Advertisement

05.09.2007 at 10:58PM PDT, ID: 22563351
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
8.0

Windows 2003 Server Service Pack 2 Fails - mofcomp.exe issue during "Running Processes after Install"

Asked by Accdat in Microsoft Server, Windows 2003 Server, SBS Small Business Server

Tags: ,

I have had ongoing issues installing SP2 on a 2003 Small Business Server. On the first attempt, setup got stuck on "Running Processes after Install". I had no choice but to end the installation and roll back. After I reviewed the errors, I tried to clear the catalog repositories as I saw there were some issues throughout the installation log of my SP attempt. I followed this issue:

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22529252.html

I have not tried to 'Delete all the oem*.* files from the %systemroot%\inf folder'. I have followed the advice of the other posters before the final post only to get stuck on "Running Processes after Install".

Yesterday I tried to install the service pack in Safe Mode. This time the install did not get stuck on the "Running Processes after Install", it finished with "Service Pack 2 Setup encountered an error:  An error in updating your system has occurred." and proceeded to roll-back.

On all logged attempts it seems to get stuck here;

774.719: Starting process:  C:\WINDOWS\system32\wbem\mofcomp.exe C:\WINDOWS\system32\wbem\wlbsprov.mof
775.172:  Return Code = 3
775.172: Starting process:  C:\WINDOWS\system32\wbem\mofcomp.exe C:\WINDOWS\system32\wbem\cimwin32.mof
776.532:  Return Code = 3

From what I understand, these .mof files contain class information for the WMI service. It maybe that the repository for WMI is corrupt in someway and the process mofcomp.exe is not responding to the request. On the second SP attempt I noticed this process in Task Manager and killed it which made the Service Pack fail. I then rolled back and rebooted. So I'm assuming it's this process that is causing the issue on the install.

Here is the log for your inspection - Please Help! I have been on-site three times for this problem and want to make the next one the last! Cheers.

0.000: ================================================================================
0.016: 2007/05/03 20:29:39.250 (local)
0.016: Executing script \SystemRoot\sprecovr.txt
0.016: In cleanup mode. System will not be rebooted.
0.016: Deleting c:\windows\system32\SPR00EF1.TMP
0.016: Deleting c:\windows\system32\SPR00EDA.TMP
0.031: 0 files copied. 2 files deleted.
0.031: Registering RpcSs as LocalSystem.
0.031: RegisterRpcSsAsLocalSystem: Checking to see if fixup is needed...
0.031: RegisterRpcSsAsLocalSystem: ntoskrnl.exe version is 5.2.3790.2894
0.031: RegisterRpcSsAsLocalSystem: System is 2003 >= SP1 RTM.
0.031: RegisterRpcSsAsLocalSystem: Fixup is not needed.
0.031: Registering uninstaller for launch by Winlogon.
0.031: Unregistering recovery program.
6.469: ================================================================================
6.469: 2007/05/09 15:33:17.265 (local)
6.485: c:\a6257267bbba101e56702b8d7a5ae9\i386\update\update.exe (version 6.3.4.1)
6.500: Service Pack started with following command line:
6.516: In Function GetBuildType, line 1170, RegQueryValueEx failed with error 0x2
6.563: Return Value From OnACPower = 1
6.563: OnACPower returned value( 0x1 ) which is Equal To 0x1
6.563: Condition succeeded for section OnACPower.Section in Line 1 of PreRequisite
6.594: InternalFileName of C:\WINDOWS\system32\HAL.DLL is Not Equal To halcmpx.dll
6.594: Condition succeeded for section CustomHalUnisysBlock.Section in Line 2 of PreRequisite
6.594: InternalFileName of C:\WINDOWS\system32\HAL.DLL is Not Equal To Unisys CMP Server ACPI HAL
6.594: First Condition in CustomHalUniSysBlock.Section2 Succeeded
6.594: Condition succeeded for section CustomHalUniSysBlock.Section2 in Line 3 of PreRequisite
6.594: InternalFileName of C:\WINDOWS\system32\HAL.DLL is Not Equal To HALSRAAC.DLL
6.594: Condition succeeded for section CustomHalStratusBlock.Section in Line 4 of PreRequisite
6.610: InternalFileName of C:\WINDOWS\system32\HAL.DLL is Not Equal To halce52.dll
6.610: Condition succeeded for section CustomHalMarathonBlock.Section in Line 5 of PreRequisite
6.610: Service SpUpdSvc Not Registered in SCM 0x424
6.610: Condition succeeded for section SpUpdSvcBlock.Section in Line 6 of PreRequisite
6.610: Start is Present
6.610: SYSTEM\CurrentControlSet\Services\MSDTC\Start is Not Equal To Specified Value
6.610: Second Condition in MSDTC.Not.Disabled Succeeded
6.610: Condition succeeded for section MDSTC.Check.Disabled in Line 7 of PreRequisite
6.610:  C:\WINDOWS\system32\DRIVERS\elxsli2.sys is Not Present
6.610: First Condition in Emulex.Driver.Compat.Check.Section Succeeded
6.610: Condition succeeded for section Emulex.Driver.Compat.Check.Section in Line 8 of PreRequisite
6.610:  C:\WINDOWS\system32\DRIVERS\ql40xx.sys is Not Present
6.610: First Condition in Qlogic.Driver.Compat.Check.Section Succeeded
6.610: Condition succeeded for section Qlogic.Driver.Compat.Check.Section in Line 9 of PreRequisite
6.610: HotfixRefreshRequired is Not Present
6.610: First Condition in HotfixRefresh.Registry.Check.Section Succeeded
6.610: Condition succeeded for section HotfixRefresh.Registry.Check.Section in Line 10 of PreRequisite
12.500: In Function TestVolatileFlag, line 12013, RegOpenKeyEx failed with error 0x2
12.500: In Function TestVolatileFlag, line 12045, RegOpenKeyEx failed with error 0x2
12.500: DoInstallation: CleanPFR failed: 0x2
12.500: In Function GetBuildType, line 1170, RegQueryValueEx failed with error 0x2
12.500: SetProductTypes: InfProductBuildType=BuildType.IL
12.547: SetAltOsLoaderPath: No section uses DirId 65701; done.
12.704: SetDynamicDirectoryId: Failure while generating dynamic path, 0xf111
12.719: GetGenericPathNameWithRoot: Unable to open HKLM, SOFTWARE\Microsoft\ADMT, 0x2.
12.719: SetDynamicDirectoryId: Failure while generating dynamic path, 0xf111
12.750:  SOFTWARE\Microsoft\Windows\CurrentVersion\R2Setup is not Present
12.750: Condition Check for Line 1 of R2.Schema.ExtendedConditional returned FALSE
12.750:  SOFTWARE\Microsoft\Windows\CurrentVersion\R2Setup is not Present
12.750: Condition succeeded for section R2.Absent.Condition.Section in Line 1 of Old.Schema.ExtendedConditional
12.750:  SOFTWARE\Microsoft\Windows\CurrentVersion\R2Setup is not Present
12.750: Condition Check for Line 1 of New.NTDS.ExtendedConditional returned FALSE
12.750:  SOFTWARE\Microsoft\Windows\CurrentVersion\R2Setup is not Present
12.750: Condition succeeded for section R2.Absent.Condition.Section in Line 1 of Old.NTDS.ExtendedConditional
12.750:  C:\WINDOWS\ADFS\System.Web.Security.SingleSignon.dll is Not Present
12.750: Condition succeeded for section ADFS.SingleSignOn.Exists.Condition in Line 1 of ADFS.SingleSignOn.RunProcess.ExtendedConditional
12.750:  Exec ADFS.Exists.Condition: Result Software\Microsoft\WebSSO\Install Key Not Found
12.750: Condition Check for Line 1 of ADFS.SingleSignOn.GAC.RunProcess.ExtendedConditional returned FALSE
12.750: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents\RemInst is Not Equal To Specified Value
12.750: Condition Check for Line 1 of Extended.Conditional.WDS.Install returned FALSE
12.750: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents\RemInst is Not Equal To Specified Value
12.750: Condition Check for Line 1 of Extended.Conditional.WDS.Install.OOB.Update returned FALSE
12.750: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OC Manager\Subcomponents\RemInst is Not Equal To Specified Value
12.750: Condition Check for Line 1 of Extended.Conditional.WDS.Install.VersionlessFiles returned FALSE
12.750: FileVersion of C:\Program Files\internet explorer\iexplore.exe is Greater or Equal To 7.0.0000.0000
12.750: Condition Check for Line 1 of IE.AdditionalSettings.Registry.ExtendedConditional returned FALSE
12.750:  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ie7 is Present
12.750: Condition succeeded for section IE7.AdditionalSettings.UninstallExists.Condition.Section in Line 1 of IE7.AdditionalSettings.Registry.ExtendedConditional
12.750: CSDVersion is Present
12.750: Condition Check for Line 1 of DEP.ExtendedConditional returned FALSE
12.750: Windows Media Services is Not Present
12.750: First Condition in Non.KN.Condition.Section Succeeded
12.750: Condition succeeded for section KN.Or.WMS.Restore.Condition.Section in Line 1 of WMS.ExtendedConditional.Common
12.766: DoInstallation: FetchSourceURL for c:\a6257267bbba101e56702b8d7a5ae9\i386\update\update.inf failed
12.766: Inclusion section is enabled for NON_PE file version check
27.672: CheckRegistryValue: Registry - Inf integer values mismatch
28.454: BuildCabinetManifest: update.url absent
28.454: Starting AnalyzeComponents
28.469: AnalyzePhaseZero used 0 ticks
28.469: SetupFindFirstLine in LoadExclusionList Failed with error: 0xe0000102
37.797: Third Party Provider = Intel for PCI\VEN_8086&DEV_244E&SUBSYS_00000000&REV_0A\3&267A616A&0&F0
38.438: Third Party Provider = Intel for PCI\VEN_8086&DEV_25A1&SUBSYS_00000000&REV_02\3&267A616A&0&F8
39.282: Third Party Provider = Intel for PCI\VEN_8086&DEV_25A2&SUBSYS_34418086&REV_02\3&267A616A&0&F9
39.891: Third Party Provider = Intel for PCI\VEN_8086&DEV_25A4&SUBSYS_34418086&REV_02\3&267A616A&0&FB
40.594: Third Party Provider = Intel for PCI\VEN_8086&DEV_25A9&SUBSYS_34418086&REV_02\3&267A616A&0&E8
41.125: Third Party Provider = Intel for PCI\VEN_8086&DEV_25AA&SUBSYS_34418086&REV_02\3&267A616A&0&E9
41.797: Third Party Provider = Intel for PCI\VEN_8086&DEV_25AB&SUBSYS_34418086&REV_02\3&267A616A&0&EC
42.407: Third Party Provider = Intel for PCI\VEN_8086&DEV_25AC&SUBSYS_34418086&REV_02\3&267A616A&0&ED
43.094: Third Party Provider = Intel for PCI\VEN_8086&DEV_25AD&SUBSYS_34418086&REV_02\3&267A616A&0&EF
43.704: Third Party Provider = Intel for PCI\VEN_8086&DEV_25AE&SUBSYS_00000000&REV_02\3&267A616A&0&E0
44.782: Third Party Provider = Intel for PCI\VEN_8086&DEV_3592&SUBSYS_00000000&REV_0C\3&267A616A&0&00
45.391: Third Party Provider = Intel for PCI\VEN_8086&DEV_3593&SUBSYS_34418086&REV_0C\3&267A616A&0&01
46.032: Third Party Provider = Intel for PCI\VEN_8086&DEV_3595&SUBSYS_00000000&REV_0C\3&267A616A&0&10
46.719: Third Party Provider = Intel for PCI\VEN_8086&DEV_3596&SUBSYS_00000000&REV_0C\3&267A616A&0&18
51.672: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.CAT trusts inf c:\windows\inf\oem0.inf of device SCSI\OTHER&VEN___RAID&PROD__DUMMYDEVICE&REV_05XX\4&33D3D7CC&0&0F0
52.125: SetupVerifyInfFile failed with error 0x490 for c:\windows\inf\oem11.inf of device SERENUM\EXI0291\5&107BC923&0&0000
73.610: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT trusts inf c:\windows\inf\oem17.inf of device USB\VID_0BB4&PID_0BCE\5&4125EC5&0&1
75.594: OEM file scan used 47125 ticks
171.813: DoInstallation:UpdSpOpenInfFile for OldUninstallInf file "c:\windows\$ntservicepackuninstall$\spuninst\spuninst.inf not found: 0x7b
171.813: CreateUninstall = 1,Directory = C:\WINDOWS\$NtServicePackUninstall$
206.797: AnalyzePhaseOne: used 178328 ticks
206.797: AnalyzeComponents: Hotpatch analysis disabled; skipping.
206.797: AnalyzeComponents: Hotpatching is disabled.
