.... "C:\WINDOWS\ServicePackFiles\i386\mstape.inf"
13 Apr 2008 19:46:08 49,024 ..... "C:\WINDOWS\ServicePackFiles\i386\mstape.sys"
14 Apr 2008 1:12:00 274,944 ..... "C:\WINDOWS\ServicePackFiles\i386\mstask.dll"
13 Apr 2008 19:39:50 5,504 ..... "C:\WINDOWS\ServicePackFiles\i386\mstee.sys"
14 Apr 2008 1:12:00 532,480 ..... "C:\WINDOWS\ServicePackFiles\i386\mstime.dll"
14 Apr 2008 1:12:30 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\mstinit.exe"
14 Apr 2008 1:12:00 116,224 ..... "C:\WINDOWS\ServicePackFiles\i386\mstlsapi.dll"
14 Apr 2008 3:04:36 10,027 ..... "C:\WINDOWS\ServicePackFiles\i386\mstsweb.cat"
14 Apr 2008 1:12:00 195,072 ..... "C:\WINDOWS\ServicePackFiles\i386\msutb.dll"
14 Apr 2008 1:12:00 132,608 ..... "C:\WINDOWS\ServicePackFiles\i386\msv1_0.dll"
14 Apr 2008 1:12:00 1,384,479 ..... "C:\WINDOWS\ServicePackFiles\i386\msvbvm60.dll"
14 Apr 2008 1:12:02 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\msvcirt.dll"
14 Apr 2008 1:12:02 413,696 ..... "C:\WINDOWS\ServicePackFiles\i386\msvcp60.dll"
14 Apr 2008 1:12:02 343,040 ..... "C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll"
13 Apr 2008 19:30:46 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\msvcrt40.dll"
14 Apr 2008 1:12:02 121,344 ..... "C:\WINDOWS\ServicePackFiles\i386\msvfw32.dll"
14 Apr 2008 1:12:02 1,428,992 ..... "C:\WINDOWS\ServicePackFiles\i386\msvidctl.dll"
14 Apr 2008 1:12:02 72,704 ..... "C:\WINDOWS\ServicePackFiles\i386\msw3prt.dll"
14 Apr 2008 1:12:02 203,776 ..... "C:\WINDOWS\ServicePackFiles\i386\mswebdvd.dll"
13 Apr 2008 19:37:12 186,880 ..... "C:\WINDOWS\ServicePackFiles\i386\mswrd6.wpc"
13 Apr 2008 19:37:14 279,552 ..... "C:\WINDOWS\ServicePackFiles\i386\mswrd8.wpc"
14 Apr 2008 1:12:02 245,248 ..... "C:\WINDOWS\ServicePackFiles\i386\mswsock.dll"
14 Apr 2008 1:12:02 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\msxactps.dll"
14 Apr 2008 1:12:02 506,368 ..... "C:\WINDOWS\ServicePackFiles\i386\msxml.dll"
14 Apr 2008 1:12:02 701,440 ..... "C:\WINDOWS\ServicePackFiles\i386\msxml2.dll"
14 Apr 2008 1:12:02 1,104,896 ..... "C:\WINDOWS\ServicePackFiles\i386\msxml3.dll"
14 Apr 2008 1:12:02 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\msyuv.dll"
14 Apr 2008 1:12:30 119,808 ..... "C:\WINDOWS\ServicePackFiles\i386\mtstocom.exe"
14 Apr 2008 1:12:02 66,560 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll"
14 Apr 2008 1:12:02 30,720 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxdm.dll"
14 Apr 2008 1:12:02 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxex.dll"
14 Apr 2008 1:12:02 34,304 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxlegih.dll"
14 Apr 2008 1:12:02 91,648 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll"
14 Apr 2008 1:12:02 1,737,856 ..... "C:\WINDOWS\ServicePackFiles\i386\mtxparhd.dll"
14 Apr 2008 1:12:30 90,624 ..... "C:\WINDOWS\ServicePackFiles\i386\muisetup.exe"
13 Apr 2008 20:17:06 105,344 ..... "C:\WINDOWS\ServicePackFiles\i386\mup.sys"
13 Apr 2008 19:43:56 12,672 ..... "C:\WINDOWS\ServicePackFiles\i386\mutohpen.sys"
14 Apr 2008 1:12:02 90,624 ..... "C:\WINDOWS\ServicePackFiles\i386\mydocs.dll"
13 Apr 2008 17:29:58 4,097 A.... "C:\WINDOWS\ServicePackFiles\i386\nabtsfec.inf"
13 Apr 2008 19:46:26 85,248 ..... "C:\WINDOWS\ServicePackFiles\i386\nabtsfec.sys"
14 Apr 2008 1:12:02 221,184 ..... "C:\WINDOWS\ServicePackFiles\i386\nac.dll"
14 Apr 2008 1:12:02 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\napipsec.dll"
14 Apr 2008 1:12:02 193,024 ..... "C:\WINDOWS\ServicePackFiles\i386\napmontr.dll"
14 Apr 2008 1:12:30 176,640 ..... "C:\WINDOWS\ServicePackFiles\i386\napstat.exe"
14 Apr 2008 1:12:30 53,760 ..... "C:\WINDOWS\ServicePackFiles\i386\narrator.exe"
14 Apr 2008 1:12:02 36,352 ..... "C:\WINDOWS\ServicePackFiles\i386\ncobjapi.dll"
14 Apr 2008 1:12:02 47,104 ..... "C:\WINDOWS\ServicePackFiles\i386\ncprov.dll"
14 Apr 2008 1:12:02 9,728 ..... "C:\WINDOWS\ServicePackFiles\i386\ncpsres.dll"
14 Apr 2008 1:12:02 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\nddeapi.dll"
14 Apr 2008 1:12:30 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\nddeapir.exe"
14 Apr 2008 1:12:02 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\nddenb32.dll"
13 Apr 2008 20:20:38 182,656 ..... "C:\WINDOWS\ServicePackFiles\i386\ndis.sys"
13 Apr 2008 17:29:58 6,742 A.... "C:\WINDOWS\ServicePackFiles\i386\ndisip.inf"
13 Apr 2008 19:46:22 10,880 ..... "C:\WINDOWS\ServicePackFiles\i386\ndisip.sys"
14 Apr 2008 1:12:02 57,344 ..... "C:\WINDOWS\ServicePackFiles\i386\ndisnpp.dll"
13 Apr 2008 19:57:28 10,112 ..... "C:\WINDOWS\ServicePackFiles\i386\ndistapi.sys"
13 Apr 2008 19:55:58 14,592 ..... "C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys"
13 Apr 2008 20:20:42 91,520 ..... "C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys"
13 Apr 2008 19:57:30 40,576 ..... "C:\WINDOWS\ServicePackFiles\i386\ndproxy.sys"
14 Apr 2008 1:12:46 56,832 ..... "C:\WINDOWS\ServicePackFiles\i386\ndptsp.tsp"
14 Apr 2008 1:12:30 42,496 ..... "C:\WINDOWS\ServicePackFiles\i386\net.exe"
14 Apr 2008 1:12:30 124,928 ..... "C:\WINDOWS\ServicePackFiles\i386\net1.exe"
14 Apr 2008 1:12:02 337,408 ..... "C:\WINDOWS\ServicePackFiles\i386\netapi32.dll"
13 Apr 2008 17:30:02 787 A.... "C:\WINDOWS\ServicePackFiles\i386\netbeac.inf"
13 Apr 2008 19:56:02 34,688 ..... "C:\WINDOWS\ServicePackFiles\i386\netbios.sys"
13 Apr 2008 20:21:00 162,816 ..... "C:\WINDOWS\ServicePackFiles\i386\netbt.sys"
14 Apr 2008 1:12:02 622,592 ..... "C:\WINDOWS\ServicePackFiles\i386\netcfgx.dll"
14 Apr 2008 1:12:30 111,104 ..... "C:\WINDOWS\ServicePackFiles\i386\netdde.exe"
13 Apr 2008 17:30:00 696 A.... "C:\WINDOWS\ServicePackFiles\i386\netfw.inf"
14 Apr 2008 1:12:02 139,264 ..... "C:\WINDOWS\ServicePackFiles\i386\netid.dll"
13 Apr 2008 17:30:02 6,151 A.... "C:\WINDOWS\ServicePackFiles\i386\netip6.inf"
14 Apr 2008 1:12:02 407,040 ..... "C:\WINDOWS\ServicePackFiles\i386\netlogon.dll"
14 Apr 2008 1:12:02 198,144 ..... "C:\WINDOWS\ServicePackFiles\i386\netman.dll"
13 Apr 2008 17:30:04 11,747 A.... "C:\WINDOWS\ServicePackFiles\i386\netmscli.inf"
14 Apr 2008 1:12:02 77,312 ..... "C:\WINDOWS\ServicePackFiles\i386\netoc.dll"
13 Apr 2008 17:30:06 9,074 A.... "C:\WINDOWS\ServicePackFiles\i386\netoc.inf"
14 Apr 2008 1:12:02 875,008 ..... "C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll"
14 Apr 2008 1:12:02 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\netrap.dll"
13 Apr 2008 17:30:06 39,025 A.... "C:\WINDOWS\ServicePackFiles\i386\netrass.inf"
13 Apr 2008 19:21:26 2,938 A.... "C:\WINDOWS\ServicePackFiles\i386\netrndis.inf"
14 Apr 2008 1:12:42 25,600 ..... "C:\WINDOWS\ServicePackFiles\i386\netsetup.cpl"
14 Apr 2008 1:16:52 329,728 ..... "C:\WINDOWS\ServicePackFiles\i386\netsetup.exe"
14 Apr 2008 1:12:30 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\netsh.exe"
14 Apr 2008 1:12:02 1,703,936 ..... "C:\WINDOWS\ServicePackFiles\i386\netshell.dll"
14 Apr 2008 1:12:30 36,864 ..... "C:\WINDOWS\ServicePackFiles\i386\netstat.exe"
13 Apr 2008 17:30:10 24,362 A.... "C:\WINDOWS\ServicePackFiles\i386\nettcpip.inf"
13 Apr 2008 17:30:12 1,997 A.... "C:\WINDOWS\ServicePackFiles\i386\nettun.inf"
14 Apr 2008 1:12:02 80,896 ..... "C:\WINDOWS\ServicePackFiles\i386\netui0.dll"
14 Apr 2008 1:12:02 245,760 ..... "C:\WINDOWS\ServicePackFiles\i386\netui1.dll"
13 Apr 2008 17:30:10 3,243 A.... "C:\WINDOWS\ServicePackFiles\i386\netupnph.inf"
13 Apr 2008 17:30:12 3,998 A.... "C:\WINDOWS\ServicePackFiles\i386\netwzc.inf"
14 Apr 2008 1:12:02 247,808 ..... "C:\WINDOWS\ServicePackFiles\i386\newdev.dll"
13 Apr 2008 19:51:26 61,824 ..... "C:\WINDOWS\ServicePackFiles\i386\nic1394.sys"
14 Apr 2008 1:12:02 98,304 ..... "C:\WINDOWS\ServicePackFiles\i386\nlhtml.dll"
14 Apr 2008 1:12:02 229,376 ..... "C:\WINDOWS\ServicePackFiles\i386\nmas.dll"
14 Apr 2008 1:12:02 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\nmasnt.dll"
14 Apr 2008 1:12:02 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\nmchat.dll"
14 Apr 2008 1:12:02 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\nmcom.dll"
14 Apr 2008 1:12:02 151,552 ..... "C:\WINDOWS\ServicePackFiles\i386\nmft.dll"
14 Apr 2008 1:12:02 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\nmmkcert.dll"
13 Apr 2008 19:53:10 40,320 ..... "C:\WINDOWS\ServicePackFiles\i386\nmnt.sys"
14 Apr 2008 1:12:02 172,032 ..... "C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll"
14 Apr 2008 1:12:02 188,416 ..... "C:\WINDOWS\ServicePackFiles\i386\nmwb.dll"
14 Apr 2008 1:12:30 69,120 ..... "C:\WINDOWS\ServicePackFiles\i386\notepad.exe"
13 Apr 2008 19:32:40 30,848 ..... "C:\WINDOWS\ServicePackFiles\i386\npfs.sys"
14 Apr 2008 1:12:30 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\nppagent.exe"
14 Apr 2008 1:12:02 54,784 ..... "C:\WINDOWS\ServicePackFiles\i386\npptools.dll"
13 Apr 2008 19:54:36 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\nscirda.sys"
14 Apr 2008 1:12:30 76,800 ..... "C:\WINDOWS\ServicePackFiles\i386\nslookup.exe"
14 Apr 2008 3:04:46 2,144,487 ..... "C:\WINDOWS\ServicePackFiles\i386\nt5.cat"
14 Apr 2008 3:04:40 402,264 ..... "C:\WINDOWS\ServicePackFiles\i386\nt5inf.cat"
14 Apr 2008 1:11:24 706,048 ..... "C:\WINDOWS\ServicePackFiles\i386\ntdll.dll"
14 Apr 2008 1:12:02 67,072 ..... "C:\WINDOWS\ServicePackFiles\i386\ntdsapi.dll"
14 Apr 2008 1:12:02 212,992 ..... "C:\WINDOWS\ServicePackFiles\i386\ntevt.dll"
13 Apr 2008 20:15:54 574,976 ..... "C:\WINDOWS\ServicePackFiles\i386\ntfs.sys"
13 Apr 2008 20:24:38 2,145,280 ..... "C:\WINDOWS\ServicePackFiles\i386\ntkrnlmp.exe"
13 Apr 2008 19:31:22 2,065,792 ..... "C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe"
13 Apr 2008 19:31:22 2,023,936 ..... "C:\WINDOWS\ServicePackFiles\i386\ntkrpamp.exe"
14 Apr 2008 1:12:02 44,032 ..... "C:\WINDOWS\ServicePackFiles\i386\ntlanman.dll"
13 Apr 2008 19:31:44 250,048 ..... "C:\WINDOWS\ServicePackFiles\i386\ntldr"
14 Apr 2008 1:12:02 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\ntlsapi.dll"
14 Apr 2008 1:12:02 118,784 ..... "C:\WINDOWS\ServicePackFiles\i386\ntmarta.dll"
14 Apr 2008 1:12:02 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\ntmsapi.dll"
14 Apr 2008 1:12:02 179,200 ..... "C:\WINDOWS\ServicePackFiles\i386\ntmsdba.dll"
14 Apr 2008 1:12:02 488,448 ..... "C:\WINDOWS\ServicePackFiles\i386\ntmsmgr.dll"
14 Apr 2008 1:12:02 435,200 ..... "C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll"
14 Apr 2008 1:12:02 62,976 ..... "C:\WINDOWS\ServicePackFiles\i386\ntoc.dll"
13 Apr 2008 20:27:54 2,188,928 ..... "C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe"
14 Apr 2008 3:04:44 1,088,840 ..... "C:\WINDOWS\ServicePackFiles\i386\ntprint.cat"
14 Apr 2008 1:12:02 91,136 ..... "C:\WINDOWS\ServicePackFiles\i386\ntprint.dll"
13 Apr 2008 17:30:14 1,498,946 A.... "C:\WINDOWS\ServicePackFiles\i386\ntprint.inf"
14 Apr 2008 1:12:02 143,360 ..... "C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll"
14 Apr 2008 1:12:30 420,864 ..... "C:\WINDOWS\ServicePackFiles\i386\ntvdm.exe"
14 Apr 2008 1:12:02 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\ntvdmd.dll"
14 Apr 2008 1:12:42 257,024 ..... "C:\WINDOWS\ServicePackFiles\i386\nusrmgr.cpl"
14 Apr 2008 1:12:02 4,274,816 ..... "C:\WINDOWS\ServicePackFiles\i386\nv4_disp.dll"
13 Apr 2008 19:56:06 88,320 ..... "C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys"
14 Apr 2008 1:12:02 142,336 ..... "C:\WINDOWS\ServicePackFiles\i386\nwprovau.dll"
14 Apr 2008 1:12:02 270,336 ..... "C:\WINDOWS\ServicePackFiles\i386\oakley.dll"
14 Apr 2008 1:10:30 229,376 ..... "C:\WINDOWS\ServicePackFiles\i386\obelog.dll"
14 Apr 2008 1:10:30 966,656 ..... "C:\WINDOWS\ServicePackFiles\i386\obemetal.dll"
14 Apr 2008 1:10:30 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\obepopc.dll"
14 Apr 2008 1:12:02 286,208 ..... "C:\WINDOWS\ServicePackFiles\i386\objsel.dll"
13 Apr 2008 19:40:52 405,504 ..... "C:\WINDOWS\ServicePackFiles\i386\obrb041b.dll"
13 Apr 2008 19:40:56 408,576 ..... "C:\WINDOWS\ServicePackFiles\i386\obrb0424.dll"
14 Apr 2008 1:12:02 96,256 ..... "C:\WINDOWS\ServicePackFiles\i386\occache.dll"
14 Apr 2008 1:12:02 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\ocgen.dll"
14 Apr 2008 1:12:02 67,584 ..... "C:\WINDOWS\ServicePackFiles\i386\ocmanage.dll"
14 Apr 2008 1:12:02 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\ocmsn.dll"
14 Apr 2008 1:12:02 249,856 ..... "C:\WINDOWS\ServicePackFiles\i386\odbc32.dll"
14 Apr 2008 1:12:02 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\odbc32gt.dll"
14 Apr 2008 1:12:30 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe"
14 Apr 2008 1:12:02 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcbcp.dll"
14 Apr 2008 1:12:02 135,168 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcconf.dll"
14 Apr 2008 1:12:30 69,632 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcconf.exe"
13 Apr 2008 18:26:10 4,310 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcconf.rsp"
14 Apr 2008 1:12:42 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\odbccp32.cpl"
14 Apr 2008 1:12:02 106,496 ..... "C:\WINDOWS\ServicePackFiles\i386\odbccp32.dll"
14 Apr 2008 1:12:02 65,536 ..... "C:\WINDOWS\ServicePackFiles\i386\odbccr32.dll"
14 Apr 2008 1:12:02 65,536 ..... "C:\WINDOWS\ServicePackFiles\i386\odbccu32.dll"
13 Apr 2008 18:26:06 94,208 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcint.dll"
14 Apr 2008 1:10:32 53,279 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcji32.dll"
14 Apr 2008 1:12:02 278,559 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcjt32.dll"
13 Apr 2008 18:26:06 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\odbcp32r.dll"
14 Apr 2008 1:12:02 147,456 ..... "C:\WINDOWS\ServicePackFiles\i386\odbctrac.dll"
14 Apr 2008 1:12:02 20,511 ..... "C:\WINDOWS\ServicePackFiles\i386\oddbse32.dll"
14 Apr 2008 1:12:02 20,510 ..... "C:\WINDOWS\ServicePackFiles\i386\odexl32.dll"
14 Apr 2008 1:12:02 20,510 ..... "C:\WINDOWS\ServicePackFiles\i386\odfox32.dll"
14 Apr 2008 1:12:02 20,510 ..... "C:\WINDOWS\ServicePackFiles\i386\odpdx32.dll"
14 Apr 2008 1:12:02 20,511 ..... "C:\WINDOWS\ServicePackFiles\i386\odtext32.dll"
13 Apr 2008 17:30:18 771 A.... "C:\WINDOWS\ServicePackFiles\i386\oeaccess.inf"
14 Apr 2008 1:12:02 104,448 ..... "C:\WINDOWS\ServicePackFiles\i386\oeimport.dll"
14 Apr 2008 1:12:30 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\oemig50.exe"
14 Apr 2008 1:12:02 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\oemiglib.dll"
14 Apr 2008 1:12:02 192,000 ..... "C:\WINDOWS\ServicePackFiles\i386\offfilt.dll"
13 Apr 2008 19:46:18 61,696 ..... "C:\WINDOWS\ServicePackFiles\i386\ohci1394.sys"
14 Apr 2008 1:12:02 1,287,168 ..... "C:\WINDOWS\ServicePackFiles\i386\ole32.dll"
14 Apr 2008 1:12:02 551,936 ..... "C:\WINDOWS\ServicePackFiles\i386\oleaut32.dll"
14 Apr 2008 1:12:02 74,752 ..... "C:\WINDOWS\ServicePackFiles\i386\olecli32.dll"
14 Apr 2008 1:12:02 37,376 ..... "C:\WINDOWS\ServicePackFiles\i386\olecnv32.dll"
14 Apr 2008 1:12:02 487,424 ..... "C:\WINDOWS\ServicePackFiles\i386\oledb32.dll"
14 Apr 2008 1:12:02 65,536 ..... "C:\WINDOWS\ServicePackFiles\i386\oledb32r.dll"
14 Apr 2008 1:12:02 122,880 ..... "C:\WINDOWS\ServicePackFiles\i386\oledlg.dll"
14 Apr 2008 1:12:02 107,008 ..... "C:\WINDOWS\ServicePackFiles\i386\oleprn.dll"
14 Apr 2008 1:12:02 84,992 ..... "C:\WINDOWS\ServicePackFiles\i386\olepro32.dll"
14 Apr 2008 1:12:02 144,384 ..... "C:\WINDOWS\ServicePackFiles\i386\onex.dll"
13 Apr 2008 17:30:16 6,344 A.... "C:\WINDOWS\ServicePackFiles\i386\oobe.inf"
14 Apr 2008 1:12:32 51,200 ..... "C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe"
14 Apr 2008 1:12:02 713,728 ..... "C:\WINDOWS\ServicePackFiles\i386\opengl32.dll"
13 Apr 2008 19:32:32 166,912 ..... "C:\WINDOWS\ServicePackFiles\i386\oschoice.exe"
14 Apr 2008 1:12:32 215,552 ..... "C:\WINDOWS\ServicePackFiles\i386\osk.exe"
13 Apr 2008 19:31:44 230,400 ..... "C:\WINDOWS\ServicePackFiles\i386\osloader.exe"
13 Apr 2008 19:31:44 278,016 ..... "C:\WINDOWS\ServicePackFiles\i386\osloader.ntd"
14 Apr 2008 1:12:02 67,584 ..... "C:\WINDOWS\ServicePackFiles\i386\osuninst.dll"
14 Apr 2008 1:12:02 153,600 ..... "C:\WINDOWS\ServicePackFiles\i386\p2p.dll"
13 Apr 2008 17:30:18 6,786 A.... "C:\WINDOWS\ServicePackFiles\i386\p2p.inf"
14 Apr 2008 1:12:02 105,472 ..... "C:\WINDOWS\ServicePackFiles\i386\p2pgasvc.dll"
14 Apr 2008 1:12:02 313,856 ..... "C:\WINDOWS\ServicePackFiles\i386\p2pgraph.dll"
14 Apr 2008 1:12:02 115,712 ..... "C:\WINDOWS\ServicePackFiles\i386\p2pnetsh.dll"
14 Apr 2008 1:12:02 554,496 ..... "C:\WINDOWS\ServicePackFiles\i386\p2psvc.dll"
13 Apr 2008 19:31:32 42,752 ..... "C:\WINDOWS\ServicePackFiles\i386\p3.sys"
14 Apr 2008 1:12:32 58,368 ..... "C:\WINDOWS\ServicePackFiles\i386\packager.exe"
13 Apr 2008 19:40:10 80,128 ..... "C:\WINDOWS\ServicePackFiles\i386\parport.sys"
13 Apr 2008 19:40:50 19,712 ..... "C:\WINDOWS\ServicePackFiles\i386\partmgr.sys"
14 Apr 2008 1:12:02 67,584 ..... "C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll"
14 Apr 2008 1:12:02 102,912 ..... "C:\WINDOWS\ServicePackFiles\i386\pchshell.dll"
14 Apr 2008 1:12:02 38,400 ..... "C:\WINDOWS\ServicePackFiles\i386\pchsvc.dll"
13 Apr 2008 19:36:44 68,224 ..... "C:\WINDOWS\ServicePackFiles\i386\pci.sys"
13 Apr 2008 19:40:30 24,960 ..... "C:\WINDOWS\ServicePackFiles\i386\pciidex.sys"
13 Apr 2008 19:36:44 120,192 ..... "C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys"
14 Apr 2008 1:12:02 284,160 ..... "C:\WINDOWS\ServicePackFiles\i386\pdh.dll"
14 Apr 2008 1:12:02 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll"
14 Apr 2008 1:12:02 26,624 ..... "C:\WINDOWS\ServicePackFiles\i386\perfdisk.dll"
14 Apr 2008 1:12:32 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\perfmon.exe"
14 Apr 2008 1:12:02 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\perfnet.dll"
14 Apr 2008 1:12:02 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\perfos.dll"
14 Apr 2008 1:12:02 34,816 ..... "C:\WINDOWS\ServicePackFiles\i386\perfproc.dll"
13 Apr 2008 19:44:30 27,904 ..... "C:\WINDOWS\ServicePackFiles\i386\perm2.sys"
14 Apr 2008 1:10:34 211,584 ..... "C:\WINDOWS\ServicePackFiles\i386\perm2dll.dll"
13 Apr 2008 19:44:30 28,032 ..... "C:\WINDOWS\ServicePackFiles\i386\perm3.sys"
14 Apr 2008 1:10:34 259,328 ..... "C:\WINDOWS\ServicePackFiles\i386\perm3dd.dll"
14 Apr 2008 1:12:02 176,128 ..... "C:\WINDOWS\ServicePackFiles\i386\photowiz.dll"
14 Apr 2008 1:12:02 35,328 ..... "C:\WINDOWS\ServicePackFiles\i386\pid.dll"
13 Apr 2008 19:35:22 24,064 ..... "C:\WINDOWS\ServicePackFiles\i386\pidgen.dll"
14 Apr 2008 1:12:32 281,088 ..... "C:\WINDOWS\ServicePackFiles\i386\pinball.exe"
14 Apr 2008 1:12:32 17,920 ..... "C:\WINDOWS\ServicePackFiles\i386\ping.exe"
14 Apr 2008 1:12:02 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\pjlmon.dll"
14 Apr 2008 1:12:02 44,544 ..... "C:\WINDOWS\ServicePackFiles\i386\plotter.dll"
14 Apr 2008 1:12:02 52,736 ..... "C:\WINDOWS\ServicePackFiles\i386\plotui.dll"
14 Apr 2008 1:12:02 412,160 ..... "C:\WINDOWS\ServicePackFiles\i386\pmh.dll"
14 Apr 2008 1:12:02 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\pngfilt.dll"
13 Apr 2008 17:30:20 53,259 A.... "C:\WINDOWS\ServicePackFiles\i386\pnpscsi.inf"
14 Apr 2008 1:12:02 58,880 ..... "C:\WINDOWS\ServicePackFiles\i386\pnrpnsp.dll"
14 Apr 2008 1:12:02 105,472 ..... "C:\WINDOWS\ServicePackFiles\i386\polstore.dll"
13 Apr 2008 20:19:42 146,048 ..... "C:\WINDOWS\ServicePackFiles\i386\portcls.sys"
14 Apr 2008 1:12:42 114,688 ..... "C:\WINDOWS\ServicePackFiles\i386\powercfg.cpl"
14 Apr 2008 1:12:32 49,152 ..... "C:\WINDOWS\ServicePackFiles\i386\powercfg.exe"
13 Apr 2008 19:40:56 8,832 ..... "C:\WINDOWS\ServicePackFiles\i386\powerfil.sys"
14 Apr 2008 1:12:04 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\powrprof.dll"
13 Apr 2008 19:41:00 17,664 ..... "C:\WINDOWS\ServicePackFiles\i386\ppa3.sys"
14 Apr 2008 1:12:04 560,640 ..... "C:\WINDOWS\ServicePackFiles\i386\printui.dll"
13 Apr 2008 19:31:30 35,840 ..... "C:\WINDOWS\ServicePackFiles\i386\processr.sys"
14 Apr 2008 1:10:36 81,920 ..... "C:\WINDOWS\ServicePackFiles\i386\proctexe.ocx"
14 Apr 2008 1:12:04 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\profmap.dll"
14 Apr 2008 1:12:32 109,568 ..... "C:\WINDOWS\ServicePackFiles\i386\progman.exe"
14 Apr 2008 1:12:32 50,176 ..... "C:\WINDOWS\ServicePackFiles\i386\proquota.exe"
14 Apr 2008 1:12:04 237,056 ..... "C:\WINDOWS\ServicePackFiles\i386\provthrd.dll"
14 Apr 2008 1:12:32 9,216 ..... "C:\WINDOWS\ServicePackFiles\i386\proxycfg.exe"
14 Apr 2008 1:12:04 728,576 ..... "C:\WINDOWS\ServicePackFiles\i386\ps5ui.dll"
14 Apr 2008 1:12:04 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\psapi.dll"
14 Apr 2008 1:12:04 96,768 ..... "C:\WINDOWS\ServicePackFiles\i386\psbase.dll"
13 Apr 2008 19:56:38 69,120 ..... "C:\WINDOWS\ServicePackFiles\i386\psched.sys"
14 Apr 2008 1:12:04 543,232 ..... "C:\WINDOWS\ServicePackFiles\i386\pscript5.dll"
14 Apr 2008 1:12:04 363,520 ..... "C:\WINDOWS\ServicePackFiles\i386\psisdecd.dll"
14 Apr 2008 1:12:42 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\psisrndr.ax"
14 Apr 2008 1:12:04 43,520 ..... "C:\WINDOWS\ServicePackFiles\i386\pstorec.dll"
14 Apr 2008 1:12:04 34,304 ..... "C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll"
14 Apr 2008 1:12:04 159,232 ..... "C:\WINDOWS\ServicePackFiles\i386\ptpusd.dll"
14 Apr 2008 1:12:04 150,528 ..... "C:\WINDOWS\ServicePackFiles\i386\qagent.dll"
14 Apr 2008 1:12:04 291,328 ..... "C:\WINDOWS\ServicePackFiles\i386\qagentrt.dll"
14 Apr 2008 1:12:04 237,568 ..... "C:\WINDOWS\ServicePackFiles\i386\qasf.dll"
14 Apr 2008 1:12:04 192,512 ..... "C:\WINDOWS\ServicePackFiles\i386\qcap.dll"
14 Apr 2008 1:12:04 62,464 ..... "C:\WINDOWS\ServicePackFiles\i386\qcliprov.dll"
14 Apr 2008 1:12:04 279,040 ..... "C:\WINDOWS\ServicePackFiles\i386\qdv.dll"
14 Apr 2008 1:12:04 386,048 ..... "C:\WINDOWS\ServicePackFiles\i386\qdvd.dll"
14 Apr 2008 1:12:04 562,176 ..... "C:\WINDOWS\ServicePackFiles\i386\qedit.dll"
13 Apr 2008 18:21:32 733,696 ..... "C:\WINDOWS\ServicePackFiles\i386\qedwipes.dll"
13 Apr 2008 19:40:52 6,016 ..... "C:\WINDOWS\ServicePackFiles\i386\qic157.sys"
14 Apr 2008 1:12:04 409,088 ..... "C:\WINDOWS\ServicePackFiles\i386\qmgr.dll"
14 Apr 2008 1:12:04 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\qmgrprxy.dll"
14 Apr 2008 1:12:32 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\qprocess.exe"
14 Apr 2008 1:12:04 1,288,192 ..... "C:\WINDOWS\ServicePackFiles\i386\quartz.dll"
14 Apr 2008 1:12:04 1,435,648 ..... "C:\WINDOWS\ServicePackFiles\i386\query.dll"
14 Apr 2008 1:12:04 76,800 ..... "C:\WINDOWS\ServicePackFiles\i386\qutil.dll"
14 Apr 2008 1:12:04 43,520 ..... "C:\WINDOWS\ServicePackFiles\i386\racpldlg.dll"
13 Apr 2008 17:30:26 1,894 A.... "C:\WINDOWS\ServicePackFiles\i386\ramdisk.inf"
13 Apr 2008 19:41:24 20,736 ..... "C:\WINDOWS\ServicePackFiles\i386\ramdisk.sys"
14 Apr 2008 1:12:04 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll"
14 Apr 2008 1:12:04 237,056 ..... "C:\WINDOWS\ServicePackFiles\i386\rasapi32.dll"
14 Apr 2008 1:12:04 88,576 ..... "C:\WINDOWS\ServicePackFiles\i386\rasauto.dll"
14 Apr 2008 1:12:04 79,872 ..... "C:\WINDOWS\ServicePackFiles\i386\raschap.dll"
14 Apr 2008 1:12:04 658,432 ..... "C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll"
13 Apr 2008 20:19:44 51,328 ..... "C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys"
14 Apr 2008 1:12:04 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\rasman.dll"
14 Apr 2008 1:12:04 186,368 ..... "C:\WINDOWS\ServicePackFiles\i386\rasmans.dll"
14 Apr 2008 1:12:32 56,832 ..... "C:\WINDOWS\ServicePackFiles\i386\rasphone.exe"
14 Apr 2008 1:12:04 210,944 ..... "C:\WINDOWS\ServicePackFiles\i386\rasppp.dll"
13 Apr 2008 19:57:32 41,472 ..... "C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys"
13 Apr 2008 20:19:48 48,384 ..... "C:\WINDOWS\ServicePackFiles\i386\raspptp.sys"
14 Apr 2008 1:12:04 61,952 ..... "C:\WINDOWS\ServicePackFiles\i386\rasqec.dll"
14 Apr 2008 1:12:04 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\rassapi.dll"
14 Apr 2008 1:12:04 58,368 ..... "C:\WINDOWS\ServicePackFiles\i386\rastapi.dll"
14 Apr 2008 1:12:04 150,016 ..... "C:\WINDOWS\ServicePackFiles\i386\rastls.dll"
14 Apr 2008 1:12:04 102,400 ..... "C:\WINDOWS\ServicePackFiles\i386\rcbdyctl.dll"
14 Apr 2008 1:12:32 35,840 ..... "C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe"
14 Apr 2008 1:12:32 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\rcp.exe"
13 Apr 2008 20:28:40 175,744 ..... "C:\WINDOWS\ServicePackFiles\i386\rdbss.sys"
14 Apr 2008 1:12:04 147,968 ..... "C:\WINDOWS\ServicePackFiles\i386\rdchost.dll"
14 Apr 2008 1:12:32 62,976 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpclip.exe"
14 Apr 2008 1:13:22 92,424 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpdd.dll"
13 Apr 2008 19:32:52 196,224 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys"
14 Apr 2008 1:12:04 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpsnd.dll"
14 Apr 2008 1:13:22 139,656 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys"
14 Apr 2008 1:13:22 87,176 ..... "C:\WINDOWS\ServicePackFiles\i386\rdpwsx.dll"
14 Apr 2008 1:12:32 13,824 ..... "C:\WINDOWS\ServicePackFiles\i386\rdsaddin.exe"
14 Apr 2008 1:12:32 67,072 ..... "C:\WINDOWS\ServicePackFiles\i386\rdshost.exe"
13 Apr 2008 19:40:28 57,600 ..... "C:\WINDOWS\ServicePackFiles\i386\redbook.sys"
14 Apr 2008 1:12:32 50,176 ..... "C:\WINDOWS\ServicePackFiles\i386\reg.exe"
14 Apr 2008 1:12:04 49,664 ..... "C:\WINDOWS\ServicePackFiles\i386\regapi.dll"
14 Apr 2008 1:12:32 146,432 ..... "C:\WINDOWS\ServicePackFiles\i386\regedit.exe"
14 Apr 2008 1:12:04 59,904 ..... "C:\WINDOWS\ServicePackFiles\i386\regsvc.dll"
14 Apr 2008 1:12:32 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\regsvr32.exe"
14 Apr 2008 1:12:04 397,824 ..... "C:\WINDOWS\ServicePackFiles\i386\regwizc.dll"
14 Apr 2008 1:12:04 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\remotepg.dll"
14 Apr 2008 1:12:46 76,800 ..... "C:\WINDOWS\ServicePackFiles\i386\remotesp.tsp"
14 Apr 2008 1:12:04 178,176 ..... "C:\WINDOWS\ServicePackFiles\i386\repdrvfs.dll"
14 Apr 2008 1:12:04 58,880 ..... "C:\WINDOWS\ServicePackFiles\i386\resutils.dll"
14 Apr 2008 1:12:34 13,824 ..... "C:\WINDOWS\ServicePackFiles\i386\rexec.exe"
13 Apr 2008 19:46:32 59,136 ..... "C:\WINDOWS\ServicePackFiles\i386\rfcomm.sys"
14 Apr 2008 1:12:04 290,304 ..... "C:\WINDOWS\ServicePackFiles\i386\rhttpaa.dll"
14 Apr 2008 1:12:04 123,392 ..... "C:\WINDOWS\ServicePackFiles\i386\riafres.dll"
14 Apr 2008 1:12:04 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\riafui1.dll"
14 Apr 2008 1:12:04 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\riafui2.dll"
14 Apr 2008 1:12:04 433,664 ..... "C:\WINDOWS\ServicePackFiles\i386\riched20.dll"
13 Apr 2008 19:55:08 202,624 ..... "C:\WINDOWS\ServicePackFiles\i386\rmcast.sys"
13 Apr 2008 19:56:50 30,592 ..... "C:\WINDOWS\ServicePackFiles\i386\rndismp.sys"
13 Apr 2008 19:56:50 30,592 ..... "C:\WINDOWS\ServicePackFiles\i386\rndismpx.sys"
13 Apr 2008 19:40:14 79,104 ..... "C:\WINDOWS\ServicePackFiles\i386\rocket.sys"
14 Apr 2008 1:12:04 584,704 ..... "C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll"
14 Apr 2008 1:12:04 399,360 ..... "C:\WINDOWS\ServicePackFiles\i386\rpcss.dll"
14 Apr 2008 1:12:04 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\rrcm.dll"
13 Apr 2008 18:37:58 208,384 ..... "C:\WINDOWS\ServicePackFiles\i386\rsaenh.dll"
14 Apr 2008 1:12:34 14,848 ..... "C:\WINDOWS\ServicePackFiles\i386\rsh.exe"
14 Apr 2008 1:12:04 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\rshx32.dll"
14 Apr 2008 1:12:04 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\rsmps.dll"
14 Apr 2008 1:12:34 380,416 ..... "C:\WINDOWS\ServicePackFiles\i386\rstrui.exe"
14 Apr 2008 1:12:04 92,672 ..... "C:\WINDOWS\ServicePackFiles\i386\rsvpsp.dll"
14 Apr 2008 1:12:34 77,312 ..... "C:\WINDOWS\ServicePackFiles\i386\rtcshare.exe"
14 Apr 2008 1:12:04 31,744 ..... "C:\WINDOWS\ServicePackFiles\i386\rtipxmib.dll"
14 Apr 2008 1:12:04 44,032 ..... "C:\WINDOWS\ServicePackFiles\i386\rtutils.dll"
14 Apr 2008 1:12:34 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\rundll32.exe"
14 Apr 2008 1:12:34 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\runonce.exe"
14 Apr 2008 1:12:04 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\rw001ext.dll"
14 Apr 2008 1:12:04 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\rw330ext.dll"
14 Apr 2008 1:12:04 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\rw430ext.dll"
14 Apr 2008 1:12:04 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\rw450ext.dll"
14 Apr 2008 1:12:04 397,056 ..... "C:\WINDOWS\ServicePackFiles\i386\s3gnb.dll"
14 Apr 2008 1:12:04 43,520 ..... "C:\WINDOWS\ServicePackFiles\i386\safrcdlg.dll"
14 Apr 2008 1:12:04 29,696 ..... "C:\WINDOWS\ServicePackFiles\i386\safrdm.dll"
14 Apr 2008 1:12:04 45,568 ..... "C:\WINDOWS\ServicePackFiles\i386\safrslv.dll"
14 Apr 2008 1:12:04 64,000 ..... "C:\WINDOWS\ServicePackFiles\i386\samlib.dll"
14 Apr 2008 1:12:04 415,744 ..... "C:\WINDOWS\ServicePackFiles\i386\samsrv.dll"
14 Apr 2008 1:12:42 155,648 ..... "C:\WINDOWS\ServicePackFiles\i386\sapi.cpl"
14 Apr 2008 1:12:04 741,376 ..... "C:\WINDOWS\ServicePackFiles\i386\sapi.dll"
14 Apr 2008 1:12:34 13,312 ..... "C:\WINDOWS\ServicePackFiles\i386\savedump.exe"
14 Apr 2008 1:12:04 270,848 ..... "C:\WINDOWS\ServicePackFiles\i386\sbe.dll"
14 Apr 2008 1:12:04 159,232 ..... "C:\WINDOWS\ServicePackFiles\i386\sbeio.dll"
13 Apr 2008 19:40:48 43,904 ..... "C:\WINDOWS\ServicePackFiles\i386\sbp2port.sys"
14 Apr 2008 1:12:04 69,632 ..... "C:\WINDOWS\ServicePackFiles\i386\scarddlg.dll"
14 Apr 2008 1:12:34 95,744 ..... "C:\WINDOWS\ServicePackFiles\i386\scardsvr.exe"
14 Apr 2008 1:12:06 171,008 ..... "C:\WINDOWS\ServicePackFiles\i386\sccsccp.dll"
14 Apr 2008 1:12:06 181,248 ..... "C:\WINDOWS\ServicePackFiles\i386\scecli.dll"
13 Apr 2008 17:30:28 17,708 A.... "C:\WINDOWS\ServicePackFiles\i386\sceregvl.inf"
14 Apr 2008 1:12:06 314,880 ..... "C:\WINDOWS\ServicePackFiles\i386\scesrv.dll"
14 Apr 2008 1:12:06 144,384 ..... "C:\WINDOWS\ServicePackFiles\i386\schannel.dll"
14 Apr 2008 1:12:06 192,512 ..... "C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll"
14 Apr 2008 1:12:06 20,480 ..... "C:\WINDOWS\ServicePackFiles\i386\sclgntfy.dll"
14 Apr 2008 1:12:34 36,352 ..... "C:\WINDOWS\ServicePackFiles\i386\scrcons.exe"
14 Apr 2008 1:12:06 215,552 ..... "C:\WINDOWS\ServicePackFiles\i386\script.dll"
14 Apr 2008 1:12:06 199,680 ..... "C:\WINDOWS\ServicePackFiles\i386\scripta.dll"
14 Apr 2008 1:12:44 9,216 ..... "C:\WINDOWS\ServicePackFiles\i386\scrnsave.scr"
14 Apr 2008 1:12:06 180,224 ..... "C:\WINDOWS\ServicePackFiles\i386\scrobj.dll"
14 Apr 2008 1:12:06 172,032 ..... "C:\WINDOWS\ServicePackFiles\i386\scrrun.dll"
13 Apr 2008 17:30:28 10,822 A.... "C:\WINDOWS\ServicePackFiles\i386\scsi.inf"
13 Apr 2008 19:40:30 96,384 ..... "C:\WINDOWS\ServicePackFiles\i386\scsiport.sys"
13 Apr 2008 19:45:34 11,520 ..... "C:\WINDOWS\ServicePackFiles\i386\scsiscan.sys"
14 Apr 2008 1:12:34 77,312 ..... "C:\WINDOWS\ServicePackFiles\i386\sdbinst.exe"
13 Apr 2008 17:30:28 3,669 A.... "C:\WINDOWS\ServicePackFiles\i386\sdbus.inf"
13 Apr 2008 19:36:44 79,232 ..... "C:\WINDOWS\ServicePackFiles\i386\sdbus.sys"
14 Apr 2008 1:12:06 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\sdhcinst.dll"
14 Apr 2008 1:12:06 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\seclogon.dll"
13 Apr 2008 17:30:30 8,339 A.... "C:\WINDOWS\ServicePackFiles\i386\secrecs.inf"
14 Apr 2008 1:12:06 56,320 ..... "C:\WINDOWS\ServicePackFiles\i386\secur32.dll"
14 Apr 2008 1:12:06 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\security.dll"
14 Apr 2008 1:12:06 29,184 ..... "C:\WINDOWS\ServicePackFiles\i386\sendcmsg.dll"
14 Apr 2008 1:12:06 54,784 ..... "C:\WINDOWS\ServicePackFiles\i386\sendmail.dll"
14 Apr 2008 1:12:06 39,424 ..... "C:\WINDOWS\ServicePackFiles\i386\sens.dll"
14 Apr 2008 1:12:06 7,168 ..... "C:\WINDOWS\ServicePackFiles\i386\sensapi.dll"
13 Apr 2008 19:40:12 15,744 ..... "C:\WINDOWS\ServicePackFiles\i386\serenum.sys"
13 Apr 2008 20:15:46 64,512 ..... "C:\WINDOWS\ServicePackFiles\i386\serial.sys"
14 Apr 2008 1:12:06 56,320 ..... "C:\WINDOWS\ServicePackFiles\i386\servdeps.dll"
14 Apr 2008 1:12:34 108,544 ..... "C:\WINDOWS\ServicePackFiles\i386\services.exe"
14 Apr 2008 1:12:34 141,312 ..... "C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe"
14 Apr 2008 1:12:34 31,232 ..... "C:\WINDOWS\ServicePackFiles\i386\sethc.exe"
14 Apr 2008 1:12:34 23,040 ..... "C:\WINDOWS\ServicePackFiles\i386\setup.exe"
14 Apr 2008 1:12:34 73,216 ..... "C:\WINDOWS\ServicePackFiles\i386\setup50.exe"
14 Apr 2008 5:42:06 985,088 ..... "C:\WINDOWS\ServicePackFiles\i386\setupapi.dll"
14 Apr 2008 1:12:36 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\setupn.exe"
14 Apr 2008 1:12:06 101,376 ..... "C:\WINDOWS\ServicePackFiles\i386\setupqry.dll"
14 Apr 2008 1:12:06 5,120 ..... "C:\WINDOWS\ServicePackFiles\i386\sfc.dll"
14 Apr 2008 1:12:06 1,614,848 ..... "C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll"
14 Apr 2008 1:12:06 140,288 ..... "C:\WINDOWS\ServicePackFiles\i386\sfc_os.dll"
13 Apr 2008 17:30:32 4,433 A.... "C:\WINDOWS\ServicePackFiles\i386\sffdisk.inf"
13 Apr 2008 19:40:48 11,904 ..... "C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys"
13 Apr 2008 19:40:48 10,240 ..... "C:\WINDOWS\ServicePackFiles\i386\sffp_mmc.sys"
13 Apr 2008 19:40:48 11,008 ..... "C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys"
13 Apr 2008 19:40:48 11,392 ..... "C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys"
13 Apr 2008 18:03:20 549,376 ..... "C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll"
14 Apr 2008 1:12:06 1,499,136 ..... "C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll"
13 Apr 2008 17:30:32 26,407 A.... "C:\WINDOWS\ServicePackFiles\i386\shell.inf"
14 Apr 2008 1:12:06 8,461,312 ..... "C:\WINDOWS\ServicePackFiles\i386\shell32.dll"
14 Apr 2008 1:12:06 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\shfolder.dll"
14 Apr 2008 1:12:06 68,096 ..... "C:\WINDOWS\ServicePackFiles\i386\shgina.dll"
14 Apr 2008 1:12:06 65,024 ..... "C:\WINDOWS\ServicePackFiles\i386\shimeng.dll"
14 Apr 2008 1:12:06 438,272 ..... "C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll"
14 Apr 2008 1:12:06 474,112 ..... "C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll"
13 Apr 2008 17:30:32 6,540 A.... "C:\WINDOWS\ServicePackFiles\i386\shl_img.inf"
14 Apr 2008 1:12:36 45,056 ..... "C:\WINDOWS\ServicePackFiles\i386\shmgrate.exe"
14 Apr 2008 1:12:36 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe"
14 Apr 2008 1:12:06 27,648 ..... "C:\WINDOWS\ServicePackFiles\i386\shscrap.dll"
14 Apr 2008 1:12:06 135,168 ..... "C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll"
14 Apr 2008 1:12:06 20,536 ..... "C:\WINDOWS\ServicePackFiles\i386\shtml.dll"
14 Apr 2008 1:12:36 16,437 ..... "C:\WINDOWS\ServicePackFiles\i386\shtml.exe"
14 Apr 2008 1:12:36 19,456 ..... "C:\WINDOWS\ServicePackFiles\i386\shutdown.exe"
14 Apr 2008 1:12:06 13,312 ..... "C:\WINDOWS\ServicePackFiles\i386\sigtab.dll"
14 Apr 2008 1:12:36 70,144 ..... "C:\WINDOWS\ServicePackFiles\i386\sigverif.exe"
14 Apr 2008 1:12:06 3,901 ..... "C:\WINDOWS\ServicePackFiles\i386\siint5.dll"
13 Apr 2008 18:24:16 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\simpdata.tlb"
13 Apr 2008 19:36:40 40,960 ..... "C:\WINDOWS\ServicePackFiles\i386\sisagp.sys"
14 Apr 2008 1:12:36 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\skeys.exe"
14 Apr 2008 1:12:06 25,088 ..... "C:\WINDOWS\ServicePackFiles\i386\slayerxp.dll"
14 Apr 2008 1:12:06 98,304 ..... "C:\WINDOWS\ServicePackFiles\i386\slbiop.dll"
14 Apr 2008 1:12:06 73,832 ..... "C:\WINDOWS\ServicePackFiles\i386\slcoinst.dll"
14 Apr 2008 1:12:06 286,792 ..... "C:\WINDOWS\ServicePackFiles\i386\slextspk.dll"
14 Apr 2008 1:12:06 188,508 ..... "C:\WINDOWS\ServicePackFiles\i386\slgen.dll"
13 Apr 2008 17:30:32 3,599 A.... "C:\WINDOWS\ServicePackFiles\i386\slip.inf"
13 Apr 2008 19:46:24 11,136 ..... "C:\WINDOWS\ServicePackFiles\i386\slip.sys"
14 Apr 2008 1:12:36 32,866 ..... "C:\WINDOWS\ServicePackFiles\i386\slrundll.exe"
14 Apr 2008 1:12:36 73,796 ..... "C:\WINDOWS\ServicePackFiles\i386\slserv.exe"
13 Apr 2008 17:30:34 23,714 A.... "C:\WINDOWS\ServicePackFiles\i386\smartcrd.inf"
13 Apr 2008 19:36:34 5,888 ..... "C:\WINDOWS\ServicePackFiles\i386\smbali.sys"
13 Apr 2008 19:36:34 16,000 ..... "C:\WINDOWS\ServicePackFiles\i386\smbbatt.sys"
13 Apr 2008 19:36:34 6,912 ..... "C:\WINDOWS\ServicePackFiles\i386\smbclass.sys"
14 Apr 2008 1:12:36 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\smbinst.exe"
14 Apr 2008 1:12:36 236,544 ..... "C:\WINDOWS\ServicePackFiles\i386\smi2smir.exe"
14 Apr 2008 1:12:06 362,496 ..... "C:\WINDOWS\ServicePackFiles\i386\smlogcfg.dll"
14 Apr 2008 1:12:36 89,600 ..... "C:\WINDOWS\ServicePackFiles\i386\smlogsvc.exe"
14 Apr 2008 1:12:36 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\smss.exe"
14 Apr 2008 1:12:06 456,192 ..... "C:\WINDOWS\ServicePackFiles\i386\smtpsvc.dll"
14 Apr 2008 1:12:36 131,584 ..... "C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe"