206.797: FindFirstFile c:\windows\$hf_mig$\*.*
207.438: AnalyzePhaseTwo used 625 ticks
207.438: AnalyzePhaseThree used 0 ticks
207.438: AnalyzePhaseFive used 0 ticks
207.500: AnalyzePhaseSix used 62 ticks
208.297: AnalyzeComponents used 179828 ticks
208.297: Downloading 0 files
208.297: bPatchMode = FALSE
208.313: Inventory complete: ReturnStatus=0, 195547 ticks
208.313: Num Ticks for invent : 195547
208.313: VerifyTargetFileSize: Unable to verify size as Source = NULL for file c:\windows\inf\HFX1.tmp
208.313: Copied file:  c:\windows\inf\branches.inf
208.313: CheckRegistryValue: Registry - Inf integer values mismatch
208.313: Conditional load of section SysmonLogStartType.Reg.Install.Condition succeeded
208.313: CheckRegistryValue: RegOpenKeyEx for SYSTEM\CurrentControlSet\Services\IAS KeyName failed :0x2
208.329: Conditional load of section Msdvbnp.Reg.Install.Condition succeeded
208.329: Conditional load of section Psisdecd.Reg.Install.Condition succeeded
208.329: Conditional load of section Mpeg2Data.Reg.Install.Condition succeeded
208.329: Conditional load of section IIS.DCOM.IISAdmin.Reg.Install.Condition succeeded
208.329: Conditional load of section IIS.DCOM.CertObj.Reg.Install.Condition succeeded
208.329: Conditional load of section IIS.DCOM.W3Control.Reg.Install.Condition succeeded
208.329: Conditional load of section IIS.DCOM.WamReg.Reg.Install.Condition succeeded
208.329: Conditional load of section WindowsFirewall.Reg.Install.Condition succeeded
208.329: Conditional load of section MSI.Reg.Install.Condition succeeded
208.329: Conditional load of section ScsiPort.Reg.Install.Condition succeeded
208.344: Allocation size of drive C: is 4096 bytes, free space = 91761438720 bytes
208.750: AnalyzeDiskUsage:  Skipping EstimateDiskUsageForUninstall.
208.750: Drive C: free 87510MB req: 112MB w/uninstall: NOT CALCULATED.
208.750: CabinetBuild complete
208.750: Num Ticks for Cabinet build : 437
208.750: DynamicStrings section not defined or empty.
208.750: Starting process:  C:\WINDOWS\system32\xcopy.exe /Q /Y /I C:\WINDOWS\inf\*.adm C:\WINDOWS\PolicyBackup\
209.469:  Return Code = 0
209.469: Starting process:  c:\a6257267bbba101e56702b8d7a5ae9\i386\\update\nv4prep.exe
209.532:  Return Code = 0
209.532: Starting process:  C:\WINDOWS\system32\reg.exe save HKLM\system C:\WINDOWS\system32\config\system.sp /y
210.172:  Return Code = 0
210.172: Starting process:  C:\WINDOWS\system32\reg.exe save HKLM\software C:\WINDOWS\system32\config\software.sp /y
210.969:  Return Code = 0
210.969: Starting process:  C:\WINDOWS\system32\xcopy.exe /Q /Y /I c:\a6257267bbba101e56702b8d7a5ae9\i386\\SP1QFE\adfsreg.exe C:\WINDOWS\ADFS\
211.094:  Return Code = 4
211.094: Starting process:  C:\WINDOWS\ADFS\adfsreg.exe backupassembly System.Web.Security.SingleSignon %windir \ADFS\System.Web.Security.SingleSignon.dll
211.094: RunInfProcesses:  SpawnProcessAndWaitForItToComplete on "C:\WINDOWS\ADFS\adfsreg.exe backupassembly System.Web.Security.SingleSignon %windir \ADFS\System.Web.Security.SingleSignon.dll" in [ADFS.SingleSignOn.RunProcess.ProcessesToRun] failed:  0x2
211.094:  Return Code = 2
211.157: DeRegisterUninstallProgramInInf: UpdSpOpenInfFile for "c:\windows\$ntservicepackuninstall$\spuninst\spuninst.inf failed: 0x7b
220.110: FileInUse:: Detection disabled.
241.688: CheckRegistryValue: Registry - Inf integer values mismatch
242.016: ArchiveFilesFromArchiveFilesSections:FindFirstFile for c:\windows\java\packages\* Failed: 0x3
242.016: ArchiveFilesFromArchiveFilesSections:FindFirstFile for c:\windows\java\packages\data\* Failed: 0x3
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
242.985: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
322.891: Num Ticks for Backup : 114141
323.438:
AppPatch not installed.
323.438: AppPatch not installed. Registry will be archived.
340.500: VerifyTargetFileSize: Unable to verify size as Source = NULL for file c:\windows\inf\iis.inf
340.735: Num Ticks for creating uninst inf : 17844
340.750: Registering Uninstall Program for -> Windows Server 2003 Service Pack, Service Pack 2 , 0x0
349.938: CheckRegistryValue: Registry - Inf integer values mismatch
350.157: Enumerating Devices of display, GUID {4d36e968-e325-11ce-bfc1-08002be10318}
350.329: Enumerating Devices of hdc, GUID {4D36E96A-E325-11CE-BFC1-08002BE10318}
350.469: Skip Oem Device PCI\VEN_8086&DEV_25A2&SUBSYS_34418086&REV_02\3&267A616A&0&F9
350.469: Enumerating Devices of media, GUID {4D36E96C-E325-11CE-BFC1-08002BE10318}
350.594: Enumerating Devices of Processor, GUID {50127DC3-0F36-415e-A6CC-4CB3BE910B65}
350.735: Starting Backup For ACPI\GenuineIntel_-_x86
353.844: Starting Backup For ACPI\GenuineIntel_-_x86
355.094: Enumerating Devices of System, GUID {4D36E97D-E325-11CE-BFC1-08002BE10318}
355.250: Skip Oem Device PCI\VEN_8086&DEV_244E&SUBSYS_00000000&REV_0A\3&267A616A&0&F0
355.250: Skip Oem Device PCI\VEN_8086&DEV_25A1&SUBSYS_00000000&REV_02\3&267A616A&0&F8
355.250: Skip Oem Device PCI\VEN_8086&DEV_25A4&SUBSYS_34418086&REV_02\3&267A616A&0&FB
355.250: Skip Oem Device PCI\VEN_8086&DEV_25AB&SUBSYS_34418086&REV_02\3&267A616A&0&EC
355.250: Skip Oem Device PCI\VEN_8086&DEV_25AC&SUBSYS_34418086&REV_02\3&267A616A&0&ED
355.250: Skip Oem Device PCI\VEN_8086&DEV_25AE&SUBSYS_00000000&REV_02\3&267A616A&0&E0
355.250: Skip Oem Device PCI\VEN_8086&DEV_3592&SUBSYS_00000000&REV_0C\3&267A616A&0&00
355.250: Skip Oem Device PCI\VEN_8086&DEV_3593&SUBSYS_34418086&REV_0C\3&267A616A&0&01
355.250: Skip Oem Device PCI\VEN_8086&DEV_3595&SUBSYS_00000000&REV_0C\3&267A616A&0&10
355.250: Skip Oem Device PCI\VEN_8086&DEV_3596&SUBSYS_00000000&REV_0C\3&267A616A&0&18
355.250: Skip Oem Device ROOT\SYSTEM\0002
355.250: Skip Oem Device SCSI\OTHER&VEN___RAID&PROD__DUMMYDEVICE&REV_05XX\4&33D3D7CC&0&0F0
355.250: Enumerating Devices of Unknown, GUID {4D36E97E-E325-11CE-BFC1-08002BE10318}
355.391: Skip Oem Device ROOT\UNKNOWN\0000
360.922: Copied file:  C:\WINDOWS\system32\spmsg.dll
361.016: PFE2: Per File Exceptions will not be used.
361.063: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.scw.cat with error 0x80092004
361.063: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.scw.cat with error 0x80092004
364.141: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.sasetup.cat with error 0x80092004
364.157: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.sasetup.cat with error 0x80092004
369.907: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.osccab.cat with error 0x80092004
369.907: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.osccab.cat with error 0x80092004
370.297: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.ntprint.cat with error 0x80092004
370.375: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.ntprint.cat with error 0x80092004
386.797: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.nt5.cat with error 0x80092004
386.938: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.nt5.cat with error 0x80092004
460.922: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.netfx.cat with error 0x80092004
460.938: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.netfx.cat with error 0x80092004
464.516: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.mstsweb.cat with error 0x80092004
464.516: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.mstsweb.cat with error 0x80092004
464.563: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.ins.cat with error 0x80092004
464.563: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.ins.cat with error 0x80092004
464.891: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.ims.cat with error 0x80092004
464.891: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.ims.cat with error 0x80092004
465.141: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.fp5.cat with error 0x80092004
465.141: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.fp5.cat with error 0x80092004
465.750: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.cmexcept.cat with error 0x80092004
465.750: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.cmexcept.cat with error 0x80092004
466.000: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.admt.cat with error 0x80092004
466.000: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.admt.cat with error 0x80092004
466.688: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.adminpak.cat with error 0x80092004
466.704: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.adminpak.cat with error 0x80092004
470.219: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.sp2.cat with error 0x80092004
470.391: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.sp2.cat with error 0x80092004
531.094: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.wmsocm.cat with error 0x80092004
531.141: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.wmsocm.cat with error 0x80092004
535.641: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.uddi.cat with error 0x80092004
535.641: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.uddi.cat with error 0x80092004
536.704: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.nt5inf.cat with error 0x80092004
536.766: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.nt5inf.cat with error 0x80092004
556.532: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.2.fxscat.cat with error 0x80092004
556.532: GetCatVersion:  Failed to retrieve version information from C:\WINDOWS\Tmp.2.fxscat.cat with error 0x80092004
558.172: Registering spuninst.exe for recovery successful.