14 Apr 2008 1:12:06 34,816 ..... "C:\WINDOWS\ServicePackFiles\i386\sniffpol.dll"
14 Apr 2008 1:12:36 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\snmp.exe"
14 Apr 2008 1:12:06 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpapi.dll"
14 Apr 2008 1:12:06 259,072 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpcl.dll"
14 Apr 2008 1:12:06 358,400 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpincl.dll"
14 Apr 2008 1:12:06 6,144 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpmib.dll"
14 Apr 2008 1:12:06 188,416 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpsmir.dll"
14 Apr 2008 1:12:06 182,272 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpsnap.dll"
14 Apr 2008 1:12:06 39,936 ..... "C:\WINDOWS\ServicePackFiles\i386\snmpthrd.dll"
14 Apr 2008 1:12:36 8,704 ..... "C:\WINDOWS\ServicePackFiles\i386\snmptrap.exe"
14 Apr 2008 1:12:06 130,048 ..... "C:\WINDOWS\ServicePackFiles\i386\softkbd.dll"
13 Apr 2008 19:40:52 7,552 ..... "C:\WINDOWS\ServicePackFiles\i386\sonyait.sys"
13 Apr 2008 19:46:08 25,344 ..... "C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys"
14 Apr 2008 1:12:36 24,576 ..... "C:\WINDOWS\ServicePackFiles\i386\sort.exe"
28 May 2008 18:12:32 23,852,652 ..... "C:\WINDOWS\ServicePackFiles\i386\sp3.cab"
14 Apr 2008 1:12:36 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\spdwnwxp.exe"
13 Apr 2008 17:43:18 62,976 ..... "C:\WINDOWS\ServicePackFiles\i386\spgrmr.dll"
14 Apr 2008 1:12:36 538,624 ..... "C:\WINDOWS\ServicePackFiles\i386\spider.exe"
13 Apr 2008 19:45:08 6,272 ..... "C:\WINDOWS\ServicePackFiles\i386\splitter.sys"
14 Apr 2008 5:42:38 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\spnpinst.exe"
14 Apr 2008 1:12:06 75,264 ..... "C:\WINDOWS\ServicePackFiles\i386\spoolss.dll"
14 Apr 2008 1:12:36 57,856 ..... "C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe"
13 Apr 2008 19:35:28 192,512 ..... "C:\WINDOWS\ServicePackFiles\i386\spra041b.dll"
13 Apr 2008 19:35:28 192,512 ..... "C:\WINDOWS\ServicePackFiles\i386\spra0424.dll"
13 Apr 2008 19:38:38 757,248 ..... "C:\WINDOWS\ServicePackFiles\i386\sprb041b.dll"
13 Apr 2008 19:38:36 732,160 ..... "C:\WINDOWS\ServicePackFiles\i386\sprb0424.dll"
13 Apr 2008 19:40:04 577,536 ..... "C:\WINDOWS\ServicePackFiles\i386\sprc041b.dll"
13 Apr 2008 19:40:06 576,512 ..... "C:\WINDOWS\ServicePackFiles\i386\sprc0424.dll"
14 Apr 2008 1:12:06 250,368 ..... "C:\WINDOWS\ServicePackFiles\i386\sptip.dll"
14 Apr 2008 1:12:36 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\spupdwxp.exe"
14 Apr 2008 1:12:06 151,552 ..... "C:\WINDOWS\ServicePackFiles\i386\sqldb20.dll"
14 Apr 2008 1:12:06 528,384 ..... "C:\WINDOWS\ServicePackFiles\i386\sqloledb.dll"
13 Apr 2008 18:26:18 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\sqloledb.rll"
14 Apr 2008 1:12:06 462,848 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlqp20.dll"
14 Apr 2008 1:12:06 110,592 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlse20.dll"
14 Apr 2008 1:12:06 442,368 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.dll"
13 Apr 2008 18:26:18 90,112 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.rll"
14 Apr 2008 1:12:06 180,800 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlunirl.dll"
14 Apr 2008 1:12:06 217,088 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.dll"
13 Apr 2008 18:26:26 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.rll"
13 Apr 2008 19:36:52 73,472 ..... "C:\WINDOWS\ServicePackFiles\i386\sr.sys"
14 Apr 2008 1:12:06 58,434 ..... "C:\WINDOWS\ServicePackFiles\i386\srchctls.dll"
14 Apr 2008 1:12:08 726,078 ..... "C:\WINDOWS\ServicePackFiles\i386\srchui.dll"
14 Apr 2008 1:12:08 67,584 ..... "C:\WINDOWS\ServicePackFiles\i386\srclient.dll"
14 Apr 2008 1:12:08 239,104 ..... "C:\WINDOWS\ServicePackFiles\i386\srrstr.dll"
14 Apr 2008 1:12:08 171,008 ..... "C:\WINDOWS\ServicePackFiles\i386\srsvc.dll"
13 Apr 2008 20:15:12 334,848 ..... "C:\WINDOWS\ServicePackFiles\i386\srv.sys"
14 Apr 2008 1:12:08 96,768 ..... "C:\WINDOWS\ServicePackFiles\i386\srvsvc.dll"
14 Apr 2008 1:12:44 704,512 ..... "C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr"
14 Apr 2008 1:12:44 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr"
14 Apr 2008 1:12:08 34,816 ..... "C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll"
14 Apr 2008 1:12:08 71,680 ..... "C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll"
14 Apr 2008 1:12:44 393,216 ..... "C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr"
14 Apr 2008 1:12:44 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr"
14 Apr 2008 1:12:44 47,104 ..... "C:\WINDOWS\ServicePackFiles\i386\ssmypics.scr"
14 Apr 2008 1:12:44 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr"
14 Apr 2008 1:12:44 610,304 ..... "C:\WINDOWS\ServicePackFiles\i386\sspipes.scr"
14 Apr 2008 1:12:44 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\ssstars.scr"
14 Apr 2008 1:12:44 679,936 ..... "C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr"
14 Apr 2008 1:12:08 33,280 ..... "C:\WINDOWS\ServicePackFiles\i386\sstub.dll"
14 Apr 2008 3:04:40 171,588 ..... "C:\WINDOWS\ServicePackFiles\i386\startoc.cat"
14 Apr 2008 1:12:08 26,624 ..... "C:\WINDOWS\ServicePackFiles\i386\startoc.dll"
14 Apr 2008 1:12:08 59,392 ..... "C:\WINDOWS\ServicePackFiles\i386\stclient.dll"
13 Apr 2008 16:42:06 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\stdole2.tlb"
14 Apr 2008 1:12:08 86,528 ..... "C:\WINDOWS\ServicePackFiles\i386\stdprov.dll"
14 Apr 2008 1:12:08 68,096 ..... "C:\WINDOWS\ServicePackFiles\i386\sti.dll"
14 Apr 2008 1:12:36 14,848 ..... "C:\WINDOWS\ServicePackFiles\i386\stimon.exe"
14 Apr 2008 1:12:08 136,704 ..... "C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll"
14 Apr 2008 1:12:08 121,856 ..... "C:\WINDOWS\ServicePackFiles\i386\stobject.dll"
14 Apr 2008 1:12:08 74,752 ..... "C:\WINDOWS\ServicePackFiles\i386\storprop.dll"
13 Apr 2008 19:45:16 49,408 ..... "C:\WINDOWS\ServicePackFiles\i386\stream.sys"
13 Apr 2008 17:30:36 5,884 A.... "C:\WINDOWS\ServicePackFiles\i386\streamip.inf"
13 Apr 2008 19:46:22 15,232 ..... "C:\WINDOWS\ServicePackFiles\i386\streamip.sys"
14 Apr 2008 1:12:08 75,776 ..... "C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll"
14 Apr 2008 1:12:36 16,449 ..... "C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe"
14 Apr 2008 1:12:36 65,601 ..... "C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe"
14 Apr 2008 1:12:36 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\svchost.exe"
13 Apr 2008 19:39:54 4,352 ..... "C:\WINDOWS\ServicePackFiles\i386\swenum.sys"
13 Apr 2008 17:30:36 1,863 A.... "C:\WINDOWS\ServicePackFiles\i386\swflash.inf"
13 Apr 2008 19:45:10 56,576 ..... "C:\WINDOWS\ServicePackFiles\i386\swmidi.sys"
14 Apr 2008 1:12:08 713,216 ..... "C:\WINDOWS\ServicePackFiles\i386\sxs.dll"
14 Apr 2008 1:12:08 57,856 ..... "C:\WINDOWS\ServicePackFiles\i386\synceng.dll"
14 Apr 2008 1:12:08 191,488 ..... "C:\WINDOWS\ServicePackFiles\i386\syncui.dll"
13 Apr 2008 20:15:56 60,800 ..... "C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys"
14 Apr 2008 1:12:42 300,544 ..... "C:\WINDOWS\ServicePackFiles\i386\sysdm.cpl"
13 Apr 2008 16:43:52 825,260 A.... "C:\WINDOWS\ServicePackFiles\i386\sysfiles.inf"
14 Apr 2008 1:15:28 1,202,774 ..... "C:\WINDOWS\ServicePackFiles\i386\sysmain.sdb"
14 Apr 2008 1:12:08 193,024 ..... "C:\WINDOWS\ServicePackFiles\i386\sysmod.dll"
14 Apr 2008 1:12:08 173,568 ..... "C:\WINDOWS\ServicePackFiles\i386\sysmoda.dll"
14 Apr 2008 1:10:56 218,624 ..... "C:\WINDOWS\ServicePackFiles\i386\sysmon.ocx"
13 Apr 2008 17:30:38 1,686 A.... "C:\WINDOWS\ServicePackFiles\i386\sysoc.inf"
14 Apr 2008 1:12:38 106,496 ..... "C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe"
14 Apr 2008 1:12:08 990,208 ..... "C:\WINDOWS\ServicePackFiles\i386\syssetup.dll"
13 Apr 2008 17:30:40 34,908 A.... "C:\WINDOWS\ServicePackFiles\i386\syssetup.inf"
14 Apr 2008 1:12:08 117,760 ..... "C:\WINDOWS\ServicePackFiles\i386\t2embed.dll"
13 Apr 2008 17:30:40 33,550 A.... "C:\WINDOWS\ServicePackFiles\i386\tape.inf"
13 Apr 2008 19:40:50 14,976 ..... "C:\WINDOWS\ServicePackFiles\i386\tape.sys"
14 Apr 2008 1:12:08 858,624 ..... "C:\WINDOWS\ServicePackFiles\i386\tapi3.dll"
14 Apr 2008 1:12:08 181,760 ..... "C:\WINDOWS\ServicePackFiles\i386\tapi32.dll"
14 Apr 2008 1:12:08 249,856 ..... "C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll"
14 Apr 2008 1:12:38 135,680 ..... "C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe"
13 Apr 2008 20:20:16 361,344 ..... "C:\WINDOWS\ServicePackFiles\i386\tcpip.sys"
13 Apr 2008 20:00:02 225,664 ..... "C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys"
14 Apr 2008 1:12:08 14,848 ..... "C:\WINDOWS\ServicePackFiles\i386\tcpmib.dll"
14 Apr 2008 1:12:08 45,568 ..... "C:\WINDOWS\ServicePackFiles\i386\tcpmon.dll"
14 Apr 2008 1:12:08 45,568 ..... "C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll"
14 Apr 2008 1:12:38 32,827 ..... "C:\WINDOWS\ServicePackFiles\i386\tcptest.exe"
14 Apr 2008 1:10:58 61,440 ..... "C:\WINDOWS\ServicePackFiles\i386\tdc.ocx"
13 Apr 2008 20:00:06 19,072 ..... "C:\WINDOWS\ServicePackFiles\i386\tdi.sys"
13 Apr 2008 16:44:36 4,473 A.... "C:\WINDOWS\ServicePackFiles\i386\tdibth.inf"
14 Apr 2008 1:13:20 12,040 ..... "C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys"
14 Apr 2008 1:13:22 21,896 ..... "C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys"
14 Apr 2008 1:12:38 75,776 ..... "C:\WINDOWS\ServicePackFiles\i386\telnet.exe"
14 Apr 2008 1:13:20 40,840 ..... "C:\WINDOWS\ServicePackFiles\i386\termdd.sys"
14 Apr 2008 1:12:08 358,400 ..... "C:\WINDOWS\ServicePackFiles\i386\termmgr.dll"
14 Apr 2008 1:12:08 295,424 ..... "C:\WINDOWS\ServicePackFiles\i386\termsrv.dll"
13 Apr 2008 19:40:50 149,376 ..... "C:\WINDOWS\ServicePackFiles\i386\tffsport.sys"
14 Apr 2008 1:12:08 385,536 ..... "C:\WINDOWS\ServicePackFiles\i386\themeui.dll"
14 Apr 2008 1:12:42 94,208 ..... "C:\WINDOWS\ServicePackFiles\i386\timedate.cpl"
14 Apr 2008 1:12:38 347,136 ..... "C:\WINDOWS\ServicePackFiles\i386\tourstrt.exe"
14 Apr 2008 1:12:38 82,944 ..... "C:\WINDOWS\ServicePackFiles\i386\tp4mon.exe"
14 Apr 2008 1:12:38 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\tracert.exe"
14 Apr 2008 1:12:42 12,800 ..... "C:\WINDOWS\ServicePackFiles\i386\tree.com"
14 Apr 2008 1:12:08 153,088 ..... "C:\WINDOWS\ServicePackFiles\i386\triedit.dll"
14 Apr 2008 1:12:08 90,112 ..... "C:\WINDOWS\ServicePackFiles\i386\trkwks.dll"
14 Apr 2008 1:12:08 93,696 ..... "C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll"
14 Apr 2008 1:11:32 25,600 ..... "C:\WINDOWS\ServicePackFiles\i386\tscupdc.dll"
14 Apr 2008 1:13:22 12,168 ..... "C:\WINDOWS\ServicePackFiles\i386\tsddd.dll"
14 Apr 2008 1:12:08 53,248 ..... "C:\WINDOWS\ServicePackFiles\i386\tsgqec.dll"
14 Apr 2008 1:12:08 279,040 ..... "C:\WINDOWS\ServicePackFiles\i386\tshoot.dll"
14 Apr 2008 1:12:08 130,048 ..... "C:\WINDOWS\ServicePackFiles\i386\tsoc.dll"
14 Apr 2008 1:25:24 119,840 A.... "C:\WINDOWS\ServicePackFiles\i386\tsoc.inf"
14 Apr 2008 1:12:08 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\tspkg.dll"
14 Apr 2008 1:13:28 11,671 ..... "C:\WINDOWS\ServicePackFiles\i386\tsweb1.htm"
14 Apr 2008 1:12:08 8,704 ..... "C:\WINDOWS\ServicePackFiles\i386\tty.dll"
14 Apr 2008 1:12:08 16,384 ..... "C:\WINDOWS\ServicePackFiles\i386\ttyui.dll"
13 Apr 2008 19:56:02 12,288 ..... "C:\WINDOWS\ServicePackFiles\i386\tunmp.sys"
14 Apr 2008 1:12:08 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\twain_32.dll"
14 Apr 2008 1:12:08 57,856 ..... "C:\WINDOWS\ServicePackFiles\i386\twext.dll"
14 Apr 2008 1:12:08 101,376 ..... "C:\WINDOWS\ServicePackFiles\i386\txflog.dll"
14 Apr 2008 3:04:30 457,952 ..... "C:\WINDOWS\ServicePackFiles\i386\txtsetup.sif"
14 Apr 2008 1:12:38 60,416 ..... "C:\WINDOWS\ServicePackFiles\i386\tzchange.exe"
13 Apr 2008 19:36:40 44,672 ..... "C:\WINDOWS\ServicePackFiles\i386\uagp35.sys"
13 Apr 2008 19:32:36 66,048 ..... "C:\WINDOWS\ServicePackFiles\i386\udfs.sys"
14 Apr 2008 1:12:08 26,624 ..... "C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll"
14 Apr 2008 1:12:08 275,456 ..... "C:\WINDOWS\ServicePackFiles\i386\ulib.dll"
14 Apr 2008 1:12:08 35,840 ..... "C:\WINDOWS\ServicePackFiles\i386\umandlg.dll"
14 Apr 2008 1:12:08 123,392 ..... "C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll"
14 Apr 2008 1:12:08 373,248 ..... "C:\WINDOWS\ServicePackFiles\i386\unidrv.dll"
14 Apr 2008 1:12:08 744,448 ..... "C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll"
14 Apr 2008 1:12:46 206,848 ..... "C:\WINDOWS\ServicePackFiles\i386\unimdm.tsp"
14 Apr 2008 1:12:08 74,240 ..... "C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll"
14 Apr 2008 1:12:08 13,824 ..... "C:\WINDOWS\ServicePackFiles\i386\uniplat.dll"
14 Apr 2008 1:12:08 316,416 ..... "C:\WINDOWS\ServicePackFiles\i386\untfs.dll"
13 Apr 2008 19:39:46 384,768 ..... "C:\WINDOWS\ServicePackFiles\i386\update.sys"
14 Apr 2008 1:12:38 150,528 ..... "C:\WINDOWS\ServicePackFiles\i386\uploadm.exe"
14 Apr 2008 1:12:08 133,632 ..... "C:\WINDOWS\ServicePackFiles\i386\upnp.dll"
14 Apr 2008 1:12:38 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe"
14 Apr 2008 1:12:08 185,856 ..... "C:\WINDOWS\ServicePackFiles\i386\upnphost.dll"
14 Apr 2008 1:12:08 239,616 ..... "C:\WINDOWS\ServicePackFiles\i386\upnpui.dll"
14 Apr 2008 1:12:38 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\ups.exe"
14 Apr 2008 1:12:08 37,888 ..... "C:\WINDOWS\ServicePackFiles\i386\url.dll"
14 Apr 2008 1:12:08 619,520 ..... "C:\WINDOWS\ServicePackFiles\i386\urlmon.dll"
13 Apr 2008 19:56:50 12,800 ..... "C:\WINDOWS\ServicePackFiles\i386\usb8023.sys"
13 Apr 2008 19:56:50 12,800 ..... "C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys"
13 Apr 2008 19:45:12 60,032 ..... "C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys"
13 Apr 2008 19:45:40 25,600 ..... "C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys"
13 Apr 2008 19:45:42 25,728 ..... "C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys"
13 Apr 2008 19:45:40 32,128 ..... "C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys"
13 Apr 2008 19:45:36 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\usbehci.sys"
13 Apr 2008 19:45:38 59,520 ..... "C:\WINDOWS\ServicePackFiles\i386\usbhub.sys"
13 Apr 2008 19:45:44 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\usbintel.sys"
14 Apr 2008 1:12:08 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\usbmon.dll"
13 Apr 2008 19:45:36 17,152 ..... "C:\WINDOWS\ServicePackFiles\i386\usbohci.sys"
13 Apr 2008 17:31:42 23,708 A.... "C:\WINDOWS\ServicePackFiles\i386\usbport.inf"
13 Apr 2008 19:45:36 143,872 ..... "C:\WINDOWS\ServicePackFiles\i386\usbport.sys"
13 Apr 2008 19:47:38 25,856 ..... "C:\WINDOWS\ServicePackFiles\i386\usbprint.sys"
13 Apr 2008 19:45:34 15,104 ..... "C:\WINDOWS\ServicePackFiles\i386\usbscan.sys"
13 Apr 2008 19:45:36 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\usbser.sys"
13 Apr 2008 19:45:38 26,368 ..... "C:\WINDOWS\ServicePackFiles\i386\usbstor.sys"
13 Apr 2008 19:45:36 20,608 ..... "C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys"
14 Apr 2008 1:12:08 74,240 ..... "C:\WINDOWS\ServicePackFiles\i386\usbui.dll"
13 Apr 2008 17:31:44 9,026 A.... "C:\WINDOWS\ServicePackFiles\i386\usbvideo.inf"
13 Apr 2008 19:46:20 121,984 ..... "C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys"
14 Apr 2008 1:12:08 578,560 ..... "C:\WINDOWS\ServicePackFiles\i386\user32.dll"
14 Apr 2008 1:12:08 727,040 ..... "C:\WINDOWS\ServicePackFiles\i386\userenv.dll"
14 Apr 2008 1:12:38 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\userinit.exe"
13 Apr 2008 16:43:52 13,962 A.... "C:\WINDOWS\ServicePackFiles\i386\usmtdef.inf"
14 Apr 2008 1:12:08 406,016 ..... "C:\WINDOWS\ServicePackFiles\i386\usp10.dll"
14 Apr 2008 1:12:38 50,176 ..... "C:\WINDOWS\ServicePackFiles\i386\utilman.exe"
14 Apr 2008 1:12:08 218,624 ..... "C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll"
14 Apr 2008 1:12:08 30,749 ..... "C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll"
14 Apr 2008 1:12:42 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\vbisurf.ax"
14 Apr 2008 1:12:08 434,176 ..... "C:\WINDOWS\ServicePackFiles\i386\vbscript.dll"
14 Apr 2008 1:12:08 11,325 ..... "C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll"
14 Apr 2008 1:12:08 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll"
14 Apr 2008 1:12:08 51,712 ..... "C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll"
14 Apr 2008 1:12:38 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\verclsid.exe"
14 Apr 2008 1:12:08 26,624 ..... "C:\WINDOWS\ServicePackFiles\i386\verifier.dll"
14 Apr 2008 1:12:08 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\version.dll"
14 Apr 2008 1:12:08 53,760 ..... "C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll"
13 Apr 2008 19:44:40 20,992 ..... "C:\WINDOWS\ServicePackFiles\i386\vga.sys"
14 Apr 2008 1:12:08 851,968 ..... "C:\WINDOWS\ServicePackFiles\i386\vgx.dll"
13 Apr 2008 19:36:40 42,240 ..... "C:\WINDOWS\ServicePackFiles\i386\viaagp.sys"
13 Apr 2008 19:40:32 5,376 ..... "C:\WINDOWS\ServicePackFiles\i386\viaide.sys"
14 Apr 2008 1:12:42 28,672 ..... "C:\WINDOWS\ServicePackFiles\i386\vidcap.ax"
13 Apr 2008 19:44:40 81,664 ..... "C:\WINDOWS\ServicePackFiles\i386\videoprt.sys"
14 Apr 2008 1:12:08 131,584 ..... "C:\WINDOWS\ServicePackFiles\i386\viewprov.dll"
13 Apr 2008 19:41:02 52,352 ..... "C:\WINDOWS\ServicePackFiles\i386\volsnap.sys"
14 Apr 2008 1:12:08 430,592 ..... "C:\WINDOWS\ServicePackFiles\i386\vssapi.dll"
14 Apr 2008 1:12:38 289,792 ..... "C:\WINDOWS\ServicePackFiles\i386\vssvc.exe"
14 Apr 2008 1:12:08 175,104 ..... "C:\WINDOWS\ServicePackFiles\i386\w32time.dll"
14 Apr 2008 1:12:08 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll"
14 Apr 2008 1:12:08 483,840 ..... "C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll"
14 Apr 2008 1:12:38 46,080 ..... "C:\WINDOWS\ServicePackFiles\i386\wab.exe"
14 Apr 2008 1:12:08 510,976 ..... "C:\WINDOWS\ServicePackFiles\i386\wab32.dll"
13 Apr 2008 17:21:48 249,856 ..... "C:\WINDOWS\ServicePackFiles\i386\wab32res.dll"
14 Apr 2008 1:12:08 32,768 ..... "C:\WINDOWS\ServicePackFiles\i386\wabfind.dll"
14 Apr 2008 1:12:08 85,504 ..... "C:\WINDOWS\ServicePackFiles\i386\wabimp.dll"
14 Apr 2008 1:12:40 30,208 ..... "C:\WINDOWS\ServicePackFiles\i386\wabmig.exe"
13 Apr 2008 19:43:56 14,208 ..... "C:\WINDOWS\ServicePackFiles\i386\wacompen.sys"
13 Apr 2008 19:57:22 34,560 ..... "C:\WINDOWS\ServicePackFiles\i386\wanarp.sys"
13 Apr 2008 19:45:00 17,664 ..... "C:\WINDOWS\ServicePackFiles\i386\watchdog.sys"
14 Apr 2008 1:12:08 215,552 ..... "C:\WINDOWS\ServicePackFiles\i386\wavemsp.dll"
14 Apr 2008 1:12:08 196,608 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll"
14 Apr 2008 1:12:08 214,528 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll"
14 Apr 2008 1:12:08 71,680 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll"
14 Apr 2008 1:12:08 531,456 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll"
14 Apr 2008 1:12:08 178,176 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll"
14 Apr 2008 1:12:08 273,920 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemess.dll"
13 Apr 2008 17:31:48 5,353 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemoc.inf"
14 Apr 2008 1:12:08 43,008 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll"
14 Apr 2008 1:12:08 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll"
14 Apr 2008 1:12:08 43,520 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll"
14 Apr 2008 1:12:40 116,224 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe"
14 Apr 2008 1:12:08 197,120 ..... "C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll"
13 Apr 2008 19:45:38 31,744 ..... "C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys"
14 Apr 2008 1:12:08 49,152 ..... "C:\WINDOWS\ServicePackFiles\i386\wdigest.dll"
14 Apr 2008 1:12:46 23,552 ..... "C:\WINDOWS\ServicePackFiles\i386\wdmaud.drv"
13 Apr 2008 20:17:18 83,072 ..... "C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys"
13 Apr 2008 18:11:04 63,292 A.... "C:\WINDOWS\ServicePackFiles\i386\wdma_ali.inf"
13 Apr 2008 18:11:08 18,734 A.... "C:\WINDOWS\ServicePackFiles\i386\wdma_via.inf"
14 Apr 2008 1:12:08 276,480 ..... "C:\WINDOWS\ServicePackFiles\i386\webcheck.dll"
14 Apr 2008 1:12:08 68,096 ..... "C:\WINDOWS\ServicePackFiles\i386\webclnt.dll"
14 Apr 2008 1:12:08 135,680 ..... "C:\WINDOWS\ServicePackFiles\i386\webvw.dll"
14 Apr 2008 1:12:40 65,024 ..... "C:\WINDOWS\ServicePackFiles\i386\wextract.exe"
14 Apr 2008 1:12:40 433,664 ..... "C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe"
14 Apr 2008 1:12:08 463,360 ..... "C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll"
14 Apr 2008 1:12:08 124,416 ..... "C:\WINDOWS\ServicePackFiles\i386\wiadss.dll"
14 Apr 2008 1:12:08 75,776 ..... "C:\WINDOWS\ServicePackFiles\i386\wiascr.dll"
14 Apr 2008 1:12:08 333,824 ..... "C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll"
14 Apr 2008 1:12:08 589,312 ..... "C:\WINDOWS\ServicePackFiles\i386\wiashext.dll"
14 Apr 2008 1:12:08 111,104 ..... "C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll"
14 Apr 2008 1:12:08 712,704 ..... "C:\WINDOWS\ServicePackFiles\i386\wic.dll"
14 Apr 2008 1:12:08 346,112 ..... "C:\WINDOWS\ServicePackFiles\i386\wicext.dll"
13 Apr 2008 20:30:10 1,845,632 ..... "C:\WINDOWS\ServicePackFiles\i386\win32k.sys"
14 Apr 2008 1:12:08 102,400 ..... "C:\WINDOWS\ServicePackFiles\i386\win32spl.dll"
13 Apr 2008 17:48:54 1,647,616 ..... "C:\WINDOWS\ServicePackFiles\i386\winbrand.dll"
14 Apr 2008 1:12:40 283,648 ..... "C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe"
14 Apr 2008 1:12:08 354,304 ..... "C:\WINDOWS\ServicePackFiles\i386\winhttp.dll"
14 Apr 2008 1:12:08 666,112 ..... "C:\WINDOWS\ServicePackFiles\i386\wininet.dll"
14 Apr 2008 1:12:10 32,256 ..... "C:\WINDOWS\ServicePackFiles\i386\winipsec.dll"
14 Apr 2008 1:12:40 507,904 ..... "C:\WINDOWS\ServicePackFiles\i386\winlogon.exe"
14 Apr 2008 1:12:10 176,128 ..... "C:\WINDOWS\ServicePackFiles\i386\winmm.dll"
14 Apr 2008 1:11:12 756,224 ..... "C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll"
14 Apr 2008 1:12:10 16,896 ..... "C:\WINDOWS\ServicePackFiles\i386\winrnr.dll"
14 Apr 2008 1:12:10 99,328 ..... "C:\WINDOWS\ServicePackFiles\i386\winscard.dll"
14 Apr 2008 1:12:10 17,408 ..... "C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll"
14 Apr 2008 1:12:46 146,432 ..... "C:\WINDOWS\ServicePackFiles\i386\winspool.drv"
14 Apr 2008 1:12:10 293,376 ..... "C:\WINDOWS\ServicePackFiles\i386\winsrv.dll"
14 Apr 2008 1:12:10 53,760 ..... "C:\WINDOWS\ServicePackFiles\i386\winsta.dll"
14 Apr 2008 1:12:10 176,640 ..... "C:\WINDOWS\ServicePackFiles\i386\wintrust.dll"
14 Apr 2008 1:12:40 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\winver.exe"
14 Apr 2008 1:12:10 132,096 ..... "C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll"
14 Apr 2008 1:12:10 69,120 ..... "C:\WINDOWS\ServicePackFiles\i386\wlanapi.dll"
14 Apr 2008 1:12:10 172,032 ..... "C:\WINDOWS\ServicePackFiles\i386\wldap32.dll"
14 Apr 2008 1:12:10 92,672 ..... "C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll"
14 Apr 2008 1:11:16 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\wmi.dll"
13 Apr 2008 19:36:38 8,832 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys"
14 Apr 2008 1:12:40 196,608 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe"
13 Apr 2008 18:10:20 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll"
14 Apr 2008 1:12:10 88,576 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll"
14 Apr 2008 1:12:40 126,464 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe"
14 Apr 2008 1:12:10 60,928 ..... "C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll"
14 Apr 2008 1:12:10 140,800 ..... "C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll"
14 Apr 2008 1:12:10 156,672 ..... "C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll"
14 Apr 2008 1:12:10 132,096 ..... "C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll"
14 Apr 2008 1:12:10 61,952 ..... "C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll"
14 Apr 2008 1:12:10 62,464 ..... "C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll"
14 Apr 2008 1:12:10 144,896 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll"
14 Apr 2008 1:12:10 437,248 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll"
14 Apr 2008 1:12:40 218,112 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe"
14 Apr 2008 1:12:10 41,472 ..... "C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll"
14 Apr 2008 1:12:10 144,896 ..... "C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll"
14 Apr 2008 1:12:10 95,232 ..... "C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll"
14 Apr 2008 1:12:10 167,936 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll"
14 Apr 2008 1:12:10 4,096 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll"
14 Apr 2008 1:12:10 7,680 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll"
14 Apr 2008 1:12:10 402,432 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll"
14 Apr 2008 1:12:10 502,272 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll"
14 Apr 2008 1:12:10 325,632 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll"
14 Apr 2008 1:12:10 4,256,768 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll"
14 Apr 2008 1:12:10 5,632 ..... "C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll"
14 Apr 2008 1:12:10 276,992 ..... "C:\WINDOWS\ServicePackFiles\i386\wmphoto.dll"
14 Apr 2008 1:12:40 214,528 ..... "C:\WINDOWS\ServicePackFiles\i386\wordpad.exe"
14 Apr 2008 1:12:10 264,192 ..... "C:\WINDOWS\ServicePackFiles\i386\wow32.dll"
14 Apr 2008 1:12:40 32,256 ..... "C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe"
14 Apr 2008 1:12:42 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe"
13 Apr 2008 19:37:14 89,088 ..... "C:\WINDOWS\ServicePackFiles\i386\write.wpc"
14 Apr 2008 1:12:10 19,968 ..... "C:\WINDOWS\ServicePackFiles\i386\ws2help.dll"
14 Apr 2008 1:12:10 82,432 ..... "C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll"
14 Apr 2008 1:12:42 13,824 ..... "C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe"
14 Apr 2008 1:12:42 155,648 ..... "C:\WINDOWS\ServicePackFiles\i386\wscript.exe"
14 Apr 2008 1:12:10 80,896 ..... "C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll"
14 Apr 2008 1:12:42 148,480 ..... "C:\WINDOWS\ServicePackFiles\i386\wscui.cpl"
14 Apr 2008 1:12:10 108,032 ..... "C:\WINDOWS\ServicePackFiles\i386\wshbth.dll"
14 Apr 2008 1:12:10 36,864 ..... "C:\WINDOWS\ServicePackFiles\i386\wshcon.dll"
14 Apr 2008 1:12:10 90,112 ..... "C:\WINDOWS\ServicePackFiles\i386\wshext.dll"
14 Apr 2008 1:12:10 14,336 ..... "C:\WINDOWS\ServicePackFiles\i386\wship6.dll"
14 Apr 2008 1:12:10 8,192 ..... "C:\WINDOWS\ServicePackFiles\i386\wshirda.dll"
14 Apr 2008 1:11:30 135,168 ..... "C:\WINDOWS\ServicePackFiles\i386\wshom.ocx"
14 Apr 2008 1:12:10 11,264 ..... "C:\WINDOWS\ServicePackFiles\i386\wshrm.dll"
14 Apr 2008 1:12:10 19,456 ..... "C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll"
14 Apr 2008 1:12:10 41,984 ..... "C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll"
14 Apr 2008 1:12:10 22,528 ..... "C:\WINDOWS\ServicePackFiles\i386\wsock32.dll"
13 Apr 2008 17:31:50 3,612 A.... "C:\WINDOWS\ServicePackFiles\i386\wstcodec.inf"
13 Apr 2008 19:46:24 19,200 ..... "C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys"
14 Apr 2008 1:12:10 50,688 ..... "C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll"
14 Apr 2008 1:12:10 18,432 ..... "C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll"
14 Apr 2008 1:12:10 430,592 ..... "C:\WINDOWS\ServicePackFiles\i386\wuapi.dll"
14 Apr 2008 1:12:42 111,104 ..... "C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe"
14 Apr 2008 1:12:42 165,888 ..... "C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe"
14 Apr 2008 1:12:42 162,304 ..... "C:\WINDOWS\ServicePackFiles\i386\wuaucpl.cpl"
14 Apr 2008 1:12:12 1,135,616 ..... "C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll"
14 Apr 2008 1:12:12 183,296 ..... "C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll"
14 Apr 2008 1:12:12 6,656 ..... "C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll"
14 Apr 2008 1:12:12 112,640 ..... "C:\WINDOWS\ServicePackFiles\i386\wucltui.dll"
14 Apr 2008 1:12:12 32,256 ..... "C:\WINDOWS\ServicePackFiles\i386\wups.dll"
14 Apr 2008 1:12:12 120,320 ..... "C:\WINDOWS\ServicePackFiles\i386\wuweb.dll"
14 Apr 2008 1:12:12 383,488 ..... "C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll"
14 Apr 2008 1:12:12 52,736 ..... "C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll"
14 Apr 2008 1:12:12 483,840 ..... "C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll"
14 Apr 2008 1:12:12 91,648 ..... "C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll"
14 Apr 2008 1:12:42 30,720 ..... "C:\WINDOWS\ServicePackFiles\i386\xcopy.exe"
14 Apr 2008 1:12:12 121,856 ..... "C:\WINDOWS\ServicePackFiles\i386\xmllite.dll"
14 Apr 2008 1:12:12 129,024 ..... "C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll"
14 Apr 2008 1:12:12 50,176 ..... "C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll"
14 Apr 2008 1:12:12 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll"
13 Apr 2008 19:53:32 558,080 ..... "C:\WINDOWS\ServicePackFiles\i386\xpnetdg.exe"
13 Apr 2008 18:39:30 438,784 ..... "C:\WINDOWS\ServicePackFiles\i386\xpob2res.dll"
13 Apr 2008 18:39:22 187,392 ..... "C:\WINDOWS\ServicePackFiles\i386\xpsp1res.dll"
13 Apr 2008 18:39:24 2,897,920 ..... "C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll"
13 Apr 2008 18:39:26 689,152 ..... "C:\WINDOWS\ServicePackFiles\i386\xpsp3res.dll"
14 Apr 2008 1:12:12 18,944 ..... "C:\WINDOWS\ServicePackFiles\i386\xrxscnui.dll"
14 Apr 2008 1:12:12 116,224 ..... "C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll"
14 Apr 2008 1:12:12 338,432 ..... "C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll"
14 Apr 2008 1:12:04 409,088 A.... "C:\WINDOWS\system32\bits\qmgr.dll"
14 Apr 2008 1:11:52 195,072 A.... "C:\WINDOWS\system32\Com\comadmin.dll"
14 Apr 2008 1:12:16 9,728 A.... "C:\WINDOWS\system32\Com\comrepl.exe"
14 Apr 2008 1:12:16 6,144 A.... "C:\WINDOWS\system32\Com\comrereg.exe"
14 Apr 2008 1:11:30 78,336 A.... "C:\WINDOWS\system32\dllcache\chajei.ime"
14 Apr 2008 1:09:06 97,792 A.... "C:\WINDOWS\system32\dllcache\chtmbx.dll"
14 Apr 2008 1:09:06 56,320 A.... "C:\WINDOWS\system32\dllcache\chtskdic.dll"
14 Apr 2008 1:09:06 173,568 A.... "C:\WINDOWS\system32\dllcache\chtskf.dll"
14 Apr 2008 1:09:06 198,656 A.... "C:\WINDOWS\system32\dllcache\cintime.dll"
14 Apr 2008 1:11:32 21,504 A.... "C:\WINDOWS\system32\dllcache\cintlgnt.ime"
14 Apr 2008 1:11:34 78,848 A.... "C:\WINDOWS\system32\dllcache\dayi.ime"
14 Apr 2008 1:11:52 498,742 ..... "C:\WINDOWS\system32\dllcache\dxmasf.dll"
14 Apr 2008 1:09:40 13,463,552 A.... "C:\WINDOWS\system32\dllcache\hwxjpn.dll"
14 Apr 2008 1:09:44 94,720 A.... "C:\WINDOWS\system32\dllcache\imekr61.ime"
14 Apr 2008 1:09:44 106,496 A.... "C:\WINDOWS\system32\dllcache\imekrcic.dll"
14 Apr 2008 1:09:44 86,016 A.... "C:\WINDOWS\system32\dllcache\imekrmbx.dll"
14 Apr 2008 1:09:44 340,023 A.... "C:\WINDOWS\system32\dllcache\imjp81.ime"
14 Apr 2008 1:09:44 811,064 A.... "C:\WINDOWS\system32\dllcache\imjp81k.dll"
14 Apr 2008 1:09:46 368,696 A.... "C:\WINDOWS\system32\dllcache\imjpcic.dll"
14 Apr 2008 1:09:46 716,856 A.... "C:\WINDOWS\system32\dllcache\imjpcus.dll"
14 Apr 2008 1:09:46 81,976 A.... "C:\WINDOWS\system32\dllcache\imjpdct.dll"
14 Apr 2008 1:09:46 274,489 A.... "C:\WINDOWS\system32\dllcache\imjputyc.dll"
14 Apr 2008 1:09:46 102,456 A.... "C:\WINDOWS\system32\dllcache\imlang.dll"
14 Apr 2008 1:09:48 315,455 A.... "C:\WINDOWS\system32\dllcache\imskf.dll"
14 Apr 2008 1:12:02 1,306,624 ..... "C:\WINDOWS\system32\dllcache\msxml6.dll"
13 Apr 2008 18:27:18 79,872 ..... "C:\WINDOWS\system32\dllcache\msxml6r.dll"
14 Apr 2008 1:12:02 364,544 A.... "C:\WINDOWS\system32\dllcache\npdsplay.dll"
14 Apr 2008 1:10:34 15,872 A.... "C:\WINDOWS\system32\dllcache\padrs404.dll"
14 Apr 2008 1:10:34 15,360 A.... "C:\WINDOWS\system32\dllcache\padrs804.dll"
14 Apr 2008 1:11:34 79,360 A.... "C:\WINDOWS\system32\dllcache\phon.ime"
14 Apr 2008 1:10:34 175,104 A.... "C:\WINDOWS\system32\dllcache\pintlcsa.dll"
14 Apr 2008 1:10:34 53,760 A.... "C:\WINDOWS\system32\dllcache\pintlcsd.dll"
14 Apr 2008 1:11:32 482,304 A.... "C:\WINDOWS\system32\dllcache\pintlgnt.ime"
13 Apr 2008 17:43:36 70,144 A.... "C:\WINDOWS\system32\dllcache\pintlphr.exe"
14 Apr 2008 1:10:34 67,584 A.... "C:\WINDOWS\system32\dllcache\pmigrate.dll"
14 Apr 2008 1:11:30 77,824 A.... "C:\WINDOWS\system32\dllcache\quick.ime"
14 Apr 2008 1:11:34 26,112 A.... "C:\WINDOWS\system32\dllcache\romanime.ime"
14 Apr 2008 1:12:08 246,814 ..... "C:\WINDOWS\system32\dllcache\strmdll.dll"
14 Apr 2008 1:11:32 571,392 A.... "C:\WINDOWS\system32\dllcache\tintlgnt.ime"
14 Apr 2008 1:11:00 10,240 A.... "C:\WINDOWS\system32\dllcache\tmigrate.dll"
14 Apr 2008 1:11:38 65,024 A.... "C:\WINDOWS\system32\dllcache\unicdime.ime"
14 Apr 2008 1:11:02 76,288 A.... "C:\WINDOWS\system32\dllcache\uniime.dll"
14 Apr 2008 1:11:04 426,041 A.... "C:\WINDOWS\system32\dllcache\voicepad.dll"
14 Apr 2008 1:11:04 86,073 A.... "C:\WINDOWS\system32\dllcache\voicesub.dll"
14 Apr 2008 1:11:30 79,360 A.... "C:\WINDOWS\system32\dllcache\winar30.ime"
14 Apr 2008 1:11:10 72,704 A.... "C:\WINDOWS\system32\dllcache\wingb.ime"
14 Apr 2008 1:11:34 65,536 A.... "C:\WINDOWS\system32\dllcache\winime.ime"
14 Apr 2008 1:11:12 156,672 A.... "C:\WINDOWS\system32\dllcache\winpy.ime"
14 Apr 2008 1:11:14 156,672 A.... "C:\WINDOWS\system32\dllcache\winsp.ime"
14 Apr 2008 1:11:14 156,672 A.... "C:\WINDOWS\system32\dllcache\winzm.ime"
13 Apr 2008 19:46:18 53,376 A.... "C:\WINDOWS\system32\drivers\1394bus.sys"
13 Apr 2008 19:36:36 187,776 A.... "C:\WINDOWS\system32\drivers\acpi.sys"
14 Apr 2008 1:11:48 4,255 A.... "C:\WINDOWS\system32\drivers\adv01nt5.dll"
14 Apr 2008 1:11:48 3,967 A.... "C:\WINDOWS\system32\drivers\adv02nt5.dll"
14 Apr 2008 1:11:48 3,615 A.... "C:\WINDOWS\system32\drivers\adv05nt5.dll"
14 Apr 2008 1:11:48 3,647 A.... "C:\WINDOWS\system32\drivers\adv07nt5.dll"
14 Apr 2008 1:11:48 3,135 A.... "C:\WINDOWS\system32\drivers\adv08nt5.dll"
14 Apr 2008 1:11:48 3,711 A.... "C:\WINDOWS\system32\drivers\adv09nt5.dll"
14 Apr 2008 1:11:48 3,775 A.... "C:\WINDOWS\system32\drivers\adv11nt5.dll"
13 Apr 2008 17:39:24 142,592 A.... "C:\WINDOWS\system32\drivers\aec.sys"
13 Apr 2008 20:19:24 138,112 A.... "C:\WINDOWS\system32\drivers\afd.sys"
13 Apr 2008 19:36:38 42,368 A.... "C:\WINDOWS\system32\drivers\agp440.sys"
13 Apr 2008 19:36:40 44,928 A.... "C:\WINDOWS\system32\drivers\agpcpq.sys"
13 Apr 2008 19:36:38 42,752 A.... "C:\WINDOWS\system32\drivers\alim1541.sys"
13 Apr 2008 19:36:40 43,008 A.... "C:\WINDOWS\system32\drivers\amdagp.sys"
13 Apr 2008 19:31:32 37,376 A.... "C:\WINDOWS\system32\drivers\amdk6.sys"
13 Apr 2008 19:31:34 37,760 A.... "C:\WINDOWS\system32\drivers\amdk7.sys"
13 Apr 2008 19:51:26 60,800 A.... "C:\WINDOWS\system32\drivers\arp1394.sys"
13 Apr 2008 19:57:28 14,336 A.... "C:\WINDOWS\system32\drivers\asyncmac.sys"
13 Apr 2008 19:40:30 96,512 A.... "C:\WINDOWS\system32\drivers\atapi.sys"
13 Apr 2008 19:51:26 59,904 A.... "C:\WINDOWS\system32\drivers\atmarpc.sys"
13 Apr 2008 19:51:30 55,808 A.... "C:\WINDOWS\system32\drivers\atmlane.sys"
14 Apr 2008 1:11:50 21,183 A.... "C:\WINDOWS\system32\drivers\atv01nt5.dll"
14 Apr 2008 1:11:50 11,359 A.... "C:\WINDOWS\system32\drivers\atv02nt5.dll"
14 Apr 2008 1:11:50 25,471 A.... "C:\WINDOWS\system32\drivers\atv04nt5.dll"
14 Apr 2008 1:11:50 14,143 A.... "C:\WINDOWS\system32\drivers\atv06nt5.dll"
14 Apr 2008 1:11:50 17,279 A.... "C:\WINDOWS\system32\drivers\atv10nt5.dll"
28 May 2008 15:28:30 96,520 A.... "C:\WINDOWS\system32\drivers\avgldx86.sys"
28 May 2008 15:28:28 26,184 A.... "C:\WINDOWS\system32\drivers\avgmfx86.sys"
29 Apr 2008 11:19:50 12,960 A.... "C:\WINDOWS\system32\drivers\Awrtpd.sys"
29 Apr 2008 11:19:54 15,648 A.... "C:\WINDOWS\system32\drivers\Awrtrd.sys"
13 Apr 2008 19:53:24 71,552 A.... "C:\WINDOWS\system32\drivers\bridge.sys"
13 Apr 2008 19:46:34 17,024 A.... "C:\WINDOWS\system32\drivers\bthenum.sys"
13 Apr 2008 19:46:34 37,888 A.... "C:\WINDOWS\system32\drivers\bthmodem.sys"
13 Apr 2008 19:51:34 101,120 A.... "C:\WINDOWS\system32\drivers\bthpan.sys"
13 Apr 2008 19:46:32 273,024 A.... "C:\WINDOWS\system32\drivers\bthport.sys"
13 Apr 2008 19:46:32 36,480 A.... "C:\WINDOWS\system32\drivers\bthprint.sys"
13 Apr 2008 19:46:30 18,944 A.... "C:\WINDOWS\system32\drivers\bthusb.sys"
13 Apr 2008 20:14:22 63,744 A.... "C:\WINDOWS\system32\drivers\cdfs.sys"
13 Apr 2008 19:40:46 62,976 A.... "C:\WINDOWS\system32\drivers\cdrom.sys"
14 Apr 2008 1:11:50 15,423 A.... "C:\WINDOWS\system32\drivers\ch7xxnt5.dll"
13 Apr 2008 20:16:22 49,536 A.... "C:\WINDOWS\system32\drivers\classpnp.sys"
29 May 2008 10:02:26 87,056 A.... "C:\WINDOWS\system32\drivers\cmdguard.sys"
29 May 2008 10:02:26 24,208 A.... "C:\WINDOWS\system32\drivers\cmdhlp.sys"
13 Apr 2008 19:31:32 36,736 A.... "C:\WINDOWS\system32\drivers\crusoe.sys"
13 Apr 2008 19:40:48 36,352 A.... "C:\WINDOWS\system32\drivers\disk.sys"
13 Apr 2008 19:40:44 14,208 A.... "C:\WINDOWS\system32\drivers\diskdump.sys"
13 Apr 2008 19:44:48 799,744 A.... "C:\WINDOWS\system32\drivers\dmboot.sys"
13 Apr 2008 19:44:46 153,344 A.... "C:\WINDOWS\system32\drivers\dmio.sys"
13 Apr 2008 19:45:02 52,864 A.... "C:\WINDOWS\system32\drivers\dmusic.sys"
13 Apr 2008 19:45:14 60,160 A.... "C:\WINDOWS\system32\drivers\drmk.sys"
13 Apr 2008 19:45:14 2,944 A.... "C:\WINDOWS\system32\drivers\drmkaud.sys"
13 Apr 2008 19:38:30 71,168 A.... "C:\WINDOWS\system32\drivers\dxg.sys"
13 Apr 2008 20:14:30 143,744 A.... "C:\WINDOWS\system32\drivers\fastfat.sys"
13 Apr 2008 19:40:26 27,392 A.... "C:\WINDOWS\system32\drivers\fdc.sys"
13 Apr 2008 19:33:28 44,544 A.... "C:\WINDOWS\system32\drivers\fips.sys"
13 Apr 2008 19:40:26 20,480 A.... "C:\WINDOWS\system32\drivers\flpydisk.sys"
13 Apr 2008 19:33:00 129,792 A.... "C:\WINDOWS\system32\drivers\fltmgr.sys"
13 Apr 2008 19:36:40 46,464 A.... "C:\WINDOWS\system32\drivers\gagp30kx.sys"
13 Apr 2008 19:45:30 10,624 A.... "C:\WINDOWS\system32\drivers\gameenum.sys"
13 Apr 2008 17:36:06 144,384 ..... "C:\WINDOWS\system32\drivers\hdaudbus.sys"
13 Apr 2008 19:46:30 25,600 A.... "C:\WINDOWS\system32\drivers\hidbth.sys"
13 Apr 2008 19:45:26 36,864 A.... "C:\WINDOWS\system32\drivers\hidclass.sys"
13 Apr 2008 19:45:26 19,200 A.... "C:\WINDOWS\system32\drivers\hidir.sys"
13 Apr 2008 19:45:22 24,960 A.... "C:\WINDOWS\system32\drivers\hidparse.sys"
13 Apr 2008 19:45:28 10,368 A.... "C:\WINDOWS\system32\drivers\hidusb.sys"
13 Apr 2008 19:53:54 264,832 A.... "C:\WINDOWS\system32\drivers\http.sys"
13 Apr 2008 19:41:22 8,576 A.... "C:\WINDOWS\system32\drivers\i2omgmt.sys"
13 Apr 2008 19:41:22 18,560 A.... "C:\WINDOWS\system32\drivers\i2omp.sys"
13 Apr 2008 20:18:00 52,480 A.... "C:\WINDOWS\system32\drivers\i8042prt.sys"
13 Apr 2008 19:40:58 42,112 A.... "C:\WINDOWS\system32\drivers\imapi.sys"
29 May 2008 10:02:26 79,760 A.... "C:\WINDOWS\system32\drivers\inspect.sys"
13 Apr 2008 19:40:30 5,504 A.... "C:\WINDOWS\system32\drivers\intelide.sys"
13 Apr 2008 19:31:32 36,352 A.... "C:\WINDOWS\system32\drivers\intelppm.sys"
13 Apr 2008 19:53:34 36,608 A.... "C:\WINDOWS\system32\drivers\ip6fw.sys"
13 Apr 2008 19:57:08 20,864 A.... "C:\WINDOWS\system32\drivers\ipinip.sys"
13 Apr 2008 19:57:16 152,832 A.... "C:\WINDOWS\system32\drivers\ipnat.sys"
13 Apr 2008 20:19:42 75,264 A.... "C:\WINDOWS\system32\drivers\ipsec.sys"
13 Apr 2008 19:54:28 11,264 A.... "C:\WINDOWS\system32\drivers\irenum.sys"
13 Apr 2008 19:36:42 37,248 A.... "C:\WINDOWS\system32\drivers\isapnp.sys"
13 Apr 2008 19:39:48 24,576 A.... "C:\WINDOWS\system32\drivers\kbdclass.sys"
13 Apr 2008 19:39:48 14,592 A.... "C:\WINDOWS\system32\drivers\kbdhid.sys"
13 Apr 2008 19:45:10 172,416 A.... "C:\WINDOWS\system32\drivers\kmixer.sys"
13 Apr 2008 20:16:36 141,056 A.... "C:\WINDOWS\system32\drivers\ks.sys"
13 Apr 2008 19:31:44 92,288 A.... "C:\WINDOWS\system32\drivers\ksecdd.sys"
13 Apr 2008 19:36:42 63,744 A.... "C:\WINDOWS\system32\drivers\mf.sys"
13 Apr 2008 20:00:20 30,080 A.... "C:\WINDOWS\system32\drivers\modem.sys"
13 Apr 2008 19:39:48 23,040 A.... "C:\WINDOWS\system32\drivers\mouclass.sys"
13 Apr 2008 19:39:46 42,368 A.... "C:\WINDOWS\system32\drivers\mountmgr.sys"
13 Apr 2008 19:32:44 180,608 A.... "C:\WINDOWS\system32\drivers\mrxdav.sys"
13 Apr 2008 20:17:02 456,576 A.... "C:\WINDOWS\system32\drivers\mrxsmb.sys"
13 Apr 2008 19:32:40 19,072 A.... "C:\WINDOWS\system32\drivers\msfs.sys"
13 Apr 2008 19:56:32 35,072 A.... "C:\WINDOWS\system32\drivers\msgpc.sys"
13 Apr 2008 19:39:52 7,552 A.... "C:\WINDOWS\system32\drivers\mskssrv.sys"
13 Apr 2008 19:39:50 5,376 A.... "C:\WINDOWS\system32\drivers\mspclock.sys"
13 Apr 2008 19:39:52 4,992 A.... "C:\WINDOWS\system32\drivers\mspqm.sys"
13 Apr 2008 19:36:46 15,488 A.... "C:\WINDOWS\system32\drivers\mssmbios.sys"
13 Apr 2008 20:17:06 105,344 A.... "C:\WINDOWS\system32\drivers\mup.sys"
13 Apr 2008 19:43:56 12,672 A.... "C:\WINDOWS\system32\drivers\mutohpen.sys"
13 Apr 2008 20:20:38 182,656 A.... "C:\WINDOWS\system32\drivers\ndis.sys"
13 Apr 2008 19:57:28 10,112 A.... "C:\WINDOWS\system32\drivers\ndistapi.sys"
13 Apr 2008 19:55:58 14,592 A.... "C:\WINDOWS\system32\drivers\ndisuio.sys"
13 Apr 2008 20:20:42 91,520 A.... "C:\WINDOWS\system32\drivers\ndiswan.sys"
13 Apr 2008 19:57:30 40,576 A.... "C:\WINDOWS\system32\drivers\ndproxy.sys"
13 Apr 2008 19:56:02 34,688 A.... "C:\WINDOWS\system32\drivers\netbios.sys"
13 Apr 2008 20:21:00 162,816 A.... "C:\WINDOWS\system32\drivers\netbt.sys"
13 Apr 2008 19:51:26 61,824 A.... "C:\WINDOWS\system32\drivers\nic1394.sys"
13 Apr 2008 19:53:10 40,320 A.... "C:\WINDOWS\system32\drivers\nmnt.sys"
13 Apr 2008 19:32:40 30,848 A.... "C:\WINDOWS\system32\drivers\npfs.sys"
29 Apr 2008 11:20:00 15,648 A.... "C:\WINDOWS\system32\drivers\NSDriver.sys"
13 Apr 2008 20:15:54 574,976 A.... "C:\WINDOWS\system32\drivers\ntfs.sys"
13 Apr 2008 19:56:06 88,320 A.... "C:\WINDOWS\system32\drivers\nwlnkipx.sys"
13 Apr 2008 19:46:18 61,696 A.... "C:\WINDOWS\system32\drivers\ohci1394.sys"
13 Apr 2008 19:31:32 42,752 A.... "C:\WINDOWS\system32\drivers\p3.sys"
13 Apr 2008 19:40:10 80,128 A.... "C:\WINDOWS\system32\drivers\parport.sys"
13 Apr 2008 19:40:50 19,712 A.... "C:\WINDOWS\system32\drivers\partmgr.sys"
13 Apr 2008 19:36:44 68,224 A.... "C:\WINDOWS\system32\drivers\pci.sys"
13 Apr 2008 19:40:30 24,960 A.... "C:\WINDOWS\system32\drivers\pciidex.sys"
13 Apr 2008 19:36:44 120,192 A.... "C:\WINDOWS\system32\drivers\pcmcia.sys"
13 Apr 2008 20:19:42 146,048 A.... "C:\WINDOWS\system32\drivers\portcls.sys"
13 Apr 2008 19:31:30 35,840 A.... "C:\WINDOWS\system32\drivers\processr.sys"
13 Apr 2008 19:56:38 69,120 A.... "C:\WINDOWS\system32\drivers\psched.sys"
13 Apr 2008 20:19:44 51,328 A.... "C:\WINDOWS\system32\drivers\rasl2tp.sys"
13 Apr 2008 19:57:32 41,472 A.... "C:\WINDOWS\system32\drivers\raspppoe.sys"
13 Apr 2008 20:19:48 48,384 A.... "C:\WINDOWS\system32\drivers\raspptp.sys"
13 Apr 2008 20:28:40 175,744 A.... "C:\WINDOWS\system32\drivers\rdbss.sys"
13 Apr 2008 19:32:52 196,224 A.... "C:\WINDOWS\system32\drivers\rdpdr.sys"
14 Apr 2008 1:13:22 139,656 A.... "C:\WINDOWS\system32\drivers\rdpwd.sys"
13 Apr 2008 19:40:28 57,600 A.... "C:\WINDOWS\system32\drivers\redbook.sys"
13 Apr 2008 19:46:32 59,136 A.... "C:\WINDOWS\system32\drivers\rfcomm.sys"
13 Apr 2008 19:55:08 202,624 A.... "C:\WINDOWS\system32\drivers\rmcast.sys"
13 Apr 2008 19:56:50 30,592 A.... "C:\WINDOWS\system32\drivers\rndismp.sys"
13 Apr 2008 19:56:50 30,592 A.... "C:\WINDOWS\system32\drivers\rndismpx.sys"
13 Apr 2008 19:40:30 96,384 A.... "C:\WINDOWS\system32\drivers\scsiport.sys"
13 Apr 2008 19:36:44 79,232 A.... "C:\WINDOWS\system32\drivers\sdbus.sys"
13 Apr 2008 19:40:12 15,744 A.... "C:\WINDOWS\system32\drivers\serenum.sys"
13 Apr 2008 20:15:46 64,512 A.... "C:\WINDOWS\system32\drivers\serial.sys"
13 Apr 2008 19:40:48 11,904 A.... "C:\WINDOWS\system32\drivers\sffdisk.sys"
13 Apr 2008 19:40:48 10,240 ..... "C:\WINDOWS\system32\drivers\sffp_mmc.sys"
13 Apr 2008 19:40:48 11,008 A.... "C:\WINDOWS\system32\drivers\sffp_sd.sys"
13 Apr 2008 19:40:48 11,392 A.... "C:\WINDOWS\system32\drivers\sfloppy.sys"
14 Apr 2008 1:12:06 3,901 A.... "C:\WINDOWS\system32\drivers\siint5.dll"
13 Apr 2008 19:36:40 40,960 A.... "C:\WINDOWS\system32\drivers\sisagp.sys"
13 Apr 2008 19:36:34 5,888 A.... "C:\WINDOWS\system32\drivers\smbali.sys"
13 Apr 2008 19:46:08 25,344 A.... "C:\WINDOWS\system32\drivers\sonydcam.sys"
13 Apr 2008 19:45:08 6,272 A.... "C:\WINDOWS\system32\drivers\splitter.sys"
13 Apr 2008 19:36:52 73,472 A.... "C:\WINDOWS\system32\drivers\sr.sys"
13 Apr 2008 20:15:12 334,848 A.... "C:\WINDOWS\system32\drivers\srv.sys"
13 Apr 2008 19:45:16 49,408 A.... "C:\WINDOWS\system32\drivers\stream.sys"
13 Apr 2008 19:39:54 4,352 A.... "C:\WINDOWS\system32\drivers\swenum.sys"
13 Apr 2008 19:45:10 56,576 A.... "C:\WINDOWS\system32\drivers\swmidi.sys"
13 Apr 2008 20:15:56 60,800 A.... "C:\WINDOWS\system32\drivers\sysaudio.sys"
13 Apr 2008 19:40:50 14,976 A.... "C:\WINDOWS\system32\drivers\tape.sys"
13 Apr 2008 20:20:16 361,344 A.... "C:\WINDOWS\system32\drivers\tcpip.sys"
13 Apr 2008 20:00:02 225,664 A.... "C:\WINDOWS\system32\drivers\tcpip6.sys"
13 Apr 2008 20:00:06 19,072 A.... "C:\WINDOWS\system32\drivers\tdi.sys"
14 Apr 2008 1:13:20 12,040 A.... "C:\WINDOWS\system32\drivers\tdpipe.sys"
14 Apr 2008 1:13:22 21,896 A.... "C:\WINDOWS\system32\drivers\tdtcp.sys"
14 Apr 2008 1:13:20 40,840 A.... "C:\WINDOWS\system32\drivers\termdd.sys"
13 Apr 2008 19:56:02 12,288 A.... "C:\WINDOWS\system32\drivers\tunmp.sys"
13 Apr 2008 19:36:40 44,672 A.... "C:\WINDOWS\system32\drivers\uagp35.sys"
13 Apr 2008 19:32:36 66,048 A.... "C:\WINDOWS\system32\drivers\udfs.sys"
13 Apr 2008 19:39:46 384,768 A.... "C:\WINDOWS\system32\drivers\update.sys"
13 Apr 2008 19:56:50 12,800 A.... "C:\WINDOWS\system32\drivers\usb8023.sys"
13 Apr 2008 19:56:50 12,800 A.... "C:\WINDOWS\system32\drivers\usb8023x.sys"
13 Apr 2008 19:45:12 60,032 A.... "C:\WINDOWS\system32\drivers\usbaudio.sys"
13 Apr 2008 19:45:40 25,600 A.... "C:\WINDOWS\system32\drivers\usbcamd.sys"
13 Apr 2008 19:45:42 25,728 A.... "C:\WINDOWS\system32\drivers\usbcamd2.sys"
13 Apr 2008 19:45:40 32,128 A.... "C:\WINDOWS\system32\drivers\usbccgp.sys"
13 Apr 2008 19:45:36 30,208 A.... "C:\WINDOWS\system32\drivers\usbehci.sys"
13 Apr 2008 19:45:38 59,520 A.... "C:\WINDOWS\system32\drivers\usbhub.sys"
13 Apr 2008 19:45:44 15,872 A.... "C:\WINDOWS\system32\drivers\usbintel.sys"
13 Apr 2008 19:45:36 143,872 A.... "C:\WINDOWS\system32\drivers\usbport.sys"
13 Apr 2008 19:45:34 15,104 A.... "C:\WINDOWS\system32\drivers\usbscan.sys"
13 Apr 2008 19:45:36 26,112 A.... "C:\WINDOWS\system32\drivers\usbser.sys"
13 Apr 2008 19:45:38 26,368 A.... "C:\WINDOWS\system32\drivers\usbstor.sys"
13 Apr 2008 19:45:36 20,608 A.... "C:\WINDOWS\system32\drivers\usbuhci.sys"
13 Apr 2008 19:46:20 121,984 A.... "C:\WINDOWS\system32\drivers\usbvideo.sys"
14 Apr 2008 1:12:08 11,325 A.... "C:\WINDOWS\system32\drivers\vchnt5.dll"
13 Apr 2008 19:44:40 20,992 A.... "C:\WINDOWS\system32\drivers\vga.sys"
13 Apr 2008 19:36:40 42,240 A.... "C:\WINDOWS\system32\drivers\viaagp.sys"
13 Apr 2008 19:40:32 5,376 A.... "C:\WINDOWS\system32\drivers\viaide.sys"
13 Apr 2008 19:44:40 81,664 A.... "C:\WINDOWS\system32\drivers\videoprt.sys"
13 Apr 2008 19:41:02 52,352 A.... "C:\WINDOWS\system32\drivers\volsnap.sys"
13 Apr 2008 19:43:56 14,208 A.... "C:\WINDOWS\system32\drivers\wacompen.sys"
13 Apr 2008 19:57:22 34,560 A.... "C:\WINDOWS\system32\drivers\wanarp.sys"
13 Apr 2008 20:17:18 83,072 A.... "C:\WINDOWS\system32\drivers\wdmaud.sys"
14 Apr 2008 1:11:58 28,672 ..... "C:\WINDOWS\system32\en\microsoft.managementconsole.resources.dll"
14 Apr 2008 1:11:58 40,960 ..... "C:\WINDOWS\system32\en\mmcex.resources.dll"
14 Apr 2008 1:11:58 6,656 ..... "C:\WINDOWS\system32\en\mmcfxcommon.resources.dll"
14 Apr 2008 1:12:02 57,344 A.... "C:\WINDOWS\system32\npp\ndisnpp.dll"
14 Apr 2008 1:12:30 15,360 A.... "C:\WINDOWS\system32\npp\nppagent.exe"
13 Apr 2008 16:46:30 91,215 A.... "C:\WINDOWS\system32\oobe\actshell.htm"
28 May 2008 18:33:30 3,201 A.... "C:\WINDOWS\system32\oobe\agtscrp2.js"
13 Apr 2008 16:46:34 19,346 ..... "C:\WINDOWS\system32\oobe\error.js"
14 Apr 2008 1:12:00 122,368 A.... "C:\WINDOWS\system32\oobe\msobcomm.dll"
14 Apr 2008 1:12:00 16,384 A.... "C:\WINDOWS\system32\oobe\msobdl.dll"
14 Apr 2008 1:12:00 565,248 A.... "C:\WINDOWS\system32\oobe\msobmain.dll"
14 Apr 2008 1:12:00 30,720 A.... "C:\WINDOWS\system32\oobe\msobshel.dll"
14 Apr 2008 1:12:00 19,456 A.... "C:\WINDOWS\system32\oobe\msobweb.dll"
14 Apr 2008 1:12:28 29,184 A.... "C:\WINDOWS\system32\oobe\msoobe.exe"
14 Apr 2008 1:12:32 51,200 A.... "C:\WINDOWS\system32\oobe\oobebaln.exe"
28 May 2008 18:33:30 9,607 A.... "C:\WINDOWS\system32\oobe\oobeutil.js"
28 May 2008 18:33:30 32,004 A.... "C:\WINDOWS\system32\oobe\updshell.htm"
14 Apr 2008 1:12:34 380,416 A.... "C:\WINDOWS\system32\Restore\rstrui.exe"
14 Apr 2008 1:11:52 274,944 A.... "C:\WINDOWS\system32\Setup\comsetup.dll"
14 Apr 2008 1:11:54 32,828 A.... "C:\WINDOWS\system32\Setup\fp40ext.dll"
14 Apr 2008 1:11:54 132,608 A.... "C:\WINDOWS\system32\Setup\fxsocm.dll"
14 Apr 2008 1:11:54 505,344 A.... "C:\WINDOWS\system32\Setup\iis.dll"
14 Apr 2008 1:11:54 123,392 A.... "C:\WINDOWS\system32\Setup\imsinsnt.dll"
14 Apr 2008 1:11:56 8,192 A.... "C:\WINDOWS\system32\Setup\koc.dll"
14 Apr 2008 1:12:00 90,112 A.... "C:\WINDOWS\system32\Setup\msdtcstp.dll"
14 Apr 2008 1:12:00 15,360 A.... "C:\WINDOWS\system32\Setup\msgrocm.dll"
14 Apr 2008 1:12:02 77,312 A.... "C:\WINDOWS\system32\Setup\netoc.dll"
14 Apr 2008 1:12:02 62,976 A.... "C:\WINDOWS\system32\Setup\ntoc.dll"
14 Apr 2008 1:12:02 15,360 A.... "C:\WINDOWS\system32\Setup\ocgen.dll"
14 Apr 2008 1:12:02 17,408 A.... "C:\WINDOWS\system32\Setup\ocmsn.dll"
14 Apr 2008 1:12:06 101,376 A.... "C:\WINDOWS\system32\Setup\setupqry.dll"
14 Apr 2008 1:12:08 26,624 A.... "C:\WINDOWS\system32\Setup\startoc.dll"
14 Apr 2008 1:12:08 130,048 A.... "C:\WINDOWS\system32\Setup\tsoc.dll"
13 Apr 2008 16:43:52 72,387 ..... "C:\WINDOWS\system32\usmt\archvapp.inf"
13 Apr 2008 17:44:16 17,920 ..... "C:\WINDOWS\system32\usmt\cobramsg.dll"
14 Apr 2008 1:11:54 133,120 A.... "C:\WINDOWS\system32\usmt\guitrn.dll"
14 Apr 2008 1:11:54 115,200 ..... "C:\WINDOWS\system32\usmt\guitrna.dll"
13 Apr 2008 17:44:30 2,560 A.... "C:\WINDOWS\system32\usmt\iconlib.dll"
14 Apr 2008 1:11:56 19,968 A.... "C:\WINDOWS\system32\usmt\log.dll"
13 Apr 2008 16:43:52 282,296 A.... "C:\WINDOWS\system32\usmt\migapp.inf"
14 Apr 2008 1:11:58 274,432 A.... "C:\WINDOWS\system32\usmt\migism.dll"
13 Apr 2008 16:43:10 2,978 A.... "C:\WINDOWS\system32\usmt\migism.inf"
14 Apr 2008 1:11:58 261,120 ..... "C:\WINDOWS\system32\usmt\migisma.dll"
14 Apr 2008 1:12:26 103,936 A.... "C:\WINDOWS\system32\usmt\migload.exe"
13 Apr 2008 16:43:52 66,509 A.... "C:\WINDOWS\system32\usmt\migsys.inf"
13 Apr 2008 16:43:52 4,060 A.... "C:\WINDOWS\system32\usmt\miguser.inf"
14 Apr 2008 1:12:26 245,248 A.... "C:\WINDOWS\system32\usmt\migwiz.exe"
13 Apr 2008 16:43:52 4,638 A.... "C:\WINDOWS\system32\usmt\migwiz.inf"
14 Apr 2008 1:12:26 241,152 ..... "C:\WINDOWS\system32\usmt\migwiza.exe"
14 Apr 2008 1:12:06 215,552 A.... "C:\WINDOWS\system32\usmt\script.dll"
14 Apr 2008 1:12:06 199,680 ..... "C:\WINDOWS\system32\usmt\scripta.dll"
13 Apr 2008 16:43:52 825,260 A.... "C:\WINDOWS\system32\usmt\sysfiles.inf"
14 Apr 2008 1:12:08 193,024 A.... "C:\WINDOWS\system32\usmt\sysmod.dll"
14 Apr 2008 1:12:08 173,568 ..... "C:\WINDOWS\system32\usmt\sysmoda.dll"
13 Apr 2008 16:43:52 13,962 A.... "C:\WINDOWS\system32\usmt\usmtdef.inf"
14 Apr 2008 1:11:50 1,358,848 A.... "C:\WINDOWS\system32\wbem\cimwin32.dll"
13 Apr 2008 16:39:20 1,961,486 A.... "C:\WINDOWS\system32\wbem\cimwin32.mfl"
13 Apr 2008 16:39:20 2,775,842 A.... "C:\WINDOWS\system32\wbem\cimwin32.mof"
14 Apr 2008 1:11:54 247,808 A.... "C:\WINDOWS\system32\wbem\esscli.dll"
14 Apr 2008 1:11:54 21,504 A.... "C:\WINDOWS\system32\wbem\evntrprv.dll"
14 Apr 2008 1:11:54 472,064 A.... "C:\WINDOWS\system32\wbem\fastprox.dll"
14 Apr 2008 1:11:54 185,344 A.... "C:\WINDOWS\system32\wbem\framedyn.dll"
14 Apr 2008 1:11:56 24,576 A.... "C:\WINDOWS\system32\wbem\krnlprov.dll"
14 Apr 2008 1:12:26 16,384 A.... "C:\WINDOWS\system32\wbem\mofcomp.exe"
14 Apr 2008 1:11:58 123,904 A.... "C:\WINDOWS\system32\wbem\mofd.dll"
14 Apr 2008 1:12:02 47,104 A.... "C:\WINDOWS\system32\wbem\ncprov.dll"
14 Apr 2008 1:12:02 212,992 A.... "C:\WINDOWS\system32\wbem\ntevt.dll"
14 Apr 2008 1:12:04 237,056 A.... "C:\WINDOWS\system32\wbem\provthrd.dll"
14 Apr 2008 1:12:04 178,176 A.... "C:\WINDOWS\system32\wbem\repdrvfs.dll"
14 Apr 2008 1:12:34 36,352 A.... "C:\WINDOWS\system32\wbem\scrcons.exe"
14 Apr 2008 1:12:08 86,528 A.... "C:\WINDOWS\system32\wbem\stdprov.dll"
14 Apr 2008 1:12:08 131,584 A.... "C:\WINDOWS\system32\wbem\viewprov.dll"
14 Apr 2008 1:12:08 196,608 A.... "C:\WINDOWS\system32\wbem\wbemcntl.dll"
14 Apr 2008 1:12:08 214,528 A.... "C:\WINDOWS\system32\wbem\wbemcomn.dll"
14 Apr 2008 1:12:08 71,680 A.... "C:\WINDOWS\system32\wbem\wbemcons.dll"
14 Apr 2008 1:12:08 531,456 A.... "C:\WINDOWS\system32\wbem\wbemcore.dll"
14 Apr 2008 1:12:08 178,176 A.... "C:\WINDOWS\system32\wbem\wbemdisp.dll"
14 Apr 2008 1:12:08 273,920 A.... "C:\WINDOWS\system32\wbem\wbemess.dll"
14 Apr 2008 1:12:08 43,008 A.... "C:\WINDOWS\system32\wbem\wbemperf.dll"
14 Apr 2008 1:12:08 18,944 A.... "C:\WINDOWS\system32\wbem\wbemprox.dll"
14 Apr 2008 1:12:08 43,520 A.... "C:\WINDOWS\system32\wbem\wbemsvc.dll"
14 Apr 2008 1:12:40 116,224 A.... "C:\WINDOWS\system32\wbem\wbemtest.exe"
14 Apr 2008 1:12:08 197,120 A.... "C:\WINDOWS\system32\wbem\wbemupgd.dll"
14 Apr 2008 1:12:40 196,608 A.... "C:\WINDOWS\system32\wbem\wmiadap.exe"
13 Apr 2008 18:10:20 6,656 A.... "C:\WINDOWS\system32\wbem\wmiapres.dll"
14 Apr 2008 1:12:10 88,576 A.... "C:\WINDOWS\system32\wbem\wmiaprpl.dll"
14 Apr 2008 1:12:40 126,464 A.... "C:\WINDOWS\system32\wbem\wmiapsrv.exe"
14 Apr 2008 1:12:10 60,928 A.... "C:\WINDOWS\system32\wbem\wmicookr.dll"
14 Apr 2008 1:12:10 140,800 A.... "C:\WINDOWS\system32\wbem\wmidcprv.dll"
14 Apr 2008 1:12:10 156,672 A.... "C:\WINDOWS\system32\wbem\wmipcima.dll"
14 Apr 2008 1:12:10 132,096 A.... "C:\WINDOWS\system32\wbem\wmipdskq.dll"
14 Apr 2008 1:12:10 61,952 A.... "C:\WINDOWS\system32\wbem\wmipiprt.dll"
14 Apr 2008 1:12:10 62,464 A.... "C:\WINDOWS\system32\wbem\wmipjobj.dll"
14 Apr 2008 1:12:10 144,896 A.... "C:\WINDOWS\system32\wbem\wmiprov.dll"
14 Apr 2008 1:12:10 437,248 A.... "C:\WINDOWS\system32\wbem\wmiprvsd.dll"
14 Apr 2008 1:12:40 218,112 A.... "C:\WINDOWS\system32\wbem\wmiprvse.exe"
14 Apr 2008 1:12:10 41,472 A.... "C:\WINDOWS\system32\wbem\wmipsess.dll"
14 Apr 2008 1:12:10 144,896 A.... "C:\WINDOWS\system32\wbem\wmisvc.dll"
14 Apr 2008 1:12:10 95,232 A.... "C:\WINDOWS\system32\wbem\wmiutils.dll"
12 Apr 2008 22:50:56 383 A.... "C:\WINDOWS\WinSxS\Manifests\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e.manifest"
14 Apr 2008 2:25:08 10,678 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.cat"
14 Apr 2008 2:25:08 10,680 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.cat"
28 May 2008 18:23:46 500 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63.Manifest"
28 May 2008 18:23:42 1,237 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.Manifest"
12 Apr 2008 22:51:04 8,173 A.... "C:\WINDOWS\WinSxS\Manifests\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790.manifest"
14 Apr 2008 2:25:06 10,678 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.cat"
14 Apr 2008 2:25:08 10,678 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0.cat"
28 May 2008 18:23:44 1,822 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a.Manifest"
28 May 2008 18:23:42 1,883 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.Manifest"
28 May 2008 18:23:42 1,187 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.Manifest"
28 May 2008 18:23:44 460 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0.Manifest"
28 May 2008 18:23:44 1,862 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest"
14 Apr 2008 2:25:10 10,682 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.cat"
28 May 2008 18:23:42 397 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c.Manifest"
14 Apr 2008 2:25:08 10,680 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c.cat"
14 Apr 2008 2:25:06 10,676 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a.cat"
14 Apr 2008 2:25:10 10,682 A.... "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63.cat"
12 Apr 2008 22:50:56 8,192 A.... "C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll"
13 Apr 2008 19:26:34 132,096 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll"
14 Apr 2008 1:12:50 853,504 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll"
14 Apr 2008 1:12:48 1,724,416 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll"
14 Apr 2008 1:12:50 991,232 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll"
14 Apr 2008 1:12:52 1,054,208 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll"
14 Apr 2008 1:12:52 57,344 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll"
14 Apr 2008 1:12:52 343,040 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll"
12 Apr 2008 22:51:02 258,048 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll"
12 Apr 2008 22:51:02 113,664 A.... "C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll"
14 Apr 2008 1:12:50 74,802 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll"
14 Apr 2008 1:12:50 995,383 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll"
14 Apr 2008 1:12:50 1,011,774 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll"
14 Apr 2008 1:12:50 401,462 A.... "C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll"
28 May 2008 18:02:16 0 A.... "C:\WINDOWS\Debug\Setup\Backup\IE7_Backup.bak"
28 May 2008 18:02:16 4 A.... "C:\WINDOWS\Debug\Setup\Backup\INTPPM_Backup.bak"
9 Apr 2008 23:44:46 25,196 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.inf"
9 Apr 2008 23:44:34 7,811 A.... "C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.txt"
14 Apr 2008 1:10:34 175,104 A.... "C:\WINDOWS\ime\chsime\applets\pintlcsa.dll"
14 Apr 2008 1:10:34 53,760 A.... "C:\WINDOWS\ime\chsime\applets\pintlcsd.dll"
14 Apr 2008 1:09:06 97,792 A.... "C:\WINDOWS\ime\CHTIME\Applets\chtmbx.dll"
14 Apr 2008 1:09:06 56,320 A.... "C:\WINDOWS\ime\CHTIME\Applets\chtskdic.dll"
14 Apr 2008 1:09:06 173,568 A.... "C:\WINDOWS\ime\CHTIME\Applets\chtskf.dll"
14 Apr 2008 1:09:40 13,463,552 A.... "C:\WINDOWS\ime\imjp8_1\applets\hwxjpn.dll"
14 Apr 2008 1:09:48 315,455 A.... "C:\WINDOWS\ime\imjp8_1\applets\imskf.dll"
14 Apr 2008 1:11:04 426,041 A.... "C:\WINDOWS\ime\imjp8_1\applets\voicepad.dll"
14 Apr 2008 1:11:04 86,073 A.... "C:\WINDOWS\ime\imjp8_1\applets\voicesub.dll"
14 Apr 2008 1:09:44 86,016 A.... "C:\WINDOWS\ime\imkr6_1\applets\imekrmbx.dll"
14 Apr 2008 1:10:34 15,872 A.... "C:\WINDOWS\ime\shared\res\padrs404.dll"
14 Apr 2008 1:10:34 15,360 A.... "C:\WINDOWS\ime\shared\res\padrs804.dll"
12 Apr 2008 22:52:10 126,978 A.... "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.log"
13 Apr 2008 18:02:34 417,506 A.... "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen_service.log"
14 Apr 2008 1:12:22 769,024 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe"
14 Apr 2008 1:12:22 744,448 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe"
14 Apr 2008 1:12:22 18,432 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\hscupd.exe"
14 Apr 2008 1:12:28 169,984 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\msconfig.exe"
14 Apr 2008 1:12:00 376,832 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\msinfo.dll"
14 Apr 2008 1:12:02 102,912 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll"
14 Apr 2008 1:12:02 38,400 A.... "C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll"
28 May 2008 18:26:28 12,591,104 A.... "C:\WINDOWS\PCHealth\HelpCtr\Database\HCdata.edb"
28 May 2008 18:25:56 2,369,277 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\merged.hhk"
28 May 2008 18:25:56 13,328 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_2.hhk"
28 May 2008 18:25:56 19,513 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_3.hhk"
28 May 2008 18:25:58 35,565 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_4.hhk"
28 May 2008 18:25:56 20,016 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_5.hhk"
28 May 2008 18:25:58 15,646 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_6.hhk"
28 May 2008 18:25:56 99,081 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_7.hhk"
28 May 2008 18:25:56 183,723 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_8.hhk"
28 May 2008 18:25:56 5,527 A.... "C:\WINDOWS\PCHealth\HelpCtr\Indices\scoped_9.hhk"
28 May 2008 18:26:10 848,059 A.... "C:\WINDOWS\PCHealth\HelpCtr\Logs\hcupdate.log"
28 May 2008 18:26:08 76,487 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat"
28 May 2008 18:26:10 4 A.... "C:\WINDOWS\PCHealth\HelpCtr\PackageStore\CRC_Disk"
28 May 2008 18:24:40 290,594 ..SHR "C:\WINDOWS\PCHealth\HelpCtr\PackageStore\package_7.cab"
28 May 2008 18:26:10 3,046 A.... "C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin"
28 May 2008 18:24:44 6,150 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Headlines.htm"
28 May 2008 18:24:44 5,812 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\HelpCtr.mmf"
28 May 2008 18:24:44 7,737 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\HomePage__DESKTOP.htm"
28 May 2008 18:24:44 7,355 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\HomePage__SERVER.htm"
14 Apr 2008 1:12:38 150,528 A.... "C:\WINDOWS\PCHealth\UploadLB\Binaries\uploadm.exe"
13 Apr 2008 18:02:26 4,190,352 ..... "C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"
14 Apr 2008 1:11:30 78,336 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\chajei.ime"
14 Apr 2008 1:09:06 97,792 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\chtmbx.dll"
14 Apr 2008 1:09:06 56,320 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\chtskdic.dll"
14 Apr 2008 1:09:06 173,568 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\chtskf.dll"
14 Apr 2008 1:09:06 198,656 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\cintime.dll"
14 Apr 2008 1:11:32 21,504 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\cintlgnt.ime"
14 Apr 2008 1:11:34 78,848 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\dayi.ime"
14 Apr 2008 1:09:40 13,463,552 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\hwxjpn.dll"
14 Apr 2008 1:09:44 94,720 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imekr61.ime"
14 Apr 2008 1:09:44 106,496 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imekrcic.dll"
14 Apr 2008 1:09:44 86,016 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imekrmbx.dll"
14 Apr 2008 1:09:44 340,023 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjp81.ime"
14 Apr 2008 1:09:44 811,064 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjp81k.dll"
14 Apr 2008 1:09:46 368,696 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjpcic.dll"
14 Apr 2008 1:09:46 716,856 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjpcus.dll"
14 Apr 2008 1:09:46 81,976 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.dll"
14 Apr 2008 1:09:46 274,489 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imjputyc.dll"
14 Apr 2008 1:09:46 102,456 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imlang.dll"
14 Apr 2008 1:09:48 315,455 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\imskf.dll"
13 Apr 2008 19:40:04 11,776 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\miniime.tpl"
14 Apr 2008 1:10:34 15,872 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\padrs404.dll"
14 Apr 2008 1:10:34 15,360 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\padrs804.dll"
14 Apr 2008 1:11:34 79,360 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\phon.ime"
14 Apr 2008 1:10:34 175,104 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsa.dll"
14 Apr 2008 1:10:34 53,760 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsd.dll"
14 Apr 2008 1:11:32 482,304 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\pintlgnt.ime"
13 Apr 2008 17:43:36 70,144 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\pintlphr.exe"
14 Apr 2008 1:10:34 67,584 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\pmigrate.dll"
14 Apr 2008 1:11:30 77,824 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\quick.ime"
14 Apr 2008 1:11:34 26,112 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\romanime.ime"
14 Apr 2008 1:11:32 571,392 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\tintlgnt.ime"
14 Apr 2008 1:11:00 10,240 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\tmigrate.dll"
14 Apr 2008 1:11:38 65,024 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\unicdime.ime"
14 Apr 2008 1:11:02 76,288 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\uniime.dll"
14 Apr 2008 1:11:04 426,041 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\voicepad.dll"
14 Apr 2008 1:11:04 86,073 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll"
14 Apr 2008 1:11:30 79,360 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\winar30.ime"
14 Apr 2008 1:11:10 72,704 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\wingb.ime"
14 Apr 2008 1:11:34 65,536 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\winime.ime"
14 Apr 2008 1:11:12 156,672 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\winpy.ime"
14 Apr 2008 1:11:14 156,672 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\winsp.ime"
14 Apr 2008 1:11:14 156,672 ..... "C:\WINDOWS\ServicePackFiles\i386\lang\winzm.ime"
14 Apr 2008 1:11:52 33,792 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\custsat.dll"
14 Apr 2008 3:04:30 391,859 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\layout.inf"
14 Apr 2008 1:12:00 82,944 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgsc.dll"
13 Apr 2008 18:30:28 180,224 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msgslang.dll"
14 Apr 2008 1:12:28 1,695,232 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\msmsgs.exe"
14 Apr 2008 3:04:40 402,264 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\nt5inf.cat"
13 Apr 2008 17:30:16 6,344 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\oobe.inf"
13 Apr 2008 17:30:32 6,540 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\shl_img.inf"
13 Apr 2008 17:30:38 1,686 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\sysoc.inf"
13 Apr 2008 17:30:40 34,908 ..... "C:\WINDOWS\ServicePackFiles\ServicePackCache\i386\syssetup.inf"
17 Apr 2008 12:37:00 295,165 A.... "C:\WINDOWS\system32\Adobe\Shockwave 11\Install.log"
14 Apr 2008 3:04:38 34,063 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat"
14 Apr 2008 3:04:34 16,535 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat"
14 Apr 2008 3:04:36 12,363 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat"
14 Apr 2008 3:04:36 26,991 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat"
14 Apr 2008 3:04:36 14,433 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat"
14 Apr 2008 3:04:36 10,027 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat"
14 Apr 2008 3:04:46 2,144,487 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat"
14 Apr 2008 3:04:40 402,264 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5inf.cat"
14 Apr 2008 3:04:44 1,088,840 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat"
14 Apr 2008 7:40:48 1,296,669 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp3.cat"
14 Apr 2008 3:04:40 171,588 ..S.. "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\startoc.cat"
29 May 2008 11:57:56 8 A.... "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp"
28 May 2008 15:28:24 5,618,689 A.... "C:\WINDOWS\system32\drivers\Avg\avi7.avg"
31 May 2008 19:04:18 24,191,809 A.... "C:\WINDOWS\system32\drivers\Avg\incavi.avm"
29 May 2008 23:04:12 66,038 A.... "C:\WINDOWS\system32\drivers\Avg\microavi.avg"
28 May 2008 15:45:30 838,585 A.... "C:\WINDOWS\system32\drivers\Avg\miniavi.avg"
14 Apr 2008 1:09:06 198,656 A.... "C:\WINDOWS\system32\IME\CINTLGNT\cintime.dll"
13 Apr 2008 17:43:36 70,144 A.... "C:\WINDOWS\system32\IME\PINTLGNT\pintlphr.exe"
14 Apr 2008 1:10:34 67,584 A.... "C:\WINDOWS\system32\IME\PINTLGNT\pmigrate.dll"
14 Apr 2008 1:11:00 10,240 A.... "C:\WINDOWS\system32\IME\TINTLGNT\tmigrate.dll"
31 May 2008 13:30:20 596,095 A.... "C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log"
1 Jun 2008 11:19:56 8,192 A.... "C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl"
13 Apr 2008 19:40:52 405,504 ..... "C:\WINDOWS\system32\mui\041b\xpob2res.dll"
13 Apr 2008 19:35:28 192,512 ..... "C:\WINDOWS\system32\mui\041b\xpsp1res.dll"
13 Apr 2008 19:38:38 757,248 ..... "C:\WINDOWS\system32\mui\041b\xpsp2res.dll"
13 Apr 2008 19:40:04 577,536 ..... "C:\WINDOWS\system32\mui\041b\xpsp3res.dll"
13 Apr 2008 18:39:22 187,392 ..... "C:\WINDOWS\system32\mui\041e\xpsp1res.dll"
13 Apr 2008 18:39:24 2,897,920 ..... "C:\WINDOWS\system32\mui\041e\xpsp2res.dll"
13 Apr 2008 19:40:56 408,576 ..... "C:\WINDOWS\system32\mui\0424\xpob2res.dll"
13 Apr 2008 19:35:28 192,512 ..... "C:\WINDOWS\system32\mui\0424\xpsp1res.dll"
13 Apr 2008 19:38:36 732,160 ..... "C:\WINDOWS\system32\mui\0424\xpsp2res.dll"
13 Apr 2008 19:40:06 576,512 ..... "C:\WINDOWS\system32\mui\0424\xpsp3res.dll"
13 Apr 2008 16:46:34 4,527 A.... "C:\WINDOWS\system32\oobe\actsetup\apolicy.htm"
28 May 2008 18:33:30 5,579 A.... "C:\WINDOWS\system32\oobe\setup\autoupdt.htm"
28 May 2008 18:33:30 13,568 A.... "C:\WINDOWS\system32\oobe\setup\au_plcy.htm"
12 Apr 2008 22:51:08 107,496 A.... "C:\WINDOWS\system32\wbem\AutoRecover\1EBE968EB7AF815A32641E6185350A9E.mof"
28 May 2008 18:24:34 2,775,948 A.... "C:\WINDOWS\system32\wbem\AutoRecover\26C097A9392F8C541AD42E89B7909073.mof"
28 May 2008 18:24:14 1,394 A.... "C:\WINDOWS\system32\wbem\AutoRecover\7F417E1A6D819A9B2FEB55DA6858EA0A.mof"
28 May 2008 18:24:14 8,102 A.... "C:\WINDOWS\system32\wbem\AutoRecover\903E49C444C46FEF5F2C3A189C9CEF71.mof"
28 May 2008 18:24:34 2,566 A.... "C:\WINDOWS\system32\wbem\AutoRecover\9AD3182A2F39A3E091E15109132EC6CC.mof"
9 Apr 2008 14:33:42 149,398 A.... "C:\WINDOWS\system32\wbem\AutoRecover\B0F7571D09CBE0AE81CB8FC91B04A321.mof"
28 May 2008 18:24:28 99,856 A.... "C:\WINDOWS\system32\wbem\AutoRecover\C6300BFE37ADE6B52EC023F66124985F.mof"
12 Apr 2008 22:50:38 29,388 A.... "C:\WINDOWS\system32\wbem\AutoRecover\DFB9AD54AC2D3B8122567AAD3BF3EB7F.mof"
28 May 2008 18:23:46 621 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy"
14 Apr 2008 2:25:06 10,678 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.cat"
14 Apr 2008 2:25:10 10,682 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.5512.cat"
28 May 2008 18:23:46 623 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.5512.Policy"
14 Apr 2008 2:25:08 10,678 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.cat"
28 May 2008 18:23:44 641 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.Policy"
14 Apr 2008 2:25:08 10,680 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.5512.cat"
28 May 2008 18:23:42 605 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.5512.Policy"
14 Apr 2008 2:25:06 10,678 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.cat"
28 May 2008 18:23:44 641 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.Policy"
14 Apr 2008 2:25:06 10,676 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_x-ww_527a1c68\6.0.9792.0.cat"
28 May 2008 18:23:46 644 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_x-ww_527a1c68\6.0.9792.0.Policy"
14 Apr 2008 2:25:10 10,680 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.cat"
28 May 2008 18:23:42 625 A.... "C:\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.Policy"
28 May 2008 18:25:58 62 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000000.query"
28 May 2008 18:25:58 752 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000001.query"
28 May 2008 18:25:58 752 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000002.query"
28 May 2008 18:25:58 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000004.query"
28 May 2008 18:26:02 338 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000100.query"
28 May 2008 18:26:02 512 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000101.query"
28 May 2008 18:26:02 3,900 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000102.query"
28 May 2008 18:26:02 3,396 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000103.query"
28 May 2008 18:26:06 258 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000200.query"
28 May 2008 18:26:06 1,362 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000201.query"
28 May 2008 18:26:06 1,362 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000202.query"
28 May 2008 18:26:06 418 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000204.query"
28 May 2008 18:25:58 1,614 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000006.query"
28 May 2008 18:26:06 2,278 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000205.query"
28 May 2008 18:26:02 5,806 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000106.query"
28 May 2008 18:26:06 2,278 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000206.query"
28 May 2008 18:26:02 310 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000104.query"
28 May 2008 18:25:58 1,614 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000005.query"
28 May 2008 18:26:02 5,806 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000107.query"
28 May 2008 18:26:00 2,916 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000086.query"
28 May 2008 18:26:02 568 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000186.query"
28 May 2008 18:26:02 568 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000185.query"
28 May 2008 18:26:00 300 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000084.query"
28 May 2008 18:26:08 2,410 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000283.query"