558.297: Registration of sprecovr successful
558.594: Copied file:  C:\WINDOWS\system32\ntkrnlpa.exe
558.813: Copied file:  C:\WINDOWS\system32\ntoskrnl.exe
558.844: Copied file:  C:\WINDOWS\system32\HAL.DLL
558.922: Copied file:  C:\ntldr
558.969: Copied file:  C:\WINDOWS\system32\DRIVERS\wstcodec.sys
559.000: Copied file:  C:\WINDOWS\system32\DRIVERS\ws2ifsl.sys
559.047: Copied file:  C:\WINDOWS\system32\DRIVERS\wlbs.sys
559.094: Copied file:  C:\WINDOWS\system32\DRIVERS\watchdog.sys
559.141: Copied file:  C:\WINDOWS\system32\DRIVERS\wanarp.sys
559.204: Copied file:  C:\WINDOWS\system32\DRIVERS\volsnap.sys
559.235: Copied file:  C:\WINDOWS\system32\DRIVERS\videoprt.sys
559.282: Copied file:  C:\WINDOWS\system32\DRIVERS\vga.sys
559.329: Copied file:  C:\WINDOWS\system32\DRIVERS\usbuhci.sys
559.360: Copied file:  C:\WINDOWS\system32\DRIVERS\usbstor.sys
559.407: Copied file:  C:\WINDOWS\system32\DRIVERS\usbport.sys
559.438: Copied file:  C:\WINDOWS\system32\DRIVERS\usbintel.sys
559.469: Copied file:  C:\WINDOWS\system32\DRIVERS\usbhub.sys
559.500: Copied file:  C:\WINDOWS\system32\DRIVERS\usbehci.sys
559.547: Copied file:  C:\WINDOWS\system32\DRIVERS\usbcamd2.sys
559.579: Copied file:  C:\WINDOWS\system32\DRIVERS\usbcamd.sys
559.625: Copied file:  C:\WINDOWS\system32\DRIVERS\usb8023.sys
559.672: Copied file:  C:\WINDOWS\system32\DRIVERS\update.sys
559.704: Copied file:  C:\WINDOWS\system32\DRIVERS\udfs.sys
559.735: Copied file:  C:\WINDOWS\system32\DRIVERS\termdd.sys
559.750: Copied file:  C:\WINDOWS\system32\DRIVERS\tdtcp.sys
559.782: Copied file:  C:\WINDOWS\system32\DRIVERS\tdpipe.sys
559.829: Copied file:  C:\WINDOWS\system32\DRIVERS\tdi.sys
559.860: Copied file:  C:\WINDOWS\system32\DRIVERS\tcpip6.sys
559.907: Copied file:  C:\WINDOWS\system32\DRIVERS\tcpip.sys
559.954: Copied file:  C:\WINDOWS\system32\DRIVERS\tape.sys
559.985: Copied file:  C:\WINDOWS\system32\DRIVERS\swenum.sys
560.000: Copied file:  C:\WINDOWS\system32\DRIVERS\streamip.sys
560.032: Copied file:  C:\WINDOWS\system32\DRIVERS\stream.sys
560.063: Copied file:  C:\WINDOWS\system32\DRIVERS\storport.sys
560.110: Copied file:  C:\WINDOWS\system32\DRIVERS\srv.sys
560.141: Copied file:  C:\WINDOWS\system32\DRIVERS\sonydcam.sys
560.204: Copied file:  C:\WINDOWS\system32\DRIVERS\smclib.sys
560.250: Copied file:  C:\WINDOWS\system32\DRIVERS\smb.sys
560.282: Copied file:  C:\WINDOWS\system32\DRIVERS\slip.sys
560.329: Copied file:  C:\WINDOWS\system32\DRIVERS\serial.sys
560.360: Copied file:  C:\WINDOWS\system32\DRIVERS\serenum.sys
560.407: Copied file:  C:\WINDOWS\system32\DRIVERS\scsiport.sys
560.438: Copied file:  C:\WINDOWS\system32\DRIVERS\sacdrv.sys
560.454: Copied file:  C:\WINDOWS\system32\DRIVERS\rndismp.sys
560.500: Copied file:  C:\WINDOWS\system32\DRIVERS\rmcast.sys
560.532: Copied file:  C:\WINDOWS\system32\DRIVERS\redbook.sys
560.594: Copied file:  C:\WINDOWS\system32\DRIVERS\rdpdr.sys
560.657: Copied file:  C:\WINDOWS\system32\DRIVERS\rdbss.sys
560.688: Copied file:  C:\WINDOWS\system32\DRIVERS\raspti.sys
560.735: Copied file:  C:\WINDOWS\system32\DRIVERS\raspptp.sys
560.766: Copied file:  C:\WINDOWS\system32\DRIVERS\raspppoe.sys
560.797: Copied file:  C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
560.829: Copied file:  C:\WINDOWS\system32\DRIVERS\ptilink.sys
560.875: Copied file:  C:\WINDOWS\system32\DRIVERS\psched.sys
560.907: Copied file:  C:\WINDOWS\system32\DRIVERS\processr.sys
560.938: Copied file:  C:\WINDOWS\system32\DRIVERS\pcmcia.sys
560.969: Copied file:  C:\WINDOWS\system32\DRIVERS\pciidex.sys
561.000: Copied file:  C:\WINDOWS\system32\DRIVERS\pci.sys
561.032: Copied file:  C:\WINDOWS\system32\DRIVERS\partmgr.sys
561.063: Copied file:  C:\WINDOWS\system32\DRIVERS\parport.sys
561.094: Copied file:  C:\WINDOWS\system32\DRIVERS\p3.sys
561.141: Copied file:  C:\WINDOWS\system32\DRIVERS\nwrdr.sys
561.172: Copied file:  C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
561.282: Copied file:  C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
561.657: Copied file:  C:\WINDOWS\system32\DRIVERS\ntfs.sys
561.719: Copied file:  C:\WINDOWS\system32\DRIVERS\npfs.sys
561.750: Copied file:  C:\WINDOWS\system32\DRIVERS\nmnt.sys
561.829: Copied file:  C:\WINDOWS\system32\DRIVERS\netbt.sys
561.860: Copied file:  C:\WINDOWS\system32\DRIVERS\netbios.sys
561.891: Copied file:  C:\WINDOWS\system32\DRIVERS\ndproxy.sys
561.938: Copied file:  C:\WINDOWS\system32\DRIVERS\ndiswan.sys
561.954: Copied file:  C:\WINDOWS\system32\DRIVERS\ndisuio.sys
561.985: Copied file:  C:\WINDOWS\system32\DRIVERS\ndistapi.sys
562.016: Copied file:  C:\WINDOWS\system32\DRIVERS\ndisip.sys
562.047: Copied file:  C:\WINDOWS\system32\DRIVERS\ndis.sys
562.079: Copied file:  C:\WINDOWS\system32\DRIVERS\nabtsfec.sys
562.110: Copied file:  C:\WINDOWS\system32\DRIVERS\mup.sys
562.141: Copied file:  C:\WINDOWS\system32\DRIVERS\mstee.sys
562.594: Copied file:  C:\WINDOWS\system32\DRIVERS\mspclock.sys
562.657: Copied file:  C:\WINDOWS\system32\DRIVERS\mskssrv.sys
562.719: Copied file:  C:\WINDOWS\system32\DRIVERS\msgpc.sys
562.766: Copied file:  C:\WINDOWS\system32\DRIVERS\msfs.sys
562.860: Copied file:  C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
562.922: Copied file:  C:\WINDOWS\system32\DRIVERS\mrxdav.sys
562.969: Copied file:  C:\WINDOWS\system32\DRIVERS\mqac.sys
563.016: Copied file:  C:\WINDOWS\system32\DRIVERS\mpe.sys
563.063: Copied file:  C:\WINDOWS\system32\DRIVERS\mountmgr.sys
563.094: Copied file:  C:\WINDOWS\system32\DRIVERS\modem.sys
563.141: Copied file:  C:\WINDOWS\system32\DRIVERS\mf.sys
563.282: Copied file:  C:\WINDOWS\system32\DRIVERS\mcd.sys
563.422: Copied file:  C:\WINDOWS\system32\DRIVERS\ksecdd.sys
563.469: Copied file:  C:\WINDOWS\system32\DRIVERS\ks.sys
563.500: Copied file:  C:\WINDOWS\system32\DRIVERS\kbdclass.sys
563.532: Copied file:  C:\WINDOWS\system32\DRIVERS\isapnp.sys
563.563: Copied file:  C:\WINDOWS\system32\DRIVERS\ipsec.sys
563.594: Copied file:  C:\WINDOWS\system32\DRIVERS\ipnat.sys
563.625: Copied file:  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
563.657: Copied file:  C:\WINDOWS\system32\DRIVERS\imapi.sys
563.704: Copied file:  C:\WINDOWS\system32\DRIVERS\i8042prt.sys
563.766: Copied file:  C:\WINDOWS\system32\DRIVERS\http.sys
563.797: Copied file:  C:\WINDOWS\system32\DRIVERS\hidparse.sys
563.844: Copied file:  C:\WINDOWS\system32\DRIVERS\ftdisk.sys
563.875: Copied file:  C:\WINDOWS\system32\DRIVERS\fips.sys
563.907: Copied file:  C:\WINDOWS\system32\DRIVERS\fdc.sys
563.969: Copied file:  C:\WINDOWS\system32\DRIVERS\fastfat.sys
564.016: Copied file:  C:\WINDOWS\system32\DRIVERS\dxg.sys
564.063: Copied file:  C:\WINDOWS\system32\DRIVERS\dmio.sys
564.110: Copied file:  C:\WINDOWS\system32\DRIVERS\dmboot.sys
564.141: Copied file:  C:\WINDOWS\system32\DRIVERS\diskdump.sys
564.204: Copied file:  C:\WINDOWS\system32\DRIVERS\disk.sys
564.313: Copied file:  C:\WINDOWS\system32\DRIVERS\dfs.sys
564.407: Copied file:  C:\WINDOWS\system32\DRIVERS\crusoe.sys
564.485: Copied file:  C:\WINDOWS\system32\DRIVERS\crcdisk.sys
564.547: Copied file:  C:\WINDOWS\system32\DRIVERS\compbatt.sys
564.594: Copied file:  C:\WINDOWS\system32\DRIVERS\classpnp.sys
564.641: Copied file:  C:\WINDOWS\system32\DRIVERS\cdrom.sys
564.672: Copied file:  C:\WINDOWS\system32\DRIVERS\cdfs.sys
564.719: Copied file:  C:\WINDOWS\system32\DRIVERS\ccdecode.sys
564.782: Copied file:  C:\WINDOWS\system32\DRIVERS\bridge.sys
564.813: Copied file:  C:\WINDOWS\system32\DRIVERS\bdasup.sys
564.844: Copied file:  C:\WINDOWS\system32\DRIVERS\battc.sys
564.907: Copied file:  C:\WINDOWS\system32\DRIVERS\atmuni.sys
564.938: Copied file:  C:\WINDOWS\system32\DRIVERS\atmlane.sys
564.969: Copied file:  C:\WINDOWS\system32\DRIVERS\atmarps.sys
565.032: Copied file:  C:\WINDOWS\system32\DRIVERS\atmarpc.sys
565.094: Copied file:  C:\WINDOWS\system32\DRIVERS\atapi.sys
565.125: Copied file:  C:\WINDOWS\system32\DRIVERS\amdk7.sys
565.204: Copied file:  C:\WINDOWS\system32\DRIVERS\amdk6.sys
565.375: Copied file:  C:\WINDOWS\system32\DRIVERS\afd.sys
565.485: Copied file:  C:\WINDOWS\system32\DRIVERS\acpi.sys
565.594: Copied file:  C:\WINDOWS\system32\wsecedit.dll
565.641: Copied file:  C:\WINDOWS\system32\wkssvc.dll
565.704: Copied file:  C:\WINDOWS\system32\winspool.drv
565.750: Copied file:  C:\WINDOWS\system32\win32spl.dll
565.782: Copied file:  C:\WINDOWS\system32\userinit.exe
565.875: Copied file:  C:\WINDOWS\system32\userenv.dll
565.954: Copied file:  C:\WINDOWS\system32\untfs.dll
566.016: Copied file:  C:\WINDOWS\system32\ulib.dll
566.063: Copied file:  C:\WINDOWS\system32\ufat.dll
566.094: Copied file:  C:\WINDOWS\system32\tcpmonui.dll
566.188: Copied file:  C:\WINDOWS\system32\syssetup.dll
566.297: Copied file:  C:\WINDOWS\system32\sysdm.cpl
566.344: Copied file:  C:\WINDOWS\system32\srvsvc.dll
566.375: Copied file:  C:\WINDOWS\system32\smss.exe
566.454: Copied file:  C:\WINDOWS\system32\setupapi.dll
566.485: Copied file:  C:\WINDOWS\system32\sessmgr.exe
566.516: Copied file:  C:\WINDOWS\system32\services.exe
566.547: Copied file:  C:\WINDOWS\system32\scardsvr.exe
566.610: Copied file:  C:\WINDOWS\system32\samsrv.dll
566.657: Copied file:  C:\WINDOWS\system32\samlib.dll
566.688: Copied file:  C:\WINDOWS\system32\rshx32.dll
566.719: Copied file:  C:\WINDOWS\system32\rastapi.dll
566.750: Copied file:  C:\WINDOWS\system32\rasman.dll
566.844: Copied file:  C:\WINDOWS\system32\rasdlg.dll
566.891: Copied file:  C:\WINDOWS\system32\rasauto.dll
566.938: Copied file:  C:\WINDOWS\system32\rasapi32.dll
567.016: Copied file:  C:\WINDOWS\system32\printui.dll
567.063: Copied file:  C:\WINDOWS\system32\olecnv32.dll
567.110: Copied file:  C:\WINDOWS\system32\oleaut32.dll
567.157: Copied file:  C:\WINDOWS\system32\nwwks.dll
567.266: Copied file:  C:\WINDOWS\system32\nwprovau.dll