28 May 2008 18:26:02 246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000184.query"
28 May 2008 18:26:00 2,916 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000085.query"
28 May 2008 18:26:00 8,320 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000082.query"
28 May 2008 18:26:02 500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000182.query"
28 May 2008 18:26:00 8,320 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000083.query"
28 May 2008 18:26:08 2,410 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000282.query"
28 May 2008 18:26:02 500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000181.query"
28 May 2008 18:26:00 216 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000080.query"
28 May 2008 18:26:02 276 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000180.query"
28 May 2008 18:26:08 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000280.query"
28 May 2008 18:25:58 2,716 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000016.query"
28 May 2008 18:26:02 2,020 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000116.query"
28 May 2008 18:25:58 2,716 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000017.query"
28 May 2008 18:26:06 2,988 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000216.query"
28 May 2008 18:26:02 2,020 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000115.query"
28 May 2008 18:25:58 314 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000014.query"
28 May 2008 18:26:06 1,918 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000213.query"
28 May 2008 18:26:02 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000114.query"
28 May 2008 18:26:06 192 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000214.query"
28 May 2008 18:25:58 662 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000012.query"
28 May 2008 18:26:02 850 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000112.query"
28 May 2008 18:25:58 662 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000013.query"
28 May 2008 18:26:06 1,918 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000212.query"
28 May 2008 18:26:02 850 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000111.query"
28 May 2008 18:25:58 232 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000010.query"
28 May 2008 18:26:02 396 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000110.query"
28 May 2008 18:26:06 204 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000210.query"
28 May 2008 18:26:00 720 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000096.query"
28 May 2008 18:26:04 9,334 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000196.query"
28 May 2008 18:26:00 294 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000094.query"
28 May 2008 18:26:04 190 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000194.query"
28 May 2008 18:26:00 720 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000095.query"
28 May 2008 18:26:04 2,222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000193.query"
28 May 2008 18:26:00 2,542 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000092.query"
28 May 2008 18:26:04 2,222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000192.query"
28 May 2008 18:26:00 2,542 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000093.query"
28 May 2008 18:26:00 228 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000090.query"
28 May 2008 18:26:04 192 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000190.query"
28 May 2008 18:26:04 9,334 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000197.query"
28 May 2008 18:26:00 2,660 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a6.query"
28 May 2008 18:26:04 2,542 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a7.query"
28 May 2008 18:26:00 2,660 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a7.query"
28 May 2008 18:26:04 244 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a4.query"
28 May 2008 18:26:00 256 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a4.query"
28 May 2008 18:26:04 2,338 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a2.query"
28 May 2008 18:26:00 1,782 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a2.query"
28 May 2008 18:26:04 2,338 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a3.query"
28 May 2008 18:26:00 1,782 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a3.query"
28 May 2008 18:26:04 248 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a0.query"
28 May 2008 18:26:00 258 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a0.query"
28 May 2008 18:26:04 2,542 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a6.query"
28 May 2008 18:25:58 1,572 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000026.query"
28 May 2008 18:26:02 3,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000126.query"
28 May 2008 18:26:06 618 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000226.query"
28 May 2008 18:25:58 438 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000024.query"
28 May 2008 18:26:06 3,390 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000223.query"
28 May 2008 18:26:02 222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000124.query"
28 May 2008 18:25:58 1,572 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000025.query"
28 May 2008 18:26:06 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000224.query"
28 May 2008 18:25:58 786 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000022.query"
28 May 2008 18:26:02 1,006 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000122.query"
28 May 2008 18:25:58 786 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000023.query"
28 May 2008 18:26:06 3,390 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000222.query"
28 May 2008 18:26:02 1,006 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000121.query"
28 May 2008 18:25:58 264 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000020.query"
28 May 2008 18:26:02 332 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000120.query"
28 May 2008 18:26:06 166 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000220.query"
28 May 2008 18:26:02 3,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000127.query"
28 May 2008 18:26:00 3,572 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b6.query"
28 May 2008 18:26:04 4,160 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b7.query"
28 May 2008 18:26:04 260 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b4.query"
28 May 2008 18:26:00 486 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b4.query"
28 May 2008 18:26:00 3,572 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b5.query"
28 May 2008 18:26:04 2,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b2.query"
28 May 2008 18:26:00 962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b2.query"
28 May 2008 18:26:04 2,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b3.query"
28 May 2008 18:26:04 184 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b0.query"
28 May 2008 18:26:00 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b0.query"
28 May 2008 18:26:00 962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b1.query"
28 May 2008 18:26:04 4,160 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b6.query"
28 May 2008 18:25:58 1,000 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000036.query"
28 May 2008 18:26:02 806 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000136.query"
28 May 2008 18:26:08 2,246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000236.query"
28 May 2008 18:25:58 504 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000034.query"
28 May 2008 18:26:02 298 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000134.query"
28 May 2008 18:25:58 1,000 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000035.query"
28 May 2008 18:26:08 162 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000234.query"
28 May 2008 18:26:02 3,152 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000133.query"
28 May 2008 18:25:58 564 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000032.query"
28 May 2008 18:26:08 968 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000231.query"
28 May 2008 18:26:02 3,152 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000132.query"
28 May 2008 18:26:08 968 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000232.query"
28 May 2008 18:25:58 378 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000030.query"
28 May 2008 18:26:02 226 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000130.query"
28 May 2008 18:25:58 564 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000031.query"
28 May 2008 18:26:08 186 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000230.query"
28 May 2008 18:26:02 806 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000137.query"
28 May 2008 18:26:00 3,646 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c6.query"
28 May 2008 18:26:04 2,334 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c7.query"
28 May 2008 18:26:00 3,646 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c7.query"
28 May 2008 18:26:04 208 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c4.query"
28 May 2008 18:26:00 218 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c4.query"
28 May 2008 18:26:04 5,784 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c2.query"
28 May 2008 18:26:00 1,864 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c2.query"
28 May 2008 18:26:04 5,784 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c3.query"
28 May 2008 18:26:00 1,864 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c3.query"
28 May 2008 18:26:04 260 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c0.query"
28 May 2008 18:26:00 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c0.query"
28 May 2008 18:26:04 2,334 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c6.query"
28 May 2008 18:25:58 3,384 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000046.query"
28 May 2008 18:26:02 5,186 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000146.query"
28 May 2008 18:25:58 3,384 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000047.query"
28 May 2008 18:26:08 4,744 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000246.query"
28 May 2008 18:25:58 208 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000044.query"
28 May 2008 18:26:08 998 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000243.query"
28 May 2008 18:26:02 270 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000144.query"
28 May 2008 18:26:08 198 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000244.query"
28 May 2008 18:26:02 6,114 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000143.query"
28 May 2008 18:25:58 3,530 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000042.query"
28 May 2008 18:26:02 6,114 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000142.query"
28 May 2008 18:25:58 3,530 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000043.query"
28 May 2008 18:26:08 998 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000242.query"
28 May 2008 18:25:58 212 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000040.query"
28 May 2008 18:26:02 282 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000140.query"
28 May 2008 18:26:08 214 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000240.query"
28 May 2008 18:26:02 5,186 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000147.query"
28 May 2008 18:26:00 3,106 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d6.query"
28 May 2008 18:26:00 3,106 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d7.query"
28 May 2008 18:26:04 208 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001d4.query"
28 May 2008 18:26:00 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d4.query"
28 May 2008 18:26:04 3,448 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001d2.query"
28 May 2008 18:26:00 3,822 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d2.query"
28 May 2008 18:26:04 3,448 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001d3.query"
28 May 2008 18:26:00 3,822 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d3.query"
28 May 2008 18:26:04 158 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001d0.query"
28 May 2008 18:26:00 206 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d0.query"
28 May 2008 18:26:00 2,774 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000056.query"
28 May 2008 18:26:08 926 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000255.query"
28 May 2008 18:26:02 4,962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000156.query"
28 May 2008 18:26:00 2,774 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000057.query"
28 May 2008 18:26:08 926 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000256.query"
28 May 2008 18:26:00 246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000054.query"
28 May 2008 18:26:02 310 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000154.query"
28 May 2008 18:26:08 188 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000254.query"
28 May 2008 18:26:02 3,396 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000153.query"
28 May 2008 18:26:00 1,392 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000052.query"
28 May 2008 18:26:08 308 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000251.query"
28 May 2008 18:26:02 3,396 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000152.query"
28 May 2008 18:26:08 308 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000252.query"
28 May 2008 18:26:00 398 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000050.query"
28 May 2008 18:26:02 266 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000150.query"
28 May 2008 18:26:00 1,392 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000051.query"
28 May 2008 18:26:08 246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000250.query"
28 May 2008 18:26:02 4,962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000157.query"
28 May 2008 18:26:00 1,208 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e6.query"
28 May 2008 18:26:04 178 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e4.query"
28 May 2008 18:26:00 420 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e4.query"
28 May 2008 18:26:04 1,600 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e5.query"
28 May 2008 18:26:00 1,208 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e5.query"
28 May 2008 18:26:04 2,108 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e2.query"
28 May 2008 18:26:00 4,020 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e2.query"
28 May 2008 18:26:00 3,704 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e3.query"
28 May 2008 18:26:04 222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e0.query"
28 May 2008 18:26:00 230 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e0.query"
28 May 2008 18:26:04 2,108 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e1.query"
28 May 2008 18:26:00 324 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e1.query"
28 May 2008 18:26:04 1,600 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e6.query"
28 May 2008 18:26:00 1,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000066.query"
28 May 2008 18:26:02 3,264 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000166.query"
28 May 2008 18:26:00 1,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000067.query"
28 May 2008 18:26:08 1,274 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000266.query"
28 May 2008 18:26:00 204 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000064.query"
28 May 2008 18:26:02 164 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000164.query"
28 May 2008 18:26:08 302 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000264.query"
28 May 2008 18:26:02 3,608 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000163.query"
28 May 2008 18:26:00 2,130 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000062.query"
28 May 2008 18:26:08 1,912 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000261.query"
28 May 2008 18:26:02 3,608 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000162.query"
28 May 2008 18:26:00 2,130 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000063.query"
28 May 2008 18:26:08 1,912 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000262.query"
28 May 2008 18:26:00 180 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000060.query"
28 May 2008 18:26:02 180 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000160.query"
28 May 2008 18:26:08 324 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000260.query"
28 May 2008 18:26:02 3,264 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000167.query"
28 May 2008 18:26:02 2,194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f6.query"
28 May 2008 18:26:04 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f4.query"
28 May 2008 18:26:02 484 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f4.query"
28 May 2008 18:26:04 1,842 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f5.query"
28 May 2008 18:26:02 2,194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f5.query"
28 May 2008 18:26:04 4,104 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f2.query"
28 May 2008 18:26:02 2,966 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f2.query"
28 May 2008 18:26:04 3,812 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f3.query"
28 May 2008 18:26:02 2,966 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f3.query"
28 May 2008 18:26:04 222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f0.query"
28 May 2008 18:26:02 242 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f0.query"
28 May 2008 18:26:04 300 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f1.query"
28 May 2008 18:26:04 1,842 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f6.query"
28 May 2008 18:26:00 2,428 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000076.query"
28 May 2008 18:26:08 608 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000275.query"
28 May 2008 18:26:02 3,274 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000176.query"
28 May 2008 18:26:08 1,598 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000276.query"
28 May 2008 18:26:00 398 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000074.query"
28 May 2008 18:26:08 1,176 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000273.query"
28 May 2008 18:26:02 216 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000174.query"
28 May 2008 18:26:00 2,428 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000075.query"
28 May 2008 18:26:08 234 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000274.query"
28 May 2008 18:26:02 3,206 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000173.query"
28 May 2008 18:26:00 1,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000072.query"
28 May 2008 18:26:02 3,206 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000172.query"
28 May 2008 18:26:08 1,176 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000272.query"
28 May 2008 18:26:00 454 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000070.query"
28 May 2008 18:26:02 128 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000170.query"
28 May 2008 18:26:00 1,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000071.query"
28 May 2008 18:26:08 262 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000270.query"
28 May 2008 18:26:02 3,274 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000177.query"
28 May 2008 18:26:06 1,464 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000209.query"
28 May 2008 18:25:58 500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000008.query"
28 May 2008 18:26:02 250 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000108.query"
28 May 2008 18:25:58 1,594 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000009.query"
28 May 2008 18:26:06 140 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000208.query"
28 May 2008 18:26:00 262 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000088.query"
28 May 2008 18:26:02 192 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000188.query"
28 May 2008 18:26:02 940 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000119.query"
28 May 2008 18:25:58 254 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000018.query"
28 May 2008 18:26:06 2,988 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000217.query"
28 May 2008 18:26:02 432 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000118.query"
28 May 2008 18:26:06 262 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000218.query"
28 May 2008 18:26:04 2,486 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000199.query"
28 May 2008 18:26:00 154 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000098.query"
28 May 2008 18:26:04 348 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000198.query"
28 May 2008 18:26:04 250 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001a8.query"
28 May 2008 18:26:00 200 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000a8.query"
28 May 2008 18:26:06 564 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000229.query"
28 May 2008 18:25:58 446 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000028.query"
28 May 2008 18:26:06 618 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000227.query"
28 May 2008 18:26:02 146 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000128.query"
28 May 2008 18:25:58 1,976 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000029.query"
28 May 2008 18:26:06 218 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000228.query"
28 May 2008 18:26:04 256 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001b8.query"
28 May 2008 18:26:00 182 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000b8.query"
28 May 2008 18:25:58 302 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000038.query"
28 May 2008 18:26:08 2,246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000237.query"
28 May 2008 18:26:02 234 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000138.query"
28 May 2008 18:25:58 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000039.query"
28 May 2008 18:26:08 178 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000238.query"
28 May 2008 18:26:04 490 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001c8.query"
28 May 2008 18:26:00 266 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000c8.query"
28 May 2008 18:25:58 204 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000048.query"
28 May 2008 18:26:08 4,744 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000247.query"
28 May 2008 18:26:02 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000148.query"
28 May 2008 18:26:08 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000248.query"
28 May 2008 18:26:04 98 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001d8.query"
28 May 2008 18:26:00 190 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000d8.query"
28 May 2008 18:26:02 2,812 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000159.query"
28 May 2008 18:26:00 240 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000058.query"
28 May 2008 18:26:02 354 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000158.query"
28 May 2008 18:26:08 128 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000258.query"
28 May 2008 18:26:04 178 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e8.query"
28 May 2008 18:26:00 246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000e8.query"
28 May 2008 18:26:04 2,256 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001e9.query"
28 May 2008 18:26:00 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000068.query"
28 May 2008 18:26:08 1,274 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000267.query"
28 May 2008 18:26:02 124 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000168.query"
28 May 2008 18:26:08 326 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000268.query"
28 May 2008 18:26:04 202 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f8.query"
28 May 2008 18:26:02 298 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000f8.query"
28 May 2008 18:26:04 3,050 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001f9.query"
28 May 2008 18:26:00 386 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000078.query"
28 May 2008 18:26:08 998 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000277.query"
28 May 2008 18:26:02 248 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000178.query"
28 May 2008 18:26:00 2,408 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000079.query"
28 May 2008 18:26:08 210 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\00000278.query"
28 May 2008 18:25:58 4,128 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000000f.query"
28 May 2008 18:26:06 1,718 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000020e.query"
28 May 2008 18:26:06 1,718 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000020f.query"
28 May 2008 18:26:06 214 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000020c.query"
28 May 2008 18:25:58 4,128 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000000e.query"
28 May 2008 18:26:02 336 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000010c.query"
28 May 2008 18:26:06 1,464 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000020a.query"
28 May 2008 18:26:02 1,374 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000010b.query"
28 May 2008 18:25:58 186 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000000c.query"
28 May 2008 18:26:02 1,374 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000010a.query"
28 May 2008 18:25:58 1,594 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000000a.query"
28 May 2008 18:26:04 4,390 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000018f.query"
28 May 2008 18:26:02 4,390 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000018e.query"
28 May 2008 18:26:00 1,734 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000008d.query"
28 May 2008 18:26:00 1,734 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000008e.query"
28 May 2008 18:26:02 200 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000018c.query"
28 May 2008 18:26:00 3,780 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000008b.query"
28 May 2008 18:26:02 1,404 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000018b.query"
28 May 2008 18:26:00 516 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000008c.query"
28 May 2008 18:26:02 1,404 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000018a.query"
28 May 2008 18:26:00 3,780 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000008a.query"
28 May 2008 18:26:06 2,136 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000021e.query"
28 May 2008 18:26:02 1,946 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000011e.query"
28 May 2008 18:25:58 1,570 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000001d.query"
28 May 2008 18:26:06 248 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000021c.query"
28 May 2008 18:26:02 1,946 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000011d.query"
28 May 2008 18:25:58 1,570 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000001e.query"
28 May 2008 18:26:06 2,136 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000021d.query"
28 May 2008 18:26:02 264 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000011c.query"
28 May 2008 18:25:58 3,352 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000001b.query"
28 May 2008 18:26:06 3,234 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000021a.query"
28 May 2008 18:25:58 384 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000001c.query"
28 May 2008 18:26:06 3,234 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000021b.query"
28 May 2008 18:26:02 940 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000011a.query"
28 May 2008 18:25:58 3,352 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000001a.query"
28 May 2008 18:26:00 2,666 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000009f.query"
28 May 2008 18:26:04 6,458 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000019f.query"
28 May 2008 18:26:04 6,458 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000019e.query"
28 May 2008 18:26:00 2,666 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000009e.query"
28 May 2008 18:26:04 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000019c.query"
28 May 2008 18:26:00 2,648 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000009b.query"
28 May 2008 18:26:00 216 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000009c.query"
28 May 2008 18:26:04 2,486 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000019a.query"
28 May 2008 18:26:00 2,648 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000009a.query"
28 May 2008 18:26:00 1,978 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000af.query"
28 May 2008 18:26:04 3,670 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ae.query"
28 May 2008 18:26:00 1,978 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ae.query"
28 May 2008 18:26:04 888 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ab.query"
28 May 2008 18:26:00 1,874 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ab.query"
28 May 2008 18:26:04 226 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ac.query"
28 May 2008 18:26:00 184 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ac.query"
28 May 2008 18:26:04 888 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001aa.query"
28 May 2008 18:26:00 1,874 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000aa.query"
28 May 2008 18:26:04 3,670 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001af.query"
28 May 2008 18:26:08 3,152 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000022e.query"
28 May 2008 18:26:08 3,152 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000022f.query"
28 May 2008 18:26:02 2,468 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000012e.query"
28 May 2008 18:25:58 500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000002d.query"
28 May 2008 18:26:08 182 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000022c.query"
28 May 2008 18:26:02 2,468 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000012d.query"
28 May 2008 18:25:58 500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000002e.query"
28 May 2008 18:26:02 428 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000012c.query"
28 May 2008 18:26:06 564 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000022a.query"
28 May 2008 18:26:02 260 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000012b.query"
28 May 2008 18:25:58 268 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000002c.query"
28 May 2008 18:26:02 260 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000012a.query"
28 May 2008 18:25:58 1,976 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000002a.query"
28 May 2008 18:26:00 1,770 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000bf.query"
28 May 2008 18:26:04 3,086 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001be.query"
28 May 2008 18:26:00 1,770 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000be.query"
28 May 2008 18:26:04 4,348 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001bb.query"
28 May 2008 18:26:00 3,862 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000bb.query"
28 May 2008 18:26:04 236 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001bc.query"
28 May 2008 18:26:00 206 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000bc.query"
28 May 2008 18:26:04 4,348 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ba.query"
28 May 2008 18:26:00 3,862 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ba.query"
28 May 2008 18:26:04 3,086 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001bf.query"
28 May 2008 18:26:08 858 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000023e.query"
28 May 2008 18:26:02 3,988 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000013f.query"
28 May 2008 18:26:08 858 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000023f.query"
28 May 2008 18:26:02 3,988 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000013e.query"
28 May 2008 18:25:58 1,414 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000003d.query"
28 May 2008 18:26:08 130 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000023c.query"
28 May 2008 18:25:58 1,414 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000003e.query"
28 May 2008 18:26:02 222 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000013c.query"
28 May 2008 18:26:08 3,868 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000023a.query"
28 May 2008 18:26:02 3,616 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000013b.query"
28 May 2008 18:25:58 298 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000003c.query"
28 May 2008 18:26:08 3,868 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000023b.query"
28 May 2008 18:26:02 3,616 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000013a.query"
28 May 2008 18:25:58 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000003a.query"
28 May 2008 18:26:00 7,626 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000cf.query"
28 May 2008 18:26:04 448 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001cd.query"
28 May 2008 18:26:04 448 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ce.query"
28 May 2008 18:26:00 7,626 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ce.query"
28 May 2008 18:26:00 2,990 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000cb.query"
28 May 2008 18:26:04 82 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001cc.query"
28 May 2008 18:26:00 246 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000cc.query"
28 May 2008 18:26:00 2,990 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ca.query"
28 May 2008 18:26:00 4,472 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000004f.query"
28 May 2008 18:26:08 966 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000024e.query"
28 May 2008 18:26:02 2,488 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000014f.query"
28 May 2008 18:26:02 2,488 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000014e.query"
28 May 2008 18:26:08 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000024c.query"
28 May 2008 18:26:00 4,472 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000004e.query"
28 May 2008 18:26:08 966 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000024d.query"
28 May 2008 18:26:02 230 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000014c.query"
28 May 2008 18:26:00 2,306 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000004b.query"
28 May 2008 18:26:08 2,502 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000024a.query"
28 May 2008 18:26:02 5,718 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000014b.query"
28 May 2008 18:26:00 188 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000004c.query"
28 May 2008 18:26:08 2,502 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000024b.query"
28 May 2008 18:26:02 5,718 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000014a.query"
28 May 2008 18:26:00 2,306 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000004a.query"
28 May 2008 18:26:04 1,978 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001dd.query"
28 May 2008 18:26:00 520 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000dd.query"
28 May 2008 18:26:04 1,978 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001de.query"
28 May 2008 18:26:00 520 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000de.query"
28 May 2008 18:26:04 1,220 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001db.query"
28 May 2008 18:26:00 1,746 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000db.query"
28 May 2008 18:26:04 82 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001dc.query"
28 May 2008 18:26:00 374 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000dc.query"
28 May 2008 18:26:04 1,220 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001da.query"
28 May 2008 18:26:00 1,746 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000da.query"
28 May 2008 18:26:00 5,500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000005f.query"
28 May 2008 18:26:08 4,752 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000025e.query"
28 May 2008 18:26:02 4,688 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000015f.query"
28 May 2008 18:26:08 4,752 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000025f.query"
28 May 2008 18:26:02 4,688 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000015e.query"
28 May 2008 18:26:08 130 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000025c.query"
28 May 2008 18:26:00 5,500 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000005e.query"
28 May 2008 18:26:02 240 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000015c.query"
28 May 2008 18:26:00 2,608 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000005b.query"
28 May 2008 18:26:08 242 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000025a.query"
28 May 2008 18:26:00 360 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000005c.query"
28 May 2008 18:26:08 242 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000025b.query"
28 May 2008 18:26:02 2,812 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000015a.query"
28 May 2008 18:26:00 2,608 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000005a.query"
28 May 2008 18:26:02 5,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ef.query"
28 May 2008 18:26:04 2,074 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ee.query"
28 May 2008 18:26:02 5,826 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ee.query"
28 May 2008 18:26:02 3,554 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000eb.query"
28 May 2008 18:26:04 182 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ec.query"
28 May 2008 18:26:02 262 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ec.query"
28 May 2008 18:26:04 2,256 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ea.query"
28 May 2008 18:26:00 3,554 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ea.query"
28 May 2008 18:26:04 2,074 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ef.query"
28 May 2008 18:26:08 1,910 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000026e.query"
28 May 2008 18:26:02 1,660 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016f.query"
28 May 2008 18:26:08 1,910 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000026f.query"
28 May 2008 18:26:02 1,838 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016e.query"
28 May 2008 18:26:00 962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000006d.query"
28 May 2008 18:26:08 218 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000026c.query"
28 May 2008 18:26:02 186 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016d.query"
28 May 2008 18:26:00 962 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000006e.query"
28 May 2008 18:26:02 132 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016c.query"
28 May 2008 18:26:00 1,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000006b.query"
28 May 2008 18:26:08 1,914 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000026a.query"
28 May 2008 18:26:02 1,638 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016b.query"
28 May 2008 18:26:00 194 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000006c.query"
28 May 2008 18:26:08 1,914 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000026b.query"
28 May 2008 18:26:02 1,638 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000016a.query"
28 May 2008 18:26:00 1,686 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000006a.query"
28 May 2008 18:26:02 2,804 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000ff.query"
28 May 2008 18:26:06 5,370 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001fe.query"
28 May 2008 18:26:02 2,804 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000fe.query"
28 May 2008 18:26:02 4,306 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000fb.query"
28 May 2008 18:26:06 200 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001fc.query"
28 May 2008 18:26:02 314 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000fc.query"
28 May 2008 18:26:04 3,050 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001fa.query"
28 May 2008 18:26:02 4,306 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000000fa.query"
28 May 2008 18:26:06 5,370 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\000001ff.query"
28 May 2008 18:26:00 6,126 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000007f.query"
28 May 2008 18:26:08 2,936 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000027e.query"
28 May 2008 18:26:02 2,420 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000017f.query"
28 May 2008 18:26:08 2,936 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000027f.query"
28 May 2008 18:26:02 2,420 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000017e.query"
28 May 2008 18:26:08 214 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000027c.query"
28 May 2008 18:26:00 6,126 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000007e.query"
28 May 2008 18:26:02 196 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000017c.query"
28 May 2008 18:26:08 2,946 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000027a.query"
28 May 2008 18:26:02 3,782 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000017b.query"
28 May 2008 18:26:00 304 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000007c.query"
28 May 2008 18:26:08 2,946 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000027b.query"
28 May 2008 18:26:02 3,782 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000017a.query"
28 May 2008 18:26:00 2,408 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\Personal_32#0409\0000007a.query"
28 May 2008 18:24:44 2,352 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\about_support.htm"
28 May 2008 18:24:44 1,453 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\Favorites.htm"
28 May 2008 18:24:44 1,740 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\ftshelp.htm"
28 May 2008 18:24:44 1,386 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\History.htm"
28 May 2008 18:24:44 1,477 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\Index.htm"
28 May 2008 18:24:44 3,873 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\isupport.htm"
28 May 2008 18:24:44 1,816 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\keywordhelp.htm"
28 May 2008 18:24:44 1,679 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\options.htm"
28 May 2008 18:24:44 1,763 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\searchblurb.htm"
28 May 2008 18:24:44 10,376 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\searchtips.htm"
28 May 2008 18:24:44 1,411 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\tools.htm"
28 May 2008 18:24:44 360,054 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\watermark_300x.bmp"
28 May 2008 18:24:44 2,368 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\blurbs\windows_newsgroups.htm"
28 May 2008 18:24:44 3,155 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\CompatCtr\AboutCompat.htm"
28 May 2008 18:24:48 77,245 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\CompatCtr\CompatMode.htm"
28 May 2008 18:24:44 1,340 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\CompatCtr\CompatOffline.htm"
28 May 2008 18:24:44 2,588 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\CompatCtr\LearnCompat.htm"
28 May 2008 18:24:44 1,175 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\css\Behaviors.css"
28 May 2008 18:24:44 492 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\css\Layout.css"
28 May 2008 18:24:44 850 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\dialogs\DlgLib.js"
28 May 2008 18:24:44 7,523 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\dialogs\Print.dlg"
28 May 2008 18:24:44 1,656 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\DVDUpgrd\dvdupgrd.htm"
28 May 2008 18:24:48 1,206 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\DVDUpgrd\dvdupgrd.js"
28 May 2008 18:24:44 9,264 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\DVDUpgrd\stripe.jpg"
28 May 2008 18:24:44 880 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\ErrMsg\ErrorMessagesOffline.htm"
28 May 2008 18:24:44 1,663 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\badurl.htm"
28 May 2008 18:24:48 18,852 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\connection.htm"
28 May 2008 18:24:44 1,655 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\indexfirstlevel.htm"
28 May 2008 18:24:44 2,028 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\notfound.htm"
28 May 2008 18:24:44 775 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\offline.htm"
28 May 2008 18:24:44 1,728 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\redirect.htm"
28 May 2008 18:24:44 1,689 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\errors\unreachable.htm"
28 May 2008 18:24:44 1,557 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\error.gif"
28 May 2008 18:24:44 895 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\feedback.gif"
28 May 2008 18:24:44 70 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\flyout_arrow.gif"
28 May 2008 18:24:44 1,383 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\get_conn.gif"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_articles_12x.bmp"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_blank_12x.bmp"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_newwindow_12x.bmp"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_onlineinline_12x.bmp"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_tours_12x.bmp"
28 May 2008 18:24:44 630 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\icon_tutorials_12x.bmp"
28 May 2008 18:24:44 1,521 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\info.gif"
28 May 2008 18:24:44 2,801 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\progbar.gif"
28 May 2008 18:24:44 1,466 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\warning.gif"
28 May 2008 18:24:44 76 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\wrapperhelp.gif"
28 May 2008 18:24:44 55,709 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\NetDiag\dglogs.htm"
28 May 2008 18:24:44 2,654 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\NetDiag\dglogshelp.htm"
28 May 2008 18:24:48 19,520 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\AdvSearch.htm"
28 May 2008 18:24:44 608 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm"
28 May 2008 18:24:44 9,174 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\Context.htm"
28 May 2008 18:24:44 714 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\firstpage.htm"
28 May 2008 18:24:44 713 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\HHWrapper.htm"
28 May 2008 18:24:44 4,764 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\MiniNavBar.htm"
28 May 2008 18:24:44 1,990 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\MiniNavBar.xml"
28 May 2008 18:24:44 20,832 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\NavBar.htm"
28 May 2008 18:24:44 2,513 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\NavBar.xml"
28 May 2008 18:24:44 4,418 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\Options.htm"
28 May 2008 18:24:44 43,111 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\RemoteHelp.htm"
28 May 2008 18:24:44 4,553 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\ShareHelp.htm"
28 May 2008 18:24:44 5,547 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\Topics.htm"
28 May 2008 18:24:44 2,367 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\rc\rcRequest.htm"
28 May 2008 18:24:46 80,856 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\ding.wav"
28 May 2008 18:24:46 3,907 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\helpeeaccept.htm"
28 May 2008 18:24:48 540 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\RAClientLayout.xml"
28 May 2008 18:24:48 666 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\RAHelpeeAcceptLayout.xml"
28 May 2008 18:24:48 587 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\RAIMLayout.xml"
28 May 2008 18:24:46 3,493 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\RAStartPage.htm"
28 May 2008 18:24:48 569 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\RAURA.xml"
28 May 2008 18:24:46 5,980 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\rcBuddy.htm"
28 May 2008 18:24:48 3,159 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\scripts\Common.js"
28 May 2008 18:24:44 4,609 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\scripts\HomePage__SHARED.js"
28 May 2008 18:24:44 3,445 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\scripts\HomePage__DESKTOP.js"
28 May 2008 18:24:44 8,844 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\scripts\HomePage__SERVER.js"
28 May 2008 18:24:44 2,954 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\scripts\wrapperparam.js"
28 May 2008 18:24:48 32,141 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\commonFunc.js"
28 May 2008 18:24:44 26,520 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\loc_strings.xml"
28 May 2008 18:24:44 2,501 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\msinfo.htm"
28 May 2008 18:24:44 371 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\msinfo.xml"
28 May 2008 18:24:44 582 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\msinfohss.css"
28 May 2008 18:24:44 56,540 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\RSoP.htm"
28 May 2008 18:24:44 56,777 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\RSoP.js"
28 May 2008 18:24:48 25,050 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysComponentInfo.htm"
28 May 2008 18:24:48 27,910 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysComponentInfo.js"
28 May 2008 18:24:44 1,323 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysConfigLaunch.htm"
28 May 2008 18:24:44 2,537 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysDiskTS.htm"
28 May 2008 18:24:44 10,312 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysEvtLogInfo.htm"
28 May 2008 18:24:44 13,556 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysHealthInfo.htm"
28 May 2008 18:24:44 20,083 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysHealthInfo.js"
28 May 2008 18:24:44 4,132 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysInfoLaunch.htm"
28 May 2008 18:24:44 4,150 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysinfomain.htm"
28 May 2008 18:24:48 16,097 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysinfosum.htm"
28 May 2008 18:24:44 1,864 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysRemoteInfo.htm"
28 May 2008 18:24:44 10,136 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysServicesInfo.htm"
28 May 2008 18:24:48 7,840 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysSoftwareInfo.htm"
28 May 2008 18:24:44 9,506 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\sysSoftwareInfo.js"
28 May 2008 18:24:48 14,129 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\wmi_data.js"
28 May 2008 18:24:44 4,113 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\UpdateCtr\AboutWU.htm"
28 May 2008 18:24:44 2,059 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\UpdateCtr\Learn.htm"
28 May 2008 18:24:44 2,500 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\UpdateCtr\LearnInternet.htm"
28 May 2008 18:24:44 2,518 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\UpdateCtr\learnWU.htm"
28 May 2008 18:24:44 1,132 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\UpdateCtr\updatecenter.htm"
28 May 2008 18:24:46 627 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm"
28 May 2008 18:24:46 682 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif"
28 May 2008 18:24:46 311 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif"
28 May 2008 18:24:46 213 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif"
28 May 2008 18:24:46 2,722 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm"
28 May 2008 18:24:46 13,050 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm"
28 May 2008 18:24:46 781 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css"
28 May 2008 18:24:46 10,912 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml"
28 May 2008 18:24:46 7,098 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml"
28 May 2008 18:24:46 10,755 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml"
28 May 2008 18:24:46 30,494 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm"
28 May 2008 18:24:46 114 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif"
28 May 2008 18:24:46 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif"
28 May 2008 18:24:46 106 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif"
28 May 2008 18:24:46 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif"
28 May 2008 18:24:46 43 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif"
28 May 2008 18:24:46 232 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif"
13 Apr 2008 16:46:30 91,215 ..... "C:\WINDOWS\system32\oobe\mui\041e\actshell.htm"
13 Apr 2008 16:46:34 19,346 ..... "C:\WINDOWS\system32\oobe\mui\041e\error.js"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\arrow_blue_normal_shadow.bmp"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\arrow_green_normal_shadow.bmp"
28 May 2008 18:24:44 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\compat.bmp"
28 May 2008 18:24:44 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\errmsg.bmp"
28 May 2008 18:24:44 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\support.bmp"
28 May 2008 18:24:44 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\tools.bmp"
28 May 2008 18:24:44 1,078 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\update.bmp"
28 May 2008 18:24:44 600 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\16x16\warning.gif"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\24x24\arrow_green_mousedown.bmp"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\24x24\arrow_green_mouseover.bmp"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\24x24\arrow_green_normal.bmp"
28 May 2008 18:24:44 2,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\32x32\logo.bmp"
28 May 2008 18:24:44 9,270 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\48x48\desktop_icon_generic.bmp"
28 May 2008 18:24:44 9,270 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\48x48\desktop_icon_01.bmp"
28 May 2008 18:24:44 9,270 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\48x48\desktop_icon_02.bmp"
28 May 2008 18:24:44 9,270 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\48x48\desktop_icon_03.bmp"
28 May 2008 18:24:44 9,270 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\48x48\desktop_icon_04.bmp"
28 May 2008 18:24:44 674 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Centers\blue_arrow.gif"
28 May 2008 18:24:44 1,383 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Centers\Connect.gif"
28 May 2008 18:24:44 1,839 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Centers\IULogo.gif"
28 May 2008 18:24:44 1,525 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Centers\Uabrand.gif"
28 May 2008 18:24:44 139 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Expando\collapsed.gif"
28 May 2008 18:24:44 136 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Expando\endnode.gif"
28 May 2008 18:24:44 135 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Expando\expanded.gif"
28 May 2008 18:24:44 207 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\images\Expando\helpdoc.gif"
28 May 2008 18:24:44 8,494 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Channels.htm"
28 May 2008 18:24:44 8,522 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Favorites.htm"
28 May 2008 18:24:44 5,369 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\History.htm"
28 May 2008 18:24:44 2,911 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Index.htm"
28 May 2008 18:24:44 3,465 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Options.htm"
28 May 2008 18:24:48 37,469 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Search.htm"
28 May 2008 18:24:44 6,520 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\panels\subpanels\Subsite.htm"
28 May 2008 18:24:48 5,231 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\common.js"
28 May 2008 18:24:46 4,039 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\ConnIssue.htm"
28 May 2008 18:24:46 2,151 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\constants.js"
28 May 2008 18:24:46 234 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\icon_information_32x.gif"
28 May 2008 18:24:46 219 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\icon_warning_32x.gif"
28 May 2008 18:24:46 1,633 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\LearnInternet.htm"
28 May 2008 18:24:46 2,317 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\RAHelp.htm"
28 May 2008 18:24:46 2,859 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Common\RCMoreInfo.htm"
28 May 2008 18:24:46 1,369 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Css\RAChat.css"
28 May 2008 18:24:46 2,442 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Css\rc.css"
28 May 2008 18:24:46 1,308 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Css\rcbuddy.css"
28 May 2008 18:24:44 118 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\alert.gif"
28 May 2008 18:24:44 674 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\BArrow.gif"
28 May 2008 18:24:44 162 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\card.gif"
28 May 2008 18:24:44 257 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\cd.gif"
28 May 2008 18:24:44 145 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\check.gif"
28 May 2008 18:24:44 102 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\chip.gif"
28 May 2008 18:24:44 1,498 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\down.bmp"
28 May 2008 18:24:44 139 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\drive.gif"
28 May 2008 18:24:44 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\error.gif"
28 May 2008 18:24:44 159 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\floppy.gif"
28 May 2008 18:24:44 682 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\GArrow.gif"
28 May 2008 18:24:44 135 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\gears.gif"
28 May 2008 18:24:44 677 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\greendot.jpg"
28 May 2008 18:24:44 99 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\info.gif"
28 May 2008 18:24:44 129 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\monitor.gif"
28 May 2008 18:24:44 181 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\personalizing.gif"
28 May 2008 18:24:44 1,135 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\PieChart.gif"
28 May 2008 18:24:44 67 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\PieGrey.gif"
28 May 2008 18:24:44 67 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\PieWhite.gif"
28 May 2008 18:24:44 136 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\printer.gif"
28 May 2008 18:24:44 114 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\r1_c1.gif"
28 May 2008 18:24:44 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\r1_c2.gif"
28 May 2008 18:24:44 106 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\r1_c3.gif"
28 May 2008 18:24:44 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\r3_c2.gif"
28 May 2008 18:24:44 43 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\spacer.gif"
28 May 2008 18:24:44 404 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\system.gif"
28 May 2008 18:24:44 1,135 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\Untitled.gif"
28 May 2008 18:24:44 1,498 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\up.bmp"
28 May 2008 18:24:44 262 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\usb.gif"
28 May 2008 18:24:44 569 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\windows.gif"
28 May 2008 18:24:46 2,843 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm"
28 May 2008 18:24:48 16,167 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm"
28 May 2008 18:34:02 22,388 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNDVE4G.BUD"
29 May 2008 16:38:36 13,840 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\primopdf.BPD"
14 Apr 2008 1:12:04 728,576 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\ps5ui.dll"
14 Apr 2008 1:12:04 543,232 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\pscript5.dll"
14 Apr 2008 1:12:08 373,248 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll"
14 Apr 2008 1:12:08 744,448 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll"
28 May 2008 18:24:46 4,756 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\Animation.gif"
28 May 2008 18:24:46 59 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\combobox_line.gif"
28 May 2008 18:24:46 1,094 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\connected.gif"
28 May 2008 18:24:46 1,024 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\DividerBar.gif"
28 May 2008 18:24:46 346 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\DividerBar.htm"
28 May 2008 18:24:46 838 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\DownArrow.gif"
28 May 2008 18:24:46 8,969 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAChatClient.htm"
28 May 2008 18:24:48 45,530 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAClient.htm"
28 May 2008 18:24:48 11,254 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAClient.js"
28 May 2008 18:24:46 7,140 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm"
28 May 2008 18:24:48 11,187 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAToolBar.htm"
28 May 2008 18:24:46 3,172 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\RAToolBar.xml"
28 May 2008 18:24:46 1,290 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm"
28 May 2008 18:24:48 2,496 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm"
28 May 2008 18:24:46 6,552 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\setting.htm"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\TakeControl.bmp"
28 May 2008 18:24:46 861 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\TakeControl.gif"
28 May 2008 18:24:46 834 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Client\UpArrow.gif"
28 May 2008 18:24:48 690 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif"
28 May 2008 18:24:46 2,086 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp"
28 May 2008 18:24:46 845 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\HelpCenter.gif"
28 May 2008 18:24:46 379 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\hide-chat.gif"
28 May 2008 18:24:46 227 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\info.gif"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\Options.bmp"
28 May 2008 18:24:46 713 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\Options.gif"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\Quit.bmp"
28 May 2008 18:24:46 750 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\Quit.gif"
28 May 2008 18:24:48 15,709 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\RAControl.js"
28 May 2008 18:24:48 30,918 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm"
28 May 2008 18:24:46 1,041 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendChat.gif"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendFile.bmp"
28 May 2008 18:24:46 694 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendFile.gif"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendVoice.bmp"
28 May 2008 18:24:46 692 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendVoice.gif"
28 May 2008 18:24:46 994 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif"
28 May 2008 18:24:46 380 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\show-chat.gif"
28 May 2008 18:24:48 3,226 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm"
28 May 2008 18:24:46 2,333 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm"
28 May 2008 18:24:46 341 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\DividerBar1.htm"
28 May 2008 18:24:46 353 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\DividerBar2.htm"
28 May 2008 18:24:46 2,818 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\ESC_key.gif"
28 May 2008 18:24:46 75 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\Helpee_line.gif"
28 May 2008 18:24:46 8,095 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\RAChatServer.htm"
28 May 2008 18:24:48 21,049 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\RAServer.htm"
28 May 2008 18:24:48 5,158 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\RAServer.js"
28 May 2008 18:24:48 14,557 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm"
28 May 2008 18:24:46 4,797 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\SettingServer.htm"
28 May 2008 18:24:46 3,898 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\StopControl.bmp"
28 May 2008 18:24:46 640 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\StopControl.gif"
28 May 2008 18:24:46 3,210 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm"
28 May 2008 18:24:44 734 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\0_chart.gif"
28 May 2008 18:24:44 741 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\100_chart.gif"
28 May 2008 18:24:44 784 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\10_chart.gif"
28 May 2008 18:24:44 778 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\15_chart.gif"
28 May 2008 18:24:44 775 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\20_chart.gif"
28 May 2008 18:24:44 781 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\25_chart.gif"
28 May 2008 18:24:44 782 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\30_chart.gif"
28 May 2008 18:24:44 793 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\35_chart.gif"
28 May 2008 18:24:44 789 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\40_chart.gif"
28 May 2008 18:24:44 785 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\45_chart.gif"
28 May 2008 18:24:44 762 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\50_chart.gif"
28 May 2008 18:24:44 777 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\55_chart.gif"
28 May 2008 18:24:44 773 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\5_chart.gif"
28 May 2008 18:24:44 789 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\60_chart.gif"
28 May 2008 18:24:44 1,199 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\65_chart.gif"
28 May 2008 18:24:44 1,190 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\70_chart.gif"
28 May 2008 18:24:44 1,194 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\75_chart.gif"
28 May 2008 18:24:44 1,196 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\80_chart.gif"
28 May 2008 18:24:44 1,190 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\85_chart.gif"
28 May 2008 18:24:44 1,196 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\90_chart.gif"
28 May 2008 18:24:44 1,207 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\33x16pie\95_chart.gif"
28 May 2008 18:24:44 1,345 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\0_chart.gif"
28 May 2008 18:24:44 1,358 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\100_chart.gif"
28 May 2008 18:24:44 1,443 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\10_chart.gif"
28 May 2008 18:24:44 1,435 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\15_chart.gif"
28 May 2008 18:24:44 1,421 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\20_chart.gif"
28 May 2008 18:24:44 1,423 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\25_chart.gif"
28 May 2008 18:24:44 1,428 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\30_chart.gif"
28 May 2008 18:24:44 1,441 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\35_chart.gif"
28 May 2008 18:24:44 1,446 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\40_chart.gif"
28 May 2008 18:24:44 1,446 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\45_chart.gif"
28 May 2008 18:24:44 1,412 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\50_chart.gif"
28 May 2008 18:24:44 1,430 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\55_chart.gif"
28 May 2008 18:24:44 1,413 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\5_chart.gif"
28 May 2008 18:24:44 1,446 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\60_chart.gif"
28 May 2008 18:24:44 1,445 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\65_chart.gif"
28 May 2008 18:24:44 1,435 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\70_chart.gif"
28 May 2008 18:24:44 1,442 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\75_chart.gif"
28 May 2008 18:24:44 1,447 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\80_chart.gif"
28 May 2008 18:24:44 1,426 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\85_chart.gif"
28 May 2008 18:24:44 1,442 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\90_chart.gif"
28 May 2008 18:24:44 1,445 A.... "C:\WINDOWS\PCHealth\HelpCtr\System\sysinfo\graphics\47x24pie\95_chart.gif"
28 May 2008 18:24:48 5,231 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js"
28 May 2008 18:24:48 5,403 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm"
28 May 2008 18:24:46 2,151 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js"
28 May 2008 18:24:46 234 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif"
28 May 2008 18:24:46 219 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif"
28 May 2008 18:24:46 1,633 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm"
28 May 2008 18:24:46 2,317 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm"
28 May 2008 18:24:48 5,930 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm"
28 May 2008 18:24:46 1,369 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css"
28 May 2008 18:24:46 2,442 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css"
28 May 2008 18:24:46 1,308 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css"
28 May 2008 18:24:46 102 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif"
28 May 2008 18:24:46 1,074 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif"
28 May 2008 18:24:46 690 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif"
28 May 2008 18:24:46 384 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif"
28 May 2008 18:24:46 387 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif"
28 May 2008 18:24:46 608 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif"
28 May 2008 18:24:46 382 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif"
28 May 2008 18:24:46 373 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif"
28 May 2008 18:24:46 910 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif"
28 May 2008 18:24:46 111 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif"
28 May 2008 18:24:46 159 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif"
28 May 2008 18:24:46 1,047 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif"
28 May 2008 18:24:46 321 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif"
28 May 2008 18:24:46 139 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif"
28 May 2008 18:24:46 227 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif"
28 May 2008 18:24:46 3,169 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif"
28 May 2008 18:24:46 1,473 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif"
28 May 2008 18:24:46 7,066 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif"
28 May 2008 18:24:46 8,509 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif"
28 May 2008 18:24:46 180 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif"
28 May 2008 18:24:46 410 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif"
28 May 2008 18:24:46 3,332 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm"
28 May 2008 18:24:46 2,630 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm"
28 May 2008 18:24:46 4,437 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm"
28 May 2008 18:24:46 321 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm"
28 May 2008 18:24:46 53,542 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png"
28 May 2008 18:24:46 51 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif"
28 May 2008 18:24:46 137 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif"
28 May 2008 18:24:48 3,425 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm"
28 May 2008 18:24:46 254 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif"
28 May 2008 18:24:46 4,805 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm"
28 May 2008 18:24:48 8,096 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm"
28 May 2008 18:24:46 7,662 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm"
28 May 2008 18:24:46 8,445 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm"
28 May 2008 18:24:46 5,207 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm"
28 May 2008 18:24:46 14,603 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif"
28 May 2008 18:24:46 4,374 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm"
28 May 2008 18:24:46 14,765 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm"
28 May 2008 18:24:48 30,465 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm"
28 May 2008 18:24:46 1,290 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm"
28 May 2008 18:24:48 3,282 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm"
28 May 2008 18:24:46 13,433 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm"