567.547: Copied file:  C:\WINDOWS\system32\ntvdm.exe
567.610: Copied file:  C:\WINDOWS\system32\ntprint.dll
567.672: Copied file:  C:\WINDOWS\system32\ntdll.dll
567.875: Copied file:  C:\WINDOWS\system32\ntbackup.exe
567.922: Copied file:  C:\WINDOWS\system32\nslookup.exe
567.969: Copied file:  C:\WINDOWS\system32\msgsvc.dll
568.000: Copied file:  C:\WINDOWS\system32\mgmtapi.dll
568.094: Copied file:  C:\WINDOWS\system32\lsasrv.dll
568.219: Copied file:  C:\WINDOWS\system32\localspl.dll
568.266: Copied file:  C:\WINDOWS\system32\lmhsvc.dll
568.391: Copied file:  C:\WINDOWS\system32\imagehlp.dll
568.438: Copied file:  C:\WINDOWS\system32\ifsutil.dll
568.469: Copied file:  C:\WINDOWS\system32\ftp.exe
568.500: Copied file:  C:\WINDOWS\system32\fmifs.dll
568.547: Copied file:  C:\WINDOWS\system32\find.exe
568.579: Copied file:  C:\WINDOWS\system32\dhcpsapi.dll
568.610: Copied file:  C:\WINDOWS\system32\dhcpcsvc.dll
568.657: Copied file:  C:\WINDOWS\system32\desk.cpl
568.688: Copied file:  C:\WINDOWS\system32\comdlg32.dll
568.750: Copied file:  C:\WINDOWS\system32\comctl32.dll
568.782: Copied file:  C:\WINDOWS\system32\cnvfat.dll
568.829: Copied file:  C:\WINDOWS\system32\cmd.exe
568.875: Copied file:  C:\WINDOWS\system32\cacls.exe
568.922: Copied file:  C:\WINDOWS\system32\autoconv.exe
568.985: Copied file:  C:\WINDOWS\system32\autochk.exe
569.485: Copied file:  C:\WINDOWS\system32\advapi32.dll
569.516: Copied file:  C:\WINDOWS\AppPatch\drvmain.sdb
569.532: Copied file:  C:\WINDOWS\system32\clients\tsclient\win32\msrdpcli.msi
569.641: Copied file:  C:\WINDOWS\system32\wbem\adstatus\trustmon.dll
569.688: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\vbc.exe
569.782: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.xml.dll
569.860: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.windows.forms.dll
569.969: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.web.services.dll
570.079: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.web.dll
570.172: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.security.dll
570.266: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.runtime.serialization.formatters.soap.dll
570.313: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.messaging.dll
570.375: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.ldo
570.407: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.enterpriseservices.thunk.dll
570.422: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.enterpriseservices.dll
570.469: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.drawing.dll
570.532: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.data.oracleclient.dll
570.579: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.data.dll
570.657: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\system.dll
570.735: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorwks.dll
571.204: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorsvr.dll
571.375: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorpe.dll
571.407: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorlib.ldo
571.438: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorlib.dll
571.579: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\mscorjit.dll
571.641: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\ilasm.exe
571.672: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\cscomp.dll
571.719: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\corperfmonext.dll
571.766: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_wp.exe
571.813: Copied file:  C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_isapi.dll
571.844: Copied file:  C:\WINDOWS\resources\themes\luna\shell\metallic\shellstyle.dll
571.907: Copied file:  C:\WINDOWS\resources\themes\luna\luna.msstyles
572.125: Copied file:  C:\WINDOWS\resources\themes\luna\shell\homestead\shellstyle.dll
572.204: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxswzrd.dll
572.235: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxsui.dll
572.266: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxstiff.dll
572.313: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxsres.dll
572.360: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxsdrv.dll
572.391: Copied file:  C:\WINDOWS\system32\clients\faxclient\drivers\fxsapi.dll
572.454: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\isapi\shtml.dll
572.500: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\isapi\fpcount.exe
572.532: Copied file:  C:\Program Files\cmak\support\cmutoa.dll
572.563: Copied file:  C:\Program Files\cmak\support\cmexcept.cat
572.579: Copied File:  C:\Program Files\cmak\support\cmexcept.cat
572.579: Copied file:  C:\Program Files\cmak\support\cmbins.exe
572.625: Copied file:  C:\Program Files\cmak\cmak.exe
572.672: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\bin\owsrmadm.exe
572.704: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\bin\owsadm.exe
572.735: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\bin\fpexedll.dll
572.766: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\bin\fp5avss.dll
572.782: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\bin\cfgwiz.exe
572.829: Copied file:  C:\WINDOWS\resources\themes\luna\shell\normalcolor\shellstyle.dll
572.875: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\isapi\_vti_aut\author.dll
572.907: Copied file:  C:\inetpub\adminscripts\adsutil.vbs
572.954: Copied file:  C:\Program Files\Common Files\microsoft shared\web server extensions\50\isapi\_vti_adm\admin.dll
572.969: Copied file:  C:\WINDOWS\system32\zipfldr.dll
573.047: Copied file:  C:\WINDOWS\system32\xolehlp.dll
574.219: Copied file (delayed):  C:\WINDOWS\system32\SET11B.tmp
574.219: Copied file:  C:\WINDOWS\system32\xcopy.exe
574.250: Copied file:  C:\WINDOWS\system32\xactsrv.dll
574.297: Copied file:  C:\WINDOWS\system32\wzcsvc.dll
574.344: Copied file:  C:\WINDOWS\system32\wzcsapi.dll
574.391: Copied file:  C:\WINDOWS\system32\wzcdlg.dll
574.438: Copied file:  C:\WINDOWS\system32\wupdmgr.exe
574.500: Copied file:  C:\WINDOWS\system32\wtsapi32.dll
574.532: Copied file (delayed):  C:\WINDOWS\system32\SET122.tmp
574.547: Copied file:  C:\WINDOWS\system32\wstdecod.dll
574.594: Copied file:  C:\WINDOWS\system32\wsnmp32.dll
574.641: Copied file:  C:\WINDOWS\system32\wshtcpip.dll
574.672: Copied file (delayed):  C:\WINDOWS\system32\SET128.tmp
574.688: Copied file:  C:\WINDOWS\system32\wshqos.dll
574.704: Copied file:  C:\WINDOWS\system32\wshom.ocx
574.797: Copied file:  C:\WINDOWS\system32\wship6.dll
574.813: Copied file:  C:\WINDOWS\system32\wshext.dll
574.844: Copied file:  C:\WINDOWS\system32\wshcon.dll
574.891: Copied file:  C:\WINDOWS\system32\wscript.exe
574.938: Copied file:  C:\WINDOWS\system32\ws2help.dll
574.969: Copied file (delayed):  C:\WINDOWS\system32\SET139.tmp
574.985: Copied file:  C:\WINDOWS\system32\ws2_32.dll
575.016: Copied file (delayed):  C:\WINDOWS\system32\SET13A.tmp
575.016: Copied file:  C:\WINDOWS\system32\wow32.dll
575.079: Copied file:  C:\WINDOWS\system32\wmvdmoe2.dll
575.157: Copied file:  C:\WINDOWS\system32\wmvdmod.dll
575.547: Copied file:  C:\WINDOWS\system32\wmvcore.dll
575.782: Copied file:  C:\WINDOWS\system32\wmspdmoe.dll
575.860: Copied file:  C:\WINDOWS\system32\wmspdmod.dll
575.922: Copied file:  C:\WINDOWS\system32\wmsdmoe2.dll
576.000: Copied file:  C:\WINDOWS\system32\wmsdmod.dll
576.063: Copied file:  C:\WINDOWS\system32\wmpshell.dll
576.250: Copied file:  C:\WINDOWS\system32\wmploc.dll
576.641: Copied file:  C:\WINDOWS\system32\wmpdxm.dll
576.704: Copied file:  C:\WINDOWS\system32\wmpcd.dll
576.750: Copied file:  C:\WINDOWS\system32\wmpasf.dll
576.782: Copied file:  C:\WINDOWS\system32\wmp.dll
577.329: Copied file:  C:\WINDOWS\system32\wmnetmgr.dll
577.516: Copied file:  C:\WINDOWS\system32\wmiprop.dll
577.579: Copied file:  C:\WINDOWS\system32\wmidx.dll
577.625: Copied file:  C:\WINDOWS\system32\wmerror.dll
577.657: Copied file:  C:\WINDOWS\system32\wmdmps.dll
577.719: Copied file:  C:\WINDOWS\system32\wmdmlog.dll
577.750: Copied file:  C:\WINDOWS\system32\wmasf.dll
577.813: Copied file:  C:\WINDOWS\system32\wmadmoe.dll
577.907: Copied file:  C:\WINDOWS\system32\wmadmod.dll
577.954: Copied file:  C:\WINDOWS\system32\wlstore.dll
578.000: Copied file:  C:\WINDOWS\system32\wlsnp.dll
578.032: Copied file:  C:\WINDOWS\system32\wlnotify.dll
578.079: Copied file (delayed):  C:\WINDOWS\system32\SET164.tmp
578.079: Copied file:  C:\WINDOWS\system32\wldap32.dll
578.125: Copied file (delayed):  C:\WINDOWS\system32\SET165.tmp
578.125: Copied file:  C:\WINDOWS\system32\wlbsctrl.dll
578.172: Copied file:  C:\WINDOWS\system32\wlanmon.dll
578.219: Copied file:  C:\WINDOWS\system32\winver.exe
578.250: Copied file:  C:\WINDOWS\system32\wintrust.dll
578.297: Copied file (delayed):  C:\WINDOWS\system32\SET169.tmp
578.297: Copied file:  C:\WINDOWS\system32\winsta.dll
578.329: Copied file (delayed):  C:\WINDOWS\system32\SET16A.tmp
578.329: Copied file:  C:\WINDOWS\system32\winssnap.dll
578.391: Copied file:  C:\WINDOWS\system32\winsrv.dll
578.438: Copied file (delayed):  C:\WINDOWS\system32\SET16D.tmp
578.438: Copied file:  C:\WINDOWS\system32\winsmon.dll
578.485: Copied file:  C:\WINDOWS\system32\winsevnt.dll
578.532: Copied file:  C:\WINDOWS\system32\winscard.dll
578.563: Copied file (delayed):  C:\WINDOWS\system32\SET170.tmp
578.579: Copied file:  C:\WINDOWS\system32\wins.exe
578.610: Copied file:  C:\WINDOWS\system32\winrnr.dll
578.657: Copied file (delayed):  C:\WINDOWS\system32\SET172.tmp
578.672: Copied file:  C:\WINDOWS\system32\winmsd.exe
578.719: Copied file:  C:\WINDOWS\system32\winmm.dll
578.750: Copied file (delayed):  C:\WINDOWS\system32\SET174.tmp
578.766: Copied file:  C:\WINDOWS\system32\winlogon.exe
578.829: Copied file (delayed):  C:\WINDOWS\system32\SET175.tmp
578.829: Copied file:  C:\WINDOWS\system32\winipsec.dll