C:\Program Files\

2 Apr 2008 12:24:30 1,606,144 A.... "C:\Program Files\ImgBurn\ImgBurn.exe"
30 May 2008 13:53:06 66,350 A.... "C:\Program Files\ImgBurn\uninstall.exe"
14 Apr 2008 1:11:52 33,792 ..... "C:\Program Files\Messenger\custsat.dll"
14 Apr 2008 1:12:00 82,944 A.... "C:\Program Files\Messenger\msgsc.dll"
13 Apr 2008 18:30:28 180,224 A.... "C:\Program Files\Messenger\msgslang.dll"
14 Apr 2008 1:12:28 1,695,232 A.... "C:\Program Files\Messenger\msmsgs.exe"
14 Apr 2008 1:12:28 3,558,912 ..... "C:\Program Files\Movie Maker\moviemk.exe"
14 Apr 2008 1:12:10 167,936 ..... "C:\Program Files\Movie Maker\wmm2ae.dll"
14 Apr 2008 1:12:10 4,096 ..... "C:\Program Files\Movie Maker\wmm2eres.dll"
14 Apr 2008 1:12:10 7,680 ..... "C:\Program Files\Movie Maker\wmm2ext.dll"
14 Apr 2008 1:12:10 402,432 ..... "C:\Program Files\Movie Maker\wmm2filt.dll"
14 Apr 2008 1:12:10 502,272 ..... "C:\Program Files\Movie Maker\wmm2fxa.dll"
14 Apr 2008 1:12:10 325,632 ..... "C:\Program Files\Movie Maker\wmm2fxb.dll"
14 Apr 2008 1:12:10 4,256,768 ..... "C:\Program Files\Movie Maker\wmm2res.dll"
14 Apr 2008 1:12:10 5,632 ..... "C:\Program Files\Movie Maker\wmm2res2.dll"
1 Jun 2008 12:57:40 13,952 A.... "C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll"
1 Jun 2008 12:58:36 7,660,656 A.... "C:\Program Files\Mozilla Firefox\firefox.exe"
1 Jun 2008 12:58:36 200,829 A.... "C:\Program Files\Mozilla Firefox\freebl3.dll"
1 Jun 2008 12:58:38 458,856 A.... "C:\Program Files\Mozilla Firefox\js3250.dll"
1 Jun 2008 12:58:38 161,392 A.... "C:\Program Files\Mozilla Firefox\nspr4.dll"
1 Jun 2008 12:58:38 378,472 A.... "C:\Program Files\Mozilla Firefox\nss3.dll"
1 Jun 2008 12:58:38 276,080 A.... "C:\Program Files\Mozilla Firefox\nssckbi.dll"
1 Jun 2008 12:58:38 34,424 A.... "C:\Program Files\Mozilla Firefox\plc4.dll"
1 Jun 2008 12:58:38 30,320 A.... "C:\Program Files\Mozilla Firefox\plds4.dll"
1 Jun 2008 12:58:38 112,232 A.... "C:\Program Files\Mozilla Firefox\smime3.dll"
1 Jun 2008 12:58:40 254,060 A.... "C:\Program Files\Mozilla Firefox\softokn3.dll"
1 Jun 2008 12:58:40 132,712 A.... "C:\Program Files\Mozilla Firefox\ssl3.dll"
1 Jun 2008 12:58:40 132,232 A.... "C:\Program Files\Mozilla Firefox\updater.exe"
1 Jun 2008 12:58:40 13,416 A.... "C:\Program Files\Mozilla Firefox\xpcom.dll"
1 Jun 2008 12:58:42 422,000 A.... "C:\Program Files\Mozilla Firefox\xpcom_core.dll"
1 Jun 2008 12:58:40 73,848 A.... "C:\Program Files\Mozilla Firefox\xpcom_compat.dll"
1 Jun 2008 12:58:42 73,336 A.... "C:\Program Files\Mozilla Firefox\xpicleanup.exe"
1 Jun 2008 12:58:42 12,400 A.... "C:\Program Files\Mozilla Firefox\xpistub.dll"
14 Apr 2008 1:11:50 385,024 A.... "C:\Program Files\NetMeeting\callcont.dll"
14 Apr 2008 1:12:16 1,032,192 A.... "C:\Program Files\NetMeeting\conf.exe"
14 Apr 2008 1:11:52 45,056 A.... "C:\Program Files\NetMeeting\confmrsl.dll"
14 Apr 2008 1:11:52 40,960 A.... "C:\Program Files\NetMeeting\dcap32.dll"
14 Apr 2008 1:11:54 57,344 A.... "C:\Program Files\NetMeeting\h323cc.dll"
14 Apr 2008 1:12:00 274,432 A.... "C:\Program Files\NetMeeting\mst120.dll"
14 Apr 2008 1:12:00 57,344 A.... "C:\Program Files\NetMeeting\mst123.dll"
14 Apr 2008 1:12:02 221,184 A.... "C:\Program Files\NetMeeting\nac.dll"
14 Apr 2008 1:12:02 229,376 A.... "C:\Program Files\NetMeeting\nmas.dll"
14 Apr 2008 1:12:02 28,672 A.... "C:\Program Files\NetMeeting\nmasnt.dll"
14 Apr 2008 1:12:02 81,920 A.... "C:\Program Files\NetMeeting\nmchat.dll"
14 Apr 2008 1:12:02 77,824 A.... "C:\Program Files\NetMeeting\nmcom.dll"
14 Apr 2008 1:12:02 151,552 A.... "C:\Program Files\NetMeeting\nmft.dll"
14 Apr 2008 1:12:02 172,032 A.... "C:\Program Files\NetMeeting\nmoldwb.dll"
14 Apr 2008 1:12:02 188,416 A.... "C:\Program Files\NetMeeting\nmwb.dll"
14 Apr 2008 1:12:04 61,440 A.... "C:\Program Files\NetMeeting\rrcm.dll"
14 Apr 2008 1:12:28 60,416 A.... "C:\Program Files\Outlook Express\msimn.exe"
14 Apr 2008 1:12:00 1,314,816 A.... "C:\Program Files\Outlook Express\msoe.dll"
13 Apr 2008 17:23:54 2,479,616 A.... "C:\Program Files\Outlook Express\msoeres.dll"
14 Apr 2008 1:12:02 104,448 A.... "C:\Program Files\Outlook Express\oeimport.dll"
14 Apr 2008 1:12:30 60,416 A.... "C:\Program Files\Outlook Express\oemig50.exe"
14 Apr 2008 1:12:02 35,328 A.... "C:\Program Files\Outlook Express\oemiglib.dll"
14 Apr 2008 1:12:34 73,216 A.... "C:\Program Files\Outlook Express\setup50.exe"
14 Apr 2008 1:12:38 46,080 A.... "C:\Program Files\Outlook Express\wab.exe"
14 Apr 2008 1:12:08 32,768 A.... "C:\Program Files\Outlook Express\wabfind.dll"
14 Apr 2008 1:12:08 85,504 A.... "C:\Program Files\Outlook Express\wabimp.dll"
14 Apr 2008 1:12:40 30,208 A.... "C:\Program Files\Outlook Express\wabmig.exe"
14 Apr 2008 1:12:18 539,136 A.... "C:\Program Files\Windows NT\dialer.exe"
14 Apr 2008 1:12:18 294,912 A.... "C:\Program Files\Windows Media Player\dlimport.exe"
14 Apr 2008 1:12:28 4,639 A.... "C:\Program Files\Windows Media Player\mplayer2.exe"
14 Apr 2008 1:12:56 226,816 ..... "C:\Program Files\Windows Media Player\npdrmv2.dll"
14 Apr 2008 1:12:02 364,544 A.... "C:\Program Files\Windows Media Player\npdsplay.dll"
14 Apr 2008 1:12:02 10,240 ..... "C:\Program Files\Windows Media Player\npwmsdrm.dll"
10 Apr 2008 17:17:30 2,108,913 A.... "C:\Program Files\Zattoo\avcodec.dll"
10 Apr 2008 17:17:36 150,563 A.... "C:\Program Files\Zattoo\avformat.dll"
10 Apr 2008 17:17:26 25,010 A.... "C:\Program Files\Zattoo\avutil.dll"
13 May 2008 23:07:30 151,552 A.... "C:\Program Files\Zattoo\expat.dll"
13 May 2008 23:15:36 204,800 A.... "C:\Program Files\Zattoo\faad.dll"
13 May 2008 23:07:30 1,188,375 A.... "C:\Program Files\Zattoo\libeay32.dll"
13 May 2008 23:15:28 409,600 A.... "C:\Program Files\Zattoo\libepg.dll"
13 May 2008 23:15:42 143,360 A.... "C:\Program Files\Zattoo\libepgmanaged.dll"
13 May 2008 23:07:30 151,552 A.... "C:\Program Files\Zattoo\libexpat.dll"
13 May 2008 23:15:38 655,360 A.... "C:\Program Files\Zattoo\libzattood.dll"
13 May 2008 23:07:30 145,920 A.... "C:\Program Files\Zattoo\Microsoft.DirectX.DirectDraw.dll"
13 May 2008 23:07:30 178,176 A.... "C:\Program Files\Zattoo\Microsoft.DirectX.DirectSound.dll"
13 May 2008 23:07:30 223,232 A.... "C:\Program Files\Zattoo\Microsoft.DirectX.dll"
13 May 2008 23:07:30 479,232 A.... "C:\Program Files\Zattoo\msvcm80.dll"
13 May 2008 23:07:30 548,864 A.... "C:\Program Files\Zattoo\msvcp80.dll"
13 May 2008 23:07:30 348,160 A.... "C:\Program Files\Zattoo\msvcr71.dll"
13 May 2008 23:07:32 626,688 A.... "C:\Program Files\Zattoo\msvcr80.dll"
13 May 2008 23:15:52 946,176 A.... "C:\Program Files\Zattoo\player.dll"
18 May 2008 17:02:34 49,341 A.... "C:\Program Files\Zattoo\uninst.exe"
13 May 2008 23:16:26 53,248 A.... "C:\Program Files\Zattoo\Zattoo.exe"
13 May 2008 23:14:58 13,742,080 A.... "C:\Program Files\Zattoo\Zattoo1.exe"
13 May 2008 23:16:26 2,801,664 A.... "C:\Program Files\Zattoo\Zattoo2.exe"
13 May 2008 23:16:18 925,696 A.... "C:\Program Files\Zattoo\zattood.exe"
10 Apr 2008 17:17:14 59,904 A.... "C:\Program Files\Zattoo\zlib1.dll"
28 May 2008 15:28:22 532,736 A.... "C:\Program Files\AVG\AVG8\aAvgApi.exe"
28 May 2008 15:28:14 886,552 A.... "C:\Program Files\AVG\AVG8\avgabout.dll"
28 May 2008 15:28:12 453,912 A.... "C:\Program Files\AVG\AVG8\avgcfgex.exe"
28 May 2008 15:28:12 557,336 A.... "C:\Program Files\AVG\AVG8\avgcfgx.dll"
28 May 2008 15:28:14 202,008 A.... "C:\Program Files\AVG\AVG8\avgcmgr.exe"
28 May 2008 15:28:14 1,295,640 A.... "C:\Program Files\AVG\AVG8\avgcorex.dll"
28 May 2008 15:28:14 72,984 A.... "C:\Program Files\AVG\AVG8\avgcrlpx.dll"
28 May 2008 15:28:12 62,232 A.... "C:\Program Files\AVG\AVG8\avgdumpx.exe"
28 May 2008 15:28:14 1,033,496 A.... "C:\Program Files\AVG\AVG8\avgfrw.exe"
28 May 2008 15:28:14 697,088 A.... "C:\Program Files\AVG\AVG8\avginet.dll"
28 May 2008 15:28:14 488,728 A.... "C:\Program Files\AVG\AVG8\avgiproxy.exe"
28 May 2008 15:28:12 164,120 A.... "C:\Program Files\AVG\AVG8\avglngx.dll"
28 May 2008 15:28:14 214,296 A.... "C:\Program Files\AVG\AVG8\avglogx.dll"
28 May 2008 15:28:14 173,336 A.... "C:\Program Files\AVG\AVG8\avgmail.dll"
28 May 2008 15:28:14 320,280 A.... "C:\Program Files\AVG\AVG8\avgmvflx.dll"
28 May 2008 15:28:14 263,960 A.... "C:\Program Files\AVG\AVG8\avgoff2k.dll"
28 May 2008 15:28:20 79,128 A.... "C:\Program Files\AVG\AVG8\avgpp.dll"
28 May 2008 15:28:14 781,592 A.... "C:\Program Files\AVG\AVG8\avgresf.dll"
28 May 2008 15:28:14 311,576 A.... "C:\Program Files\AVG\AVG8\avgrsx.exe"
28 May 2008 15:28:12 333,056 A.... "C:\Program Files\AVG\AVG8\avgscanx.dll"
28 May 2008 15:28:12 580,888 A.... "C:\Program Files\AVG\AVG8\avgscanx.exe"
28 May 2008 15:28:12 349,976 A.... "C:\Program Files\AVG\AVG8\avgsched.dll"
28 May 2008 15:28:14 108,824 A.... "C:\Program Files\AVG\AVG8\avgse.dll"
28 May 2008 15:28:12 365,848 A.... "C:\Program Files\AVG\AVG8\avgsrmax.exe"
28 May 2008 15:28:12 503,064 A.... "C:\Program Files\AVG\AVG8\avgsrmx.dll"
28 May 2008 15:28:14 419,096 A.... "C:\Program Files\AVG\AVG8\avgssie.dll"
28 May 2008 15:28:22 486,168 A.... "C:\Program Files\AVG\AVG8\avgtbapi.dll"
28 May 2008 15:28:22 2,050,816 A.... "C:\Program Files\AVG\AVG8\avgtoolbar.dll"
28 May 2008 15:28:14 1,177,368 A.... "C:\Program Files\AVG\AVG8\avgtray.exe"
28 May 2008 15:28:14 2,636,568 A.... "C:\Program Files\AVG\AVG8\avgui.exe"
28 May 2008 15:28:14 1,621,784 A.... "C:\Program Files\AVG\AVG8\avguiadv.dll"
28 May 2008 15:28:14 1,911,576 A.... "C:\Program Files\AVG\AVG8\avguires.dll"
28 May 2008 15:28:14 1,019,672 A.... "C:\Program Files\AVG\AVG8\avgupd.dll"
28 May 2008 15:28:14 796,440 A.... "C:\Program Files\AVG\AVG8\avgupd.exe"
28 May 2008 15:28:12 155,928 A.... "C:\Program Files\AVG\AVG8\avgvvx.dll"
28 May 2008 15:28:12 834,328 A.... "C:\Program Files\AVG\AVG8\avgwd.dll"
28 May 2008 15:28:12 282,904 A.... "C:\Program Files\AVG\AVG8\avgwdsvc.exe"
28 May 2008 15:28:14 264,984 A.... "C:\Program Files\AVG\AVG8\avgwdwsc.dll"
28 May 2008 15:28:14 268,568 A.... "C:\Program Files\AVG\AVG8\avgxch32.dll"
28 May 2008 15:28:14 185,624 A.... "C:\Program Files\AVG\AVG8\avgxpl.dll"
28 May 2008 15:28:24 17,321 A.... "C:\Program Files\AVG\AVG8\contacts_us.html"
28 May 2008 15:28:24 1,045,128 A.... "C:\Program Files\AVG\AVG8\dbghelp.dll"
28 May 2008 15:28:14 51,123 A.... "C:\Program Files\AVG\AVG8\dfncfg.dat"
28 May 2008 15:28:14 847,949 A.... "C:\Program Files\AVG\AVG8\setup.dat"
28 May 2008 15:28:14 1,751,320 A.... "C:\Program Files\AVG\AVG8\setup.exe"
14 Apr 2008 1:11:52 86,528 A.... "C:\Program Files\Common Files\System\directdb.dll"
14 Apr 2008 1:12:08 510,976 A.... "C:\Program Files\Common Files\System\wab32.dll"
13 Apr 2008 17:21:48 249,856 A.... "C:\Program Files\Common Files\System\wab32res.dll"
31 May 2008 16:05:24 1,655,552 A.... "C:\Program Files\COMODO\Firewall\cfp.exe"
31 May 2008 16:06:06 969,472 A.... "C:\Program Files\COMODO\Firewall\cfpconfg.exe"
31 May 2008 16:05:58 2,825,984 A.... "C:\Program Files\COMODO\Firewall\cfplogvw.exe"
29 May 2008 10:00:54 3,272,448 A.... "C:\Program Files\COMODO\Firewall\cfpres.dll"
31 May 2008 16:05:46 2,780,928 A.... "C:\Program Files\COMODO\Firewall\cfpsbmit.exe"
31 May 2008 16:05:34 2,080,512 A.... "C:\Program Files\COMODO\Firewall\cfpupdat.exe"
31 May 2008 16:06:06 10 A.... "C:\Program Files\COMODO\Firewall\cfpver.dat"
29 May 2008 10:02:30 519,936 A.... "C:\Program Files\COMODO\Firewall\cmdagent.exe"
31 May 2008 16:06:02 413,440 A.... "C:\Program Files\COMODO\Firewall\crashrep.exe"
29 May 2008 10:00:56 85,760 A.... "C:\Program Files\COMODO\Firewall\framework.dll"
14 Apr 2008 1:11:54 61,440 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwconn.dll"
14 Apr 2008 1:12:22 214,528 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe"
14 Apr 2008 1:12:22 86,016 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe"
14 Apr 2008 1:11:54 32,768 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwdl.dll"
14 Apr 2008 1:11:54 172,032 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwhelp.dll"
14 Apr 2008 1:12:22 24,576 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe"
14 Apr 2008 1:11:54 49,152 A.... "C:\Program Files\Internet Explorer\Connection Wizard\icwutil.dll"
14 Apr 2008 1:12:22 20,480 A.... "C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll"
14 May 2008 10:11:22 1,623,392 A.... "C:\Program Files\Lavasoft\Ad-Aware\AAWLic.exe"
28 May 2008 15:36:22 611,664 A.... "C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe"
28 May 2008 15:36:36 3,264,840 A.... "C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe"
14 May 2008 15:17:54 2,682,216 A.... "C:\Program Files\Lavasoft\Ad-Aware\Ad-Watch.exe"
28 May 2008 15:36:24 804,200 A.... "C:\Program Files\Lavasoft\Ad-Aware\CEAPI.dll"
19 May 2008 9:55:26 435,536 A.... "C:\Program Files\Lavasoft\Ad-Aware\lavalicense.dll"
14 May 2008 17:27:46 243,032 A.... "C:\Program Files\Lavasoft\Ad-Aware\lavamessage.dll"
29 Apr 2008 12:26:38 1,238,880 A.... "C:\Program Files\Lavasoft\Ad-Aware\lsupdatemanager.exe"
12 May 2008 13:45:00 468,312 A.... "C:\Program Files\Lavasoft\Ad-Aware\threatwork.exe"
12 May 2008 12:38:36 525,664 A.... "C:\Program Files\Lavasoft\Ad-Aware\update.dll"
12 May 2008 12:38:46 288,096 A.... "C:\Program Files\Lavasoft\Ad-Aware\upmanager.dll"
22 Apr 2008 2:32:46 3,613,680 A.... "C:\Program Files\Microsoft Office\Office12\OUTLFLTR.DAT"
10 Apr 2008 16:10:30 592,952 A.... "C:\Program Files\Microsoft Office\Office12\PUBCONV.DLL"
18 Apr 2008 16:45:22 4,280,856 A.... "C:\Program Files\Microsoft Office\Office12\Wordcnv.dll"
10 Apr 2008 23:21:34 17,490,456 A.... "C:\Program Files\Microsoft Office\Office12\WWLIB.DLL"
1 Jun 2008 12:58:10 67,696 A.... "C:\Program Files\Mozilla Firefox\components\jar50.dll"
1 Jun 2008 12:58:30 54,376 A.... "C:\Program Files\Mozilla Firefox\components\jsd3250.dll"
1 Jun 2008 12:58:32 34,952 A.... "C:\Program Files\Mozilla Firefox\components\myspell.dll"
1 Jun 2008 12:58:32 46,720 A.... "C:\Program Files\Mozilla Firefox\components\spellchk.dll"
1 Jun 2008 12:58:32 172,144 A.... "C:\Program Files\Mozilla Firefox\components\xpinstal.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll"
1 Jun 2008 12:58:38 22,664 A.... "C:\Program Files\Mozilla Firefox\plugins\npnul32.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll"
1 Jun 2008 12:58:40 450,936 A.... "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
9 May 2008 12:18:56 132,400 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\as2auditor.dll"
9 May 2008 12:18:56 87,344 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\as2data.dll"
9 May 2008 12:18:56 161,072 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\as2guiie.dll"
9 May 2008 12:18:58 124,208 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\as2scanner.dll"
9 May 2008 12:18:58 54,576 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe"
19 May 2008 10:51:18 169,264 A.... "C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\QuickTime Alternative\Plugins\npqtplugin5.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\QuickTime Alternative\Plugins\npqtplugin.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\QuickTime Alternative\Plugins\npqtplugin2.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\QuickTime Alternative\Plugins\npqtplugin3.dll"
26 May 2008 20:47:44 143,360 A.... "C:\Program Files\QuickTime Alternative\Plugins\npqtplugin4.dll"
24 May 2008 17:03:50 13,312 A.... "C:\Program Files\SopCast\adv\sopadver.dat"
14 Apr 2008 1:12:40 214,528 A.... "C:\Program Files\Windows NT\Accessories\wordpad.exe"
14 Apr 2008 1:12:32 281,088 A.... "C:\Program Files\Windows NT\Pinball\pinball.exe"
13 May 2008 23:16:22 15,360 A.... "C:\Program Files\Zattoo\de-DE\Zattoo.resources.dll"
13 May 2008 23:16:22 16,384 A.... "C:\Program Files\Zattoo\es-ES\Zattoo.resources.dll"
13 May 2008 23:16:22 16,896 A.... "C:\Program Files\Zattoo\fr-FR\Zattoo.resources.dll"
14 Apr 2008 1:12:04 741,376 A.... "C:\Program Files\Common Files\Microsoft Shared\Speech\sapi.dll"
14 Apr 2008 1:12:08 153,088 A.... "C:\Program Files\Common Files\Microsoft Shared\Triedit\triedit.dll"
29 May 2008 23:55:54 20 A.... "C:\Program Files\Common Files\Sony Shared\OpenMG\icv.dat"
29 May 2008 23:55:36 7,180 A.... "C:\Program Files\Common Files\Sony Shared\OpenMG\maclist1.dat"
29 May 2008 23:55:54 7,180 A.... "C:\Program Files\Common Files\Sony Shared\OpenMG\maclist2.dat"
13 Apr 2008 18:26:18 24,576 A.... "C:\Program Files\Common Files\System\ado\msader15.dll"
14 Apr 2008 1:11:58 536,576 A.... "C:\Program Files\Common Files\System\ado\msado15.dll"
14 Apr 2008 1:11:58 180,224 A.... "C:\Program Files\Common Files\System\ado\msadomd.dll"
14 Apr 2008 1:11:58 57,344 A.... "C:\Program Files\Common Files\System\ado\msador15.dll"
14 Apr 2008 1:11:58 200,704 A.... "C:\Program Files\Common Files\System\ado\msadox.dll"
14 Apr 2008 1:11:58 57,344 A.... "C:\Program Files\Common Files\System\ado\msadrh15.dll"
14 Apr 2008 1:12:00 102,400 A.... "C:\Program Files\Common Files\System\ado\msjro.dll"
14 Apr 2008 1:11:58 331,776 A.... "C:\Program Files\Common Files\System\msadc\msadce.dll"
13 Apr 2008 18:25:58 20,480 A.... "C:\Program Files\Common Files\System\msadc\msadcer.dll"
14 Apr 2008 1:11:58 61,440 A.... "C:\Program Files\Common Files\System\msadc\msadcf.dll"
13 Apr 2008 18:25:58 16,384 A.... "C:\Program Files\Common Files\System\msadc\msadcfr.dll"
14 Apr 2008 1:11:58 143,360 A.... "C:\Program Files\Common Files\System\msadc\msadco.dll"
13 Apr 2008 18:25:58 16,384 A.... "C:\Program Files\Common Files\System\msadc\msadcor.dll"
14 Apr 2008 1:11:58 53,248 A.... "C:\Program Files\Common Files\System\msadc\msadcs.dll"
14 Apr 2008 1:11:58 155,648 A.... "C:\Program Files\Common Files\System\msadc\msadds.dll"
13 Apr 2008 18:25:58 24,576 A.... "C:\Program Files\Common Files\System\msadc\msaddsr.dll"
13 Apr 2008 18:25:58 16,384 A.... "C:\Program Files\Common Files\System\msadc\msdaprsr.dll"
14 Apr 2008 1:11:58 200,704 A.... "C:\Program Files\Common Files\System\msadc\msdaprst.dll"
14 Apr 2008 1:12:00 118,784 A.... "C:\Program Files\Common Files\System\msadc\msdarem.dll"
13 Apr 2008 18:25:58 16,384 A.... "C:\Program Files\Common Files\System\msadc\msdaremr.dll"
14 Apr 2008 1:12:00 36,864 A.... "C:\Program Files\Common Files\System\msadc\msdfmap.dll"
14 Apr 2008 1:11:58 4,096 A.... "C:\Program Files\Common Files\System\Ole DB\msdadc.dll"
14 Apr 2008 1:11:58 4,096 A.... "C:\Program Files\Common Files\System\Ole DB\msdaenum.dll"
14 Apr 2008 1:11:58 4,096 A.... "C:\Program Files\Common Files\System\Ole DB\msdaer.dll"
14 Apr 2008 1:11:58 233,472 A.... "C:\Program Files\Common Files\System\Ole DB\msdaora.dll"
13 Apr 2008 18:24:14 16,384 A.... "C:\Program Files\Common Files\System\Ole DB\msdaorar.dll"
14 Apr 2008 1:11:58 77,824 A.... "C:\Program Files\Common Files\System\Ole DB\msdaosp.dll"
14 Apr 2008 1:12:00 204,800 A.... "C:\Program Files\Common Files\System\Ole DB\msdaps.dll"
14 Apr 2008 1:12:00 4,096 A.... "C:\Program Files\Common Files\System\Ole DB\msdasc.dll"
14 Apr 2008 1:12:00 315,392 A.... "C:\Program Files\Common Files\System\Ole DB\msdasql.dll"
13 Apr 2008 18:26:08 16,384 A.... "C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll"
14 Apr 2008 1:12:00 94,208 A.... "C:\Program Files\Common Files\System\Ole DB\msdatl3.dll"
14 Apr 2008 1:12:00 20,480 A.... "C:\Program Files\Common Files\System\Ole DB\msdatt.dll"
14 Apr 2008 1:12:00 4,096 A.... "C:\Program Files\Common Files\System\Ole DB\msdaurl.dll"
14 Apr 2008 1:12:02 24,576 A.... "C:\Program Files\Common Files\System\Ole DB\msxactps.dll"
14 Apr 2008 1:12:02 487,424 A.... "C:\Program Files\Common Files\System\Ole DB\oledb32.dll"
14 Apr 2008 1:12:02 65,536 A.... "C:\Program Files\Common Files\System\Ole DB\oledb32r.dll"
14 Apr 2008 1:12:06 528,384 A.... "C:\Program Files\Common Files\System\Ole DB\sqloledb.dll"
14 Apr 2008 1:12:06 217,088 A.... "C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll"
31 May 2008 16:05:24 1,655,552 A.... "C:\Program Files\COMODO\Firewall\Repair\cfp.exe"
31 May 2008 16:06:06 969,472 A.... "C:\Program Files\COMODO\Firewall\Repair\cfpconfg.exe"
31 May 2008 16:05:58 2,825,984 A.... "C:\Program Files\COMODO\Firewall\Repair\cfplogvw.exe"
29 May 2008 10:00:54 3,272,448 A.... "C:\Program Files\COMODO\Firewall\Repair\cfpres.dll"
31 May 2008 16:05:46 2,780,928 A.... "C:\Program Files\COMODO\Firewall\Repair\cfpsbmit.exe"
31 May 2008 16:05:34 2,080,512 A.... "C:\Program Files\COMODO\Firewall\Repair\cfpupdat.exe"
29 May 2008 10:02:30 519,936 A.... "C:\Program Files\COMODO\Firewall\Repair\cmdagent.exe"
29 May 2008 10:02:26 87,056 A.... "C:\Program Files\COMODO\Firewall\Repair\cmdGuard.sys"
29 May 2008 10:02:26 24,208 A.... "C:\Program Files\COMODO\Firewall\Repair\cmdhlp.sys"
31 May 2008 16:06:02 413,440 A.... "C:\Program Files\COMODO\Firewall\Repair\crashrep.exe"
29 May 2008 10:00:56 85,760 A.... "C:\Program Files\COMODO\Firewall\Repair\framework.dll"
29 May 2008 10:02:26 143,104 A.... "C:\Program Files\COMODO\Firewall\Repair\guard32.dll"
29 May 2008 10:02:26 79,760 A.... "C:\Program Files\COMODO\Firewall\Repair\inspect.sys"
3 Apr 2008 19:44:40 1,079,792 A.... "C:\Program Files\Google\Google Updater\swg-3.0.1225.9868\SearchWithGoogleUpdate.exe"
3 Apr 2008 19:44:40 10,736 A.... "C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\gth.dll"
3 Apr 2008 19:44:40 130,544 A.... "C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\gtn.dll"
3 Apr 2008 19:44:40 734,704 A.... "C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll"
13 Apr 2008 18:03:24 63,488 ..... "C:\Program Files\Internet Explorer\mui\041e\browselc.dll"
13 Apr 2008 17:22:12 48,128 ..... "C:\Program Files\Internet Explorer\mui\041e\inetres.dll"
13 Apr 2008 17:26:26 56,832 ..... "C:\Program Files\Internet Explorer\mui\041e\mshtmler.dll"
13 Apr 2008 17:23:54 2,479,616 ..... "C:\Program Files\Internet Explorer\mui\041e\msoeres.dll"
13 Apr 2008 18:03:20 549,376 ..... "C:\Program Files\Internet Explorer\mui\041e\shdoclc.dll"
13 Apr 2008 17:21:48 249,856 ..... "C:\Program Files\Internet Explorer\mui\041e\wab32res.dll"
14 Apr 2008 1:10:30 229,376 ..... "C:\Program Files\MSN\MSNCoreFiles\oobe\obelog.dll"
14 Apr 2008 1:10:30 966,656 ..... "C:\Program Files\MSN\MSNCoreFiles\oobe\obemetal.dll"
14 Apr 2008 1:10:30 86,016 ..... "C:\Program Files\MSN\MSNCoreFiles\oobe\obepopc.dll"
28 May 2008 15:28:12 390,424 A.... "C:\Program Files\AVG\AVG8\Firefox\Components\avgssff.dll"
28 May 2008 15:28:12 68,608 A.... "C:\Program Files\AVG\AVG8\ToolbarFF\Components\vmAVGConnector.dll"
13 Apr 2008 17:21:48 249,856 ..... "C:\Program Files\Common Files\System\mui\041e\wab32res.dll"
14 Apr 2008 1:11:54 618,605 ..... "C:\Program Files\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll"


Files with hidden attributes:

Sun 2 Dec 2007 31 A..H. --- "C:\WINDOWS\UKCpInfo.sys"
Wed 22 Jun 2005 45,568 A.SHR --- "C:\WINDOWS\system32\cygz.dll"
Wed 3 May 2006 163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007 31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll"
Tue 30 May 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 14 Jun 2006 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv15.bak"
Sun 11 May 2008 43,520 ...H. --- "C:\Documents and Settings\Natalie\My Documents\~WRL0647.tmp"
Thu 24 Aug 2006 15,481,926 A..H. --- "C:\Documents and Settings\Robert\Desktop\scvcs1303.exe"
Tue 15 Nov 2005 78,104 ..SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe"
Tue 15 Nov 2005 12,912 A.SHR --- "C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll"
Sun 26 Jun 2005 616,448 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygwin1.dll"
Tue 21 Jun 2005 45,568 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygz.dll"
Mon 20 Aug 2007 72,704 ..SHR --- "C:\Program Files\eRightSoft\SUPER\Setup.exe"
Sun 11 Jun 2006 72 A..H. --- "C:\Program Files\InterActual\InterActual Player\iti52.tmp"
Wed 28 Feb 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Sun 27 Jan 2008 12,672 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@RE7.tmp"
Sun 27 Jan 2008 14,444 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@RE9.tmp"
Sun 27 Jan 2008 6,336 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@REB.tmp"
Sun 27 Jan 2008 12,672 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@RED.tmp"
Sun 27 Jan 2008 14,444 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@REF.tmp"
Sun 27 Jan 2008 6,336 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@RF1.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SE8.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SEA.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SEC.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SEE.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SF0.tmp"
Sun 27 Jan 2008 1,409 ...H. --- "C:\Documents and Settings\Lech\Local Settings\Temp\Z@SF2.tmp"
Tue 4 Jun 2002 84,992 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll"
Tue 4 Jun 2002 44,032 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll"
Tue 10 Dec 2002 73,766 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll"
Tue 10 Dec 2002 65,575 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll"
Sun 9 Jun 2002 36,864 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll"
Tue 4 Jun 2002 20,480 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll"
Tue 10 Dec 2002 102,437 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll"
Tue 10 Dec 2002 176,165 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll"
Tue 10 Dec 2002 208,935 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll"
Tue 10 Dec 2002 217,127 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll"
Sun 9 Jun 2002 40,448 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll"
Sat 3 Nov 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll"
Tue 10 Apr 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll"
Fri 20 Feb 2004 232,960 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\raac.dll"
Sun 9 Jun 2002 525,824 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll"
Tue 10 Dec 2002 245,805 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll"
Tue 10 Dec 2002 45,093 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll"
Tue 10 Dec 2002 98,341 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll"
Tue 10 Dec 2002 94,247 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll"
Tue 10 Dec 2002 90,151 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll"
Tue 10 Dec 2002 102,439 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll"
Sun 9 Jun 2002 49,152 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll"
Thu 28 Feb 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\1ed1b59d1a09d907b309130a93a4867a\BIT38.tmp"
Wed 19 Sep 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\cf7ced0e70c80a1e476f1abf49afecb1\BIT1.tmp"
Tue 30 May 2006 4,348 ...H. --- "C:\Documents and Settings\Natalie\My Documents\My Music\License Backup\drmv1key.bak"
Sun 8 Oct 2006 401 A..H. --- "C:\Documents and Settings\Natalie\My Documents\My Music\License Backup\drmv1lic.bak"
Sat 1 Jul 2006 400 ...H. --- "C:\Documents and Settings\Natalie\My Documents\My Music\License Backup\drmv2key.bak"
Sun 8 Oct 2006 1,536 A..H. --- "C:\Documents and Settings\Natalie\My Documents\My Music\License Backup\drmv2lic.bak"
Thu 7 Dec 2006 3,096,576 A..H. --- "C:\Documents and Settings\Robert\Application Data\U3\temp\Launchpad Removal.exe"


Program Folders:

C:\Program Files\

101 AVI MPEG WMV Converter
3DO
AC3Filter
activePDF
Activision
Adobe
AGEIA Technologies
Alcohol Soft
AnswerWorks 4.0
Apollo PSP Video Converter
Apple Software Update
ATI Technologies
Audacity
AutoCAD 2007
Autodesk
Aveyond
AVG
AviSynth 2.5
AvRack
BitComet
Call of Duty
CCleaner
Channel4
Common Files
COMODO
ComPlus Applications
Coupon Printer
DAEMON Tools
Digimarc
Digital Lights
directx
Disney
DivX
DVD Decrypter
DVD Shrink
Electronic Arts
Enlight
eRightSoft
Filzip
FinePixViewer
Futuremark
GameHouse
GameShadow
Google
GrabIt
Grisoft
Hijackthis
igLoader
IISCN Software
ImgBurn
InstallShield Installation Information
InterActual
Internet Explorer
iPod
iTunes
Java
Kelloggs Art Attack
KONAMI
Kontiki
Lavasoft
LibUSB-Win32-0.1.10.1
LiveUpdate
Macromedia
MagicISO
Maverick_PSP
Maxfield
Media Player Classic
Messenger
MessengerPlus! 3
microsoft frontpage
Microsoft IntelliPoint
Microsoft IntelliType Pro
Microsoft Office
Microsoft Silverlight
Microsoft Visual Studio
Microsoft Visual Studio 8
Microsoft Works
Microsoft.NET
Mindscape
mobile PhoneTools
Motorola Phone Tools
Movie Maker
Moyea
Mozilla Firefox
MSBuild
MSN
MSN Gaming Zone
MSXML 4.0
MSXML 6.0
Neoretix
Nero
Net-It Now! Starter Edition
NetMeeting
NewsLeecher
Object Software (Beijing) Co., Ltd
Online Services
Outlook Express
Panda Security
PBP Unpacker
Personal Media Manager
PiMPWare
PIXELA
PowerISO
PQDVD
PSP Brew
PSPHost
pspvideo9
QuickPar
QuickTime
QuickTime Alternative
Reading Genius 2.0b
Real
Realtek AC97
Realtek Sound Manager
Red Kawa
REGSHAVE
Replay Converter
Riva
Siber Systems
Skype
SlySoft
Sony
Sony Corporation
Sony Ericsson
SopCast
SpeedFan
Sports Interactive
Spybot - Search & Destroy
Stormregion
Sun
SystemRequirementsLab
The Learning Company
THQ
Transparent
TryMedia
TVAnts
TVUPlayer
Uninstall Information
VideoLAN
Videora
VSToolbar
WildTangent
Windows Journal Viewer
Windows Live
Windows Media Connect 2
Windows Media Player
Windows NT
WindowsUpdate
WinRAR
xerox
Xilisoft
Yahoo!
Zattoo
Zero G Registry
Zylom Games

C:\Program Files\Common Files\

{30B86E56-0D48-2057-0511-04040422002c}
{D0B86E56-0D48-2057-0511-04040422002c}
Adobe
Adobe Systems Shared
Ahead
Apple
Autodesk Shared
DESIGNER
Download Manager
InstallShield
Java
Macromedia
Microsoft Shared
MSSoap
Nero
ODBC
Real
Services
Skype
Sony Shared
SpeechEngines
SWF Studio
System
SystemRequirementsLab
Teleca Shared
WindowsLiveInstaller
Wise Installation Wizard
xing shared


Add/Remove Programs:

4oD
AC3Filter (remove only)
Panda ActiveScan 2.0
Adobe Acrobat Reader 3.02
Adobe Flash Player ActiveX
Adobe Photoshop CS2
Adobe Shockwave Player 11
ATI - Software Uninstall Utility
ATI Display Driver
Audacity 1.2.6
Autodesk DWF Viewer
Aveyond
AVG Free 8.0
AviSynth 2.5
CCleaner (remove only)
CloneCD
COMODO Firewall Pro
Digimarc MyPictureMarc Watermarking Plugin
DVD Decrypter (Remove Only)
DVD Shrink 3.2
Microsoft Office Enterprise 2007
Football Manager 2008
Google Updater
GrabIt 1.7.1 Beta (build 960)
HijackThis 2.0.2
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
ImgBurn
OpenMG Secure Module 4.6.01
InterActual Player
Kaspersky Online Scanner
Windows Genuine Advantage Validation Tool (KB892130)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB923689)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Internet Explorer 7 (KB928090)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941569)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Hotfix for Windows Internet Explorer 7 (KB947864)
Learn To Speak English 8.1
LibUSB-Win32-0.1.10.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 1.0 Hotfix (KB928367)
Magic ISO Maker v5.3 (build 0221)
Microsoft .NET Framework 1.1
Microsoft .NET Framework (English) v1.0.3705
Mozilla Firefox (2.0.0.13)
Microsoft Compression Client Pack 1.0 for Windows XP
Messenger Plus! 3
NewsLeecher v3.8 Final
Microsoft National Language Support Downlevel APIs
PBP Unpacker v0.94
PowerISO
PrimoPDF
PS3 Video 9 2.25
PSP Video 9 1.74
QuickPar 0.9
QuickTime Alternative 1.70
RealPlayer
Lotus SmartSuite Release 9.5
SopCast 2.0.4
SpeedFan (remove only)
Spybot - Search & Destroy 1.4
System Requirements Lab
Trillian
TVAnts 1.0
TVUPlayer 2.3.5.4
Update Service
VCDROM Extension
VideoLAN VLC media player 0.8.6c
Westwood Chat
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Notifications (KB905474)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
Windows Media Format 11 runtime
Windows Media Player 11
Westwood Shared Internet Components
Microsoft User-Mode Driver Framework Feature Pack 1.0
Zattoo 3.2.0 Beta Technology Preview
Macromedia Dreamweaver 8
MSXML 6.0 Parser (KB933579)
Java DB 10.2.2.0
Google SketchUp Pro 6
QuickTime
AutoUpdate
Adobe Photoshop CS2
FinePixViewer Ver.5.2
Google Toolbar for Firefox
J2SE Runtime Environment 5.0 Update 7
J2SE Runtime Environment 5.0 Update 11
Java(TM) SE Runtime Environment 6 Update 1
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
MSXML 4.0 SP2 (KB927978)
OpenMG Secure Module 4.6.01
Google Earth
ATI HYDRAVISION
Microsoft Windows Journal Viewer
Apple Mobile Device Support
Macromedia Fireworks 8
Windows Live Messenger
Microsoft IntelliType Pro 5.3
FUJIFILM USB Driver
Macromedia Extension Manager
AutoCAD 2007 - English
iTunes
Microsoft IntelliPoint 5.3
Skype™ 3.5
AGEIA PhysX v7.07.09
Microsoft Visual C++ 2005 Redistributable
Microsoft Works 7.0
Avanquest update
DivX Codec
PrimoPDF Redistribution Package
Microsoft Silverlight
DivX Player
Nero 8
4oD
Adobe Common File Installer
Microsoft Software Update for Web Folders (English) 12
Microsoft Office Access MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Excel MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office PowerPoint MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Publisher MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Outlook MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Word MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (French) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (Spanish) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proofing (English) 2007
Microsoft Office Enterprise 2007
Security Update for Office 2007 (KB947801)
Security Update for Outlook 2007 (KB946983)
Security Update for Visio 2007 (KB947590)
Security Update for Excel 2007 (KB946974)
Security Update for Microsoft Office system 2007 (KB951808)
Update for Office 2007 (KB946691)
Security Update for Microsoft Office Word 2007 (KB950113)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Update for Outlook 2007 Junk Email Filter (kb950378)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Microsoft Office InfoPath MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Shared MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office OneNote MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Groove MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Groove Setup Metadata MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Shared Setup Metadata MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Access Setup Metadata MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Google SketchUp 6
PSP ISO Shrink
SonicStage 4.2
Moyea FLV to Video Converter version 1.4.1.0
Windows Live installer
MSXML 4.0 SP2 (KB925672)
Adobe Reader 8.1.2
Windows Live Sign-in Assistant
ImageMixer VCD2 LE for FinePix
DivX Converter
ReadingGenius2.0
Microsoft .NET Framework (English)
FinePixViewer Resource
Microsoft .NET Framework 2.0 Service Pack 1
DivX Web Player
Adobe Bridge 1.0
Apple Software Update
Motorola Phone Tools
Windows Rights Management Client with Service Pack 2
MSXML 4.0 SP2 (KB936181)
Google SketchUp LayOut 6
Microsoft .NET Framework 1.1
DivX Content Uploader
RAW FILE CONVERTER LE
ATI Catalyst Control Center
Ad-Aware
Adobe Help Center 1.0
Google SketchUp 6 Exporters
Windows Rights Management Client Backwards Compatibility SP2
Adobe Stock Photos 1.0
G-FLASH NG
Realtek AC'97 Audio


Run Values:

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Net-It Launcher"="C:\\WINDOWS\\System32\\NILaunch.exe"
"ezShieldProtector for Px"="C:\\WINDOWS\\system32\\ezSP_Px.exe"
"SoundMan"="SOUNDMAN.EXE"
"ATICCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime -Delay"
"MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\""
"type32"="\"C:\\Program Files\\Microsoft IntelliType Pro\\type32.exe\""
"IntelliPoint"="\"C:\\Program Files\\Microsoft IntelliPoint\\point32.exe\""
"REGSHAVE"="C:\\Program Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Nero\\Lib\\NeroCheck.exe"
"NBKeyScan"="\"C:\\Program Files\\Nero\\Nero8\\Nero BackItUp\\NBKeyScan.exe\""
"GrooveMonitor"="\"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\""
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""
"4oD"="\"C:\\Program Files\\Kontiki\\KHost.exe\" -all"
"QuickTime Task"="\"C:\\Program Files\\QuickTime Alternative\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"AVG8_TRAY"="C:\\PROGRA~1\\AVG\\AVG8\\avgtray.exe"
"COMODO Firewall Pro"="\"C:\\Program Files\\COMODO\\Firewall\\cfp.exe\" -h"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"SsAAD.exe"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
"kdx"="C:\\Program Files\\Kontiki\\KHost.exe -all"
"WMPNSCFG"="C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"{D0B86E56-0D48-2057-0511-04040422002c}"="\"C:\\Program Files\\Common Files\\{D0B86E56-0D48-2057-0511-04040422002c}\\Update.exe\" mc-110-12-0000272"


Bot Check:

SERVICE_NAME: wscsvc
DISPLAY_NAME : Security Center
START_TYPE : 2 AUTO_START

SERVICE_NAME: sharedaccess
DISPLAY_NAME : Windows Firewall/Internet Connection Sharing (ICS)
START_TYPE : 2 AUTO_START

SERVICE_NAME: wuauserv
DISPLAY_NAME : Automatic Updates
START_TYPE : 2 AUTO_START

SERVICE_NAME: srservice
DISPLAY_NAME : System Restore Service
START_TYPE : 2 AUTO_START

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
"EnableDCOM"="Y"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000004

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"WaitToKillServiceTimeout"="20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000
"Shell"="explorer.exe"
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
"TransportBindName"="\\Device\\"


ShellExecuteHooks:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="Groove GFS Stub Execution Hook"



Environment:


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager\environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
Path REG_EXPAND_SZ %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\Common Files\Teleca Shared;C:\Program Files\QuickTime Alternative\QTSystem\
windir REG_EXPAND_SZ %SystemRoot%
OS REG_SZ Windows_NT
PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
CLASSPATH REG_SZ .;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
QTJAVA REG_SZ C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

SecurityProviders:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
SecurityProviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll


Authentication Packages:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0


Subsystem Startup:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems]
"Windows"="%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16"


Midi Drivers:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midi"="wdmaud.drv"
"midi1"="wdmaud.drv"


Non-Default IFEO Debugger:


Non-Default Installed Components:


Non-Default Safeboot Minimal:


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice
<NO NAME> REG_SZ Service


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\avg anti-spyware driver
<NO NAME> REG_SZ Driver


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\avg anti-spyware guard
<NO NAME> REG_SZ Service


File Associations:


[HKEY_CLASSES_ROOT\batfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\cmdfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\comfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\htafile\shell\open\command]
@="C:\\WINDOWS\\system32\\mshta.exe \"%1\" %*"

[HKEY_CLASSES_ROOT\http\shell\open\command]
@="\"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE\" -nohome"

[HKEY_CLASSES_ROOT\htmlfile\shell\open\command]
@="\"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE\" -nohome"

[HKEY_CLASSES_ROOT\regedit\shell\open\command]
@="regedit.exe %1"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\scrfile\shell\open\command]
@="\"%1\" /S"

[HKEY_CLASSES_ROOT\txtfile\shell\open\command]
@="%SystemRoot%\system32\NOTEPAD.EXE %1"


Finished!
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby robcpfc79 » June 1st, 2008, 1:16 pm

Here's the 'Catchme' file:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-01 17:59:52
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:8116b470
"s2"=dword:125a8d23
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:c4,17,c8,d0,07,c4,bf,85,16,64,5e,42,56,ba,ae,bc,82,3f,d3,e4,15,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:49,b9,00,d3,66,96,ab,0a,00,dc,df,6f,52,b4,6c,d2,5e,1e,ab,08,60,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,39,18,92,7b,96,78,59,28,59,2a,15,fd,c7,9f,b3,bf,0f,..
"khjeh"=hex:a8,d5,f7,93,49,4f,1a,23,30,e1,9a,db,81,66,c5,29,6f,bb,65,18,3b,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:69,7d,ee,2e,f0,8f,16,5e,2a,ad,57,81,5c,4e,b9,f8,50,ec,e4,7a,3c,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:64,62,02,00,28,f6,20,00,20,b0,55,00,f0,ff,ff,ff,00,40,f5,8f,43,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:c4,17,c8,d0,07,c4,bf,85,16,64,5e,42,56,ba,ae,bc,82,3f,d3,e4,15,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:49,b9,00,d3,66,96,ab,0a,00,dc,df,6f,52,b4,6c,d2,5e,1e,ab,08,60,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,39,18,92,7b,96,78,59,28,59,2a,15,fd,c7,9f,b3,bf,0f,..
"khjeh"=hex:a8,d5,f7,93,49,4f,1a,23,30,e1,9a,db,81,66,c5,29,6f,bb,65,18,3b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:69,7d,ee,2e,f0,8f,16,5e,2a,ad,57,81,5c,4e,b9,f8,50,ec,e4,7a,3c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:64,62,02,00,d0,89,1c,00,40,ed,1b,00,d8,ff,ff,ff,b8,fa,1b,00,20,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000001
"ujdew"=hex:c4,17,c8,d0,07,c4,bf,85,16,64,5e,42,56,ba,ae,bc,82,3f,d3,e4,15,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:49,b9,00,d3,66,96,ab,0a,00,dc,df,6f,52,b4,6c,d2,5e,1e,ab,08,60,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,39,18,92,7b,96,78,59,28,59,2a,15,fd,c7,9f,b3,bf,0f,..
"khjeh"=hex:a8,d5,f7,93,49,4f,1a,23,30,e1,9a,db,81,66,c5,29,6f,bb,65,18,3b,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:69,7d,ee,2e,f0,8f,16,5e,2a,ad,57,81,5c,4e,b9,f8,50,ec,e4,7a,3c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:64,62,02,00,10,bb,83,00,00,00,00,00,f0,ff,ff,ff,20,c0,83,00,20,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 1st, 2008, 4:36 pm

Hi,

Did you download this file?

C:\Documents and Settings\Robert\Desktop\scvcs1303.exe
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 2nd, 2008, 4:23 am

ndmmxiaomayi wrote:Hi,

Did you download this file?

C:\Documents and Settings\Robert\Desktop\scvcs1303.exe


I might of dowloaded it a long time ago but can't remember. When I go to the folder however its not there. I've tried searching for it using windows xp search but can't find it. I don't mind deleting it if it's still on my computer.
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 2nd, 2008, 4:29 am

This file is hidden from normal view, so you can't see it. We will have it deleted if you don't mind. Or we can make it show up again in normal view.

I see some infections there. We need to run a tool.

Disable AVG Antivirus temporarily

Please disable AVG Antivirus temporarily as it may interfere with the fixes. Remember to re-enable it before posting the logs!

  • Right click on AVG Antivirus near the clock and select Open AVG User Interface.
  • Double click on Resident Shield.
  • Uncheck (untick) this box - Resident Shield active.
  • Click on Save changes.

Run Combofix

If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/combofi ... e-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once Recovery Console is installed, you should see a blue screen prompt like the one below:

Image

Click Yes to allow Combofix to continue scanning for malware.

When done, a log will be produced. Please post that log and a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.

In your next reply, please post:

  1. Combofix log (C:\Combofix.txt)
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 2nd, 2008, 4:21 pm

Hi

I have a problem with the combo fix tutorial. When asked to download a file for the recovery console from the microsoft website there isn't a link for windows with sevice pack 3. Should I just download the recovery console for sevice pack 2 instead?

Thanks
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 3rd, 2008, 12:43 am

Yes, that is all right. :)
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 3rd, 2008, 12:51 pm

Hi

All done :)

Here's the combo fix log:

ComboFix 08-06-01.6 - Robert 2008-06-03 17:30:36.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.484 [GMT 1:00]
Running from: C:\Documents and Settings\Robert\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Robert\Desktop\WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Natalie\Application Data\searchtoolbarcorp
C:\Documents and Settings\Natalie\Application Data\searchtoolbarcorp\Toolbar Vision\PageHistory.txt
C:\Documents and Settings\Natalie\Application Data\searchtoolbarcorp\Toolbar Vision\WebHistory.txt
C:\Documents and Settings\Natalie\Application Data\Ultimate Cleaner
C:\Documents and Settings\Robert\Application Data\Ultimate Cleaner
C:\Documents and Settings\Sebastian\Application Data\FunWebProducts
C:\Documents and Settings\Sebastian\Application Data\FunWebProducts\Data\Sebastian\avatar.dat
C:\Documents and Settings\Sebastian\Application Data\searchtoolbarcorp
C:\Documents and Settings\Sebastian\Application Data\searchtoolbarcorp\Toolbar Vision\PageHistory.txt
C:\Documents and Settings\Sebastian\Application Data\searchtoolbarcorp\Toolbar Vision\WebHistory.txt
C:\Documents and Settings\Sebastian\Application Data\Ultimate Cleaner
C:\Program Files\Common Files\{30B86~1
C:\Program Files\Common Files\{30B86~1\Uninst.exe
C:\Program Files\Common Files\{D0B86~1
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\system32\installer.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\winhelp.ini

.
((((((((((((((((((((((((( Files Created from 2008-05-03 to 2008-06-03 )))))))))))))))))))))))))))))))
.