578.907: Copied file:  C:\WINDOWS\system32\winfax.dll
578.938: Copied file:  C:\WINDOWS\system32\win32k.sys
579.204: Copied file (delayed):  C:\WINDOWS\system32\SET17C.tmp
579.219: Copied file:  C:\WINDOWS\system32\wiavideo.dll
579.266: Copied file:  C:\WINDOWS\system32\wiashext.dll
579.329: Copied file:  C:\WINDOWS\system32\wiasf.ax
579.375: Copied file:  C:\WINDOWS\system32\wiaservc.dll
579.422: Copied file:  C:\WINDOWS\system32\wiascr.dll
579.485: Copied file:  C:\WINDOWS\system32\wiarpc.dll
579.516: Copied file:  C:\WINDOWS\system32\wiadss.dll
579.563: Copied file:  C:\WINDOWS\system32\wiadefui.dll
579.641: Copied file:  C:\WINDOWS\system32\wiaacmgr.exe
579.704: Copied file:  C:\WINDOWS\system32\webvw.dll
579.750: Copied file:  C:\WINDOWS\system32\webclnt.dll
579.797: Copied file:  C:\WINDOWS\system32\wdmaud.drv
579.829: Copied file:  C:\WINDOWS\system32\wdigest.dll
579.860: Copied file (delayed):  C:\WINDOWS\system32\SET18D.tmp
579.875: Copied file:  C:\WINDOWS\system32\wavemsp.dll
579.907: Copied file:  C:\WINDOWS\system32\w32tm.exe
579.938: Copied file:  C:\WINDOWS\system32\w32time.dll
579.969: Copied file (delayed):  C:\WINDOWS\system32\SET192.tmp
579.985: Copied file:  C:\WINDOWS\system32\vssvc.exe
580.047: Copied file:  C:\WINDOWS\system32\vssui.dll
580.110: Copied file:  C:\WINDOWS\system32\vssapi.dll
580.157: Copied file (delayed):  C:\WINDOWS\system32\SET197.tmp
580.172: Copied file:  C:\WINDOWS\system32\vssadmin.exe
580.219: Copied file:  C:\WINDOWS\system32\vss_ps.dll
580.250: Copied file:  C:\WINDOWS\system32\version.dll
580.282: Copied file (delayed):  C:\WINDOWS\system32\SET1A1.tmp
580.297: Copied file:  C:\WINDOWS\system32\verifier.dll
580.313: Copied file:  C:\WINDOWS\system32\vdsutil.dll
580.344: Copied file:  C:\WINDOWS\system32\vdsldr.exe
580.375: Copied file:  C:\WINDOWS\system32\vdsdyndr.dll
580.407: Copied file:  C:\WINDOWS\system32\vdsbas.dll
580.454: Copied file:  C:\WINDOWS\system32\vds_ps.dll
580.469: Copied file:  C:\WINDOWS\system32\vds.exe
580.516: Copied file:  C:\WINDOWS\system32\vbisurf.ax
580.594: Copied file:  C:\WINDOWS\system32\uxtheme.dll
580.641: Copied file (delayed):  C:\WINDOWS\system32\SET1AA.tmp
580.657: Copied file:  C:\WINDOWS\system32\utilman.exe
580.688: Copied file:  C:\WINDOWS\system32\utildll.dll
580.704: Copied file:  C:\WINDOWS\system32\usp10.dll
580.766: Copied file:  C:\WINDOWS\system32\user32.dll
580.813: Copied file (delayed):  C:\WINDOWS\system32\SET1AE.tmp
580.829: Copied file:  C:\WINDOWS\system32\usbui.dll
580.860: Copied file:  C:\WINDOWS\system32\usbmon.dll
580.875: Copied file:  C:\WINDOWS\system32\upg351db.exe
580.938: Copied file:  C:\WINDOWS\system32\uniplat.dll
580.969: Copied file (delayed):  C:\WINDOWS\system32\SET1B3.tmp
580.969: Copied file:  C:\WINDOWS\system32\unimdmat.dll
581.000: Copied file (delayed):  C:\WINDOWS\system32\SET1B4.tmp
581.000: Copied file:  C:\WINDOWS\system32\unimdm.tsp
581.079: Copied file (delayed):  C:\WINDOWS\system32\SET1B6.tmp
581.094: Copied file:  C:\WINDOWS\system32\umpnpmgr.dll
581.125: Copied file (delayed):  C:\WINDOWS\system32\SET1B8.tmp
581.141: Copied file:  C:\WINDOWS\system32\umandlg.dll
581.172: Copied file:  C:\WINDOWS\system32\txflog.dll
581.235: Copied file:  C:\WINDOWS\system32\twext.dll
581.282: Copied file:  C:\WINDOWS\system32\tsuserex.dll
581.313: Copied file:  C:\WINDOWS\system32\tssdjet.dll
581.329: Copied file:  C:\WINDOWS\system32\tssdis.exe
581.375: Copied file:  C:\WINDOWS\system32\tsprof.exe
581.407: Copied file:  C:\WINDOWS\system32\tsecimp.exe
581.438: Copied file:  C:\WINDOWS\system32\tscfgwmi.dll
581.485: Copied file:  C:\WINDOWS\system32\tscc.dll
581.532: Copied file:  C:\WINDOWS\system32\tsappcmp.dll
581.594: Copied file:  C:\WINDOWS\system32\tsadmin.exe
581.672: Copied file:  C:\WINDOWS\system32\trkwks.dll
581.704: Copied file:  C:\WINDOWS\system32\traffic.dll
581.735: Copied file:  C:\WINDOWS\system32\tracerpt.exe
581.782: Copied file:  C:\WINDOWS\system32\tlntsvr.exe
581.813: Copied file:  C:\WINDOWS\system32\tlntsess.exe
581.875: Copied file:  C:\WINDOWS\system32\tlntadmn.exe
581.907: Copied file:  C:\WINDOWS\system32\timedate.cpl
581.969: Copied file:  C:\WINDOWS\system32\themeui.dll
582.032: Copied file (delayed):  C:\WINDOWS\system32\SET1D7.tmp
582.047: Copied file:  C:\WINDOWS\system32\termsrv.dll
582.110: Copied file:  C:\WINDOWS\system32\termmgr.dll
582.172: Copied file:  C:\WINDOWS\system32\telnet.exe
582.282: Copied file:  C:\WINDOWS\system32\tcpmon.dll
582.360: Copied file:  C:\WINDOWS\system32\tcpmib.dll
582.407: Copied file:  C:\WINDOWS\system32\tcmsetup.exe
582.438: Copied file:  C:\WINDOWS\system32\taskmgr.exe
582.500: Copied file:  C:\WINDOWS\system32\tasklist.exe
582.547: Copied file:  C:\WINDOWS\system32\taskkill.exe
582.610: Copied file:  C:\WINDOWS\system32\tapisrv.dll
582.657: Copied file:  C:\WINDOWS\system32\tapisnap.dll
582.704: Copied file:  C:\WINDOWS\system32\tapicfg.exe
582.735: Copied file:  C:\WINDOWS\system32\tapi32.dll
582.782: Copied file:  C:\WINDOWS\system32\tapi3.dll
582.844: Copied file:  C:\WINDOWS\system32\t2embed.dll
582.875: Copied file:  C:\WINDOWS\system32\systray.exe
582.907: Copied file:  C:\WINDOWS\system32\sysocmgr.exe
582.938: Copied file:  C:\WINDOWS\system32\sysmon.ocx
583.000: Copied file:  C:\WINDOWS\system32\syncui.dll
583.063: Copied file:  C:\WINDOWS\system32\synceng.dll
583.094: Copied file:  C:\WINDOWS\system32\sxs.dll
583.219: Copied file (delayed):  C:\WINDOWS\system32\SET1F3.tmp
583.235: Copied file:  C:\WINDOWS\system32\swprv.dll
583.266: Copied file:  C:\WINDOWS\system32\svcpack.dll
583.344: Copied file:  C:\WINDOWS\system32\svchost.exe
583.375: Copied file (delayed):  C:\WINDOWS\system32\SET1F6.tmp
583.375: Copied file:  C:\WINDOWS\system32\strmfilt.dll
583.407: Copied file:  C:\WINDOWS\system32\strmdll.dll
583.454: Copied file:  C:\WINDOWS\system32\streamci.dll
583.485: Copied file:  C:\WINDOWS\system32\storprop.dll
583.516: Copied file:  C:\WINDOWS\system32\stobject.dll
583.563: Copied file:  C:\WINDOWS\system32\sti_ci.dll
583.625: Copied file:  C:\WINDOWS\system32\sti.dll
583.657: Copied file:  C:\WINDOWS\system32\stdole2.tlb
583.704: Copied file:  C:\WINDOWS\system32\stclient.dll
583.766: Copied file:  C:\WINDOWS\system32\staxmem.dll
583.797: Copied file:  C:\WINDOWS\system32\sqlunirl.dll
583.860: Copied file:  C:\WINDOWS\system32\sqlsrv32.rll
583.875: Copied file:  C:\WINDOWS\system32\sqlsrv32.dll
583.938: Copied file:  C:\WINDOWS\system32\spoolsv.exe
584.000: Copied file:  C:\WINDOWS\system32\spoolss.dll
584.063: Copied file:  C:\WINDOWS\system32\sort.exe
584.079: Copied file:  C:\WINDOWS\system32\snmpsnap.dll
584.141: Copied file:  C:\WINDOWS\system32\snmpapi.dll
584.157: Copied file:  C:\WINDOWS\system32\snmp.exe
584.329: Copied file:  C:\WINDOWS\system32\sndvol32.exe
584.454: Copied file:  C:\WINDOWS\system32\sndrec32.exe
584.516: Copied file:  C:\WINDOWS\system32\snapshot.dll
584.547: Copied file:  C:\WINDOWS\system32\smtpapi.dll
584.579: Copied file:  C:\WINDOWS\system32\smlogsvc.exe
584.625: Copied file:  C:\WINDOWS\system32\smlogcfg.dll
584.688: Copied file:  C:\WINDOWS\system32\slbrccsp.dll
584.735: Copied file:  C:\WINDOWS\system32\slbiop.dll
584.766: Copied file:  C:\WINDOWS\system32\slbcsp.dll
584.813: Copied file:  C:\WINDOWS\system32\slayerxp.dll
584.860: Copied file:  C:\WINDOWS\system32\skeys.exe
584.875: Copied file:  C:\WINDOWS\system32\sisbkup.dll
584.938: Copied file:  C:\WINDOWS\system32\simpdata.tlb
584.969: Copied file:  C:\WINDOWS\system32\shutdown.exe
585.000: Copied file:  C:\WINDOWS\system32\shsvcs.dll
585.063: Copied file (delayed):  C:\WINDOWS\system32\SET225.tmp
585.063: Copied file:  C:\WINDOWS\system32\shscrap.dll
585.125: Copied file:  C:\WINDOWS\system32\shrpubw.exe
585.157: Copied file:  C:\WINDOWS\system32\shmgrate.exe
585.297: Copied file:  C:\WINDOWS\system32\shmedia.dll
585.391: Copied file:  C:\WINDOWS\system32\shlwapi.dll
585.469: Copied file (delayed):  C:\WINDOWS\system32\SET22E.tmp
585.469: Copied file:  C:\WINDOWS\system32\shimgvw.dll
585.532: Copied file:  C:\WINDOWS\system32\shimeng.dll
585.579: Copied file (delayed):  C:\WINDOWS\system32\SET231.tmp
585.579: Copied file:  C:\WINDOWS\system32\shgina.dll
585.610: Copied file:  C:\WINDOWS\system32\shfolder.dll
585.641: Copied file:  C:\WINDOWS\system32\shell32.dll
586.500: Copied file (delayed):  C:\WINDOWS\system32\SET235.tmp
586.500: Copied file:  C:\WINDOWS\system32\shdocvw.dll
586.625: Copied file (delayed):  C:\WINDOWS\system32\SET236.tmp
586.641: Copied file:  C:\WINDOWS\system32\sfcfiles.dll
586.750: Copied file:  C:\WINDOWS\system32\sfc_os.dll
586.829: Copied file (delayed):  C:\WINDOWS\system32\SET238.tmp
586.844: Copied file:  C:\WINDOWS\system32\setx.exe
586.891: Copied file:  C:\WINDOWS\system32\setup.exe
586.907: Copied file:  C:\WINDOWS\system32\sethc.exe
586.938: Copied file:  C:\WINDOWS\system32\serwvdrv.dll
586.985: Copied file:  C:\WINDOWS\system32\servdeps.dll
587.016: Copied file:  C:\WINDOWS\system32\serialui.dll
587.047: Copied file:  C:\WINDOWS\system32\sensapi.dll
587.079: Copied file (delayed):  C:\WINDOWS\system32\SET240.tmp
587.079: Copied file:  C:\WINDOWS\system32\sens.dll
587.110: Copied file:  C:\WINDOWS\system32\sendmail.dll
587.157: Copied file:  C:\WINDOWS\system32\sendcmsg.dll
587.188: Copied file:  C:\WINDOWS\system32\secur32.dll
587.235: Copied file (delayed):  C:\WINDOWS\system32\SET244.tmp
587.235: Copied file:  C:\WINDOWS\system32\seclogon.dll
587.282: Copied file:  C:\WINDOWS\system32\sdpblb.dll
587.313: Copied file:  C:\WINDOWS\system32\sdbinst.exe
587.344: Copied file:  C:\WINDOWS\system32\scrrun.dll
587.391: Copied file:  C:\WINDOWS\system32\scrobj.dll
587.422: Copied file:  C:\WINDOWS\system32\scripto.dll
587.438: Copied file:  C:\WINDOWS\system32\scredir.dll
587.469: Copied file:  C:\WINDOWS\system32\schmmgmt.dll
587.532: Copied file:  C:\WINDOWS\system32\schedsvc.dll
587.563: Copied file:  C:\WINDOWS\system32\schannel.dll
587.610: Copied file (delayed):  C:\WINDOWS\system32\SET250.tmp
587.625: Copied file:  C:\WINDOWS\system32\scesrv.dll
587.657: Copied file (delayed):  C:\WINDOWS\system32\SET251.tmp
587.672: Copied file:  C:\WINDOWS\system32\scecli.dll
587.704: Copied file:  C:\WINDOWS\system32\sccsccp.dll
587.750: Copied file:  C:\WINDOWS\system32\sccbase.dll
587.782: Copied file:  C:\WINDOWS\system32\sc.exe
587.813: Copied file:  C:\WINDOWS\system32\sasetup.msi
587.969: Copied file:  C:\WINDOWS\system32\safrslv.dll
588.063: Copied file:  C:\WINDOWS\system32\safrdm.dll
588.094: Copied file:  C:\WINDOWS\system32\sacsess.exe
588.125: Copied file:  C:\WINDOWS\system32\rwnh.dll
588.141: Copied file:  C:\WINDOWS\system32\runonce.exe
588.219: Copied file:  C:\WINDOWS\system32\rundll32.exe
588.250: Copied file:  C:\WINDOWS\system32\runas.exe
588.266: Copied file:  C:\WINDOWS\system32\rtutils.dll
588.313: Copied file:  C:\WINDOWS\system32\rtrfiltr.dll
588.344: Copied file:  C:\WINDOWS\system32\rtm.dll
588.375: Copied file:  C:\WINDOWS\system32\rsopprov.exe
588.407: Copied file:  C:\WINDOWS\system32\rsnotify.exe
588.454: Copied file:  C:\WINDOWS\system32\rsmui.exe
588.485: Copied file:  C:\WINDOWS\system32\rsmsink.exe
588.516: Copied file:  C:\WINDOWS\system32\rsm.exe
588.547: Copied file:  C:\WINDOWS\system32\rsh.exe
588.579: Copied file:  C:\WINDOWS\system32\rsaenh.dll
588.641: Copied file (delayed):  C:\WINDOWS\system32\SET276.tmp
588.657: Copied file:  C:\WINDOWS\system32\rraswiz.exe
588.672: Copied file:  C:\WINDOWS\system32\rpcss.dll
588.735: Copied file (delayed):  C:\WINDOWS\system32\SET278.tmp
588.735: Copied file:  C:\WINDOWS\system32\rpcrt4.dll
588.813: Copied file (delayed):  C:\WINDOWS\system32\SET279.tmp
588.813: Copied file:  C:\WINDOWS\system32\rpcns4.dll
588.875: Copied file:  C:\WINDOWS\system32\ripagnt.dll
588.907: Copied file:  C:\WINDOWS\system32\rigpsnap.dll
588.938: Copied file:  C:\WINDOWS\system32\rexec.exe
588.969: Copied file:  C:\WINDOWS\system32\resutils.dll
589.000: Copied file (delayed):  C:\WINDOWS\system32\SET27F.tmp
589.016: Copied file:  C:\WINDOWS\system32\replprov.dll
589.032: Copied file:  C:\WINDOWS\system32\rend.dll
589.079: Copied file:  C:\WINDOWS\system32\remrras.exe
589.141: Copied file:  C:\WINDOWS\system32\remotesp.tsp
589.157: Copied file:  C:\WINDOWS\system32\remotepg.dll
589.719: Copied file:  C:\WINDOWS\system32\regwizc.dll
589.782: Copied file:  C:\WINDOWS\system32\regwiz.exe
589.813: Copied file:  C:\WINDOWS\system32\regsvr32.exe
589.860: Copied file:  C:\WINDOWS\system32\regsvc.dll
589.891: Copied file:  C:\WINDOWS\system32\regapi.dll
589.938: Copied file (delayed):  C:\WINDOWS\system32\SET291.tmp
589.938: Copied file:  C:\WINDOWS\system32\reg.exe
589.969: Copied file:  C:\WINDOWS\system32\rdshost.exe
590.000: Copied file:  C:\WINDOWS\system32\rdpwsx.dll
590.032: Copied file:  C:\WINDOWS\system32\rdpdd.dll
590.094: Copied file (delayed):  C:\WINDOWS\system32\SET296.tmp
590.094: Copied file:  C:\WINDOWS\system32\rdpclip.exe
590.141: Copied file:  C:\WINDOWS\system32\rdpcfgex.dll
590.172: Copied file:  C:\WINDOWS\system32\rdchost.dll
590.313: Copied file:  C:\WINDOWS\system32\rcp.exe
590.344: Copied file:  C:\WINDOWS\system32\rcbdyctl.dll
590.438: Copied file:  C:\WINDOWS\system32\rasuser.dll
590.563: Copied file:  C:\WINDOWS\system32\rastls.dll
590.657: Copied file:  C:\WINDOWS\system32\rasrad.dll
590.672: Copied file:  C:\WINDOWS\system32\rasppp.dll
590.750: Copied file:  C:\WINDOWS\system32\rasphone.exe
590.797: Copied file:  C:\WINDOWS\system32\rasmontr.dll
590.860: Copied file:  C:\WINDOWS\system32\rasmans.dll
590.907: Copied file:  C:\WINDOWS\system32\rasdial.exe
590.938: Copied file:  C:\WINDOWS\system32\rasctrs.dll
590.985: Copied file:  C:\WINDOWS\system32\raschap.dll
591.032: Copied file:  C:\WINDOWS\system32\rasadhlp.dll
591.141: Copied file (delayed):  C:\WINDOWS\system32\SET2AF.tmp
591.157: Copied file:  C:\WINDOWS\system32\racpldlg.dll
591.282: Copied file:  C:\WINDOWS\system32\qwinsta.exe
591.375: Copied file:  C:\WINDOWS\system32\quser.exe
591.454: Copied file:  C:\WINDOWS\system32\query.exe
591.485: Copied file:  C:\WINDOWS\system32\query.dll
591.625: Copied file:  C:\WINDOWS\system32\quartz.dll
591.735: Copied file:  C:\WINDOWS\system32\qprocess.exe
591.750: Copied file:  C:\WINDOWS\system32\qosname.dll
591.782: Copied file:  C:\WINDOWS\system32\qmgrprxy.dll
591.813: Copied file:  C:\WINDOWS\system32\qmgr.dll
591.891: Copied file:  C:\WINDOWS\system32\qedwipes.dll
591.969: Copied file:  C:\WINDOWS\system32\qedit.dll
592.032: Copied file:  C:\WINDOWS\system32\qdvd.dll
592.079: Copied file:  C:\WINDOWS\system32\qdv.dll
592.125: Copied file:  C:\WINDOWS\system32\qcap.dll
592.157: Copied file:  C:\WINDOWS\system32\qasf.dll
592.329: Copied file:  C:\WINDOWS\system32\qappsrv.exe
592.360: Copied file:  C:\WINDOWS\system32\pstorsvc.dll
592.391: Copied file:  C:\WINDOWS\system32\pstorec.dll
592.422: Copied file:  C:\WINDOWS\system32\psisrndr.ax
592.469: Copied file:  C:\WINDOWS\system32\psisdecd.dll
592.532: Copied file:  C:\WINDOWS\system32\pschdprf.dll
592.563: Copied file:  C:\WINDOWS\system32\psbase.dll
592.625: Copied file:  C:\WINDOWS\system32\psapi.dll
592.704: Copied file (delayed):  C:\WINDOWS\system32\SET2C8.tmp
592.750: Copied file:  C:\WINDOWS\system32\proquota.exe
592.797: Copied file:  C:\WINDOWS\system32\progman.exe
592.860: Copied file:  C:\WINDOWS\system32\profmap.dll
592.891: Copied file (delayed):  C:\WINDOWS\system32\SET2CB.tmp
592.891: Copied file:  C:\WINDOWS\system32\proctexe.ocx
592.969: Copied file:  C:\WINDOWS\system32\powrprof.dll
593.016: Copied file:  C:\WINDOWS\system32\powercfg.exe
593.047: Copied file:  C:\WINDOWS\system32\powercfg.cpl
593.079: Copied file:  C:\WINDOWS\system32\polstore.dll
593.125: Copied file:  C:\WINDOWS\system32\pjlmon.dll
593.157: Copied file:  C:\WINDOWS\system32\photowiz.dll
593.235: Copied file:  C:\WINDOWS\system32\perfts.dll
593.344: Copied file:  C:\WINDOWS\system32\perfproc.dll
593.360: Copied file:  C:\WINDOWS\system32\perfos.dll
593.391: Copied file:  C:\WINDOWS\system32\perfnet.dll
593.422: Copied file:  C:\WINDOWS\system32\perfmon.exe
593.469: Copied file:  C:\WINDOWS\system32\perfdisk.dll
593.500: Copied file:  C:\WINDOWS\system32\perfctrs.dll
593.547: Copied file:  C:\WINDOWS\system32\pdh.dll
593.594: Copied file:  C:\WINDOWS\system32\pautoenr.dll
593.625: Copied file:  C:\WINDOWS\system32\packager.exe
593.657: Copied file:  C:\WINDOWS\system32\ospfmib.dll
593.688: Copied file:  C:\WINDOWS\system32\ospf.dll
593.719: Copied file:  C:\WINDOWS\system32\osk.exe
593.766: Copied file:  C:\WINDOWS\system32\openfiles.exe
593.797: Copied file:  C:\WINDOWS\system32\opengl32.dll
593.860: Copied file:  C:\WINDOWS\system32\olethk32.dll
593.891: Copied file:  C:\WINDOWS\system32\olepro32.dll
593.922: Copied file:  C:\WINDOWS\system32\oleprn.dll
593.954: Copied file:  C:\WINDOWS\system32\oledlg.dll
593.985: Copied file:  C:\WINDOWS\system32\olecli32.dll
594.047: Copied file (delayed):  C:\WINDOWS\system32\SET2FD.tmp
594.047: Copied file:  C:\WINDOWS\system32\oleacc.dll
594.094: Copied file:  C:\WINDOWS\system32\ole32.dll
594.344: Copied file (delayed):  C:\WINDOWS\system32\SET2FF.tmp
594.360: Copied file:  C:\WINDOWS\system32\offfilt.dll
594.391: Copied file:  C:\WINDOWS\system32\odtext32.dll
594.422: Copied file:  C:\WINDOWS\system32\odpdx32.dll
594.438: Copied file:  C:\WINDOWS\system32\odfox32.dll
594.454: Copied file:  C:\WINDOWS\system32\odexl32.dll
594.485: Copied file:  C:\WINDOWS\system32\oddbse32.dll
594.532: Copied file:  C:\WINDOWS\system32\odbctrac.dll
594.579: Copied file:  C:\WINDOWS\system32\odbcp32r.dll
594.610: Copied file:  C:\WINDOWS\system32\odbcjt32.dll
594.657: Copied file:  C:\WINDOWS\system32\odbcji32.dll
594.688: Copied file:  C:\WINDOWS\system32\odbcint.dll
594.719: Copied file:  C:\WINDOWS\system32\odbccu32.dll
594.750: Copied file:  C:\WINDOWS\system32\odbccr32.dll
594.782: Copied file:  C:\WINDOWS\system32\odbccp32.dll
594.844: Copied file:  C:\WINDOWS\system32\odbccp32.cpl
594.875: Copied file:  C:\WINDOWS\system32\odbcconf.rsp
594.907: Copied file:  C:\WINDOWS\system32\odbcconf.exe
595.000: Copied file:  C:\WINDOWS\system32\odbcconf.dll
595.047: Copied file:  C:\WINDOWS\system32\odbcbcp.dll
595.079: Copied file:  C:\WINDOWS\system32\odbcad32.exe
595.125: Copied file:  C:\WINDOWS\system32\odbc32gt.dll
595.157: Copied file:  C:\WINDOWS\system32\odbc32.dll
595.313: Copied file:  C:\WINDOWS\system32\ocmanage.dll
595.532: Copied file:  C:\WINDOWS\system32\objsel.dll
595.579: Copied file:  C:\WINDOWS\system32\oakley.dll
595.625: Copied file:  C:\WINDOWS\system32\ntshrui.dll
595.704: Copied file (delayed):  C:\WINDOWS\system32\SET31E.tmp
595.704: Copied file:  C:\WINDOWS\system32\ntsd.exe
595.735: Copied file:  C:\WINDOWS\system32\ntmssvc.dll
595.813: Copied file:  C:\WINDOWS\system32\ntmsmgr.dll
595.875: Copied file:  C:\WINDOWS\system32\ntmsevt.dll
595.922: Copied file:  C:\WINDOWS\system32\ntmsdba.dll
596.000: Copied file:  C:\WINDOWS\system32\ntmsapi.dll
596.016: Copied file:  C:\WINDOWS\system32\ntmarta.dll
596.094: Copied file (delayed):  C:\WINDOWS\system32\SET328.tmp
596.094: Copied file:  C:\WINDOWS\system32\ntlanman.dll
596.141: Copied file (delayed):  C:\WINDOWS\system32\SET32A.tmp
596.141: Copied file:  C:\WINDOWS\system32\ntfrsprf.dll
596.204: Copied file:  C:\WINDOWS\system32\ntfrsapi.dll
596.297: Copied file:  C:\WINDOWS\system32\ntfrs.exe
596.610: Copied file:  C:\WINDOWS\system32\ntdsutil.exe
596.688: Copied file:  C:\WINDOWS\system32\ntdsperf.dll
596.735: Copied file:  C:\WINDOWS\system32\ntdskcc.dll
596.860: Copied file (delayed):  C:\WINDOWS\system32\SET332.tmp
596.875: Copied file:  C:\WINDOWS\system32\ntdsetup.dll
596.907: Copied file:  C:\WINDOWS\system32\ntdsbsrv.dll
596.969: Copied file (delayed):  C:\WINDOWS\system32\SET334.tmp
596.985: Copied file:  C:\WINDOWS\system32\ntdsbcli.dll
597.016: Copied file:  C:\WINDOWS\system32\ntdsatq.dll
597.063: Copied file (delayed):  C:\WINDOWS\system32\SET336.tmp
597.063: Copied file:  C:\WINDOWS\system32\ntdsapi.dll
597.110: Copied file (delayed):  C:\WINDOWS\system32\SET337.tmp
597.125: Copied file:  C:\WINDOWS\system32\ntdsa.dll
597.282: Copied file (delayed):  C:\WINDOWS\system32\SET338.tmp
597.282: Copied file:  C:\WINDOWS\system32\nshipsec.dll
597.360: Copied file:  C:\WINDOWS\system32\notepad.exe
597.407: Copied file:  C:\WINDOWS\system32\nntpapi.dll
597.438: Copied file:  C:\WINDOWS\system32\nmmkcert.dll
597.469: Copied file:  C:\WINDOWS\system32\nmevtmsg.dll
597.500: Copied file:  C:\WINDOWS\system32\nlhtml.dll
597.547: Copied file:  C:\WINDOWS\system32\nlbmgr.exe
597.625: Copied file:  C:\WINDOWS\system32\newdev.dll
597.735: Copied file (delayed):  C:\WINDOWS\system32\SET341.tmp
597.750: Copied file:  C:\WINDOWS\system32\netui2.dll
597.797: Copied file:  C:\WINDOWS\system32\netstat.exe
597.844: Copied file:  C:\WINDOWS\system32\netshell.dll
598.016: Copied file:  C:\WINDOWS\system32\netsh.exe
598.063: Copied file:  C:\WINDOWS\system32\netplwiz.dll
598.157: Copied file:  C:\WINDOWS\system32\netman.dll
598.297: Copied file:  C:\WINDOWS\system32\netlogon.dll
598.407: Copied file (delayed):  C:\WINDOWS\system32\SET34B.tmp
598.407: Copied file:  C:\WINDOWS\system32\netid.dll
598.454: Copied file:  C:\WINDOWS\system32\netdde.exe
598.485: Copied file:  C:\WINDOWS\system32\netcfgx.dll
598.579: Copied file:  C:\WINDOWS\system32\netapi32.dll
598.641: Copied file (delayed):  C:\WINDOWS\system32\SET34F.tmp
598.657: Copied file:  C:\WINDOWS\system32\net1.exe
598.735: Copied file:  C:\WINDOWS\system32\net.exe
598.750: Copied file:  C:\WINDOWS\system32\ndptsp.tsp
598.797: Copied file:  C:\WINDOWS\system32\nddenb32.dll
598.829: Copied file:  C:\WINDOWS\system32\nddeapi.dll
598.860: Copied file (delayed):  C:\WINDOWS\system32\SET358.tmp
598.875: Copied file:  C:\WINDOWS\system32\ncpa.cpl
598.907: Copied file:  C:\WINDOWS\system32\ncobjapi.dll
598.938: Copied file (delayed):  C:\WINDOWS\system32\SET35A.tmp
598.954: Copied file:  C:\WINDOWS\system32\nbtstat.exe
598.985: Copied file:  C:\WINDOWS\system32\narrator.exe
599.016: Copied file:  C:\WINDOWS\system32\napmmc.dll
599.094: Copied file:  C:\WINDOWS\system32\mydocs.dll
599.391: Copied file:  C:\WINDOWS\system32\mycomput.dll
599.454: Copied file:  C:\WINDOWS\system32\mtxoci.dll
599.500: Copied file:  C:\WINDOWS\system32\mtxlegih.dll
599.532: Copied file:  C:\WINDOWS\system32\mtxex.dll
599.563: Copied file:  C:\WINDOWS\system32\mtxdm.dll
599.594: Copied file:  C:\WINDOWS\system32\mtxclu.dll
599.657: Copied file (delayed):  C:\WINDOWS\system32\SET364.tmp
599.672: Copied file:  C:\WINDOWS\system32\msxml3r.dll
599.688: Copied file:  C:\WINDOWS\system32\msxml3.dll
599.829: Copied file:  C:\WINDOWS\system32\msxml2.dll
599.922: Copied file:  C:\WINDOWS\system32\msxml.dll
600.000: Copied file:  C:\WINDOWS\system32\msxbde40.dll
600.094: Copied file:  C:\WINDOWS\system32\mswstr10.dll
600.219: Copied file:  C:\WINDOWS\system32\mswsock.dll
600.297: Copied file (delayed):  C:\WINDOWS\system32\SET36F.tmp
600.297: Copied file:  C:\WINDOWS\system32\mswmdm.dll
600.375: Copied file:  C:\WINDOWS\system32\mswebdvd.dll
600.438: Copied file:  C:\WINDOWS\system32\mswdat10.dll
600.547: Copied file:  C:\WINDOWS\system32\msw3prt.dll
600.579: Copied file:  C:\WINDOWS\system32\msvidctl.dll
600.672: Copied file:  C:\WINDOWS\system32\msvfw32.dll
600.719: Copied file:  C:\WINDOWS\system32\msvcrt.dll
600.860: Copied file (delayed):  C:\WINDOWS\system32\SET37A.tmp
600.860: Copied file:  C:\WINDOWS\system32\msvcp60.dll
600.969: Copied file (delayed):  C:\WINDOWS\system32\SET37C.tmp
600.969: Copied file:  C:\WINDOWS\system32\msvbvm60.dll
601.141: Copied file:  C:\WINDOWS\system32\msv1_0.dll
601.454: Copied file (delayed):  C:\WINDOWS\system32\SET37F.tmp
601.454: Copied file:  C:\WINDOWS\system32\msutb.dll
601.516: Copied file:  C:\WINDOWS\system32\mstsmmc.dll
601.547: Copied file:  C:\WINDOWS\system32\mstsmhst.dll
601.594: Copied file:  C:\WINDOWS\system32\mstlsapi.dll
601.625: Copied file:  C:\WINDOWS\system32\mstinit.exe
601.641: Copied file:  C:\WINDOWS\system32\mstext40.dll
601.704: Copied file:  C:\WINDOWS\system32\mstask.dll
601.735: Copied file:  C:\WINDOWS\system32\msscript.ocx
601.766: Copied file:  C:\WINDOWS\system32\msscp.dll
601.813: Copied file:  C:\WINDOWS\system32\msrepl40.dll
601.891: Copied file:  C:\WINDOWS\system32\msrd3x40.dll
601.985: Copied file:  C:\WINDOWS\system32\msrd2x40.dll
602.079: Copied file:  C:\WINDOWS\system32\msppnxus.dll
602.282: Copied file:  C:\WINDOWS\system32\msppmgr.dll
602.422: Copied file:  C:\WINDOWS\system32\msppmd5.dll
602.516: Copied file:  C:\WINDOWS\system32\msppmalr.dll
602.563: Copied file:  C:\WINDOWS\system32\mspplkrh.dll
602.594: Copied file:  C:\WINDOWS\system32\msppcntr.dll
602.625: Copied file:  C:\WINDOWS\system32\msppcnfg.exe
602.657: Copied file:  C:\WINDOWS\system32\msppalrt.dll
602.704: Copied file:  C:\WINDOWS\system32\msports.dll
602.735: Copied file:  C:\WINDOWS\system32\mspmsp.dll
602.782: Copied file:  C:\WINDOWS\system32\mspmsnsv.dll
602.813: Copied file:  C:\WINDOWS\system32\mspbde40.dll
602.860: Copied file:  C:\WINDOWS\system32\mspaint.exe
602.938: Copied file:  C:\WINDOWS\system32\msorcl32.dll
603.016: Copied file:  C:\WINDOWS\system32\msorc32r.dll
603.047: Copied file:  C:\WINDOWS\system32\msoert2.dll
603.110: Copied file:  C:\WINDOWS\system32\msoeacct.dll
603.141: Copied file:  C:\WINDOWS\system32\msnetobj.dll
603.422: Copied file:  C:\WINDOWS\system32\msltus40.dll
603.516: Copied file:  C:\WINDOWS\system32\msls31.dll
603.579: Copied file:  C:\WINDOWS\system32\mslbui.dll
603.610: Copied file:  C:\WINDOWS\system32\msjtes40.dll
603.672: Copied file:  C:\WINDOWS\system32\msjter40.dll
603.688: Copied file:  C:\WINDOWS\system32\msjint40.dll
603.766: Copied file:  C:\WINDOWS\system32\msjetoledb40.dll
603.875: Copied file:  C:\WINDOWS\system32\msjet40.dll
604.172: Copied file:  C:\WINDOWS\system32\msisip.dll
604.297: Copied file (delayed):  C:\WINDOWS\system32\SET3BC.tmp
604.297: Copied file:  C:\WINDOWS\system32\msimtf.dll
604.422: Copied file:  C:\WINDOWS\system32\msimsg.dll
604.594: Copied file (delayed):  C:\WINDOWS\system32\SET3BE.tmp
604.610: Copied file:  C:\WINDOWS\system32\msihnd.dll
604.704: Copied file (delayed):  C:\WINDOWS\system32\SET3BF.tmp
604.704: Copied file:  C:\WINDOWS\system32\msiexec.exe
604.782: Copied file (delayed):  C:\WINDOWS\system32\SET3C0.tmp
604.782: Copied file:  C:\WINDOWS\system32\msieftp.dll
604.844: Copied file:  C:\WINDOWS\system32\msidle.dll
604.938: Copied file:  C:\WINDOWS\system32\msident.dll
604.969: Copied file:  C:\WINDOWS\system32\msi.dll
605.282: Copied file (delayed):  C:\WINDOWS\system32\SET3C5.tmp
605.297: Copied file:  C:\WINDOWS\system32\msh263.drv
605.329: Copied file:  C:\WINDOWS\system32\msh261.drv
605.375: Copied file:  C:\WINDOWS\system32\msgina.dll
605.516: Copied file (delayed):  C:\WINDOWS\system32\SET3C8.tmp
605.532: Copied file:  C:\WINDOWS\system32\msg723.acm
605.594: Copied file:  C:\WINDOWS\system32\msg.exe
605.610: Copied file:  C:\WINDOWS\system32\msexcl40.dll
605.672: Copied file:  C:\WINDOWS\system32\msexch40.dll
605.797: Copied file:  C:\WINDOWS\system32\msdxm.ocx
605.891: Copied file:  C:\WINDOWS\system32\msdvbnp.ax
605.922: Copied file:  C:\WINDOWS\system32\msdtcuiu.dll
605.969: Copied file:  C:\WINDOWS\system32\msdtctm.dll
606.047: Copied file:  C:\WINDOWS\system32\msdtcprx.dll
606.110: Copied file (delayed):  C:\WINDOWS\system32\SET3D7.tmp
606.110: Copied file:  C:\WINDOWS\system32\msdtclog.dll
606.141: Copied file:  C:\WINDOWS\system32\msdtc.exe
606.172: Copied file:  C:\WINDOWS\system32\msdmo.dll
606.188: Copied file:  C:\WINDOWS\system32\msdatsrc.tlb
606.219: Copied file:  C:\WINDOWS\system32\msdart.dll
606.250: Copied file:  C:\WINDOWS\system32\msctfp.dll
606.313: Copied file:  C:\WINDOWS\system32\msctfime.ime
606.391: Copied file (delayed):  C:\WINDOWS\system32\SET3E2.tmp
606.391: Copied file:  C:\WINDOWS\system32\msctf.dll
606.469: Copied file:  C:\WINDOWS\system32\mscpxl32.dll
606.563: Copied file:  C:\WINDOWS\system32\mscpx32r.dll
606.610: Copied file:  C:\WINDOWS\system32\msconf.dll
606.641: Copied file:  C:\WINDOWS\system32\mscms.dll
606.672: Copied file:  C:\WINDOWS\system32\msaudite.dll
606.735: Copied file:  C:\WINDOWS\system32\msasn1.dll
606.813: Copied file (delayed):  C:\WINDOWS\system32\SET3E9.tmp
606.813: Copied file:  C:\WINDOWS\system32\msacm32.drv
606.844: Copied file:  C:\WINDOWS\system32\msacm32.dll
606.875: Copied file:  C:\WINDOWS\system32\mqutil.dll
606.938: Copied file:  C:\WINDOWS\system32\mqupgrd.dll
607.047: Copied file:  C:\WINDOWS\system32\mqtrig.dll
607.063: Copied file:  C:\WINDOWS\system32\mqtgsvc.exe
607.110: Copied file:  C:\WINDOWS\system32\mqsvc.exe
607.157: Copied file:  C:\WINDOWS\system32\mqsnap.dll
607.266: Copied file:  C:\WINDOWS\system32\mqsec.dll
607.391: Copied file:  C:\WINDOWS\system32\mqrtdep.dll
607.422: Copied file:  C:\WINDOWS\system32\mqrt.dll
607.454: Copied file:  C:\WINDOWS\system32\mqqm.dll
607.547: Copied file:  C:\WINDOWS\system32\mqperf.dll
607.610: Copied file:  C:\WINDOWS\system32\mqoa.dll
607.657: Copied file:  C:\WINDOWS\system32\mqmigrat.dll
607.704: Copied file:  C:\WINDOWS\system32\mqmig.exe
607.750: Copied file:  C:\WINDOWS\system32\mqlogmgr.dll
607.782: Copied file:  C:\WINDOWS\system32\mqise.dll
607.797: Copied file:  C:\WINDOWS\system32\mqgentr.dll
607.844: Copied file:  C:\WINDOWS\system32\mqdssvc.exe
607.891: Copied file:  C:\WINDOWS\system32\mqdssrv.dll
607.938: Copied file:  C:\WINDOWS\system32\mqdscli.dll
608.000: Copied file:  C:\WINDOWS\system32\mqdbodbc.dll
608.047: Copied file:  C:\WINDOWS\system32\mqcertui.dll
608.110: Copied file:  C:\WINDOWS\system32\mqbkup.exe
608.157: Copied file:  C:\WINDOWS\system32\mqads.dll
608.282: Copied file:  C:\WINDOWS\system32\mqad.dll
608.344: Copied file:  C:\WINDOWS\system32\mprsnap.dll
608.500: Copied file:  C:\WINDOWS\system32\mprdim.dll
608.532: Copied file:  C:\WINDOWS\system32\mprddm.dll
608.563: Copied file:  C:\WINDOWS\system32\mprapi.dll
608.594: Copied file:  C:\WINDOWS\system32\mpr.dll
608.625: Copied file (delayed):  C:\WINDOWS\system32\SET40C.tmp
608.641: Copied file:  C:\WINDOWS\system32\mplay32.exe
608.688: Copied file:  C:\WINDOWS\system32\mpg4dmod.dll
608.735: Copied file:  C:\WINDOWS\system32\mpg2splt.ax
608.829: Copied file:  C:\WINDOWS\system32\mp4sdmod.dll
608.875: Copied file:  C:\WINDOWS\system32\mp43dmod.dll
608.938: Copied file:  C:\WINDOWS\system32\modex.dll
608.969: Copied file:  C:\WINDOWS\system32\modemui.dll
609.032: Copied file (delayed):  C:\WINDOWS\system32\SET413.tmp
609.032: Copied file:  C:\WINDOWS\system32\mode.com
609.079: Copied file:  C:\WINDOWS\system32\mobsync.exe
609.125: Copied file:  C:\WINDOWS\system32\mobsync.dll
609.219: Copied file:  C:\WINDOWS\system32\mnmsrvc.exe
609.266: Copied file:  C:\WINDOWS\system32\mnmdd.dll
609.297: Copied file:  C:\WINDOWS\system32\mmsys.cpl
609.391: Copied file:  C:\WINDOWS\system32\mmfutil.dll
609.485: Copied file:  C:\WINDOWS\system32\mmcshext.dll
609.516: Copied file:  C:\WINDOWS\system32\mmcndmgr.dll
609.907: Copied file:  C:\WINDOWS\system32\mmcbase.dll
610.032: Copied file:  C:\WINDOWS\system32\mmc.exe
610.297: Copied file:  C:\WINDOWS\system32\mll_qic.dll
610.329: Copied file:  C:\WINDOWS\system32\mll_mtf.dll
610.360: Copied file:  C:\WINDOWS\system32\mll_hp.dll
610.391: Copied file:  C:\WINDOWS\system32\mlang.dll
610.454: Copied file (delayed):  C:\WINDOWS\system32\SET426.tmp
610.469: Copied file:  C:\WINDOWS\system32\mimefilt.dll
610.594: Copied file:  C:\WINDOWS\system32\miglibnt.dll
610.625: Copied file:  C:\WINDOWS\system32\midimap.dll
610.657: Copied file:  C:\WINDOWS\system32\mfcsubs.dll
610.704: Copied file:  C:\WINDOWS\system32\mfc42u.dll
610.797: Copied file:  C:\WINDOWS\system32\mfc42.dll
610.985: Copied file:  C:\WINDOWS\system32\mf3216.dll
611.063: Copied file:  C:\WINDOWS\system32\mdminst.dll
611.125: Copied file (delayed):  C:\WINDOWS\system32\SET42E.tmp
611.125: Copied file:  C:\WINDOWS\system32\mdhcp.dll
611.157: Copied file:  C:\WINDOWS\system32\mciwave.dll
611.188: Copied file:  C:\WINDOWS\system32\mciseq.dll
611.219: Copied file:  C:\WINDOWS\system32\mciqtz32.dll
611.266: Copied file:  C:\WINDOWS\system32\mciavi32.dll
611.313: Copied file:  C:\WINDOWS\system32\mcd32.dll
611.344: Copied file:  C:\WINDOWS\system32\mapistub.dll
611.375: Copied file:  C:\WINDOWS\system32\main.cpl
611.422: Copied file:  C:\WINDOWS\system32\magnify.exe
611.454: Copied file:  C:\WINDOWS\system32\mag_hook.dll
611.469: Copied file:  C:\WINDOWS\system32\lprhelp.dll
611.500: Copied file:  C:\WINDOWS\system32\lpk.dll
611.532: Copied file:  C:\WINDOWS\system32\logonui.exe
611.579: Copied file:  C:\WINDOWS\system32\logon.scr
611.641: Copied file:  C:\WINDOWS\system32\logman.exe
611.735: Copied file:  C:\WINDOWS\system32\logagent.exe
611.766: Copied file:  C:\WINDOWS\system32\localsec.dll
611.829: Copied file:  C:\WINDOWS\system32\lmrt.dll
611.875: Copied file:  C:\WINDOWS\system32\lmmib2.dll
611.907: Copied file:  C:\WINDOWS\system32\llssrv.exe
611.954: Copied file:  C:\WINDOWS\system32\llsmgr.exe
612.032: Copied file:  C:\WINDOWS\system32\linkinfo.dll
612.079: Copied file (delayed):  C:\WINDOWS\system32\SET448.tmp
612.079: Copied file:  C:\WINDOWS\system32\licwmi.dll
612.125: Copied file:  C:\WINDOWS\system32\licdll.dll
612.188: Copied file (delayed):  C:\WINDOWS\system32\SET44B.tmp
612.188: Copied file:  C:\WINDOWS\system32\liccpa.cpl
612.235: Copied file:  C:\WINDOWS\system32\ldifde.exe
612.266: Copied file:  C:\WINDOWS\system32\laprxy.dll
612.282: Copied file:  C:\WINDOWS\system32\ksxbar.ax
612.313: Copied file:  C:\WINDOWS\system32\kswdmcap.ax
612.360: Copied file:  C:\WINDOWS\system32\ksuser.dll
612.438: Copied file:  C:\WINDOWS\system32\kstvtune.ax
612.532: Copied file:  C:\WINDOWS\system32\ksproxy.ax
612.563: Copied file:  C:\WINDOWS\system32\kmddsp.tsp
612.594: Copied file:  C:\WINDOWS\system32\keymgr.dll
612.625: Copied file:  C:\WINDOWS\system32\kernel32.dll
612.704: Copied file (delayed):  C:\WINDOWS\system32\SET460.tmp
612.719: Copied file:  C:\WINDOWS\system32\kerberos.dll
612.797: Copied file (delayed):  C:\WINDOWS\system32\SET462.tmp
612.797: Copied file:  C:\WINDOWS\system32\kdcsvc.dll
612.829: Copied file (delayed):  C:\WINDOWS\system32\SET463.tmp
612.844: Copied file:  C:\WINDOWS\system32\joy.cpl
612.891: Copied file:  C:\WINDOWS\system32\jgpl400.dll
612.922: Copied file:  C:\WINDOWS\system32\jgdw400.dll
612.954: Copied file:  C:\WINDOWS\system32\jet500.dll
613.000: Copied file:  C:\WINDOWS\system32\iyuv_32.dll
613.032: Copied file:  C:\WINDOWS\system32\ixsso.dll
613.079: Copied file:  C:\WINDOWS\system32\itss.dll
613.110: Copied file:  C:\WINDOWS\system32\itircl.dll
613.141: Copied file:  C:\WINDOWS\system32\isrdbg32.dll
613.172: Copied file:  C:\WINDOWS\system32\ismsmtp.dll
613.204: Copied file:  C:\WINDOWS\system32\ismserv.exe
613.235: Copied file:  C:\WINDOWS\system32\ismip.dll
613.266: Copied file:  C:\WINDOWS\system32\isign32.dll
613.297: Copied file:  C:\WINDOWS\system32\ipxsap.dll
613.329: Copied file:  C:\WINDOWS\system32\ipv6mon.dll
613.344: Copied file:  C:\WINDOWS\system32\ipsnap.dll
613.438: Copied file:  C:\WINDOWS\system32\ipsmsnap.dll
613.516: Copied file:  C:\WINDOWS\system32\ipsink.ax
613.563: Copied file:  C:\WINDOWS\system32\ipsecsvc.dll
613.610: Copied file:  C:\WINDOWS\system32\ipsecsnp.dll
613.672: Copied file:  C:\WINDOWS\system32\iprtrmgr.dll
613.719: Copied file:  C:\WINDOWS\system32\iprtprio.dll
613.750: Copied file:  C:\WINDOWS\system32\iprop.dll
613.782: Copied file:  C:\WINDOWS\system32\iprip2.dll
613.844: Copied file:  C:\WINDOWS\system32\ippromon.dll
613.907: Copied file:  C:\WINDOWS\system32\ipnathlp.dll
613.985: Copied file:  C:\WINDOWS\system32\ipmontr.dll
614.094: Copied file:  C:\WINDOWS\system32\iphlpapi.dll
614.125: Copied file (delayed):  C:\WINDOWS\system32\SET484.tmp
614.141: Copied file:  C:\WINDOWS\system32\ipconfig.exe
614.157: Copied file:  C:\WINDOWS\system32\ipbootp.dll
614.188: Copied file:  C:\WINDOWS\system32\intl.cpl
614.235: Copied file:  C:\WINDOWS\system32\input.dll
614.266: Copied file:  C:\WINDOWS\system32\initpki.dll
614.297: Copied file:  C:\WINDOWS\system32\inetres.dll
614.344: Copied file:  C:\WINDOWS\system32\inetpp.dll
614.360: Copied file:  C:\WINDOWS\system32\inetmib1.dll
614.407: Copied file:  C:\WINDOWS\system32\inetcomm.dll
614.485: Copied file:  C:\WINDOWS\system32\inetcfg.dll
614.516: Copied file:  C:\WINDOWS\system32\imm32.dll
614.563: Copied file (delayed):  C:\WINDOWS\system32\SET490.tmp
614.579: Copied file:  C:\WINDOWS\system32\imapi.exe
614.625: Copied file:  C:\WINDOWS\system32\ils.dll
614.657: Copied file:  C:\WINDOWS\system32\iisrtl.dll
614.688: Copied file:  C:\WINDOWS\system32\iisrstap.dll
614.735: Copied file:  C:\WINDOWS\system32\iisreset.exe
614.766: Copied file:  C:\WINDOWS\system32\iismui.dll
614.813: Copied file:  C:\WINDOWS\system32\iismap.dll
614.844: Copied file:  C:\WINDOWS\system32\igmpv2.dll
614.875: Copied file:  C:\WINDOWS\system32\ifmon.dll
614.907: Copied file:  C:\WINDOWS\system32\iexpress.exe
614.938: Copied file:  C:\WINDOWS\system32\ieuinit.inf
614.969: Copied file:  C:\WINDOWS\system32\idq.dll
615.016: Copied file:  C:\WINDOWS\system32\icwphbk.dll
615.047: Copied file:  C:\WINDOWS\system32\icwdial.dll
615.063: Copied file:  C:\WINDOWS\system32\icmui.dll
615.110: Copied file:  C:\WINDOWS\system32\icm32.dll
615.157: Copied file:  C:\WINDOWS\system32\icaapi.dll
615.188: Copied file:  C:\WINDOWS\system32\iassvcs.dll
615.219: Copied file:  C:\WINDOWS\system32\iassdo.dll
615.266: Copied file:  C:\WINDOWS\system32\iassam.dll
615.297: Copied file:  C:\WINDOWS\system32\iasrecst.dll
615.329: Copied file:  C:\WINDOWS\system32\iasrad.dll
615.360: Copied file:  C:\WINDOWS\system32\iaspolcy.dll
615.407: Copied file:  C:\WINDOWS\system32\iasnap.dll
615.438: Copied file:  C:\WINDOWS\system32\iashlpr.dll
615.469: Copied file:  C:\WINDOWS\system32\iasads.dll
615.500: Copied file:  C:\WINDOWS\system32\iasacct.dll
615.532: Copied file:  C:\WINDOWS\system32\httpapi.dll
615.547: Copied file:  C:\WINDOWS\system32\hnetmon.dll
615.579: Copied file:  C:\WINDOWS\system32\hnetcfg.dll
615.641: Copied file (delayed):  C:\WINDOWS\system32\SET4B4.tmp
615.641: Copied file:  C:\WINDOWS\system32\hlink.dll
615.688: Copied file:  C:\WINDOWS\system32\hidphone.tsp
615.704: Copied file:  C:\WINDOWS\system32\hid.dll
615.735: Copied file:  C:\WINDOWS\system32\hhsetup.dll
615.766: Copied file:  C:\WINDOWS\system32\hhctrl.ocx
615.829: Copied file:  C:\WINDOWS\system32\hccoin.dll
615.844: Copied file:  C:\WINDOWS\system32\h323msp.dll
615.907: Copied file:  C:\WINDOWS\system32\h323.tsp
615.969: Copied file:  C:\WINDOWS\system32\grpconv.exe
616.000: Copied file:  C:\WINDOWS\system32\gptext.dll
616.063: Copied file:  C:\WINDOWS\system32\gpresult.exe
616.110: Copied file:  C:\WINDOWS\system32\gpkrsrc.dll
616.157: Copied file:  C:\WINDOWS\system32\gpkcsp.dll
616.235: Copied file:  C:\WINDOWS\system32\gpedit.dll
616.297: Copied file:  C:\WINDOWS\system32\glu32.dll
616.344: Copied file:  C:\WINDOWS\system32\glmf32.dll
616.391: Copied file:  C:\WINDOWS\system32\gettype.exe
616.422: Copied file:  C:\WINDOWS\system32\gdi32.dll
616.532: Copied file (delayed):  C:\WINDOWS\syste