2008-06-01 17:30 . 2008-06-01 17:59 <DIR> d-------- C:\SDFix
2008-05-30 15:25 . 2008-05-30 16:07 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\ImgBurn
2008-05-30 13:52 . 2008-05-30 13:53 <DIR> d-------- C:\Program Files\ImgBurn
2008-05-30 10:25 . 2008-05-30 10:25 <DIR> d-------- C:\Documents and Settings\Hanna\Application Data\Comodo
2008-05-29 22:12 . 2008-05-29 22:13 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\AVGTOOLBAR
2008-05-29 22:11 . 2008-05-29 22:11 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\Comodo
2008-05-29 15:48 . 2008-05-29 15:48 <DIR> d--h----- C:\$AVG8.VAULT$
2008-05-29 11:59 . 2008-05-29 11:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-29 09:48 . 2008-05-29 09:48 <DIR> d-------- C:\Program Files\COMODO
2008-05-29 09:48 . 2008-05-29 09:48 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\Comodo
2008-05-29 09:48 . 2008-05-29 09:53 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\comodo
2008-05-29 09:48 . 2008-05-29 10:02 143,104 --a------ C:\WINDOWS\system32\guard32.dll
2008-05-29 09:48 . 2008-05-29 10:02 87,056 --a------ C:\WINDOWS\system32\drivers\cmdguard.sys
2008-05-29 09:48 . 2008-05-29 10:02 24,208 --a------ C:\WINDOWS\system32\drivers\cmdhlp.sys
2008-05-29 08:10 . 2008-05-29 08:12 <DIR> d-------- C:\Documents and Settings\Hanna\Application Data\AVGTOOLBAR
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\system32\scripting
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\system32\en
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\l2schemas
2008-05-28 17:57 . 2008-04-14 01:12 712,704 --------- C:\WINDOWS\system32\windowscodecs.dll
2008-05-28 17:57 . 2008-04-14 01:12 346,112 --------- C:\WINDOWS\system32\windowscodecsext.dll
2008-05-28 17:57 . 2008-04-14 01:12 276,992 --------- C:\WINDOWS\system32\wmphoto.dll
2008-05-28 17:57 . 2008-04-14 01:12 69,120 --------- C:\WINDOWS\system32\wlanapi.dll
2008-05-28 17:57 . 2008-04-14 01:12 53,248 --------- C:\WINDOWS\system32\tsgqec.dll
2008-05-28 17:57 . 2008-04-14 01:12 50,688 --------- C:\WINDOWS\system32\tspkg.dll
2008-05-28 17:56 . 2008-04-14 01:12 412,160 --------- C:\WINDOWS\system32\photometadatahandler.dll
2008-05-28 17:56 . 2008-04-14 01:12 291,328 --------- C:\WINDOWS\system32\qagentrt.dll
2008-05-28 17:56 . 2008-04-14 01:12 290,304 --------- C:\WINDOWS\system32\rhttpaa.dll
2008-05-28 17:56 . 2008-04-14 01:12 150,528 --------- C:\WINDOWS\system32\qagent.dll
2008-05-28 17:56 . 2008-04-14 01:12 144,384 --------- C:\WINDOWS\system32\onex.dll
2008-05-28 17:56 . 2008-04-14 01:12 76,800 --------- C:\WINDOWS\system32\qutil.dll
2008-05-28 17:56 . 2008-04-14 01:12 62,464 --------- C:\WINDOWS\system32\qcliprov.dll
2008-05-28 17:56 . 2008-04-14 01:12 61,952 --------- C:\WINDOWS\system32\rasqec.dll
2008-05-28 17:56 . 2008-04-14 01:12 32,768 --------- C:\WINDOWS\system32\setupn.exe
2008-05-28 17:56 . 2008-04-13 19:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-05-28 17:55 . 2008-04-14 01:12 1,306,624 -----c--- C:\WINDOWS\system32\dllcache\msxml6.dll
2008-05-28 17:55 . 2008-04-14 01:12 193,024 --------- C:\WINDOWS\system32\napmontr.dll
2008-05-28 17:55 . 2008-04-14 01:12 176,640 --------- C:\WINDOWS\system32\napstat.exe
2008-05-28 17:55 . 2008-04-14 01:12 155,136 --------- C:\WINDOWS\system32\mssha.dll
2008-05-28 17:55 . 2008-04-13 18:27 79,872 --a------ C:\WINDOWS\system32\msxml6r.dll
2008-05-28 17:55 . 2008-04-13 18:27 79,872 -----c--- C:\WINDOWS\system32\dllcache\msxml6r.dll
2008-05-28 17:55 . 2008-04-13 19:14 76,800 --------- C:\WINDOWS\system32\msshavmsg.dll
2008-05-28 17:55 . 2008-04-14 01:12 30,208 --------- C:\WINDOWS\system32\napipsec.dll
2008-05-28 17:54 . 2008-04-14 01:11 397,312 --------- C:\WINDOWS\system32\mmcex.dll
2008-05-28 17:54 . 2008-04-14 01:11 184,320 --------- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-05-28 17:54 . 2008-04-14 01:11 106,496 --------- C:\WINDOWS\system32\mmcfxcommon.dll
2008-05-28 17:54 . 2008-04-14 01:11 61,440 --------- C:\WINDOWS\system32\kmsvc.dll
2008-05-28 17:54 . 2008-04-14 01:11 37,376 --------- C:\WINDOWS\system32\l2gpstore.dll
2008-05-28 17:54 . 2008-04-14 01:12 33,792 --------- C:\WINDOWS\system32\mmcperf.exe
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdpash.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdnepr.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdiultn.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdbhc.dll
2008-05-28 17:52 . 2008-04-14 01:11 650,752 --------- C:\WINDOWS\system32\dot3ui.dll
2008-05-28 17:51 . 2008-04-14 01:11 136,192 --------- C:\WINDOWS\system32\aaclient.dll
2008-05-28 15:35 . 2008-05-28 15:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-28 15:28 . 2008-06-03 11:51 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-05-28 15:28 . 2008-05-28 15:28 <DIR> d-------- C:\Program Files\AVG
2008-05-28 15:28 . 2008-05-28 16:25 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\AVGTOOLBAR
2008-05-28 15:28 . 2008-05-28 15:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-05-28 15:28 . 2008-05-28 15:28 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-28 15:28 . 2008-05-28 15:28 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-05-28 11:23 . 2008-05-28 11:23 <DIR> d-------- C:\Program Files\Panda Security
2008-05-26 20:49 . 2008-05-26 20:49 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\Apple Computer
2008-05-26 20:49 . 2008-06-03 16:38 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-26 20:49 . 2008-05-26 20:49 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-26 20:48 . 2008-05-26 20:49 <DIR> d-------- C:\Program Files\iTunes
2008-05-26 20:48 . 2008-05-26 20:48 <DIR> d-------- C:\Program Files\iPod
2008-05-26 20:44 . 2008-05-26 20:44 <DIR> d-------- C:\Program Files\Apple Software Update
2008-05-26 10:44 . 2008-05-26 10:44 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CyberLink
2008-05-23 16:51 . 2008-05-23 16:51 244 --ah----- C:\sqmnoopt02.sqm
2008-05-23 16:51 . 2008-05-23 16:51 232 --ah----- C:\sqmdata02.sqm
2008-05-18 11:53 . 2008-05-18 17:02 <DIR> d-------- C:\Program Files\Zattoo
2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-03 16:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kontiki
2008-05-31 21:38 --------- d-----w C:\Documents and Settings\Robert\Application Data\GrabIt
2008-05-30 18:36 --------- d-----w C:\Documents and Settings\Hanna\Application Data\Skype
2008-05-29 22:54 --------- d-----w C:\Documents and Settings\Natalie\Application Data\uTorrent
2008-05-29 13:39 --------- d-----w C:\Program Files\Kontiki
2008-05-28 19:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-05-28 18:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-05-28 14:36 --------- d-----w C:\Program Files\Lavasoft
2008-05-28 14:36 --------- d-----w C:\Documents and Settings\Natalie\Application Data\Lavasoft
2008-05-28 14:35 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-05-28 14:30 --------- d-----w C:\Program Files\Java
2008-05-28 14:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-05-28 14:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-28 14:20 --------- d-----w C:\Program Files\PSPHost
2008-05-28 14:15 --------- d-----w C:\Program Files\Zylom Games
2008-05-28 14:15 --------- d-----w C:\Program Files\3DO
2008-05-28 14:02 --------- d-----w C:\Documents and Settings\Robert\Application Data\Dev-Cpp
2008-05-28 10:13 --------- d-----w C:\Program Files\igLoader
2008-05-28 10:11 --------- d-----w C:\Program Files\Coupon Printer
2008-05-26 19:47 --------- d-----w C:\Program Files\QuickTime Alternative
2008-05-26 19:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-26 09:52 --------- d-----w C:\Program Files\SpeedFan
2008-05-20 19:18 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-05-13 15:42 --------- d-----w C:\Documents and Settings\Robert\Application Data\uTorrent
2008-05-01 15:15 --------- d-----w C:\Documents and Settings\Robert\Application Data\CoSoSys
2008-05-01 15:10 --------- d-----w C:\Documents and Settings\Robert\Application Data\U3
2008-04-29 10:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2008-04-29 10:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
2008-04-29 10:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
2008-04-14 04:42 985,088 ----a-w C:\WINDOWS\system32\setupapi.dll
2008-04-14 04:42 11,264 ------w C:\WINDOWS\system32\spnpinst.exe
2008-04-14 04:41 423,936 ----a-w C:\WINDOWS\system32\licdll.dll
2008-04-14 00:25 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-14 00:16 329,728 ------w C:\WINDOWS\system32\netsetup.exe
2008-04-14 00:13 92,424 ----a-w C:\WINDOWS\system32\rdpdd.dll
2008-04-14 00:13 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll
2008-04-14 00:13 40,840 ----a-w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 00:13 299,520 ----a-w C:\WINDOWS\system32\drmclien.dll
2008-04-14 00:13 21,896 ----a-w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 00:13 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 00:13 12,168 ----a-w C:\WINDOWS\system32\tsddd.dll
2008-04-14 00:13 12,040 ----a-w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 00:11 997,376 ----a-w C:\WINDOWS\system32\msgina.dll
2008-04-14 00:10 53,279 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 00:10 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 00:10 3,584 ----a-w C:\WINDOWS\system32\msafd.dll
2008-04-13 21:00 103,424 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 20:10 --------- d-----w C:\Documents and Settings\Natalie\Application Data\dvdcss
2008-04-13 19:30 1,845,632 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-13 19:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:24 2,145,280 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 19:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:18 52,480 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 19:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 64,512 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 19:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 19:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 18:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 18:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 18:57 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 18:56 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 18:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 18:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 18:56 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 18:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 18:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 18:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 18:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 18:56 12,288 ----a-w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 18:55 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 18:55 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 18:54 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 18:53 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 18:53 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 18:53 36,608 ----a-w C:\WINDOWS\system32\drivers\ip6fw.sys
2008-04-13 18:53 264,832 ----a-w C:\WINDOWS\system32\drivers\http.sys
2008-04-13 18:51 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys
2008-04-13 18:51 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys
2005-06-22 05:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
2006-05-03 09:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
2008-05-28 15:28 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-05-28 15:28 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-05-28 15:28 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 01:12 1695232]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:12 15360]
"SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2006-11-02 14:43 472632]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
"kdx"="C:\Program Files\Kontiki\KHost.exe" [2007-04-23 12:23 1032640]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Net-It Launcher"="C:\WINDOWS\System32\NILaunch.exe" [1998-02-05 20:16 24576]
"ezShieldProtector for Px"="C:\WINDOWS\system32\ezSP_Px.exe" [2002-08-20 11:29 40960]
"SoundMan"="SOUNDMAN.EXE" [2006-03-02 07:22 577536 C:\WINDOWS\soundman.exe]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
"MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2006-06-20 11:10 190024]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2005-03-15 10:46 196608]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\point32.exe" [2005-03-24 00:26 217088]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 23:32 53248]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 10:25 1828136]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
"4oD"="C:\Program Files\Kontiki\KHost.exe" [2007-04-23 12:23 1032640]
"QuickTime Task"="C:\Program Files\QuickTime Alternative\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-28 15:28 1177368]
"COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-05-31 16:05 1655552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"@"="" []

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-14 01:12 15360]

C:\Documents and Settings\Natalie\Start Menu\Programs\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/16/2005 7:16:50 PM 113664]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe [3/5/2006 4:43:54 AM 11000]
Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2/2/2008 7:07:56 PM 125624]
VTAgentReboot.exe [10/7/2001 8:11:30 PM 143360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"{D0B86E56-0D48-2057-0511-04040422002c}"= "C:\Program Files\Common Files\{D0B86E56-0D48-2057-0511-04040422002c}\Update.exe" mc-110-12-0000272

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll C:\WINDOWS\system32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll
"vidc.yv12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Exif Launcher 2.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Exif Launcher 2.lnk
backup=C:\WINDOWS\pss\Exif Launcher 2.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus Organizer EasyClip.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus Organizer EasyClip.lnk
backup=C:\WINDOWS\pss\Lotus Organizer EasyClip.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus QuickStart.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus QuickStart.lnk
backup=C:\WINDOWS\pss\Lotus QuickStart.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus SmartCenter.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus SmartCenter.lnk
backup=C:\WINDOWS\pss\Lotus SmartCenter.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus SuiteStart.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus SuiteStart.lnk
backup=C:\WINDOWS\pss\Lotus SuiteStart.lnkCommon Startup
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntiVir]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
--a------ 2006-09-28 20:21 57344 C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 21:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\icq lite]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update Checker]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Update]
C:\WINDOWS\scvhost.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Documents and Settings\\Natalie\\My Documents\\utorrent.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\Program Files\\Internet Explorer\\iexplore.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Kontiki\\KService.exe"=
"C:\\Games\\C&C3\\RetailExe\\1.4\\cnc3game.dat"=
"C:\\Documents and Settings\\Robert\\Desktop\\vbalink180b0\\VisualBoyAdvance.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\SopCast\\SopCast.exe"=
"C:\\Program Files\\TVAnts\\Tvants.exe"=
"C:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"C:\\Program Files\\Zattoo\\zattood.exe"=
"C:\\Program Files\\Zattoo\\Zattoo2.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"80:TCP"= 80:TCP:80
"443:TCP"= 443:TCP:443
"5223:TCP"= 5223:TCP:5223
"3478:UDP"= 3478:UDP:3478
"3479:UDP"= 3479:UDP:3479
"3658:UDP"= 3658:UDP:3658

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-28 15:28]
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2008-05-29 10:02]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2008-05-29 10:02]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-28 15:28]
R3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;C:\WINDOWS\system32\DRIVERS\ADM8511.SYS [2001-08-17 20:11]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;C:\WINDOWS\system32\drivers\libusb0.sys [2005-03-09 20:50]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\L]
\Shell\AutoRun\command - L:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\O]
\Shell\AutoRun\command - O:\Play.EXE
\Shell\install\command - INSTALL\_SETUP.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a14fc7be-7717-11db-bc18-0004e25c0f3a}]
\Shell\AutoRun\command - L:\autorun6e.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{affac31a-ca70-11db-bd53-0004e25c0f3a}]
\Shell\AutoRun\command - L:\InstallTomTomHOME.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e1efeccc-0302-11dc-be2a-0004e25c0f3a}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2008-05-26 19:45:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-03 17:41:21
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\guard32.dll

PROCESS: C:\WINDOWS\system32\lsass.exe
-> C:\WINDOWS\system32\guard32.dll
.
Completion time: 2008-06-03 17:44:00
ComboFix-quarantined-files.txt 2008-06-03 16:43:42

Pre-Run: 55,505,997,824 bytes free
Post-Run: 58,851,921,920 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

385 --- E O F --- 2008-05-28 08:42:27
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby robcpfc79 » June 3rd, 2008, 12:54 pm

Here's a new hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:52:50, on 03/06/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\NILaunch.exe
C:\WINDOWS\system32\ezSP_Px.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kontiki\KService.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Net-It Launcher] C:\WINDOWS\System32\NILaunch.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Policies\Explorer\Run: [{D0B86E56-0D48-2057-0511-04040422002c}] "C:\Program Files\Common Files\{D0B86E56-0D48-2057-0511-04040422002c}\Update.exe" mc-110-12-0000272
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: VTAgentReboot.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/Fac ... oader5.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {2A493D5F-8914-4D3E-8BF3-767F281862F4} (TraderMediaImgX Control) - http://sell.autotrader.co.uk/uk-ola/com ... MediaX.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan ... stubie.cab
O16 - DPF: {3B5E9B23-7537-4601-A9E8-FA0D956DEA16} - http://www.couponreport.net/ftp/v3123/csauie1.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/re ... NPUpld.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Fac ... loader.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1120896609
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab
O16 - DPF: {BF6BBE9A-0656-4598-A0CD-32DAC03959B5} (Image Uploader 3.0 Control) - https://www.tescophoto.com/wpp/tesco/ap ... loader.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - https://ukplay.toontown.com/download/sv ... ttinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/f ... wflash.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Fac ... der4_5.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by105fd.bay105.hotmail.msn.com/a ... Atchmt.ocx
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E1C9723-BDF6-4AD8-A923-BFE2317A4E6E}: NameServer = 194.168.4.100,194.168.8.100
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll C:\WINDOWS\system32\guard32.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - http://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 14418 bytes
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 3rd, 2008, 1:40 pm

Hi,

You've installed the wrong version of Recovery Console. We need to get it removed and re-install the correct version. Please make sure that you read through all instructions carefully. If you are unsure of any steps, please let me know.

Show hidden files and folders

  1. Open My Computer.
  2. Go to Tools > Folder Options.
  3. Select the View tab.
  4. Scroll down to Hidden files and folders.
  5. Select Show hidden files and folders.
  6. Uncheck (untick) Hide extensions of known file types.
  7. Uncheck (untick) Hide protected operating system files (Recommended).
  8. Click Yes when prompted.
  9. Click OK.

Step 1

Delete this file, it's on your desktop.

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

Step 2

Delete this folder - C:\cmdcons

Step 3

Delete this file file - C:\Boot.ini

Step 4

Right click on this file - C:\Boot.bak and select Rename.

Copy and paste in Boot.ini and press Enter.

Let me know when you have done all 4 steps. Don't restart your computer yet.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 3rd, 2008, 2:21 pm

Hi

Ok, all done.

Should I delete this file from my desktop? - scvcs1303.exe
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm

Re: Hijackthis log file help

Unread postby ndmmxiaomayi » June 3rd, 2008, 2:35 pm

Hi,

Should I delete this file from my desktop? - scvcs1303.exe


If you can't recall if you've downloaded this file, please delete it.




Go to Microsoft's website => http://support.microsoft.com/kb/310994
Select the download that's appropriate for your Operating System. You are using Windows XP Home Service Pack 2 (SP2).

Image

Download the file & save it as it's originally named, next to ComboFix.exe.

Image

Now close all open windows and programs, then drag the setup package onto ComboFix.exe and drop it. Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console. When complete, a log named CF_RC.txt will open. Please post the contents of that log.

Please do not restart or shut down your machine until we have reviewed the log.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Hijackthis log file help

Unread postby robcpfc79 » June 3rd, 2008, 4:30 pm

Here's the combo fix log:

ComboFix 08-06-01.6 - Robert 2008-06-03 21:07:13.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.581 [GMT 1:00]
Running from: C:\Documents and Settings\Robert\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Robert\Desktop\WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2008-05-03 to 2008-06-03 )))))))))))))))))))))))))))))))
.

2008-06-03 19:44 . 2008-06-03 19:44 1,980 --a------ C:\WINDOWS\ST5UNST.000
2008-06-01 17:30 . 2008-06-01 17:59 <DIR> d-------- C:\SDFix
2008-05-30 15:25 . 2008-05-30 16:07 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\ImgBurn
2008-05-30 13:52 . 2008-05-30 13:53 <DIR> d-------- C:\Program Files\ImgBurn
2008-05-30 10:25 . 2008-05-30 10:25 <DIR> d-------- C:\Documents and Settings\Hanna\Application Data\Comodo
2008-05-29 22:12 . 2008-05-29 22:13 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\AVGTOOLBAR
2008-05-29 22:11 . 2008-05-29 22:11 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\Comodo
2008-05-29 15:48 . 2008-05-29 15:48 <DIR> d--h----- C:\$AVG8.VAULT$
2008-05-29 11:59 . 2008-05-29 11:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-29 09:48 . 2008-05-29 09:48 <DIR> d-------- C:\Program Files\COMODO
2008-05-29 09:48 . 2008-05-29 09:48 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\Comodo
2008-05-29 09:48 . 2008-05-29 09:53 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\comodo
2008-05-29 09:48 . 2008-05-29 10:02 143,104 --a------ C:\WINDOWS\system32\guard32.dll
2008-05-29 09:48 . 2008-05-29 10:02 87,056 --a------ C:\WINDOWS\system32\drivers\cmdguard.sys
2008-05-29 09:48 . 2008-05-29 10:02 24,208 --a------ C:\WINDOWS\system32\drivers\cmdhlp.sys
2008-05-29 08:10 . 2008-06-03 19:52 <DIR> d-------- C:\Documents and Settings\Hanna\Application Data\AVGTOOLBAR
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\system32\scripting
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\system32\en
2008-05-28 18:23 . 2008-05-28 18:23 <DIR> d-------- C:\WINDOWS\l2schemas
2008-05-28 17:57 . 2008-04-14 01:12 712,704 --------- C:\WINDOWS\system32\windowscodecs.dll
2008-05-28 17:57 . 2008-04-14 01:12 346,112 --------- C:\WINDOWS\system32\windowscodecsext.dll
2008-05-28 17:57 . 2008-04-14 01:12 276,992 --------- C:\WINDOWS\system32\wmphoto.dll
2008-05-28 17:57 . 2008-04-14 01:12 69,120 --------- C:\WINDOWS\system32\wlanapi.dll
2008-05-28 17:57 . 2008-04-14 01:12 53,248 --------- C:\WINDOWS\system32\tsgqec.dll
2008-05-28 17:57 . 2008-04-14 01:12 50,688 --------- C:\WINDOWS\system32\tspkg.dll
2008-05-28 17:56 . 2008-04-14 01:12 412,160 --------- C:\WINDOWS\system32\photometadatahandler.dll
2008-05-28 17:56 . 2008-04-14 01:12 291,328 --------- C:\WINDOWS\system32\qagentrt.dll
2008-05-28 17:56 . 2008-04-14 01:12 290,304 --------- C:\WINDOWS\system32\rhttpaa.dll
2008-05-28 17:56 . 2008-04-14 01:12 150,528 --------- C:\WINDOWS\system32\qagent.dll
2008-05-28 17:56 . 2008-04-14 01:12 144,384 --------- C:\WINDOWS\system32\onex.dll
2008-05-28 17:56 . 2008-04-14 01:12 76,800 --------- C:\WINDOWS\system32\qutil.dll
2008-05-28 17:56 . 2008-04-14 01:12 62,464 --------- C:\WINDOWS\system32\qcliprov.dll
2008-05-28 17:56 . 2008-04-14 01:12 61,952 --------- C:\WINDOWS\system32\rasqec.dll
2008-05-28 17:56 . 2008-04-14 01:12 32,768 --------- C:\WINDOWS\system32\setupn.exe
2008-05-28 17:56 . 2008-04-13 19:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2008-05-28 17:55 . 2008-04-14 01:12 1,306,624 -----c--- C:\WINDOWS\system32\dllcache\msxml6.dll
2008-05-28 17:55 . 2008-04-14 01:12 193,024 --------- C:\WINDOWS\system32\napmontr.dll
2008-05-28 17:55 . 2008-04-14 01:12 176,640 --------- C:\WINDOWS\system32\napstat.exe
2008-05-28 17:55 . 2008-04-14 01:12 155,136 --------- C:\WINDOWS\system32\mssha.dll
2008-05-28 17:55 . 2008-04-13 18:27 79,872 --a------ C:\WINDOWS\system32\msxml6r.dll
2008-05-28 17:55 . 2008-04-13 18:27 79,872 -----c--- C:\WINDOWS\system32\dllcache\msxml6r.dll
2008-05-28 17:55 . 2008-04-13 19:14 76,800 --------- C:\WINDOWS\system32\msshavmsg.dll
2008-05-28 17:55 . 2008-04-14 01:12 30,208 --------- C:\WINDOWS\system32\napipsec.dll
2008-05-28 17:54 . 2008-04-14 01:11 397,312 --------- C:\WINDOWS\system32\mmcex.dll
2008-05-28 17:54 . 2008-04-14 01:11 184,320 --------- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-05-28 17:54 . 2008-04-14 01:11 106,496 --------- C:\WINDOWS\system32\mmcfxcommon.dll
2008-05-28 17:54 . 2008-04-14 01:11 61,440 --------- C:\WINDOWS\system32\kmsvc.dll
2008-05-28 17:54 . 2008-04-14 01:11 37,376 --------- C:\WINDOWS\system32\l2gpstore.dll
2008-05-28 17:54 . 2008-04-14 01:12 33,792 --------- C:\WINDOWS\system32\mmcperf.exe
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdpash.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdnepr.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdiultn.dll
2008-05-28 17:54 . 2008-04-14 01:09 6,144 --------- C:\WINDOWS\system32\kbdbhc.dll
2008-05-28 17:52 . 2008-04-14 01:11 650,752 --------- C:\WINDOWS\system32\dot3ui.dll
2008-05-28 17:51 . 2008-04-14 01:11 136,192 --------- C:\WINDOWS\system32\aaclient.dll
2008-05-28 15:35 . 2008-05-28 15:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-28 15:28 . 2008-06-03 11:51 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-05-28 15:28 . 2008-05-28 15:28 <DIR> d-------- C:\Program Files\AVG
2008-05-28 15:28 . 2008-05-28 16:25 <DIR> d-------- C:\Documents and Settings\Robert\Application Data\AVGTOOLBAR
2008-05-28 15:28 . 2008-05-28 15:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-05-28 15:28 . 2008-05-28 15:28 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-28 15:28 . 2008-05-28 15:28 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-05-28 11:23 . 2008-05-28 11:23 <DIR> d-------- C:\Program Files\Panda Security
2008-05-26 20:49 . 2008-05-26 20:49 <DIR> d-------- C:\Documents and Settings\Natalie\Application Data\Apple Computer
2008-05-26 20:49 . 2008-06-03 21:17 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-26 20:49 . 2008-05-26 20:49 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-26 20:48 . 2008-05-26 20:49 <DIR> d-------- C:\Program Files\iTunes
2008-05-26 20:48 . 2008-05-26 20:48 <DIR> d-------- C:\Program Files\iPod
2008-05-26 20:44 . 2008-05-26 20:44 <DIR> d-------- C:\Program Files\Apple Software Update
2008-05-26 10:44 . 2008-05-26 10:44 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CyberLink
2008-05-23 16:51 . 2008-05-23 16:51 244 --ah----- C:\sqmnoopt02.sqm
2008-05-23 16:51 . 2008-05-23 16:51 232 --ah----- C:\sqmdata02.sqm
2008-05-18 11:53 . 2008-05-18 17:02 <DIR> d-------- C:\Program Files\Zattoo
2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-03 20:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kontiki
2008-06-03 19:52 --------- d-----w C:\Documents and Settings\Hanna\Application Data\Skype
2008-05-31 21:38 --------- d-----w C:\Documents and Settings\Robert\Application Data\GrabIt
2008-05-29 22:54 --------- d-----w C:\Documents and Settings\Natalie\Application Data\uTorrent
2008-05-29 13:39 --------- d-----w C:\Program Files\Kontiki
2008-05-28 19:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-05-28 18:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-05-28 14:36 --------- d-----w C:\Program Files\Lavasoft
2008-05-28 14:36 --------- d-----w C:\Documents and Settings\Natalie\Application Data\Lavasoft
2008-05-28 14:35 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-05-28 14:30 --------- d-----w C:\Program Files\Java
2008-05-28 14:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-05-28 14:25 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-28 14:20 --------- d-----w C:\Program Files\PSPHost
2008-05-28 14:15 --------- d-----w C:\Program Files\Zylom Games
2008-05-28 14:15 --------- d-----w C:\Program Files\3DO
2008-05-28 14:02 --------- d-----w C:\Documents and Settings\Robert\Application Data\Dev-Cpp
2008-05-28 10:13 --------- d-----w C:\Program Files\igLoader
2008-05-28 10:11 --------- d-----w C:\Program Files\Coupon Printer
2008-05-26 19:47 --------- d-----w C:\Program Files\QuickTime Alternative
2008-05-26 19:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-26 09:52 --------- d-----w C:\Program Files\SpeedFan
2008-05-20 19:18 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-05-13 15:42 --------- d-----w C:\Documents and Settings\Robert\Application Data\uTorrent
2008-05-01 15:15 --------- d-----w C:\Documents and Settings\Robert\Application Data\CoSoSys
2008-05-01 15:10 --------- d-----w C:\Documents and Settings\Robert\Application Data\U3
2008-04-29 10:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2008-04-29 10:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
2008-04-29 10:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
2008-04-14 00:13 40,840 ----a-w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 00:13 21,896 ----a-w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 00:13 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 00:13 12,040 ----a-w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 00:12 69,120 ----a-w C:\WINDOWS\notepad.exe
2008-04-14 00:12 50,688 ----a-w C:\WINDOWS\twain_32.dll
2008-04-14 00:12 32,866 ------w C:\WINDOWS\slrundll.exe
2008-04-14 00:12 3,901 ----a-w C:\WINDOWS\system32\drivers\siint5.dll
2008-04-14 00:12 283,648 ----a-w C:\WINDOWS\winhlp32.exe
2008-04-14 00:12 146,432 ------w C:\WINDOWS\regedit.exe
2008-04-14 00:12 11,325 ----a-w C:\WINDOWS\system32\drivers\vchnt5.dll
2008-04-14 00:12 10,752 ----a-w C:\WINDOWS\hh.exe
2008-04-14 00:12 1,033,728 ----a-w C:\WINDOWS\explorer.exe
2008-04-13 20:10 --------- d-----w C:\Documents and Settings\Natalie\Application Data\dvdcss
2008-04-13 19:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:18 52,480 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 19:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 64,512 ----a-w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 19:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 30,080 ----a-w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 19:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 18:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 18:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 18:57 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 18:56 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 18:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 18:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 18:56 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 18:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 18:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 18:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 18:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 18:56 12,288 ----a-w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 18:55 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 18:55 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 18:54 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 18:53 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 18:53 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 18:53 36,608 ----a-w C:\WINDOWS\system32\drivers\ip6fw.sys
2008-04-13 18:53 264,832 ----a-w C:\WINDOWS\system32\drivers\http.sys
2008-04-13 18:51 61,824 ----a-w C:\WINDOWS\system32\drivers\nic1394.sys
2008-04-13 18:51 60,800 ----a-w C:\WINDOWS\system32\drivers\arp1394.sys
2008-04-13 18:51 59,904 ----a-w C:\WINDOWS\system32\drivers\atmarpc.sys
2008-04-13 18:51 55,808 ----a-w C:\WINDOWS\system32\drivers\atmlane.sys
2008-04-13 18:51 101,120 ----a-w C:\WINDOWS\system32\drivers\bthpan.sys
2008-04-13 18:46 61,696 ----a-w C:\WINDOWS\system32\drivers\ohci1394.sys
2008-04-13 18:46 59,136 ----a-w C:\WINDOWS\system32\drivers\rfcomm.sys
2008-04-13 18:46 53,376 ----a-w C:\WINDOWS\system32\drivers\1394bus.sys
2008-04-13 18:46 37,888 ----a-w C:\WINDOWS\system32\drivers\bthmodem.sys
2005-06-22 05:37 45,568 --sha-r C:\WINDOWS\system32\cygz.dll
2006-05-03 09:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll
.

((((((((((((((((((((((((((((( snapshot@2008-06-03_17.43.24.90 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-03 15:38:18 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-03 20:16:28 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2005-10-20 19:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 1997-01-16 00:00:00 71,680 ----a-w C:\WINDOWS\ST5UNST.EXE
+ 1997-01-16 00:00:00 29,696 ----a-w C:\WINDOWS\system32\VB5StKit.dll
+ 2008-06-03 20:16:47 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_e8.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
2008-05-28 15:28 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-05-28 15:28 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-05-28 15:28 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 01:12 1695232]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:12 15360]
"SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2006-11-02 14:43 472632]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [ ]
"kdx"="C:\Program Files\Kontiki\KHost.exe" [2007-04-23 12:23 1032640]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Net-It Launcher"="C:\WINDOWS\System32\NILaunch.exe" [1998-02-05 20:16 24576]
"ezShieldProtector for Px"="C:\WINDOWS\system32\ezSP_Px.exe" [2002-08-20 11:29 40960]
"SoundMan"="SOUNDMAN.EXE" [2006-03-02 07:22 577536 C:\WINDOWS\soundman.exe]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
"MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2006-06-20 11:10 190024]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"type32"="C:\Program Files\Microsoft IntelliType Pro\type32.exe" [2005-03-15 10:46 196608]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\point32.exe" [2005-03-24 00:26 217088]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 23:32 53248]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 10:25 1828136]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
"4oD"="C:\Program Files\Kontiki\KHost.exe" [2007-04-23 12:23 1032640]
"QuickTime Task"="C:\Program Files\QuickTime Alternative\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-28 15:28 1177368]
"COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-05-31 16:05 1655552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"@"="" []

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-14 01:12 15360]

C:\Documents and Settings\Natalie\Start Menu\Programs\Startup\
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/16/2005 7:16:50 PM 113664]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
AutoCAD Startup Accelerator.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart17.exe [3/5/2006 4:43:54 AM 11000]
Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2/2/2008 7:07:56 PM 125624]
VTAgentReboot.exe [10/7/2001 8:11:30 PM 143360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"{D0B86E56-0D48-2057-0511-04040422002c}"= "C:\Program Files\Common Files\{D0B86E56-0D48-2057-0511-04040422002c}\Update.exe" mc-110-12-0000272

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll
"vidc.yv12"= yv12vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Exif Launcher 2.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Exif Launcher 2.lnk
backup=C:\WINDOWS\pss\Exif Launcher 2.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus Organizer EasyClip.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus Organizer EasyClip.lnk
backup=C:\WINDOWS\pss\Lotus Organizer EasyClip.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus QuickStart.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus QuickStart.lnk
backup=C:\WINDOWS\pss\Lotus QuickStart.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus SmartCenter.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus SmartCenter.lnk
backup=C:\WINDOWS\pss\Lotus SmartCenter.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Lotus SuiteStart.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Lotus SuiteStart.lnk
backup=C:\WINDOWS\pss\Lotus SuiteStart.lnkCommon Startup
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntiVir]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
--a------ 2006-09-28 20:21 57344 C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2006-09-14 21:09 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\icq lite]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update Checker]
C:\WINDOWS\scvhost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Update]
C:\WINDOWS\scvhost.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Documents and Settings\\Natalie\\My Documents\\utorrent.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\Program Files\\Internet Explorer\\iexplore.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Kontiki\\KService.exe"=
"C:\\Games\\C&C3\\RetailExe\\1.4\\cnc3game.dat"=
"C:\\Documents and Settings\\Robert\\Desktop\\vbalink180b0\\VisualBoyAdvance.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\SopCast\\SopCast.exe"=
"C:\\Program Files\\TVAnts\\Tvants.exe"=
"C:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"C:\\Program Files\\Zattoo\\zattood.exe"=
"C:\\Program Files\\Zattoo\\Zattoo2.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"80:TCP"= 80:TCP:80
"443:TCP"= 443:TCP:443
"5223:TCP"= 5223:TCP:5223
"3478:UDP"= 3478:UDP:3478
"3479:UDP"= 3479:UDP:3479
"3658:UDP"= 3658:UDP:3658

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-28 15:28]
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2008-05-29 10:02]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2008-05-29 10:02]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-28 15:28]
R3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;C:\WINDOWS\system32\DRIVERS\ADM8511.SYS [2001-08-17 20:11]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;C:\WINDOWS\system32\drivers\libusb0.sys [2005-03-09 20:50]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\L]
\Shell\AutoRun\command - L:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\O]
\Shell\AutoRun\command - O:\Play.EXE
\Shell\install\command - INSTALL\_SETUP.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a14fc7be-7717-11db-bc18-0004e25c0f3a}]
\Shell\AutoRun\command - L:\autorun6e.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{affac31a-ca70-11db-bd53-0004e25c0f3a}]
\Shell\AutoRun\command - L:\InstallTomTomHOME.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e1efeccc-0302-11dc-be2a-0004e25c0f3a}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2008-05-26 19:45:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-03 21:17:41
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Kontiki\KService.exe
C:\WINDOWS\system32\libusbd-nt.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2008-06-03 21:28:13 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-03 20:28:08
ComboFix2.txt 2008-06-03 16:44:01

Pre-Run: 61,696,536,576 bytes free
Post-Run: 61,583,388,672 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

385 --- E O F --- 2008-05-28 08:42:27
robcpfc79
Regular Member
 
Posts: 26
Joined: May 28th, 2008, 4:24 pm
Advertisement
Register to Remove

Next

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 337 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware